Edit tour

Windows Analysis Report
https://www.myworkday.com/usbank/email-universal/inst/779$21901907/rel-task/2997$4086.htmld

Overview

General Information

Sample URL:	https://www.myworkday.com/usbank/email-universal/inst/779$21901907/rel-task/2997$4086.htmld
Analysis ID:	1531692
Infos:

Detection

Score:	3
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2276 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6584 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1976,i,17685590314672914304,1235028069142282676,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1164 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.myworkday.com/usbank/email-universal/inst/779$21901907/rel-task/2997$4086.htmld" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900D492X-BM-CBT: 1696428841X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900D492X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticshX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 2484Connection: Keep-AliveCache-Control: no-cacheCookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1728655716085&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF

Source: chromecache_145.2.dr	String found in binary or memory: http://cssreset.com
Source: sets.json.0.dr	String found in binary or memory: https://07c225f3.online
Source: sets.json.0.dr	String found in binary or memory: https://24.hu
Source: sets.json.0.dr	String found in binary or memory: https://aajtak.in
Source: sets.json.0.dr	String found in binary or memory: https://abczdrowie.pl
Source: sets.json.0.dr	String found in binary or memory: https://alice.tw
Source: sets.json.0.dr	String found in binary or memory: https://ambitionbox.com
Source: sets.json.0.dr	String found in binary or memory: https://autobild.de
Source: sets.json.0.dr	String found in binary or memory: https://baomoi.com
Source: sets.json.0.dr	String found in binary or memory: https://bild.de
Source: sets.json.0.dr	String found in binary or memory: https://blackrock.com
Source: sets.json.0.dr	String found in binary or memory: https://blackrockadvisorelite.it
Source: sets.json.0.dr	String found in binary or memory: https://bluradio.com
Source: sets.json.0.dr	String found in binary or memory: https://bolasport.com
Source: sets.json.0.dr	String found in binary or memory: https://bonvivir.com
Source: sets.json.0.dr	String found in binary or memory: https://bumbox.com
Source: sets.json.0.dr	String found in binary or memory: https://businessinsider.com.pl
Source: sets.json.0.dr	String found in binary or memory: https://businesstoday.in
Source: sets.json.0.dr	String found in binary or memory: https://cachematrix.com
Source: sets.json.0.dr	String found in binary or memory: https://cafemedia.com
Source: sets.json.0.dr	String found in binary or memory: https://caracoltv.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.be
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.fr
Source: sets.json.0.dr	String found in binary or memory: https://cardsayings.net
Source: sets.json.0.dr	String found in binary or memory: https://chatbot.com
Source: sets.json.0.dr	String found in binary or memory: https://chennien.com
Source: sets.json.0.dr	String found in binary or memory: https://citybibleforum.org
Source: sets.json.0.dr	String found in binary or memory: https://clarosports.com
Source: sets.json.0.dr	String found in binary or memory: https://clmbtech.com
Source: sets.json.0.dr	String found in binary or memory: https://closeronline.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://clubelpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://cmxd.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://cognitive-ai.ru
Source: sets.json.0.dr	String found in binary or memory: https://cognitiveai.ru
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.com
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.net
Source: sets.json.0.dr	String found in binary or memory: https://computerbild.de
Source: sets.json.0.dr	String found in binary or memory: https://content-loader.com
Source: sets.json.0.dr	String found in binary or memory: https://cookreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://cricbuzz.com
Source: sets.json.0.dr	String found in binary or memory: https://css-load.com
Source: sets.json.0.dr	String found in binary or memory: https://deccoria.pl
Source: sets.json.0.dr	String found in binary or memory: https://deere.com
Source: sets.json.0.dr	String found in binary or memory: https://desimartini.com
Source: sets.json.0.dr	String found in binary or memory: https://dewarmsteweek.be
Source: sets.json.0.dr	String found in binary or memory: https://drimer.io
Source: sets.json.0.dr	String found in binary or memory: https://drimer.travel
Source: sets.json.0.dr	String found in binary or memory: https://economictimes.com
Source: sets.json.0.dr	String found in binary or memory: https://een.be
Source: sets.json.0.dr	String found in binary or memory: https://efront.com
Source: sets.json.0.dr	String found in binary or memory: https://eleconomista.net
Source: sets.json.0.dr	String found in binary or memory: https://elfinancierocr.com
Source: sets.json.0.dr	String found in binary or memory: https://elgrafico.com
Source: sets.json.0.dr	String found in binary or memory: https://ella.sv
Source: sets.json.0.dr	String found in binary or memory: https://elpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://elpais.uy
Source: sets.json.0.dr	String found in binary or memory: https://etfacademy.it
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookcloud.com
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookrequest.com
Source: sets.json.0.dr	String found in binary or memory: https://fakt.pl
Source: sets.json.0.dr	String found in binary or memory: https://finn.no
Source: sets.json.0.dr	String found in binary or memory: https://firstlook.biz
Source: sets.json.0.dr	String found in binary or memory: https://gallito.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://geforcenow.com
Source: sets.json.0.dr	String found in binary or memory: https://gettalkdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://gliadomain.com
Source: sets.json.0.dr	String found in binary or memory: https://gnttv.com
Source: sets.json.0.dr	String found in binary or memory: https://graziadaily.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://grid.id
Source: sets.json.0.dr	String found in binary or memory: https://gridgames.app
Source: sets.json.0.dr	String found in binary or memory: https://growthrx.in
Source: sets.json.0.dr	String found in binary or memory: https://grupolpg.sv
Source: sets.json.0.dr	String found in binary or memory: https://gujaratijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://hapara.com
Source: sets.json.0.dr	String found in binary or memory: https://hazipatika.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.global
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.global
Source: sets.json.0.dr	String found in binary or memory: https://healthshots.com
Source: sets.json.0.dr	String found in binary or memory: https://hearty.app
Source: sets.json.0.dr	String found in binary or memory: https://hearty.gift
Source: sets.json.0.dr	String found in binary or memory: https://hearty.me
Source: sets.json.0.dr	String found in binary or memory: https://heartymail.com
Source: sets.json.0.dr	String found in binary or memory: https://heatworld.com
Source: sets.json.0.dr	String found in binary or memory: https://helpdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://hindustantimes.com
Source: sets.json.0.dr	String found in binary or memory: https://hj.rs
Source: sets.json.0.dr	String found in binary or memory: https://hjck.com
Source: sets.json.0.dr	String found in binary or memory: https://html-load.cc
Source: sets.json.0.dr	String found in binary or memory: https://html-load.com
Source: sets.json.0.dr	String found in binary or memory: https://human-talk.org
Source: sets.json.0.dr	String found in binary or memory: https://idbs-cloud.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-dev.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-eworkbook.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-staging.com
Source: sets.json.0.dr	String found in binary or memory: https://img-load.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatimes.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatoday.in
Source: sets.json.0.dr	String found in binary or memory: https://indiatodayne.in
Source: sets.json.0.dr	String found in binary or memory: https://infoedgeindia.com
Source: sets.json.0.dr	String found in binary or memory: https://interia.pl
Source: sets.json.0.dr	String found in binary or memory: https://intoday.in
Source: sets.json.0.dr	String found in binary or memory: https://iolam.it
Source: sets.json.0.dr	String found in binary or memory: https://ishares.com
Source: sets.json.0.dr	String found in binary or memory: https://jagran.com
Source: sets.json.0.dr	String found in binary or memory: https://johndeere.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.fr
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.fr
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://kaksya.in
Source: sets.json.0.dr	String found in binary or memory: https://knowledgebase.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.tv
Source: sets.json.0.dr	String found in binary or memory: https://kompasiana.com
Source: sets.json.0.dr	String found in binary or memory: https://lanacion.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.com
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.ru
Source: sets.json.0.dr	String found in binary or memory: https://laprensagrafica.com
Source: sets.json.0.dr	String found in binary or memory: https://lateja.cr
Source: sets.json.0.dr	String found in binary or memory: https://libero.it
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.com
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.fr
Source: sets.json.0.dr	String found in binary or memory: https://livechat.com
Source: sets.json.0.dr	String found in binary or memory: https://livechatinc.com
Source: sets.json.0.dr	String found in binary or memory: https://livehindustan.com
Source: sets.json.0.dr	String found in binary or memory: https://livemint.com
Source: sets.json.0.dr	String found in binary or memory: https://max.auto
Source: sets.json.0.dr	String found in binary or memory: https://medonet.pl
Source: sets.json.0.dr	String found in binary or memory: https://meo.pt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.co.cr
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.bo
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.do
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.gt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.hn
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ni
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pa
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.py
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.sv
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mighty-app.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://mightytext.net
Source: sets.json.0.dr	String found in binary or memory: https://mittanbud.no
Source: sets.json.0.dr	String found in binary or memory: https://money.pl
Source: sets.json.0.dr	String found in binary or memory: https://motherandbaby.com
Source: sets.json.0.dr	String found in binary or memory: https://mystudentdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://nacion.com
Source: sets.json.0.dr	String found in binary or memory: https://naukri.com
Source: sets.json.0.dr	String found in binary or memory: https://nidhiacademyonline.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.co
Source: sets.json.0.dr	String found in binary or memory: https://nien.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.org
Source: sets.json.0.dr	String found in binary or memory: https://nlc.hu
Source: sets.json.0.dr	String found in binary or memory: https://nosalty.hu
Source: sets.json.0.dr	String found in binary or memory: https://noticiascaracol.com
Source: sets.json.0.dr	String found in binary or memory: https://nourishingpursuits.com
Source: sets.json.0.dr	String found in binary or memory: https://nvidia.com
Source: sets.json.0.dr	String found in binary or memory: https://o2.pl
Source: sets.json.0.dr	String found in binary or memory: https://ocdn.eu
Source: sets.json.0.dr	String found in binary or memory: https://onet.pl
Source: sets.json.0.dr	String found in binary or memory: https://ottplay.com
Source: sets.json.0.dr	String found in binary or memory: https://p106.net
Source: sets.json.0.dr	String found in binary or memory: https://p24.hu
Source: sets.json.0.dr	String found in binary or memory: https://paula.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://pdmp-apis.no
Source: sets.json.0.dr	String found in binary or memory: https://phonandroid.com
Source: sets.json.0.dr	String found in binary or memory: https://player.pl
Source: sets.json.0.dr	String found in binary or memory: https://plejada.pl
Source: sets.json.0.dr	String found in binary or memory: https://poalim.site
Source: sets.json.0.dr	String found in binary or memory: https://poalim.xyz
Source: sets.json.0.dr	String found in binary or memory: https://pomponik.pl
Source: sets.json.0.dr	String found in binary or memory: https://portalinmobiliario.com
Source: sets.json.0.dr	String found in binary or memory: https://prisjakt.no
Source: sets.json.0.dr	String found in binary or memory: https://pudelek.pl
Source: sets.json.0.dr	String found in binary or memory: https://punjabijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://radio1.be
Source: sets.json.0.dr	String found in binary or memory: https://radio2.be
Source: sets.json.0.dr	String found in binary or memory: https://reactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://repid.org
Source: sets.json.0.dr	String found in binary or memory: https://reshim.org
Source: sets.json.0.dr	String found in binary or memory: https://rws1nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws2nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws3nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://sackrace.ai
Source: sets.json.0.dr	String found in binary or memory: https://salemoveadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovefinancial.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovetravel.com
Source: sets.json.0.dr	String found in binary or memory: https://samayam.com
Source: sets.json.0.dr	String found in binary or memory: https://sapo.io
Source: sets.json.0.dr	String found in binary or memory: https://sapo.pt
Source: sets.json.0.dr	String found in binary or memory: https://shock.co
Source: sets.json.0.dr	String found in binary or memory: https://smaker.pl
Source: sets.json.0.dr	String found in binary or memory: https://smoney.vn
Source: sets.json.0.dr	String found in binary or memory: https://smpn106jkt.sch.id
Source: sets.json.0.dr	String found in binary or memory: https://socket-to-me.vip
Source: sets.json.0.dr	String found in binary or memory: https://songshare.com
Source: sets.json.0.dr	String found in binary or memory: https://songstats.com
Source: sets.json.0.dr	String found in binary or memory: https://sporza.be
Source: sets.json.0.dr	String found in binary or memory: https://standardsandpraiserepurpose.com
Source: sets.json.0.dr	String found in binary or memory: https://startlap.hu
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.com
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.net
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.org
Source: sets.json.0.dr	String found in binary or memory: https://stripe.com
Source: sets.json.0.dr	String found in binary or memory: https://stripe.network
Source: sets.json.0.dr	String found in binary or memory: https://stripecdn.com
Source: sets.json.0.dr	String found in binary or memory: https://supereva.it
Source: sets.json.0.dr	String found in binary or memory: https://takeabreak.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskqaid.com
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskstgid.com
Source: sets.json.0.dr	String found in binary or memory: https://teacherdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://technology-revealed.com
Source: sets.json.0.dr	String found in binary or memory: https://terazgotuje.pl
Source: sets.json.0.dr	String found in binary or memory: https://text.com
Source: sets.json.0.dr	String found in binary or memory: https://textyserver.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://the42.ie
Source: sets.json.0.dr	String found in binary or memory: https://thejournal.ie
Source: sets.json.0.dr	String found in binary or memory: https://thirdspace.org.au
Source: sets.json.0.dr	String found in binary or memory: https://timesinternet.in
Source: sets.json.0.dr	String found in binary or memory: https://timesofindia.com
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.app
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.com
Source: sets.json.0.dr	String found in binary or memory: https://top.pl
Source: sets.json.0.dr	String found in binary or memory: https://tribunnews.com
Source: sets.json.0.dr	String found in binary or memory: https://trytalkdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.co
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://tvid.in
Source: sets.json.0.dr	String found in binary or memory: https://tvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://tvn24.pl
Source: sets.json.0.dr	String found in binary or memory: https://unotv.com
Source: sets.json.0.dr	String found in binary or memory: https://victorymedium.com
Source: sets.json.0.dr	String found in binary or memory: https://vrt.be
Source: sets.json.0.dr	String found in binary or memory: https://vwo.com
Source: sets.json.0.dr	String found in binary or memory: https://welt.de
Source: sets.json.0.dr	String found in binary or memory: https://wieistmeineip.de
Source: sets.json.0.dr	String found in binary or memory: https://wildix.com
Source: sets.json.0.dr	String found in binary or memory: https://wildixin.com
Source: sets.json.0.dr	String found in binary or memory: https://wingify.com
Source: sets.json.0.dr	String found in binary or memory: https://wordle.at
Source: sets.json.0.dr	String found in binary or memory: https://wp.pl
Source: sets.json.0.dr	String found in binary or memory: https://wpext.pl
Source: sets.json.0.dr	String found in binary or memory: https://www.asadcdn.com
Source: sets.json.0.dr	String found in binary or memory: https://ya.ru
Source: sets.json.0.dr	String found in binary or memory: https://yours.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://zalo.me
Source: sets.json.0.dr	String found in binary or memory: https://zdrowietvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://zingmp3.vn

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 56492 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 56434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56457 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 56468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56388 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56525 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56342 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 56423 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 56400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56433 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56399 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56376 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 56445 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 56422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56470 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56411 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 56513 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 56354 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 56467 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56356
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56477
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56357
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56478
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56479
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56484
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56485
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56486
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56487
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56480
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56360
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56481
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56482
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56362
Source: unknown	Network traffic detected: HTTP traffic on port 56378 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56483
Source: unknown	Network traffic detected: HTTP traffic on port 56355 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 56493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 56390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 56504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56367 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56367
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56488
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56489
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56369
Source: unknown	Network traffic detected: HTTP traffic on port 56455 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56374
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56495
Source: unknown	Network traffic detected: HTTP traffic on port 56515 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56375
Source: unknown	Network traffic detected: HTTP traffic on port 56482 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56496
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56376
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56497
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56377
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56498
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56370
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56491
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56371
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56492
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56372
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56493
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56373
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56494
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56490
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 56444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 56503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 56526 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 56494 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 56389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 56366 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56378
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56499
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56379
Source: unknown	Network traffic detected: HTTP traffic on port 56471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56385
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56386
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56387
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56388
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56381
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56382
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56383
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56384
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56380
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 56466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 56443 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56344 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56389
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56396
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56397
Source: unknown	Network traffic detected: HTTP traffic on port 56432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56398
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56399
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56392
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56393
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56394
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56395
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56390
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56391
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 56345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56431 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56483 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56380 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56472 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56511 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56356 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56465 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56379 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56346 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56391 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 56495 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 56357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 56510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 56453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56368 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56484 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56358 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56501 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56393 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56533 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56441 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56406 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56381 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56485 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56336 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56523 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56418 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56463 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56383 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56348 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56497 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56508 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56486 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56519 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56475 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56507
Source: unknown	Network traffic detected: HTTP traffic on port 56382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56508
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56509
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56503
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56505
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56500
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56501
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56502
Source: unknown	Network traffic detected: HTTP traffic on port 56371 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56509 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56450 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56415 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56521 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56487 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56338 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56373 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56427 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56395 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56449 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56361 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56531 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56499 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56520 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56528 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56439
Source: unknown	Network traffic detected: HTTP traffic on port 56477 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56433
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56434
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56435
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56397 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56441
Source: unknown	Network traffic detected: HTTP traffic on port 56351 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56442
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56443
Source: unknown	Network traffic detected: HTTP traffic on port 56460 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56363 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56489 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56448
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56449
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56444
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56445
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56447
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56452
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56453
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56454
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56450
Source: unknown	Network traffic detected: HTTP traffic on port 56402 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60701
Source: unknown	Network traffic detected: HTTP traffic on port 56448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56385 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56338
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56339
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56455
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56456
Source: unknown	Network traffic detected: HTTP traffic on port 56490 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56457
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56337
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56462
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56463
Source: unknown	Network traffic detected: HTTP traffic on port 56516 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56464
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56344
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56465
Source: unknown	Network traffic detected: HTTP traffic on port 56478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56460
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56461
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56403 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56527 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56349
Source: unknown	Network traffic detected: HTTP traffic on port 56414 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56345
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56466
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56467
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56468
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56469
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56473
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56474
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56475
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56476
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56470
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56350
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56471
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56351
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56472
Source: unknown	Network traffic detected: HTTP traffic on port 56425 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 56364 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56518
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56519
Source: unknown	Network traffic detected: HTTP traffic on port 56387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56514
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56515
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56517
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56510
Source: unknown	Network traffic detected: HTTP traffic on port 56341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56511
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56512
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56513
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56520
Source: unknown	Network traffic detected: HTTP traffic on port 56518 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56401 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 56447 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 56529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56529
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56404
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56525
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56405
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56526
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56406
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56527
Source: unknown	Network traffic detected: HTTP traffic on port 56412 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.242.39.171:443 -> 192.168.2.5:56339 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.5:56344 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:56358 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:56366 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:56391 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2276_1720006286	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2276_1720006286\sets.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2276_1720006286\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2276_1720006286\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2276_1720006286\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2276_1720006286\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2276_1720006286\manifest.fingerprint	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\chrome_BITS_2276_1865039004

Jump to behavior

Source: classification engine

Classification label: clean3.win@23/44@37/5

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1976,i,17685590314672914304,1235028069142282676,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.myworkday.com/usbank/email-universal/inst/779$21901907/rel-task/2997$4086.htmld"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1976,i,17685590314672914304,1235028069142282676,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	11 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://wieistmeineip.de	0%	URL Reputation	safe
https://mercadoshops.com.co	0%	URL Reputation	safe
https://gliadomain.com	0%	URL Reputation	safe
https://poalim.xyz	0%	URL Reputation	safe
https://mercadolivre.com	0%	URL Reputation	safe
https://reshim.org	0%	URL Reputation	safe
https://nourishingpursuits.com	0%	URL Reputation	safe
https://medonet.pl	0%	URL Reputation	safe
https://unotv.com	0%	URL Reputation	safe
https://mercadoshops.com.br	0%	URL Reputation	safe
https://zdrowietvn.pl	0%	URL Reputation	safe
https://johndeere.com	0%	URL Reputation	safe
https://songstats.com	0%	URL Reputation	safe
https://baomoi.com	0%	URL Reputation	safe
https://supereva.it	0%	URL Reputation	safe
https://elfinancierocr.com	0%	URL Reputation	safe
https://bolasport.com	0%	URL Reputation	safe
https://rws1nvtvt.com	0%	URL Reputation	safe
https://desimartini.com	0%	URL Reputation	safe
https://hearty.app	0%	URL Reputation	safe
https://hearty.gift	0%	URL Reputation	safe
https://mercadoshops.com	0%	URL Reputation	safe
https://heartymail.com	0%	URL Reputation	safe
https://p106.net	0%	URL Reputation	safe
https://radio2.be	0%	URL Reputation	safe
https://finn.no	0%	URL Reputation	safe
https://hc1.com	0%	URL Reputation	safe
https://kompas.tv	0%	URL Reputation	safe
https://mystudentdashboard.com	0%	URL Reputation	safe
https://songshare.com	0%	URL Reputation	safe
https://smaker.pl	0%	URL Reputation	safe
https://mercadopago.com.mx	0%	URL Reputation	safe
https://p24.hu	0%	URL Reputation	safe
https://talkdeskqaid.com	0%	URL Reputation	safe
https://mercadopago.com.pe	0%	URL Reputation	safe
https://cardsayings.net	0%	URL Reputation	safe
https://mightytext.net	0%	URL Reputation	safe
https://pudelek.pl	0%	URL Reputation	safe
https://hazipatika.com	0%	URL Reputation	safe
https://joyreactor.com	0%	URL Reputation	safe
https://cookreactor.com	0%	URL Reputation	safe
https://wildixin.com	0%	URL Reputation	safe
https://eworkbookcloud.com	0%	URL Reputation	safe
https://cognitiveai.ru	0%	URL Reputation	safe
https://nacion.com	0%	URL Reputation	safe
https://chennien.com	0%	URL Reputation	safe
https://drimer.travel	0%	URL Reputation	safe
https://deccoria.pl	0%	URL Reputation	safe
https://mercadopago.cl	0%	URL Reputation	safe
https://talkdeskstgid.com	0%	URL Reputation	safe
https://bonvivir.com	0%	URL Reputation	safe
https://carcostadvisor.be	0%	URL Reputation	safe
https://salemovetravel.com	0%	URL Reputation	safe
https://sapo.io	0%	URL Reputation	safe
https://wpext.pl	0%	URL Reputation	safe
https://welt.de	0%	URL Reputation	safe
https://poalim.site	0%	URL Reputation	safe
https://drimer.io	0%	URL Reputation	safe
https://infoedgeindia.com	0%	URL Reputation	safe
https://blackrockadvisorelite.it	0%	URL Reputation	safe
https://cognitive-ai.ru	0%	URL Reputation	safe
https://cafemedia.com	0%	URL Reputation	safe
https://graziadaily.co.uk	0%	URL Reputation	safe
https://thirdspace.org.au	0%	URL Reputation	safe
https://mercadoshops.com.ar	0%	URL Reputation	safe
https://smpn106jkt.sch.id	0%	URL Reputation	safe
https://elpais.uy	0%	URL Reputation	safe
https://landyrev.com	0%	URL Reputation	safe
https://the42.ie	0%	URL Reputation	safe
https://commentcamarche.com	0%	URL Reputation	safe
https://tucarro.com.ve	0%	URL Reputation	safe
https://rws3nvtvt.com	0%	URL Reputation	safe
https://eleconomista.net	0%	URL Reputation	safe
https://mercadolivre.com.br	0%	URL Reputation	safe
https://clmbtech.com	0%	URL Reputation	safe
https://standardsandpraiserepurpose.com	0%	URL Reputation	safe
https://salemovefinancial.com	0%	URL Reputation	safe
https://mercadopago.com.br	0%	URL Reputation	safe
https://commentcamarche.net	0%	URL Reputation	safe
https://etfacademy.it	0%	URL Reputation	safe
https://mighty-app.appspot.com	0%	URL Reputation	safe
https://hj.rs	0%	URL Reputation	safe
https://hearty.me	0%	URL Reputation	safe
https://mercadolibre.com.gt	0%	URL Reputation	safe
https://timesinternet.in	0%	URL Reputation	safe
https://indiatodayne.in	0%	URL Reputation	safe
https://idbs-staging.com	0%	URL Reputation	safe
https://blackrock.com	0%	URL Reputation	safe
https://idbs-eworkbook.com	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
wd1-ash.myworkday.com	209.177.165.18	true	false	unknown
www.google.com	142.250.186.68	true	false	unknown
baxhwiix24leuzyjgghq-f-8541f95c1-clientnsv4-s.akamaihd.net	unknown	unknown	false	unknown
0217991c.akstat.io	unknown	unknown	false	unknown
baxhwiix24leuzyjghfa-f-c915b8d21-clientnsv4-s.akamaihd.net	unknown	unknown	false	unknown
s.go-mpulse.net	unknown	unknown	false	unknown
baxhwiix24leuzyjggaa-f-249fd768e-clientnsv4-s.akamaihd.net	unknown	unknown	false	unknown
trial-eum-clienttons-s.akamaihd.net	unknown	unknown	false	unknown
www.myworkday.com	unknown	unknown	false	unknown
684dd32b.akstat.io	unknown	unknown	false	unknown
8-46-123-33_s-2-16-164-88_ts-1728655780-clienttons-s.akamaihd.net	unknown	unknown	false	unknown
trial-eum-clientnsv4-s.akamaihd.net	unknown	unknown	false	unknown
federation.usbank.com	unknown	unknown	false	unknown
baxhwiix24leuzyjgg4q-f-f64507146-clientnsv4-s.akamaihd.net	unknown	unknown	false	unknown
c.go-mpulse.net	unknown	unknown	false	unknown
684dd32a.akstat.io	unknown	unknown	false	unknown
171.39.242.20.in-addr.arpa	unknown	unknown	false	unknown
baxhwiiccn7jgzyjggsa-ponbmr-1fde3c829-clientnsv4-s.akamaihd.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://www.myworkday.com/usbank/email-universal/inst/779$21901907/rel-task/2997$4086.htmld	false	unknown
https://www.myworkday.com/wday/authgwy/usbank/login.htmld?returnTo=%2fusbank%2fd%2finst%2f779%2421901907%2frel-task%2f2997%244086.htmld	false	unknown
https://federation.usbank.com/idp/startSSO.ping?PartnerSpId=http%3A%2F%2Fwww.workday.com%2Fusbank	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://wieistmeineip.de	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.co	sets.json.0.dr	false	URL Reputation: safe	unknown
https://gliadomain.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://poalim.xyz	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadolivre.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://reshim.org	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nourishingpursuits.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://medonet.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://unotv.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://joyreactor.cc	sets.json.0.dr	false		unknown
https://zdrowietvn.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://johndeere.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://songstats.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://baomoi.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://supereva.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://elfinancierocr.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://bolasport.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://rws1nvtvt.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://desimartini.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.app	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.gift	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://heartymail.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nlc.hu	sets.json.0.dr	false		unknown
https://p106.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://radio2.be	sets.json.0.dr	false	URL Reputation: safe	unknown
https://finn.no	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hc1.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://kompas.tv	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mystudentdashboard.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://songshare.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://smaker.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.com.mx	sets.json.0.dr	false	URL Reputation: safe	unknown
https://p24.hu	sets.json.0.dr	false	URL Reputation: safe	unknown
https://talkdeskqaid.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://24.hu	sets.json.0.dr	false		unknown
https://mercadopago.com.pe	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cardsayings.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://text.com	sets.json.0.dr	false		unknown
https://mightytext.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://pudelek.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hazipatika.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://joyreactor.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cookreactor.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://wildixin.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://eworkbookcloud.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cognitiveai.ru	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nacion.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://chennien.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://drimer.travel	sets.json.0.dr	false	URL Reputation: safe	unknown
https://deccoria.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.cl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://talkdeskstgid.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://naukri.com	sets.json.0.dr	false		unknown
https://interia.pl	sets.json.0.dr	false		unknown
https://bonvivir.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://carcostadvisor.be	sets.json.0.dr	false	URL Reputation: safe	unknown
https://salemovetravel.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://sapo.io	sets.json.0.dr	false	URL Reputation: safe	unknown
https://wpext.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://welt.de	sets.json.0.dr	false	URL Reputation: safe	unknown
https://poalim.site	sets.json.0.dr	false	URL Reputation: safe	unknown
https://drimer.io	sets.json.0.dr	false	URL Reputation: safe	unknown
https://infoedgeindia.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://blackrockadvisorelite.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cognitive-ai.ru	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cafemedia.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://graziadaily.co.uk	sets.json.0.dr	false	URL Reputation: safe	unknown
https://thirdspace.org.au	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.ar	sets.json.0.dr	false	URL Reputation: safe	unknown
https://smpn106jkt.sch.id	sets.json.0.dr	false	URL Reputation: safe	unknown
https://elpais.uy	sets.json.0.dr	false	URL Reputation: safe	unknown
https://landyrev.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://the42.ie	sets.json.0.dr	false	URL Reputation: safe	unknown
https://commentcamarche.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://tucarro.com.ve	sets.json.0.dr	false	URL Reputation: safe	unknown
https://rws3nvtvt.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://eleconomista.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://helpdesk.com	sets.json.0.dr	false		unknown
https://mercadolivre.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://clmbtech.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://standardsandpraiserepurpose.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://07c225f3.online	sets.json.0.dr	false		unknown
https://salemovefinancial.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://commentcamarche.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://etfacademy.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mighty-app.appspot.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hj.rs	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.me	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadolibre.com.gt	sets.json.0.dr	false	URL Reputation: safe	unknown
https://timesinternet.in	sets.json.0.dr	false	URL Reputation: safe	unknown
https://indiatodayne.in	sets.json.0.dr	false	URL Reputation: safe	unknown
https://idbs-staging.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://blackrock.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://idbs-eworkbook.com	sets.json.0.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
142.250.185.228	unknown	United States	15169	GOOGLEUS	false
209.177.165.18	wd1-ash.myworkday.com	United States	18465	WORKDAY-01US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1531692
Start date and time:	2024-10-11 16:07:57 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 23s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.myworkday.com/usbank/email-universal/inst/779$21901907/rel-task/2997$4086.htmld
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean3.win@23/44@37/5

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.212.163, 142.250.185.174, 108.177.15.84, 34.104.35.123, 23.215.22.74, 2.23.196.132, 142.250.186.170, 142.250.74.202, 142.250.181.234, 142.250.186.42, 216.58.212.138, 172.217.16.202, 142.250.186.138, 142.250.185.170, 142.250.186.74, 172.217.18.10, 142.250.186.106, 142.250.184.234, 216.58.206.74, 216.58.212.170, 142.250.184.202, 172.217.23.106, 199.232.210.172, 184.27.96.174, 192.229.221.95, 95.101.54.99, 95.101.54.145, 95.101.54.225, 2.16.202.16, 2.19.126.147, 2.19.126.149, 2.16.164.88, 2.16.164.104, 172.217.18.3, 2.19.126.92, 2.19.126.80, 88.221.110.91
Excluded domains from analysis (whitelisted): ip46.go-mpulse.net.edgekey.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, a1024.dscg.akamai.net, fe3cr.delivery.mp.microsoft.com, wildcard46.akstat.io.edgekey.net, e4518.dscapi7.akamaiedge.net, a248.b.akamai.net, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, wildcard46.go-mpulse.net.edgekey.net, federation.usbank.com.edgekey.net, update.googleapis.com, clients.l.google.com, e4167.a.akamaiedge.net, e4518.dscx.akamaiedge.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.myworkday.com/usbank/email-universal/inst/779$21901907/rel-task/2997$4086.htmld

Input	Output
URL: https://federation.usbank.com/idp/startSSO.ping?PartnerSpId=http%3A%2F%2Fwww.workday.com%2Fusbank Model: jbxai	{ "brands":["U.S. Bank"], "text":"U.S. Bank Sign On", "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Sign On", "text_input_field_labels":["USERNAME"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://federation.usbank.com/idp/startSSO.ping?PartnerSpId=http%3A%2F%2Fwww.workday.com%2Fusbank Model: jbxai	{ "phishing_score":1, "brands":"U.S. Bank", "legit_domain":"usbank.com", "classification":"wellknown", "reasons":["The brand 'U.S. Bank' is a well-known financial institution.", "The URL 'federation.usbank.com' uses the legitimate domain 'usbank.com'.", "The subdomain 'federation' is not uncommon for financial institutions to use for specific services, such as authentication or federated login.", "There are no suspicious elements in the URL such as misspellings or unusual domain extensions."], "brand_matches":[false], "url_match":true, "brand_input":"U.S. Bank", "input_fields":"USERNAME"}

URL: https://federation.usbank.com/idp/N5ARsUgk1K/resumeSAML20/idp/startSSO.ping Model: jbxai	{ "brands":["U.S. Bank"], "text":"U.S. Bank Sign On", "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Sign On", "text_input_field_labels":["TOKEN"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://federation.usbank.com/idp/N5ARsUgk1K/resumeSAML20/idp/startSSO.ping Model: jbxai	{ "brands":[], "text":"Sign On Error", "contains_trigger_text":true, "trigger_text":"Authentication Failed", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 11 13:09:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.981834174026311
Encrypted:	false
SSDEEP:	48:8HddTF1a+HoidAKZdA19ehwiZUklqehN5y+3:8Tnap05y
MD5:	52017E296B6CCCAB27EBEF164FA56C65
SHA1:	723789356FBD904BC7085A0499B45A5B2C6F617F
SHA-256:	A1D670AFA2785DC91FC72E4D6BDE10F3E02194C2E2905327DEC7D17BC9C68627
SHA-512:	58C9ABB5DB6B6A9B22D358FCF52A446D647B76BB78558028C3B43823ECB0B25BF89119106856E768CD3A60F2C144670D9B7B92EFCA0574F482D888E22AD26A94
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......0.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IKY.q....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VKY.q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VKY.q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VKY.q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VKY!q...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............S.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 11 13:09:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.996244468154291
Encrypted:	false
SSDEEP:	48:8KddTF1a+HoidAKZdA1weh/iZUkAQkqehk5y+2:8Ina79Q35y
MD5:	34A00C0969F4F0B1EE71F144C4D559E3
SHA1:	0755F8A490AE52899BB07656A36D9DB7086BE163
SHA-256:	ED0DD50950CDC09CC1B0035BA0B54E5D88B1965290FF2A656EC36ED7F4E9794E
SHA-512:	069AD5881DEF880ECDD1B224950D3D06B86BC06052674BA37718B44C6675B68BB437FD6B2E6904C2CD03A25DE2B2C6220E22DB6A5EAF6D99826BC96433EAF5AA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....{ .....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IKY.q....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VKY.q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VKY.q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VKY.q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VKY!q...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............S.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.006499419299125
Encrypted:	false
SSDEEP:	48:8xWddTF1sHoidAKZdA14tseh7sFiZUkmgqeh7sW5y+BX:8xMnVn45y
MD5:	8C206121996CDC57BE35A2326BAC0770
SHA1:	756955F2850E81BFB67951F425512B06FF003A87
SHA-256:	B07D1C73483E93E597F1085E9F0455391E7485BCAC989C8CBF786C3C621863BE
SHA-512:	9F8679D2EC1BB73B280232FA3164088812374A0534245A648B69FB6BF7425137BD4E3FB9BFDB036035F939D8C860B6F5389CCF12D3818FFCD2FB6C2A2A5FD5CD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IKY.q....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VKY.q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VKY.q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VKY.q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............S.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 11 13:09:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.996620763820152
Encrypted:	false
SSDEEP:	48:8hddTF1a+HoidAKZdA1vehDiZUkwqehA5y+R:85naYe5y
MD5:	7E1775621C9BD74EE4A11040C275548D
SHA1:	A7D8ED442EE5039CCA5A96A93A86CAA2F7AD6924
SHA-256:	990AF709E2B095C55F44A957EF10FB797405A649EF7970C853AD9835F095A8D8
SHA-512:	B05A694B5C7CFF4FA53FFF417FD0C436C8541433FB8C26893579CB86080392F8A3E279DFDBA0F57B35B798937AE324963DAACBA1EC880CEE771FC20CCC7E2348
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,............N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IKY.q....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VKY.q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VKY.q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VKY.q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VKY!q...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............S.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 11 13:09:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9847262595567092
Encrypted:	false
SSDEEP:	48:8pddTF1a+HoidAKZdA1hehBiZUk1W1qeh65y+C:8BnaI9a5y
MD5:	80E1679E5202442C3E6DD7C0AE164ACD
SHA1:	9F33CB06ADC233462063A8670B9B4AC91909C1B0
SHA-256:	A2960DAAE2BAF87218C58BAFF01FB831E2BC2FBA4EAD9C80820583C67672A0C7
SHA-512:	58D7B165AE480E0C36C3CBCB4B761CDC5AC51D0B816DAF1E2AEE62E7C038F8EA53AC8E23D0B71A9F5E53072486BBC060E06F2DFC390D37DC898C73C101D94578
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....{.&.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IKY.q....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VKY.q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VKY.q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VKY.q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VKY!q...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............S.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 11 13:09:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.993929377212076
Encrypted:	false
SSDEEP:	48:8xddTF1a+HoidAKZdA1duT+ehOuTbbiZUk5OjqehOuTb45y+yT+:8pnamT/TbxWOvTb45y7T
MD5:	C29D7D84D373CAD587C99D82004D1B1C
SHA1:	C7DF61C11CAD14E44EEC76EE8D6EAE0EA970AE29
SHA-256:	D6D469104EC7863E5FC94159B53020C397E6AE54A132FAB2774AEAB8A9A5B529
SHA-512:	CB9B55863799AB007A4CE48DC825268FF2B203D6251282A0A9BA05C630FC280547541A6F518A1EC414011DB9B345E105FCB116872B48AAA62F3C09BE9A5E2D98
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,............N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IKY.q....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VKY.q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VKY.q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VKY.q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VKY!q...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............S.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2276_1720006286\LICENSE

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Reputation:	low
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2276_1720006286\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	6.021127689065198
Encrypted:	false
SSDEEP:	48:p/hUI1atAdI567akUmYWEFw/3+ovGJ4F3jkZUbvzk98g5m7:RnYQI47avYUwvVGJ41jkZIzxgA7
MD5:	68E6B5733E04AB7BF19699A84D8ABBC2
SHA1:	1C11F06CA1AD3ED8116D356AB9164FD1D52B5CF0
SHA-256:	F095F969D6711F53F97747371C83D5D634EAEF21C54CB1A6A1CC5B816D633709
SHA-512:	9DC5D824A55C969820D5D1FBB0CA7773361F044AE0C255E7C48D994E16CE169FCEAC3DE180A3A544EBEF32337EA535683115584D592370E5FE7D85C68B86C891
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"dU2MmRUQSugaJAJvEN4uaQHx-KXdOkjj0yK8_aH4Afr3kN7DPOZRt6yLTS3UchBE5M-dgPPPBuKADj4KEK4B22SO6WQquL5J27AUPqQBGgr44-iFGVJdOLLlfirFlJmcYv6DUFRYiPsQFGMr1JFqInj19jgkOxzR6qqcNuTCB0wGEMeTU80r-igCjeQG6TIzPro7yKd_-UxsxO6OGAySmlIJIoU54X0p0ATNoZyAfkhb8kb0oN8unOU

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2276_1720006286\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9159446964030753
Encrypted:	false
SSDEEP:	3:Sq5TQRaELVHecsUDBAeHD5k:Sq5gJ+csHej5k
MD5:	CFB54589424206D0AE6437B5673F498D
SHA1:	D1EF6314F0F68EFDD0BA8F6CA9E59BFF863B1609
SHA-256:	285AC183C35350B4B77332172413902F83726CA8F53D63859B5DA082FD425A1C
SHA-512:	70FDCA4A1E6B7A5FFED3414E2DB74FECA7E0FD17482B8CB30393DFEE20AB9AD2B0B00FF0C590DD0E8D744D0EAD876CE8844519AF66618ED14666BCA56DF2DA21
Malicious:	false
Reputation:	low
Preview:	1.dbf288588465463a914bdfc5e86d465fb3592b2f1261dc0e40fcc5c1adc8e7e4

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2276_1720006286\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.4533115571544695
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFCmMARWHJqS1tean:F6VlM8aRWpqS1ln
MD5:	C3419069A1C30140B77045ABA38F12CF
SHA1:	11920F0C1E55CADC7D2893D1EEBB268B3459762A
SHA-256:	DB9A702209807BA039871E542E8356219F342A8D9C9CA34BCD9A86727F4A3A0F
SHA-512:	C5E95A4E9F5919CB14F4127539C4353A55C5F68062BF6F95E1843B6690CEBED3C93170BADB2412B7FB9F109A620385B0AE74783227D6813F26FF8C29074758A1
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "First Party Sets",. "version": "2024.8.10.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2276_1720006286\sets.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9748
Entropy (8bit):	4.629326694042306
Encrypted:	false
SSDEEP:	96:Mon4mvC4qX19s1blbw/BNKLcxbdmf56MFJtRTGXvcxN43uP+8qJq:v5C4ql7BkIVmtRTGXvcxBsq
MD5:	EEA4913A6625BEB838B3E4E79999B627
SHA1:	1B4966850F1B117041407413B70BFA925FD83703
SHA-256:	20EF4DE871ECE3C5F14867C4AE8465999C7A2CC1633525E752320E61F78A373C
SHA-512:	31B1429A5FACD6787F6BB45216A4AB1C724C79438C18EBFA8C19CED83149C17783FD492A03197110A75AAF38486A9F58828CA30B58D41E0FE89DFE8BDFC8A004
Malicious:	false
Reputation:	low
Preview:	{"primary":"https://bild.de","associatedSites":["https://welt.de","https://autobild.de","https://computerbild.de","https://wieistmeineip.de"],"serviceSites":["https://www.asadcdn.com"]}.{"primary":"https://blackrock.com","associatedSites":["https://blackrockadvisorelite.it","https://cachematrix.com","https://efront.com","https://etfacademy.it","https://ishares.com"]}.{"primary":"https://cafemedia.com","associatedSites":["https://cardsayings.net","https://nourishingpursuits.com"]}.{"primary":"https://caracoltv.com","associatedSites":["https://noticiascaracol.com","https://bluradio.com","https://shock.co","https://bumbox.com","https://hjck.com"]}.{"primary":"https://carcostadvisor.com","ccTLDs":{"https://carcostadvisor.com":["https://carcostadvisor.be","https://carcostadvisor.fr"]}}.{"primary":"https://citybibleforum.org","associatedSites":["https://thirdspace.org.au"]}.{"primary":"https://cognitiveai.ru","associatedSites":["https://cognitive-ai.ru"]}.{"primary":"https://drimer.io","asso

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	3.746439344671016
Encrypted:	false
SSDEEP:	3:RPiPm:pim
MD5:	5ABCD50E846D00F41B42FA7B0FCB6439
SHA1:	450D1C90A036068520F4C966D29F2B465A84A5F4
SHA-256:	00FF53258DB8E1B9437FDEB6B717250958B79C6714A1B42D16577ECB7B3852B4
SHA-512:	443F9484E1C5E59387F0437A075D10DC048057C011F0951CB4FEA13EAD0C6E70D828C463CA66489C318B595AAED15221876806FA09201846E5BC36B456B4C62B
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAko-thmwoTL-BIFDcuZsiM=?alt=proto
Preview:	Cg0KCw3LmbIjGgQIZBgC

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 8 bits/pixel, 32x32, 8 bits/pixel
Category:	dropped
Size (bytes):	7406
Entropy (8bit):	3.477136972604435
Encrypted:	false
SSDEEP:	48:j7pGE5xBuA5h4RX5hOQTKF9SGBDsFUJWW4fVfU18Roxn6u2NGk:JGE5xORPlTKWGgULqRzrNx
MD5:	EB618C0A2DE2EB33A28EF811F4A25BEB
SHA1:	6ED3CD39EB7077CB28A4B5E2E027EDC054CA932C
SHA-256:	13CDABD902393EB932EFE980F89B78FAD664CACC755F2B8CDAF8B908FE72991B
SHA-512:	D7EC705ECAC677936A11AAB91389331A57E8D291F94E3E013570CB287C1FB2BAE5D22B7F2CB14FFFF7CA4D87C1500C489E8BF797EF4E10D8FFF5AC8C3888EAC8
Malicious:	false
Reputation:	low
Preview:	......00..........6... ......................h.......(...0...`...............................%...&"..($..)%..*&..+'..,%..,(..2,..51..61..96..;7..>;..@<..C@..EA..EB..FB..FC..GC..IE..JF..JG..KH..LH..MJ..OL..PM..QN..RN..RO..SP..TQ..UQ..UR..VR..VS..WT..WT..XT..YV..ZV..ZW..ZW..\Y..^[.._\..c`..kh..mk..ol..om..qn..ro..rp..tq..yv..\|z..}{..~\|...~....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	767
Entropy (8bit):	5.24414452564381
Encrypted:	false
SSDEEP:	12:Y1gjGVJEkRVqGuHDPzfHJ1sVJhqe+FTFI8fYeW0T2EN6+JIxASkc1wX2Ps8xOAiv:Y1N9Dufp8DQpjnT2ENVJIYc1wGPlxOAq
MD5:	1C82F2E28738545AF69793A36EAC98A5
SHA1:	590DF53142214F1E3F30D60BFED60EAEF2D3CF10
SHA-256:	4164461423E1BA0220EC6066F516C86E7E236B8E31D39E7E088895606FE5A84E
SHA-512:	C7BC949D22641EBA6CB605DD3F52160B8A21F338BD59E32630D237307667058D83993BB2DD61A56851EBD0E37678989C02DC714F8163C04E3784FA12A3666F31
Malicious:	false
Reputation:	low
Preview:	{"h.key":"MNEVD-UBQQ4-BATKL-PRRMJ-EV7HG","h.d":"arlid:862813","h.t":1728655780947,"h.cr":"89022dc4763380f378b0d2711baaa3baa61c2dbb-848dac04-779164ac","session_id":"30f75801-d288-4994-855e-aa46410d1de8","site_domain":"arlid:862813","beacon_url":"//0217991e.akstat.io/","autorun":true,"BW":{"enabled":false},"RT":{"cookie":null,"session_exp":1800},"ResourceTiming":{"enabled":true,"splitAtPath":true},"PageParams":{"xhr":"none","pageGroups":[],"customMetrics":[],"customTimers":[],"customDimensions":[],"urlPatterns":[],"params":true},"Akamai":{"enabled":true,"mapping_xhr_base_url":"akamaihd.net","mapping_xhr_url_path":"/eum/getdns.txt","mapping_xhr_url_v4_prefix":"trial-eum-clientnsv4-s","mapping_xhr_url_v6_prefix":"trial-eum-clienttons-s"},"user_ip":"8.46.123.0"}

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	610
Entropy (8bit):	5.235653851246194
Encrypted:	false
SSDEEP:	12:Y1gjGVJEkRVdzT+OJ7ELmioIsVJhqYBW3u+FTFI8fYeW0T2EN6+JIxASkc1wX2PB:Y1Nfz57uovDApjnT2ENVJIYc1wGPiA3
MD5:	4E60E5BCD98F85313FFEA20FCE051192
SHA1:	1D014CC1AD72DC40933C80EE22F379A4BCB5255A
SHA-256:	CAB7E7EF23DCC270624A3FC3143F1EAF19F60056C5D073B89D1D4DB8884B69AB
SHA-512:	E676D7C0305D05290C257CEC1162E24C2AC3BB106ED369F0637A7CF35F685A192FE1D817759D7CD9364A3FB97E3941A90B0A7ECDEF277C6BA8530A6F41FDCD23
Malicious:	false
Reputation:	low
URL:	"https://c.go-mpulse.net/api/config.json?key=MNEVD-UBQQ4-BATKL-PRRMJ-EV7HG&d=federation.usbank.com&t=5762186&v=1.720.0&sl=0&si=d202ed99-f657-4c2f-b382-b98675abead2-sl73cn&plugins=AK,ConfigOverride,Continuity,PageParams,IFrameDelay,AutoXHR,SPA,History,Angular,Backbone,Ember,RT,CrossDomain,BW,PaintTiming,NavigationTiming,ResourceTiming,Memory,CACHE_RELOAD,Errors,TPAnalytics,UserTiming,Akamai,Early,EventTiming,LOGN&acao=&ak.ai=862813"
Preview:	{"h.key":"MNEVD-UBQQ4-BATKL-PRRMJ-EV7HG","h.d":"arlid:862813","h.t":1728655803541,"h.cr":"6428695a520a87a38659d6a70eed6bee7138b148-848dac04-779164ac","session_id":"1f02d850-6fff-4c05-bc3b-181aca19ff0c","site_domain":"arlid:862813","beacon_url":"//684dd32a.akstat.io/","autorun":true,"BW":{"enabled":false},"RT":{"cookie":null,"session_exp":1800},"ResourceTiming":{"enabled":true,"splitAtPath":true},"PageParams":{"xhr":"none","pageGroups":[],"customMetrics":[],"customTimers":[],"customDimensions":[],"urlPatterns":[],"params":true},"Akamai":{"enabled":true,"dns_prefetch_enabled":true},"user_ip":"8.46.123.0"}

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HJYn:2n
MD5:	219D7D1117B6D474F6208B605B8E8CF6
SHA1:	4A3A4B6C7B37605D7A2D6CB4CB80C1A522AA5E17
SHA-256:	273CA29BA45BA636695CC74B6146EAFDE1B4D2E2828E24EEB6475D2AE6FE10B1
SHA-512:	1F2A8FD81368D7EC2C3B570EF049C3CFA7B00035CF3A0CF35A429BAFCD1868C41269125244E99C1D3909BB145CF19BF1FFD86B77E65F272A2897F15E820E1F5C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkCl_0dFYKj6BIFDb5JoHs=?alt=proto
Preview:	CgkKBw2+SaB7GgA=

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	8
Entropy (8bit):	2.5
Encrypted:	false
SSDEEP:	3:x:x
MD5:	402E7A087747CB56C718BDE84651F96A
SHA1:	7CE01F6381463362CF6AEF2F843A59261E8F5587
SHA-256:	662EFAF46C617DDBCB8FF4A2A8F64CFFD3D93630F1003F8E66511F369B87730F
SHA-512:	5080D776D0B123F20E97D44472EF2343BC022105AA67FC802B71668BAEB74A81530355589D50B1142165D17EF995AEAC196B6C15136D518A1EC0ABFA13C91D10
Malicious:	false
Reputation:	low
URL:	https://baxhwiiccn7jgzyjggsa-ponbmr-1fde3c829-clientnsv4-s.akamaihd.net/eum/results.txt
Preview:	Success!

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 126 x 42
Category:	dropped
Size (bytes):	937
Entropy (8bit):	7.694000757621182
Encrypted:	false
SSDEEP:	24:KcIONB3sMmwWL6qKzZuGjhc1VOQ+rogglOv:XjcHUFeFgeOv
MD5:	E57AED1F0370F48370C420377E3C811A
SHA1:	2168922DB0C3F93F9FFCE6D5031767B71A81F584
SHA-256:	4D0CF9B05904BDC160D5C63A1B0E8F8CFFB65E6681882DD5052FC402C84B6C9C
SHA-512:	7091224F34910174653209FF9CFC277D72DC7D333B7B6E33DEEDBF934ACFCBA64F3392B7F5A03CE361B006300E5E01128062226DC2CF772BEEB1FBF91456ECDA
Malicious:	false
Reputation:	low
Preview:	GIF89a~......m{...._m. t..+.............IX...}....3F.....%8:J..P`<.dq.................BSw...\|........!.......,....~.*.....'.di.h..l.p,.tm.x..\|....pH,...r....tJ..D.....f.;.xL.z...7Ln..[.z...Ux.=....Qz.\|j~8O.....P...Q.........R........(..........."......$}"....0O.....P........O...j..$..sZ..#s..s....^.......O........P...."...xK...R.......:v..kf,.=b..%..E..q..L..o../.....F.X.f.8.h.@cH5..........p..fne.....hfA..J.....&...j.dS.U.9.D....CCs7.......wK/V................. ....@.,.&...b.....\@.kG...P8.o,.r...`#1... Tp...}E.P.A....+..Z.n..X.:.U-&Et.={..t..B.r...G.A!~......E.t].`/..r..&....$.;....8.;. ...S..A..H....`........\|.......".j..3S2.8....'Z..@7..s.g.o.I..+sD`.....=5.`.7e..".D]./.....}...O..24f..P..@.....(.c.........c.~....EMIV...<..7sz.b..^Y......$..X...4...6.@. .0...h....>p..g.....(.N...Bi...:).."`...\........v......D.u.ZE..T..............@z...-+m..8[.&..L.......................+..!..;

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (65103)
Category:	dropped
Size (bytes):	209939
Entropy (8bit):	5.366006952026174
Encrypted:	false
SSDEEP:	3072:1P6RsHIwj0PdUgdbs8kvdYkODdlm9AZoZXs+eSc:1msHIxHMvd8dtZoZDc
MD5:	FA4C76A7FDE62B18054CF7EB8E946012
SHA1:	B20150066A879D2B78DD3D4908F4ACD148EE66F8
SHA-256:	09EBD7F407439990AAC227E70DA23E1A819E8E30282928E324370805F480BEC4
SHA-512:	D72F5D078675C7ADBF6BFC1980712542A10668AEC9163137A2EC70A5E117F8FFDD0F06A6C4C6636E35C04F2754F33D40C65C59D452AFAA8EA4A382F24F200ABD
Malicious:	false
Reputation:	low
Preview:	/. Copyright (c) 2011, Yahoo! Inc. All rights reserved.. * Copyright (c) 2011-2012, Log-Normal, Inc. All rights reserved.. * Copyright (c) 2012-2017, SOASTA, Inc. All rights reserved.. * Copyright (c) 2017, Akamai Technologies, Inc. All rights reserved.. * Copyrights licensed under the BSD License. See the accompanying LICENSE.txt file for terms.. /./ Boomerang Version: 1.720.0 b17966bb92f8ac2ddcda4ac1d9c0aaea6d2eda7b */..BOOMR_start=(new Date).getTime();function BOOMR_check_doc_domain(e){if(window){if(!e){if(window.parent===window\|\|!document.getElementById("boomr-if-as"))return;if(window.BOOMR&&BOOMR.boomerang_frame&&BOOMR.window)try{BOOMR.boomerang_frame.document.domain!==BOOMR.window.document.domain&&(BOOMR.boomerang_frame.document.domain=BOOMR.window.document.domain)}catch(t){BOOMR.isCrossOriginError(t)\|\|BOOMR.addError(t,"BOOMR_check_doc_domain.domainFix")}e=document.domain}if(e&&-1!==e.indexOf(".")&&window.parent){try{window.parent.document;return}catch(t){try{document.doma

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	8
Entropy (8bit):	2.5
Encrypted:	false
SSDEEP:	3:x:x
MD5:	402E7A087747CB56C718BDE84651F96A
SHA1:	7CE01F6381463362CF6AEF2F843A59261E8F5587
SHA-256:	662EFAF46C617DDBCB8FF4A2A8F64CFFD3D93630F1003F8E66511F369B87730F
SHA-512:	5080D776D0B123F20E97D44472EF2343BC022105AA67FC802B71668BAEB74A81530355589D50B1142165D17EF995AEAC196B6C15136D518A1EC0ABFA13C91D10
Malicious:	false
Reputation:	low
URL:	https://8-46-123-33_s-2-16-164-88_ts-1728655780-clienttons-s.akamaihd.net/eum/results.txt
Preview:	Success!

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	610
Entropy (8bit):	5.22377066004336
Encrypted:	false
SSDEEP:	12:Y1gjGVJEkReOHQcEf44H96sVJhqJu+FTFI8fYeW0T2EN6+JIxASkc1wX2PiID3:Y1NWuJEg4H9xDWNpjnT2ENVJIYc1wGPB
MD5:	A6F9E70824C88DE17D51B59BF2D3AD48
SHA1:	EDCC458E4D49C8F42ED7E4A41FF1C8B2EE475861
SHA-256:	5B759FE65B06345CFDED0C6CF2AFCAE770AA1845F385015B2FF0878290A7C984
SHA-512:	91F34046D8AF6DBB5BA0DA5409B9049021E6F7C0864F07DC3A63091C9E1242385A1D2059675BD735F5215ED17F3CC7B6887C8A2B9D59080165112152E18A94B5
Malicious:	false
Reputation:	low
URL:	"https://c.go-mpulse.net/api/config.json?key=MNEVD-UBQQ4-BATKL-PRRMJ-EV7HG&d=federation.usbank.com&t=5762186&v=1.720.0&sl=0&si=e90e7617-b0a7-4d52-a2dd-c23505f92dc5-sl73b1&plugins=AK,ConfigOverride,Continuity,PageParams,IFrameDelay,AutoXHR,SPA,History,Angular,Backbone,Ember,RT,CrossDomain,BW,PaintTiming,NavigationTiming,ResourceTiming,Memory,CACHE_RELOAD,Errors,TPAnalytics,UserTiming,Akamai,Early,EventTiming,LOGN&acao=&ak.ai=862813"
Preview:	{"h.key":"MNEVD-UBQQ4-BATKL-PRRMJ-EV7HG","h.d":"arlid:862813","h.t":1728655749165,"h.cr":"abea92912ae118fe395c370ade1487a9095259ae-848dac04-779164ac","session_id":"2bae460e-3da5-47fb-be8a-d3482431db78","site_domain":"arlid:862813","beacon_url":"//0217991c.akstat.io/","autorun":true,"BW":{"enabled":false},"RT":{"cookie":null,"session_exp":1800},"ResourceTiming":{"enabled":true,"splitAtPath":true},"PageParams":{"xhr":"none","pageGroups":[],"customMetrics":[],"customTimers":[],"customDimensions":[],"urlPatterns":[],"params":true},"Akamai":{"enabled":true,"dns_prefetch_enabled":true},"user_ip":"8.46.123.0"}

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	610
Entropy (8bit):	5.256948755126825
Encrypted:	false
SSDEEP:	12:Y1gjGVJEkRV6qPCgnm/jasVJhqxZ+FTFI8fYeW0T2EN6+JIxASkc1wX2PiID3:Y1N4qPC1DI0pjnT2ENVJIYc1wGPiA3
MD5:	121F8F47F4460E797C43FF9F3566903C
SHA1:	AD0DE89347D18A109B764DC662077BF38CFFD0F4
SHA-256:	A757D9CDAF66B6910D3A7A02A00EBE1B2B4127D551CA509EE35E9BE24AEE3BDB
SHA-512:	FE25B52C4A38B2B99D915093B7612BDFF5D39CD0AEE8A5FCE3BE390CC9C2B446A7DD06AC8D4F2A08CA35ECD8DBDCBE65A07ED8AFB24738A2F36F3FE4A974F81D
Malicious:	false
Reputation:	low
Preview:	{"h.key":"MNEVD-UBQQ4-BATKL-PRRMJ-EV7HG","h.d":"arlid:862813","h.t":1728655805401,"h.cr":"c8ff56406260ef75531a21d7c2a3fb3fcd69020e-848dac04-779164ac","session_id":"1ea68f60-71d7-4611-b756-63b29f59dbf2","site_domain":"arlid:862813","beacon_url":"//02179918.akstat.io/","autorun":true,"BW":{"enabled":false},"RT":{"cookie":null,"session_exp":1800},"ResourceTiming":{"enabled":true,"splitAtPath":true},"PageParams":{"xhr":"none","pageGroups":[],"customMetrics":[],"customTimers":[],"customDimensions":[],"urlPatterns":[],"params":true},"Akamai":{"enabled":true,"dns_prefetch_enabled":true},"user_ip":"8.46.123.0"}

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	610
Entropy (8bit):	5.248486245123167
Encrypted:	false
SSDEEP:	12:Y1gjGVJEkRN6Sfxbz+M0sVJhq5u+FTFI8fYeW0T2EN6+JIxASkc1wX2PiID3:Y1N16S5zfDGNpjnT2ENVJIYc1wGPiA3
MD5:	C3A950B2975AD8B8D268E7611CE786F6
SHA1:	88490617E72D9DD96E983E7FC85BACB55CD7CEF1
SHA-256:	336E19DA5D39C58FBE868AC33EA89822BB07E38881BABA028910F496E7E6FC4B
SHA-512:	320A71DD4674334078C802FDD7B31940059C04D7FE9471298C97E8C71BEAD7E67C9BDA3E36E5C59BD6E434B7D87AFEB8FFA70EB4C5A69B73429E355833507CBB
Malicious:	false
Reputation:	low
Preview:	{"h.key":"MNEVD-UBQQ4-BATKL-PRRMJ-EV7HG","h.d":"arlid:862813","h.t":1728655750331,"h.cr":"7d41fd5d513258542efcdff4b3dd6d92372d2687-848dac04-779164ac","session_id":"a5b2dd9a-f66d-4c2f-bee0-32084ab06ef3","site_domain":"arlid:862813","beacon_url":"//02179913.akstat.io/","autorun":true,"BW":{"enabled":false},"RT":{"cookie":null,"session_exp":1800},"ResourceTiming":{"enabled":true,"splitAtPath":true},"PageParams":{"xhr":"none","pageGroups":[],"customMetrics":[],"customTimers":[],"customDimensions":[],"urlPatterns":[],"params":true},"Akamai":{"enabled":true,"dns_prefetch_enabled":true},"user_ip":"8.46.123.0"}

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (706)
Category:	downloaded
Size (bytes):	174330
Entropy (8bit):	4.917636813207958
Encrypted:	false
SSDEEP:	3072:p7PofbpYf+w9ISEqcwK+xd+T7kjaL0xSe4JL5n:p7PofbpYf+w9ISEqcwK+xd+T7kjaL0xW
MD5:	F54C62B00AD6C401C83CD111712C62EA
SHA1:	187475A233A9A30C338BA7D5B16466A77A0A9312
SHA-256:	9452059E231B38A61E301F15E57FD552F9FA51A2202111845D3A5BA2A9AB2DE4
SHA-512:	FF6950E1AB51404FA4B6FD43F6CED6A244F3BC4994A98BBB3D060DE5919DF4F6C8FAE8E2CEED492B4B5A53DDB7D578C88911776A3DC05625D0299FE9219AFBBC
Malicious:	false
Reputation:	low
URL:	https://federation.usbank.com/assets/css/main.css
Preview:	@charset "UTF-8";./* Eric Meyer's Reset CSS v2.0 - http://cssreset.com */.html, body, div, span, applet, object, iframe, h1, h2, h3, h4, h5, h6, p, blockquote, pre, a, abbr, acronym, address, big, cite, code, del, dfn, em, img, ins, kbd, q, s, samp, small, strike, strong, sub, sup, tt, var, b, u, i, center, dl, dt, dd, ol, ul, li, fieldset, form, label, legend, table, caption, tbody, tfoot, thead, tr, th, td, article, aside, canvas, details, embed, figure, figcaption, footer, header, hgroup, menu, nav, output, ruby, section, summary, time, mark, audio, video {. border: 0;. font-size: 100%;. font: inherit;. vertical-align: baseline;. margin: 0;. padding: 0;.}..article, aside, details, figcaption, figure, footer, header, hgroup, menu, nav, section {. display: block;.}..body {. line-height: 1;.}..ol, ul {. list-style: none;.}..blockquote, q {. quotes: none;.}..blockquote:before, blockquote:after, q:before, q:after {. content: none;.}..table {. border-collapse: collapse;. bord

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	767
Entropy (8bit):	5.253398977112637
Encrypted:	false
SSDEEP:	12:Y1gjGVJEkRkZK6DrKAGBRbsVJhqYBW9+FTFI8fYeW0T2EN6+JIxASkc1wX2Ps8xS:Y1NMjrKBRSDtpjnT2ENVJIYc1wGPlxOx
MD5:	DFB2EEB0B4083D3CC26B145A143C27CC
SHA1:	BD4780B5BBF697AD93406312D0882FCDE42668BB
SHA-256:	6F34CDB1F8D37370B09647C8AC89A1884A3E15342572D4385FF5F3E5D748881D
SHA-512:	BD5FA9443A0CFDFB0BA23417E97A49B7A39A7285CEFA65046EBE86C464F2CD9FC02A4B2528C1A123F6352C76FEA97064D9D9C847099F54233A856270B04FE7D7
Malicious:	false
Reputation:	low
URL:	"https://c.go-mpulse.net/api/config.json?key=MNEVD-UBQQ4-BATKL-PRRMJ-EV7HG&d=federation.usbank.com&t=5762186&v=1.720.0&sl=0&si=f640a6a5-29ac-4cd8-8b80-a4d10d4ca276-sl73bz&plugins=AK,ConfigOverride,Continuity,PageParams,IFrameDelay,AutoXHR,SPA,History,Angular,Backbone,Ember,RT,CrossDomain,BW,PaintTiming,NavigationTiming,ResourceTiming,Memory,CACHE_RELOAD,Errors,TPAnalytics,UserTiming,Akamai,Early,EventTiming,LOGN&acao=&ak.ai=862813"
Preview:	{"h.key":"MNEVD-UBQQ4-BATKL-PRRMJ-EV7HG","h.d":"arlid:862813","h.t":1728655779182,"h.cr":"049a4192f70649e7315e39872029527df0a37eed-848dac04-779164ac","session_id":"11649d86-cfad-4770-9be1-b7f72f0bfbc8","site_domain":"arlid:862813","beacon_url":"//684dd32b.akstat.io/","autorun":true,"BW":{"enabled":false},"RT":{"cookie":null,"session_exp":1800},"ResourceTiming":{"enabled":true,"splitAtPath":true},"PageParams":{"xhr":"none","pageGroups":[],"customMetrics":[],"customTimers":[],"customDimensions":[],"urlPatterns":[],"params":true},"Akamai":{"enabled":true,"mapping_xhr_base_url":"akamaihd.net","mapping_xhr_url_path":"/eum/getdns.txt","mapping_xhr_url_v4_prefix":"trial-eum-clientnsv4-s","mapping_xhr_url_v6_prefix":"trial-eum-clienttons-s"},"user_ip":"8.46.123.0"}

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 126 x 42
Category:	downloaded
Size (bytes):	937
Entropy (8bit):	7.694000757621182
Encrypted:	false
SSDEEP:	24:KcIONB3sMmwWL6qKzZuGjhc1VOQ+rogglOv:XjcHUFeFgeOv
MD5:	E57AED1F0370F48370C420377E3C811A
SHA1:	2168922DB0C3F93F9FFCE6D5031767B71A81F584
SHA-256:	4D0CF9B05904BDC160D5C63A1B0E8F8CFFB65E6681882DD5052FC402C84B6C9C
SHA-512:	7091224F34910174653209FF9CFC277D72DC7D333B7B6E33DEEDBF934ACFCBA64F3392B7F5A03CE361B006300E5E01128062226DC2CF772BEEB1FBF91456ECDA
Malicious:	false
Reputation:	low
URL:	https://federation.usbank.com/assets/images/usb_usbank_logo.gif
Preview:	GIF89a~......m{...._m. t..+.............IX...}....3F.....%8:J..P`<.dq.................BSw...\|........!.......,....~.*.....'.di.h..l.p,.tm.x..\|....pH,...r....tJ..D.....f.;.xL.z...7Ln..[.z...Ux.=....Qz.\|j~8O.....P...Q.........R........(..........."......$}"....0O.....P........O...j..$..sZ..#s..s....^.......O........P...."...xK...R.......:v..kf,.=b..%..E..q..L..o../.....F.X.f.8.h.@cH5..........p..fne.....hfA..J.....&...j.dS.U.9.D....CCs7.......wK/V................. ....@.,.&...b.....\@.kG...P8.o,.r...`#1... Tp...}E.P.A....+..Z.n..X.:.U-&Et.={..t..B.r...G.A!~......E.t].`/..r..&....$.;....8.;. ...S..A..H....`........\|.......".j..3S2.8....'Z..@7..s.g.o.I..+sD`.....=5.`.7e..".D]./.....}...O..24f..P..@.....(.c.........c.~....EMIV...<..7sz.b..^Y......$..X...4...6.@. .0...h....>p..g.....(.N...Bi...:).."`...\........v......D.u.ZE..T..............@z...-+m..8[.&..L.......................+..!..;

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 8 bits/pixel, 32x32, 8 bits/pixel
Category:	downloaded
Size (bytes):	7406
Entropy (8bit):	3.477136972604435
Encrypted:	false
SSDEEP:	48:j7pGE5xBuA5h4RX5hOQTKF9SGBDsFUJWW4fVfU18Roxn6u2NGk:JGE5xORPlTKWGgULqRzrNx
MD5:	EB618C0A2DE2EB33A28EF811F4A25BEB
SHA1:	6ED3CD39EB7077CB28A4B5E2E027EDC054CA932C
SHA-256:	13CDABD902393EB932EFE980F89B78FAD664CACC755F2B8CDAF8B908FE72991B
SHA-512:	D7EC705ECAC677936A11AAB91389331A57E8D291F94E3E013570CB287C1FB2BAE5D22B7F2CB14FFFF7CA4D87C1500C489E8BF797EF4E10D8FFF5AC8C3888EAC8
Malicious:	false
Reputation:	low
URL:	https://federation.usbank.com/favicon.ico
Preview:	......00..........6... ......................h.......(...0...`...............................%...&"..($..)%..*&..+'..,%..,(..2,..51..61..96..;7..>;..@<..C@..EA..EB..FB..FC..GC..IE..JF..JG..KH..LH..MJ..OL..PM..QN..RN..RO..SP..TQ..UQ..UR..VR..VS..WT..WT..XT..YV..ZV..ZW..ZW..\Y..^[.._\..c`..kh..mk..ol..om..qn..ro..rp..tq..yv..\|z..}{..~\|...~....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	8
Entropy (8bit):	2.5
Encrypted:	false
SSDEEP:	3:x:x
MD5:	402E7A087747CB56C718BDE84651F96A
SHA1:	7CE01F6381463362CF6AEF2F843A59261E8F5587
SHA-256:	662EFAF46C617DDBCB8FF4A2A8F64CFFD3D93630F1003F8E66511F369B87730F
SHA-512:	5080D776D0B123F20E97D44472EF2343BC022105AA67FC802B71668BAEB74A81530355589D50B1142165D17EF995AEAC196B6C15136D518A1EC0ABFA13C91D10
Malicious:	false
Reputation:	low
Preview:	Success!

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	610
Entropy (8bit):	5.2485958207659476
Encrypted:	false
SSDEEP:	12:Y1gjGVJEkRDzjE65n0sVJhqYBW3u+FTFI8fYeW0T2EN6+JIxASkc1wX2PiID3:Y1NrzjEMnrDApjnT2ENVJIYc1wGPiA3
MD5:	5CFC3DB7D55A8408423BC468EFF293CD
SHA1:	64A9937F6702CF44626821AA7F85D25722327748
SHA-256:	4970F7D5F26A6B26F2546A824FC46894D8E46CB8A47343240C1D86B83C75CDF9
SHA-512:	6F6A52223B1F20AE0C450E5DFFEA3073194724E38249D2D709BD28A69C5357B23C93A107835D192DB7C9964042EC2F2AAC9F63370039478435102518132B48A6
Malicious:	false
Reputation:	low
URL:	"https://c.go-mpulse.net/api/config.json?key=MNEVD-UBQQ4-BATKL-PRRMJ-EV7HG&d=federation.usbank.com&t=5762186&v=1.720.0&sl=0&si=fa1a99b0-af66-44db-a6d6-b837d93259d2-sl73bh&plugins=AK,ConfigOverride,Continuity,PageParams,IFrameDelay,AutoXHR,SPA,History,Angular,Backbone,Ember,RT,CrossDomain,BW,PaintTiming,NavigationTiming,ResourceTiming,Memory,CACHE_RELOAD,Errors,TPAnalytics,UserTiming,Akamai,Early,EventTiming,LOGN&acao=&ak.ai=862813"
Preview:	{"h.key":"MNEVD-UBQQ4-BATKL-PRRMJ-EV7HG","h.d":"arlid:862813","h.t":1728655761993,"h.cr":"655988803861670cce1817cc43cf65e7518429cf-848dac04-779164ac","session_id":"d1fca1f1-0f07-4091-9bf3-2131ff24fedc","site_domain":"arlid:862813","beacon_url":"//684dd32a.akstat.io/","autorun":true,"BW":{"enabled":false},"RT":{"cookie":null,"session_exp":1800},"ResourceTiming":{"enabled":true,"splitAtPath":true},"PageParams":{"xhr":"none","pageGroups":[],"customMetrics":[],"customTimers":[],"customDimensions":[],"urlPatterns":[],"params":true},"Akamai":{"enabled":true,"dns_prefetch_enabled":true},"user_ip":"8.46.123.0"}

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (65103)
Category:	downloaded
Size (bytes):	209939
Entropy (8bit):	5.366006952026174
Encrypted:	false
SSDEEP:	3072:1P6RsHIwj0PdUgdbs8kvdYkODdlm9AZoZXs+eSc:1msHIxHMvd8dtZoZDc
MD5:	FA4C76A7FDE62B18054CF7EB8E946012
SHA1:	B20150066A879D2B78DD3D4908F4ACD148EE66F8
SHA-256:	09EBD7F407439990AAC227E70DA23E1A819E8E30282928E324370805F480BEC4
SHA-512:	D72F5D078675C7ADBF6BFC1980712542A10668AEC9163137A2EC70A5E117F8FFDD0F06A6C4C6636E35C04F2754F33D40C65C59D452AFAA8EA4A382F24F200ABD
Malicious:	false
Reputation:	low
URL:	https://s.go-mpulse.net/boomerang/MNEVD-UBQQ4-BATKL-PRRMJ-EV7HG
Preview:	/. Copyright (c) 2011, Yahoo! Inc. All rights reserved.. * Copyright (c) 2011-2012, Log-Normal, Inc. All rights reserved.. * Copyright (c) 2012-2017, SOASTA, Inc. All rights reserved.. * Copyright (c) 2017, Akamai Technologies, Inc. All rights reserved.. * Copyrights licensed under the BSD License. See the accompanying LICENSE.txt file for terms.. /./ Boomerang Version: 1.720.0 b17966bb92f8ac2ddcda4ac1d9c0aaea6d2eda7b */..BOOMR_start=(new Date).getTime();function BOOMR_check_doc_domain(e){if(window){if(!e){if(window.parent===window\|\|!document.getElementById("boomr-if-as"))return;if(window.BOOMR&&BOOMR.boomerang_frame&&BOOMR.window)try{BOOMR.boomerang_frame.document.domain!==BOOMR.window.document.domain&&(BOOMR.boomerang_frame.document.domain=BOOMR.window.document.domain)}catch(t){BOOMR.isCrossOriginError(t)\|\|BOOMR.addError(t,"BOOMR_check_doc_domain.domainFix")}e=document.domain}if(e&&-1!==e.indexOf(".")&&window.parent){try{window.parent.document;return}catch(t){try{document.doma

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	610
Entropy (8bit):	5.236492912119342
Encrypted:	false
SSDEEP:	12:Y1gjGVJEkR28nwRMITW6sVJhq5u+FTFI8fYeW0T2EN6+JIxASkc1wX2PiID3:Y1Nu8NITSDGNpjnT2ENVJIYc1wGPiA3
MD5:	F32E93F40DCC1D0E19D6B63A1C0E9C5D
SHA1:	8BF2FAC7A126748D38EE0561C018EA6C32191008
SHA-256:	4DF2F39700187700115955E9DD37D670DB1B00653CC38F58301F8F4BD74AFDE3
SHA-512:	268AA34D9B4FAAE1DFB4D20777AA30F1D9110C4860C3500A0EB5D661CDAE2D320F69088A426112CB4BD4215F1D0DBF3697B298090500938861DB83175547A693
Malicious:	false
Reputation:	low
Preview:	{"h.key":"MNEVD-UBQQ4-BATKL-PRRMJ-EV7HG","h.d":"arlid:862813","h.t":1728655764075,"h.cr":"0b9a1c4f42e30ada64363b4ba8a1ea22abe21880-848dac04-779164ac","session_id":"c5a43fdb-ce9f-4635-bd4f-d8fe73f781b6","site_domain":"arlid:862813","beacon_url":"//02179913.akstat.io/","autorun":true,"BW":{"enabled":false},"RT":{"cookie":null,"session_exp":1800},"ResourceTiming":{"enabled":true,"splitAtPath":true},"PageParams":{"xhr":"none","pageGroups":[],"customMetrics":[],"customTimers":[],"customDimensions":[],"urlPatterns":[],"params":true},"Akamai":{"enabled":true,"dns_prefetch_enabled":true},"user_ip":"8.46.123.0"}

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	8
Entropy (8bit):	2.5
Encrypted:	false
SSDEEP:	3:x:x
MD5:	402E7A087747CB56C718BDE84651F96A
SHA1:	7CE01F6381463362CF6AEF2F843A59261E8F5587
SHA-256:	662EFAF46C617DDBCB8FF4A2A8F64CFFD3D93630F1003F8E66511F369B87730F
SHA-512:	5080D776D0B123F20E97D44472EF2343BC022105AA67FC802B71668BAEB74A81530355589D50B1142165D17EF995AEAC196B6C15136D518A1EC0ABFA13C91D10
Malicious:	false
Reputation:	low
Preview:	Success!

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 11, 2024 16:08:46.794312000 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 11, 2024 16:08:46.794339895 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 11, 2024 16:08:46.903666973 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 11, 2024 16:08:56.403605938 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 11, 2024 16:08:56.403767109 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 11, 2024 16:08:56.513098955 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 11, 2024 16:08:58.174451113 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 11, 2024 16:08:58.174756050 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 11, 2024 16:09:01.817313910 CEST	49709	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:01.817411900 CEST	443	49709	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:01.817498922 CEST	49709	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:01.817647934 CEST	49710	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:01.817670107 CEST	443	49710	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:01.817826033 CEST	49709	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:01.817857981 CEST	443	49709	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:01.817883968 CEST	49710	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:01.818135977 CEST	49710	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:01.818147898 CEST	443	49710	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:02.292129993 CEST	443	49709	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:02.296036005 CEST	49709	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:02.296068907 CEST	443	49709	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:02.297635078 CEST	443	49709	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:02.297741890 CEST	49709	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:02.299660921 CEST	49709	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:02.299748898 CEST	443	49709	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:02.300005913 CEST	49709	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:02.300024986 CEST	443	49709	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:02.303875923 CEST	443	49710	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:02.305459976 CEST	49710	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:02.305469036 CEST	443	49710	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:02.306432962 CEST	443	49710	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:02.306524038 CEST	49710	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:02.306952953 CEST	49710	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:02.307162046 CEST	443	49710	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:02.348824978 CEST	49709	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:02.441452026 CEST	49710	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:02.441478014 CEST	443	49710	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:02.462045908 CEST	443	49709	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:02.462210894 CEST	443	49709	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:02.462328911 CEST	49709	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:02.465632915 CEST	49709	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:02.465652943 CEST	443	49709	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:02.466633081 CEST	49710	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:02.507409096 CEST	443	49710	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:02.626379013 CEST	443	49710	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:02.626595974 CEST	443	49710	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:02.626769066 CEST	49710	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:02.663253069 CEST	49710	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:02.663319111 CEST	443	49710	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:02.694519997 CEST	49712	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:02.694569111 CEST	443	49712	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:02.694622993 CEST	49712	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:02.694732904 CEST	49713	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:02.694782019 CEST	443	49713	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:02.694837093 CEST	49713	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:02.694946051 CEST	49712	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:02.694955111 CEST	443	49712	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:02.695089102 CEST	49713	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:02.695107937 CEST	443	49713	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:03.157567024 CEST	443	49712	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:03.157947063 CEST	49712	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:03.158014059 CEST	443	49712	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:03.159147978 CEST	443	49712	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:03.159934044 CEST	49712	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:03.160109997 CEST	443	49712	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:03.160139084 CEST	49712	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:03.203480005 CEST	443	49712	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:03.208525896 CEST	49712	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:03.250338078 CEST	443	49713	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:03.250665903 CEST	49713	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:03.250703096 CEST	443	49713	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:03.251224995 CEST	443	49713	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:03.251554012 CEST	49713	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:03.251632929 CEST	443	49713	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:03.300312042 CEST	49713	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:03.351624966 CEST	443	49712	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:03.351928949 CEST	443	49712	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:03.352020025 CEST	49712	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:03.354026079 CEST	49712	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:03.354074955 CEST	443	49712	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:04.731115103 CEST	49716	443	192.168.2.5	142.250.186.68
Oct 11, 2024 16:09:04.731204987 CEST	443	49716	142.250.186.68	192.168.2.5
Oct 11, 2024 16:09:04.731290102 CEST	49716	443	192.168.2.5	142.250.186.68
Oct 11, 2024 16:09:04.731466055 CEST	49716	443	192.168.2.5	142.250.186.68
Oct 11, 2024 16:09:04.731487989 CEST	443	49716	142.250.186.68	192.168.2.5
Oct 11, 2024 16:09:04.988418102 CEST	49719	443	192.168.2.5	184.28.90.27
Oct 11, 2024 16:09:04.988472939 CEST	443	49719	184.28.90.27	192.168.2.5
Oct 11, 2024 16:09:04.988557100 CEST	49719	443	192.168.2.5	184.28.90.27
Oct 11, 2024 16:09:04.990319967 CEST	49719	443	192.168.2.5	184.28.90.27
Oct 11, 2024 16:09:04.990354061 CEST	443	49719	184.28.90.27	192.168.2.5
Oct 11, 2024 16:09:05.393321991 CEST	443	49716	142.250.186.68	192.168.2.5
Oct 11, 2024 16:09:05.393773079 CEST	49716	443	192.168.2.5	142.250.186.68
Oct 11, 2024 16:09:05.393809080 CEST	443	49716	142.250.186.68	192.168.2.5
Oct 11, 2024 16:09:05.395484924 CEST	443	49716	142.250.186.68	192.168.2.5
Oct 11, 2024 16:09:05.395586967 CEST	49716	443	192.168.2.5	142.250.186.68
Oct 11, 2024 16:09:05.396905899 CEST	49716	443	192.168.2.5	142.250.186.68
Oct 11, 2024 16:09:05.396998882 CEST	443	49716	142.250.186.68	192.168.2.5
Oct 11, 2024 16:09:05.441876888 CEST	49716	443	192.168.2.5	142.250.186.68
Oct 11, 2024 16:09:05.441937923 CEST	443	49716	142.250.186.68	192.168.2.5
Oct 11, 2024 16:09:05.489262104 CEST	49716	443	192.168.2.5	142.250.186.68
Oct 11, 2024 16:09:05.692244053 CEST	443	49719	184.28.90.27	192.168.2.5
Oct 11, 2024 16:09:05.692354918 CEST	49719	443	192.168.2.5	184.28.90.27
Oct 11, 2024 16:09:05.698802948 CEST	49719	443	192.168.2.5	184.28.90.27
Oct 11, 2024 16:09:05.698837996 CEST	443	49719	184.28.90.27	192.168.2.5
Oct 11, 2024 16:09:05.699311972 CEST	443	49719	184.28.90.27	192.168.2.5
Oct 11, 2024 16:09:05.750894070 CEST	49719	443	192.168.2.5	184.28.90.27
Oct 11, 2024 16:09:05.788640022 CEST	49719	443	192.168.2.5	184.28.90.27
Oct 11, 2024 16:09:05.831409931 CEST	443	49719	184.28.90.27	192.168.2.5
Oct 11, 2024 16:09:06.014707088 CEST	443	49719	184.28.90.27	192.168.2.5
Oct 11, 2024 16:09:06.014796972 CEST	443	49719	184.28.90.27	192.168.2.5
Oct 11, 2024 16:09:06.014868021 CEST	49719	443	192.168.2.5	184.28.90.27
Oct 11, 2024 16:09:06.015779018 CEST	49719	443	192.168.2.5	184.28.90.27
Oct 11, 2024 16:09:06.015827894 CEST	443	49719	184.28.90.27	192.168.2.5
Oct 11, 2024 16:09:06.367753983 CEST	49720	443	192.168.2.5	184.28.90.27
Oct 11, 2024 16:09:06.367830038 CEST	443	49720	184.28.90.27	192.168.2.5
Oct 11, 2024 16:09:06.367917061 CEST	49720	443	192.168.2.5	184.28.90.27
Oct 11, 2024 16:09:06.368639946 CEST	49720	443	192.168.2.5	184.28.90.27
Oct 11, 2024 16:09:06.368671894 CEST	443	49720	184.28.90.27	192.168.2.5
Oct 11, 2024 16:09:06.699511051 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:06.699578047 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:06.699652910 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:06.701821089 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:06.701837063 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.048523903 CEST	49726	443	192.168.2.5	52.149.20.212
Oct 11, 2024 16:09:07.048613071 CEST	443	49726	52.149.20.212	192.168.2.5
Oct 11, 2024 16:09:07.048732042 CEST	49726	443	192.168.2.5	52.149.20.212
Oct 11, 2024 16:09:07.049786091 CEST	49726	443	192.168.2.5	52.149.20.212
Oct 11, 2024 16:09:07.049825907 CEST	443	49726	52.149.20.212	192.168.2.5
Oct 11, 2024 16:09:07.073417902 CEST	443	49720	184.28.90.27	192.168.2.5
Oct 11, 2024 16:09:07.073512077 CEST	49720	443	192.168.2.5	184.28.90.27
Oct 11, 2024 16:09:07.075947046 CEST	49720	443	192.168.2.5	184.28.90.27
Oct 11, 2024 16:09:07.075962067 CEST	443	49720	184.28.90.27	192.168.2.5
Oct 11, 2024 16:09:07.076308966 CEST	443	49720	184.28.90.27	192.168.2.5
Oct 11, 2024 16:09:07.077429056 CEST	49720	443	192.168.2.5	184.28.90.27
Oct 11, 2024 16:09:07.119463921 CEST	443	49720	184.28.90.27	192.168.2.5
Oct 11, 2024 16:09:07.377582073 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.377661943 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.382718086 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.382728100 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.383044004 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.396204948 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.434144974 CEST	443	49720	184.28.90.27	192.168.2.5
Oct 11, 2024 16:09:07.434230089 CEST	443	49720	184.28.90.27	192.168.2.5
Oct 11, 2024 16:09:07.434345007 CEST	49720	443	192.168.2.5	184.28.90.27
Oct 11, 2024 16:09:07.436499119 CEST	49720	443	192.168.2.5	184.28.90.27
Oct 11, 2024 16:09:07.436531067 CEST	443	49720	184.28.90.27	192.168.2.5
Oct 11, 2024 16:09:07.436557055 CEST	49720	443	192.168.2.5	184.28.90.27
Oct 11, 2024 16:09:07.436573982 CEST	443	49720	184.28.90.27	192.168.2.5
Oct 11, 2024 16:09:07.443412066 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.496643066 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.496675014 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.496710062 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.496793985 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.496812105 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.496860981 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.582386017 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.582412958 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.582501888 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.582515955 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.582565069 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.584400892 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.584422112 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.584480047 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.584486961 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.584527016 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.584548950 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.669033051 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.669058084 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.669122934 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.669131994 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.669176102 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.669856071 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.669874907 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.669929981 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.669935942 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.669977903 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.670866966 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.670886040 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.670928955 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.670933962 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.670964003 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.670985937 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.672334909 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.672354937 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.672408104 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.672413111 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.672456026 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.760551929 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.760577917 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.760637999 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.760649920 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.760682106 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.760700941 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.761112928 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.761132956 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.761178970 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.761183977 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.761212111 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.761230946 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.761702061 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.761720896 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.761754036 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.761759043 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.761790037 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.761806011 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.762522936 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.762542009 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.762593031 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.762598991 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.762753010 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.763216972 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.763235092 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.763288975 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.763293982 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.763330936 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.763341904 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.763850927 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.763870955 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.763919115 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.763923883 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.763952017 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.763964891 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.764306068 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.764355898 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.764359951 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.764404058 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.764436007 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.764461994 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.766165018 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.768619061 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.768630028 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.768659115 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.768666029 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.876092911 CEST	443	49726	52.149.20.212	192.168.2.5
Oct 11, 2024 16:09:07.876198053 CEST	49726	443	192.168.2.5	52.149.20.212
Oct 11, 2024 16:09:07.876665115 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.876689911 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.876749992 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.878190041 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.878231049 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.878427982 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.879317999 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.879357100 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.879430056 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.882522106 CEST	49726	443	192.168.2.5	52.149.20.212
Oct 11, 2024 16:09:07.882555962 CEST	443	49726	52.149.20.212	192.168.2.5
Oct 11, 2024 16:09:07.882834911 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.882862091 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.882937908 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.882952929 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.882991076 CEST	443	49726	52.149.20.212	192.168.2.5
Oct 11, 2024 16:09:07.883981943 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.883991957 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.884222984 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.884375095 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.884394884 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.885046005 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.885073900 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.885162115 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.887408972 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.887423038 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.894798994 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:07.894809961 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:07.928117990 CEST	49726	443	192.168.2.5	52.149.20.212
Oct 11, 2024 16:09:08.561526060 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.562516928 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.564745903 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.567245960 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.578672886 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.612062931 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.612066031 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.612066031 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.612087011 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.625056028 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.625070095 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.625479937 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.625487089 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.625828028 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.625843048 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.626225948 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.626238108 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.626458883 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.626462936 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.626818895 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.626822948 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.627237082 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.627248049 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.627705097 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.627715111 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.628099918 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.628113031 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.628421068 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.628424883 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.729141951 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.729163885 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.729228973 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.729243994 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.729271889 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.729319096 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.729978085 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.729993105 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.730036020 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.730045080 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.730057001 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.730082035 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.730103016 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.730320930 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.730382919 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.730458021 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.733783007 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.733856916 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.733923912 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.733936071 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.733987093 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.733993053 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.734013081 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.734044075 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.734090090 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.734090090 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.734111071 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.734729052 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.734780073 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.734822035 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.759726048 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.759726048 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.759747028 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.759756088 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.763402939 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.763425112 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.763458967 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.763469934 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.768724918 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.768743992 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.769498110 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.769503117 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.769512892 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.769519091 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.784208059 CEST	49726	443	192.168.2.5	52.149.20.212
Oct 11, 2024 16:09:08.785510063 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.785583019 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.785661936 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.786463976 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.786497116 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.786559105 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.787285089 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.787318945 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.787457943 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.787550926 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.787631989 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.787703037 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.787724018 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.788233042 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.788328886 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.788360119 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.788403034 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.788431883 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.788497925 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.788613081 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.788623095 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.788697958 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.788741112 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.788786888 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:08.788815022 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:08.831413031 CEST	443	49726	52.149.20.212	192.168.2.5
Oct 11, 2024 16:09:08.924931049 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 11, 2024 16:09:08.925007105 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 11, 2024 16:09:08.925312042 CEST	49744	443	192.168.2.5	23.1.237.91
Oct 11, 2024 16:09:08.925405979 CEST	443	49744	23.1.237.91	192.168.2.5
Oct 11, 2024 16:09:08.925489902 CEST	49744	443	192.168.2.5	23.1.237.91
Oct 11, 2024 16:09:08.925704002 CEST	49744	443	192.168.2.5	23.1.237.91
Oct 11, 2024 16:09:08.925745964 CEST	443	49744	23.1.237.91	192.168.2.5
Oct 11, 2024 16:09:08.929903030 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 11, 2024 16:09:08.929956913 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 11, 2024 16:09:09.045766115 CEST	443	49726	52.149.20.212	192.168.2.5
Oct 11, 2024 16:09:09.045802116 CEST	443	49726	52.149.20.212	192.168.2.5
Oct 11, 2024 16:09:09.045813084 CEST	443	49726	52.149.20.212	192.168.2.5
Oct 11, 2024 16:09:09.045825958 CEST	443	49726	52.149.20.212	192.168.2.5
Oct 11, 2024 16:09:09.045864105 CEST	49726	443	192.168.2.5	52.149.20.212
Oct 11, 2024 16:09:09.045912981 CEST	443	49726	52.149.20.212	192.168.2.5
Oct 11, 2024 16:09:09.045934916 CEST	443	49726	52.149.20.212	192.168.2.5
Oct 11, 2024 16:09:09.045969963 CEST	49726	443	192.168.2.5	52.149.20.212
Oct 11, 2024 16:09:09.045969963 CEST	49726	443	192.168.2.5	52.149.20.212
Oct 11, 2024 16:09:09.045995951 CEST	49726	443	192.168.2.5	52.149.20.212
Oct 11, 2024 16:09:09.046370029 CEST	443	49726	52.149.20.212	192.168.2.5
Oct 11, 2024 16:09:09.046439886 CEST	49726	443	192.168.2.5	52.149.20.212
Oct 11, 2024 16:09:09.046454906 CEST	443	49726	52.149.20.212	192.168.2.5
Oct 11, 2024 16:09:09.046562910 CEST	443	49726	52.149.20.212	192.168.2.5
Oct 11, 2024 16:09:09.046612978 CEST	49726	443	192.168.2.5	52.149.20.212
Oct 11, 2024 16:09:09.425717115 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.427256107 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.427345991 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.427802086 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.427937984 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.427954912 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.428790092 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.428853035 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.429297924 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.429313898 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.430099010 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.430561066 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.430576086 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.431195021 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.431200981 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.438106060 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.438462019 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.438478947 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.438723087 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.439080954 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.439093113 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.439503908 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.439567089 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.440222979 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.440237045 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.520237923 CEST	443	49744	23.1.237.91	192.168.2.5
Oct 11, 2024 16:09:09.520467043 CEST	49744	443	192.168.2.5	23.1.237.91
Oct 11, 2024 16:09:09.547192097 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.547276020 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.547353029 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.548374891 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.548504114 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.548568964 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.548569918 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.548635960 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.548712015 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.548723936 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.548779964 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.548780918 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.548810005 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.548906088 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.548964977 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.585933924 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.585935116 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.586014986 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.586050034 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.587428093 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.587454081 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.587492943 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.587502956 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.588715076 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.588715076 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.588732958 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.588752985 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.590033054 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.590106010 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.592937946 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.592955112 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.609338045 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.609401941 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.609469891 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.613734007 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.613781929 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.613837004 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.615562916 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.615571976 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.615632057 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.615787029 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.615818024 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.615928888 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.615947008 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.617835045 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.617857933 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.617922068 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.620022058 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.620073080 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.620088100 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.620115042 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.620181084 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.620562077 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.620599985 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.621418953 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:09.621443033 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:09.666486979 CEST	49726	443	192.168.2.5	52.149.20.212
Oct 11, 2024 16:09:09.666553020 CEST	443	49726	52.149.20.212	192.168.2.5
Oct 11, 2024 16:09:09.920998096 CEST	49744	443	192.168.2.5	23.1.237.91
Oct 11, 2024 16:09:09.921078920 CEST	443	49744	23.1.237.91	192.168.2.5
Oct 11, 2024 16:09:09.921570063 CEST	443	49744	23.1.237.91	192.168.2.5
Oct 11, 2024 16:09:09.923217058 CEST	49744	443	192.168.2.5	23.1.237.91
Oct 11, 2024 16:09:09.923593998 CEST	49744	443	192.168.2.5	23.1.237.91
Oct 11, 2024 16:09:09.923635006 CEST	443	49744	23.1.237.91	192.168.2.5
Oct 11, 2024 16:09:09.923712015 CEST	49744	443	192.168.2.5	23.1.237.91
Oct 11, 2024 16:09:09.923724890 CEST	443	49744	23.1.237.91	192.168.2.5
Oct 11, 2024 16:09:10.193305969 CEST	443	49744	23.1.237.91	192.168.2.5
Oct 11, 2024 16:09:10.193484068 CEST	49744	443	192.168.2.5	23.1.237.91
Oct 11, 2024 16:09:10.194314003 CEST	443	49744	23.1.237.91	192.168.2.5
Oct 11, 2024 16:09:10.194360971 CEST	443	49744	23.1.237.91	192.168.2.5
Oct 11, 2024 16:09:10.194367886 CEST	49744	443	192.168.2.5	23.1.237.91
Oct 11, 2024 16:09:10.194413900 CEST	49744	443	192.168.2.5	23.1.237.91
Oct 11, 2024 16:09:10.263700008 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.264161110 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.264183044 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.265054941 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.265372992 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.265386105 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.265657902 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.265669107 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.265763044 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.265772104 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.281085968 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.281090021 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.281445026 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.281470060 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.281657934 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.281744003 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.281971931 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.281977892 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.282104969 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.282120943 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.307152987 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.307524920 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.307544947 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.307954073 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.307960033 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.362144947 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.362301111 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.362509966 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.362867117 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.362903118 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.362929106 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.362942934 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.369914055 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.369985104 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.370157003 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.370446920 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.370480061 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.372925043 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.372987032 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.373042107 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.373441935 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.373454094 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.373481035 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.373492002 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.378725052 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.378817081 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.379045963 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.379494905 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.379532099 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.384994030 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.385144949 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.385212898 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.385345936 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.385363102 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.385375023 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.385380983 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.385487080 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.385540009 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.385597944 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.385802984 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.385802984 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.385828972 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.385853052 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.390891075 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.390975952 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.391072035 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.391196012 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.391232967 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.392061949 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.392093897 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.392163992 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.394105911 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.394119978 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.423304081 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.423366070 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.423540115 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.423840046 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.423846960 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.423882008 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.423887968 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.427805901 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.427823067 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:10.427956104 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.428133011 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:10.428141117 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.031702042 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.032516956 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.032526970 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.035681963 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.035686016 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.044367075 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.044760942 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.044811010 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.045321941 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.045335054 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.047420025 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.047718048 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.047765970 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.048142910 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.048156977 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.081449986 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.081916094 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.081940889 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.082607031 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.082619905 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.125017881 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.125539064 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.125556946 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.126151085 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.126156092 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.131555080 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.131620884 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.131742001 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.132229090 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.132247925 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.132258892 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.132265091 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.136169910 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.136226892 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.136312008 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.136455059 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.136483908 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.148793936 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.148863077 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.148958921 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.149010897 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.149010897 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.149046898 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.149069071 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.152585983 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.152614117 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.152677059 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.153049946 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.153078079 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.153479099 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.153553963 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.153640985 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.153922081 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.153948069 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.153959990 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.153965950 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.157799959 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.157823086 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.158528090 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.158711910 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.158723116 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.237474918 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.237643957 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.237790108 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.239593029 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.239615917 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.242875099 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.242902994 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.242995977 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.243233919 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.243246078 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.250201941 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.250267029 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.250351906 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.250503063 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.250511885 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.250569105 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.250574112 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.252788067 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.252834082 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.253077030 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.253288984 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.253317118 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.800852060 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.801503897 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.801523924 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.801948071 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.801960945 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.854347944 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.854801893 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.854823112 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.855261087 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.855268002 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.901397943 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.901557922 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.901628017 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.901721001 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.901721001 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.901757002 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.901778936 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.904297113 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.904386997 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.904473066 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.904582024 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.904603004 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.957962990 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.958127022 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.958204985 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.959639072 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.960433006 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.960433006 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.960453033 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.960464001 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.962142944 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.962225914 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.962547064 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.962562084 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.964236975 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.964287996 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:11.964365959 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.964499950 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:11.964520931 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.064102888 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.064172029 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.064239025 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.064315081 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.064351082 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.064378977 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.064393997 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.066421986 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.066519022 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.066626072 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.066838026 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.066875935 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.561594963 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.605444908 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.609644890 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.609658003 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.610078096 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.610084057 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.616822004 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.620923996 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.620950937 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.624768019 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.624774933 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.707560062 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.707736969 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.707801104 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.707927942 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.707962990 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.708005905 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.708014011 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.710956097 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.710982084 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.711126089 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.711489916 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.711585999 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.724442959 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.724620104 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.724679947 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.724807024 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.724824905 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.724831104 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.724837065 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.727313042 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.727345943 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.727457047 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.727581024 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.727595091 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.741810083 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.742357016 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.742374897 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.742794037 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.742798090 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.849272013 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.849342108 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.849395037 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.849529982 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.849546909 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.849558115 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.849565029 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.852503061 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.852547884 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:12.852612972 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.852833986 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:12.852849007 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.382812023 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.383259058 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.383281946 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.383701086 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.383713961 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.390630960 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.390964031 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.391011000 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.391367912 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.391375065 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.484385014 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.484532118 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.484601021 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.484668970 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.484668970 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.484703064 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.484725952 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.486766100 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.487169027 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.487200975 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.487303019 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.487328053 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.487561941 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.487566948 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.487598896 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.487710953 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.487725019 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.519524097 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.519670010 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.519807100 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.519834042 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.519850969 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.519860983 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.519867897 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.521677971 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.521728039 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.521800041 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.521918058 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.521941900 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.586474895 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.586576939 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.586644888 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.586663961 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.586678028 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.586688995 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.586694002 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.588566065 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.588645935 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.588756084 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.588877916 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.588912964 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.762123108 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.762773037 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.762797117 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.763210058 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.763222933 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.868896961 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.868973970 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.869031906 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.869138002 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.869164944 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.869190931 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.869204998 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.871761084 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.871788025 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.871853113 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.871989965 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.872009039 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.900630951 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.900953054 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.900979996 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:13.901324987 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:13.901331902 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.004659891 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.004815102 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.004872084 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.008142948 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.008166075 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.008181095 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.008188009 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.010818005 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.010859966 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.010987997 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.011141062 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.011156082 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.142832994 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.143203974 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.143230915 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.143599987 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.143604040 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.241194963 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.241256952 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.241305113 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.241400957 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.241415024 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.241425037 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.241429090 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.243573904 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.243649960 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.243727922 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.243875027 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.243904114 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.262660980 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.262965918 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.262999058 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.263309956 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.263315916 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.282783031 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.283097029 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.283118010 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.283507109 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.283518076 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.363972902 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.364043951 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.364093065 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.364222050 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.364236116 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.364250898 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.364257097 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.366976976 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.367031097 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.367109060 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.367259979 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.367278099 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.383690119 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.383824110 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.383888006 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.383933067 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.383933067 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.383981943 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.384010077 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.386137009 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.386178970 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.386240005 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.386390924 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.386406898 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.597533941 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.598037004 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.598057985 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.598506927 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.598512888 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.660675049 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.662306070 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.662306070 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.662336111 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.662343025 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.697593927 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.697679043 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.697887897 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.697887897 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.698101044 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.698122978 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.700567007 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.700606108 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.700843096 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.700843096 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.700879097 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.764635086 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.764786005 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.764923096 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.764923096 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.765073061 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.765085936 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.766803980 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.766880035 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.767024994 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.767090082 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.767105103 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.885207891 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.886032104 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.886032104 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:14.886109114 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:14.886159897 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.048815966 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.048903942 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.049109936 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.049109936 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.049181938 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.049216032 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.051693916 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.051724911 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.051948071 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.051948071 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.051983118 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.166117907 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.166984081 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.166984081 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.167017937 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.167038918 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.176836014 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.177501917 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.177501917 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.177526951 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.177544117 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.269370079 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.269458055 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.269663095 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.269663095 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.270539999 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.270558119 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.272270918 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.272375107 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.272535086 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.272612095 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.272630930 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.281826973 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.281980038 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.282062054 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.282062054 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.282708883 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.282720089 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.283806086 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.283834934 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.284013987 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.284013987 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.284069061 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.291946888 CEST	443	49716	142.250.186.68	192.168.2.5
Oct 11, 2024 16:09:15.292092085 CEST	443	49716	142.250.186.68	192.168.2.5
Oct 11, 2024 16:09:15.292184114 CEST	49716	443	192.168.2.5	142.250.186.68
Oct 11, 2024 16:09:15.481842041 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.482665062 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.482665062 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.482682943 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.482698917 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.532829046 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.533283949 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.533346891 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.533714056 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.533729076 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.590749979 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.590799093 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.591018915 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.591018915 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.591325998 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.591337919 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.593652010 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.593686104 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.593843937 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.593962908 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.593977928 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.650460005 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.650609016 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.652492046 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.652492046 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.652544975 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.652566910 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.654249907 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.654280901 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.654397011 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.654527903 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.654541016 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.724733114 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.726589918 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.726610899 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.727319956 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.727327108 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.827713013 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.827773094 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.827924013 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.827967882 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.827967882 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.827986956 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.828000069 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.830169916 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.830240011 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.830352068 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.830529928 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.830560923 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.917537928 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.917887926 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.917949915 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.918298960 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.918313026 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.931164026 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.931476116 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.931510925 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:15.931835890 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:15.931847095 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.017546892 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.017617941 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.017692089 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.017775059 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.017776012 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.017821074 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.017849922 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.019762039 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.019819975 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.019891977 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.020015955 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.020037889 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.030427933 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.030572891 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.030766010 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.030802965 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.030802965 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.030817032 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.030836105 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.032635927 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.032665014 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.032720089 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.032831907 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.032845020 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.272186995 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.272619963 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.272643089 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.273055077 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.273063898 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.376456022 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.376791954 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.376802921 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.377285004 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.377290010 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.383909941 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.383961916 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.384102106 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.384139061 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.384155035 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.384166002 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.384174109 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.386336088 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.386352062 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.386507034 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.386636972 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.386651993 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.472553968 CEST	49716	443	192.168.2.5	142.250.186.68
Oct 11, 2024 16:09:16.472628117 CEST	443	49716	142.250.186.68	192.168.2.5
Oct 11, 2024 16:09:16.479968071 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.480040073 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.480185986 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.480185986 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.480206966 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.480221987 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.482345104 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.482405901 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.482588053 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.482744932 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.482775927 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.518112898 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.518452883 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.518491983 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.518871069 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.518898964 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.619349003 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.619539022 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.619606018 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.619676113 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.619677067 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.619714022 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.619741917 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.621787071 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.621835947 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.621916056 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.622026920 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.622037888 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.705472946 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.706351995 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.706412077 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.706984997 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.706998110 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.708484888 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.708878040 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.708889008 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.709162951 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.709167957 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.806353092 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.806407928 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.806472063 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.806642056 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.806675911 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.806701899 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.806716919 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.808031082 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.808188915 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.808347940 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.808408022 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.808430910 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.808439016 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.808444977 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.809120893 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.809155941 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.809245110 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.809366941 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.809380054 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.810276985 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.810365915 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:16.810455084 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.810580969 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:16.810620070 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.053277016 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.053782940 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.053802013 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.054459095 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.054465055 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.126307011 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.126801968 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.126830101 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.127212048 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.127217054 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.158225060 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.158279896 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.158343077 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.158462048 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.158483982 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.158493996 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.158499002 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.161689997 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.161715031 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.162610054 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.162883043 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.162894011 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.225097895 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.225254059 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.225317955 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.225380898 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.225403070 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.225416899 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.225423098 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.227220058 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.227240086 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.227305889 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.227494955 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.227503061 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.306361914 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.306735992 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.306756973 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.307137966 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.307142973 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.427108049 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.427249908 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.427318096 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.427409887 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.427409887 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.427421093 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.427428007 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.430247068 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.430299997 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.430419922 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.430605888 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.430629015 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.464457989 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.464941025 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.464982986 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.465358019 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.465363979 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.526993990 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.527403116 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.527445078 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.527822971 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.527832031 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.563890934 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.563940048 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.563990116 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.564208984 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.564229965 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.564243078 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.564249992 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.566791058 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.566836119 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.566904068 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.567056894 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.567065001 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.653441906 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.653511047 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.653589010 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.653637886 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.653672934 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.653701067 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.653716087 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.655850887 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.655919075 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.656044960 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.656174898 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.656188965 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.803283930 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.803724051 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.803739071 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.804153919 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.804158926 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.883322001 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.883721113 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.883733034 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.884121895 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.884125948 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.903033972 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.903100014 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.903224945 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.903251886 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.903268099 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.903275967 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.903280973 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.905679941 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.905740023 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:17.905810118 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.905904055 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:17.905919075 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.014575958 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.014740944 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.014797926 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.014816046 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.014828920 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.014839888 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.014844894 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.016716957 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.016756058 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.016841888 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.016973019 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.016984940 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.070023060 CEST	443	49713	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:18.070101023 CEST	443	49713	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:18.070152044 CEST	49713	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:18.146162033 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.146604061 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.146641016 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.147021055 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.147033930 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.214190006 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.214621067 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.214687109 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.214867115 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.214881897 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.250483990 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.250638962 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.250721931 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.250767946 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.250767946 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.250804901 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.250830889 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.253273010 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.253297091 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.253408909 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.253565073 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.253588915 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.314647913 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.314702034 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.314809084 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.315140009 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.315140009 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.315184116 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.315211058 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.317086935 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.317099094 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.317200899 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.317334890 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.317348003 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.338131905 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.338489056 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.338500023 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.338830948 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.338836908 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.434813976 CEST	49713	443	192.168.2.5	209.177.165.18
Oct 11, 2024 16:09:18.434833050 CEST	443	49713	209.177.165.18	192.168.2.5
Oct 11, 2024 16:09:18.442225933 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.442370892 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.442431927 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.448460102 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.448470116 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.451576948 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.451585054 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.451653957 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.451782942 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.451802015 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.561125040 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.561548948 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.561563969 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.561961889 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.561966896 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.660850048 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.660929918 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.660985947 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.661113977 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.661128998 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.661143064 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.661149979 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.663949013 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.663983107 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.664177895 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.664179087 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.664225101 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.697331905 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.697680950 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.697721004 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.698091030 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.698103905 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.799133062 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.799206972 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.799432993 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.799432993 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.799432993 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.802270889 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.802375078 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.802462101 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.802603006 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.802625895 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.940207005 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.940655947 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.940690041 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:18.941097021 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:18.941107988 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.014415979 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.014748096 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.014755011 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.015083075 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.015088081 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.021332026 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.021401882 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.044457912 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.044537067 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.044666052 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.044723988 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.044723988 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.044755936 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.044779062 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.046999931 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.047045946 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.047147036 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.047302008 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.047310114 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.120743990 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.120821953 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.120874882 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.120934963 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.120945930 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.120953083 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.120958090 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.123155117 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.123246908 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.123320103 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.123420000 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.123440981 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.136534929 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.137018919 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.137029886 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.137185097 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.137191057 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.238954067 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.239120007 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.239248037 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.239248037 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.239283085 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.239305019 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.241749048 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.241843939 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.241924047 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.242063046 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.242086887 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.302020073 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.302400112 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.302417040 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.302829981 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.302835941 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.402555943 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.402611971 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.402688026 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.402848005 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.402848005 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.402865887 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.402877092 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.405040026 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.405085087 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.405153990 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.405293941 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.405301094 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.703193903 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.709424019 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.709470034 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.715537071 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.715553045 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.765038967 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.820374012 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.869673014 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.869734049 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:19.871445894 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:19.871460915 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:20.145190954 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:20.145296097 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:20.145426989 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:20.145538092 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:20.145558119 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:20.145572901 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:20.145581961 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:20.147952080 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:20.147986889 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:20.148147106 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:20.148291111 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:20.148297071 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:20.152570963 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:20.152966022 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:20.153000116 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:20.153338909 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:20.153345108 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:20.237965107 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:20.238364935 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:20.238430977 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:20.238514900 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:20.238514900 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:20.238560915 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:20.238589048 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:20.240961075 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:20.240992069 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:20.241094112 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:20.241281986 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:20.241297960 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:20.258449078 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:20.258517027 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:20.258694887 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:20.258694887 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:20.258694887 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:20.261056900 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:20.261090994 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:20.261265039 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:20.261440992 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:20.261460066 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:20.336375952 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:20.336761951 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:20.336793900 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:20.337146997 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:20.337153912 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:20.435134888 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:20.435224056 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:20.435281038 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:20.435534000 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:20.435547113 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:20.435559988 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:20.435565948 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:20.439008951 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:20.439042091 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:20.439241886 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:20.439769030 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:20.439784050 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:20.564910889 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:20.564985037 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:21.896644115 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:21.896650076 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:21.907514095 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:21.909219027 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:21.911170959 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:21.911194086 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:21.911645889 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:21.911652088 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:21.912259102 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:21.912291050 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:21.913913965 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:21.913919926 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:21.914268017 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:21.914285898 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:21.914825916 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:21.914832115 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:21.915307999 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:21.915328979 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:21.916356087 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:21.916362047 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:22.021122932 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:22.021290064 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:22.021357059 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:22.027343988 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:22.027430058 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:22.027475119 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:22.027543068 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:22.027645111 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:22.027856112 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:22.029242039 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:22.029333115 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:22.029386997 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:22.303381920 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:22.303381920 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:22.303406954 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:22.303416014 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:22.307442904 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:22.307442904 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:22.307466030 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:22.307476997 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:22.308095932 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:22.308103085 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:22.346276045 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:22.346296072 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:22.346306086 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:22.346311092 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:22.396491051 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:22.396519899 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:22.396655083 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:22.398495913 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:22.398530006 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:22.398617029 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:22.398902893 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:22.398917913 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:22.399952888 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:22.399967909 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:22.404078007 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:22.404122114 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:22.404186964 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:22.404423952 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:22.404452085 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:22.405842066 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:22.405850887 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:22.405913115 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:22.406260967 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:22.406274080 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:23.983006001 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:23.983031988 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:23.984038115 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:23.984070063 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:23.984834909 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:23.984841108 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:23.985239029 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:23.985280037 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:23.986175060 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:23.986185074 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:23.991930962 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:23.992532015 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:23.992553949 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:23.993299007 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:23.993310928 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:23.998394966 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:23.998838902 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:23.998857975 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:23.999561071 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:23.999567032 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.082870007 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.082895041 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.082953930 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.082973957 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.083214045 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.083230972 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.083241940 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.083415031 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.083472013 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.083520889 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.084470034 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.085371971 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.085443974 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.086299896 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.086299896 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.086332083 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.086354971 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.088727951 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.088771105 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.088929892 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.090985060 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.091003895 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.091231108 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.091444969 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.091473103 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.091556072 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.091578960 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.094552040 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.094713926 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.094772100 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.094996929 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.094996929 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.095014095 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.095024109 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.097691059 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.097740889 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.097804070 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.097985983 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.098002911 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.103585958 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.103741884 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.104074001 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.104218006 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.104218006 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.104232073 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.104242086 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.107270002 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.107296944 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.107402086 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.107775927 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.107789993 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.757273912 CEST	56334	53	192.168.2.5	162.159.36.2
Oct 11, 2024 16:09:24.762675047 CEST	53	56334	162.159.36.2	192.168.2.5
Oct 11, 2024 16:09:24.762756109 CEST	56334	53	192.168.2.5	162.159.36.2
Oct 11, 2024 16:09:24.769222975 CEST	53	56334	162.159.36.2	192.168.2.5
Oct 11, 2024 16:09:24.941607952 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.942626953 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.943403959 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.943418980 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.944446087 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.944474936 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.945429087 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.945445061 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.945871115 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.946345091 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.946352959 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.946465969 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.946860075 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.946877003 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.947726965 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.947734118 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.947890043 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.947915077 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:24.948375940 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:24.948383093 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.040703058 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.040725946 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.040879965 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.040910959 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.040931940 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.040982008 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.041057110 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.041057110 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.041089058 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.041111946 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.041413069 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.041444063 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.041501045 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.041516066 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.041569948 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.041769981 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.041785002 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.041802883 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.041809082 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.041867018 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.044024944 CEST	56336	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.044042110 CEST	56335	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.044083118 CEST	443	56335	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.044116974 CEST	443	56336	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.044166088 CEST	56335	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.044174910 CEST	56336	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.044297934 CEST	56335	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.044297934 CEST	56336	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.044307947 CEST	443	56335	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.044322014 CEST	443	56336	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.050539017 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.050601006 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.050649881 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.050664902 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.050734043 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.050736904 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.050741911 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.050784111 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.050785065 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.050798893 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.051853895 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.052009106 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.052062035 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.052180052 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.052198887 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.052316904 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.052323103 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.052951097 CEST	56337	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.052989960 CEST	443	56337	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.053044081 CEST	56337	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.053200960 CEST	56337	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.053220034 CEST	443	56337	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.054044008 CEST	56338	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.054054976 CEST	443	56338	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.054112911 CEST	56338	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.054233074 CEST	56338	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.054245949 CEST	443	56338	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.257114887 CEST	56334	53	192.168.2.5	162.159.36.2
Oct 11, 2024 16:09:25.262809038 CEST	53	56334	162.159.36.2	192.168.2.5
Oct 11, 2024 16:09:25.262856007 CEST	56334	53	192.168.2.5	162.159.36.2
Oct 11, 2024 16:09:25.288302898 CEST	56339	443	192.168.2.5	20.242.39.171
Oct 11, 2024 16:09:25.288326979 CEST	443	56339	20.242.39.171	192.168.2.5
Oct 11, 2024 16:09:25.288391113 CEST	56339	443	192.168.2.5	20.242.39.171
Oct 11, 2024 16:09:25.288875103 CEST	56339	443	192.168.2.5	20.242.39.171
Oct 11, 2024 16:09:25.288887978 CEST	443	56339	20.242.39.171	192.168.2.5
Oct 11, 2024 16:09:25.717638016 CEST	443	56336	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.718132973 CEST	56336	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.718216896 CEST	443	56336	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.718568087 CEST	56336	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.718583107 CEST	443	56336	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.718727112 CEST	443	56335	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.719008923 CEST	56335	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.719033957 CEST	443	56335	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.719336987 CEST	56335	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.719342947 CEST	443	56335	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.722359896 CEST	443	56337	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.722664118 CEST	56337	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.722676992 CEST	443	56337	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.722997904 CEST	56337	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.723001957 CEST	443	56337	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.754072905 CEST	443	56338	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.754390955 CEST	56338	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.754410982 CEST	443	56338	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.754779100 CEST	56338	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.754785061 CEST	443	56338	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.818480015 CEST	443	56336	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.818557024 CEST	443	56336	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.818772078 CEST	56336	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.818772078 CEST	56336	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.818772078 CEST	56336	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.819298983 CEST	443	56335	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.819454908 CEST	443	56335	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.819619894 CEST	56335	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.819916010 CEST	56335	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.819916010 CEST	56335	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.819943905 CEST	443	56335	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.819967985 CEST	443	56335	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.822477102 CEST	443	56337	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.822480917 CEST	56340	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.822510958 CEST	443	56340	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.822539091 CEST	443	56337	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.822554111 CEST	56341	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.822582006 CEST	443	56341	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.822585106 CEST	56340	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.822616100 CEST	56337	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.822637081 CEST	56341	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.822815895 CEST	56337	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.822833061 CEST	443	56337	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.822845936 CEST	56337	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.822851896 CEST	443	56337	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.823280096 CEST	56340	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.823297024 CEST	443	56340	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.823434114 CEST	56341	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.823446989 CEST	443	56341	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.824845076 CEST	56342	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.824865103 CEST	443	56342	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.825016022 CEST	56342	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.825134039 CEST	56342	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.825149059 CEST	443	56342	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.857713938 CEST	443	56338	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.857908964 CEST	443	56338	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.857969999 CEST	56338	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.858020067 CEST	56338	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.858036041 CEST	443	56338	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.858048916 CEST	56338	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.858056068 CEST	443	56338	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.859981060 CEST	56343	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.860003948 CEST	443	56343	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.860167980 CEST	56343	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.860310078 CEST	56343	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:25.860325098 CEST	443	56343	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:25.884258032 CEST	443	56339	20.242.39.171	192.168.2.5
Oct 11, 2024 16:09:25.884330988 CEST	56339	443	192.168.2.5	20.242.39.171
Oct 11, 2024 16:09:25.887928009 CEST	56339	443	192.168.2.5	20.242.39.171
Oct 11, 2024 16:09:25.887943983 CEST	443	56339	20.242.39.171	192.168.2.5
Oct 11, 2024 16:09:25.888423920 CEST	443	56339	20.242.39.171	192.168.2.5
Oct 11, 2024 16:09:25.896574974 CEST	56339	443	192.168.2.5	20.242.39.171
Oct 11, 2024 16:09:25.939441919 CEST	443	56339	20.242.39.171	192.168.2.5
Oct 11, 2024 16:09:26.001518965 CEST	443	56339	20.242.39.171	192.168.2.5
Oct 11, 2024 16:09:26.001765013 CEST	443	56339	20.242.39.171	192.168.2.5
Oct 11, 2024 16:09:26.001842976 CEST	56339	443	192.168.2.5	20.242.39.171
Oct 11, 2024 16:09:26.002003908 CEST	56339	443	192.168.2.5	20.242.39.171
Oct 11, 2024 16:09:26.002019882 CEST	443	56339	20.242.39.171	192.168.2.5
Oct 11, 2024 16:09:26.041014910 CEST	56344	443	192.168.2.5	52.149.20.212
Oct 11, 2024 16:09:26.041045904 CEST	443	56344	52.149.20.212	192.168.2.5
Oct 11, 2024 16:09:26.041112900 CEST	56344	443	192.168.2.5	52.149.20.212
Oct 11, 2024 16:09:26.041461945 CEST	56344	443	192.168.2.5	52.149.20.212
Oct 11, 2024 16:09:26.041476965 CEST	443	56344	52.149.20.212	192.168.2.5
Oct 11, 2024 16:09:26.127198935 CEST	56336	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.127264023 CEST	443	56336	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.465143919 CEST	443	56342	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.465606928 CEST	56342	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.465624094 CEST	443	56342	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.466124058 CEST	56342	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.466130018 CEST	443	56342	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.477730989 CEST	443	56341	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.478225946 CEST	56341	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.478238106 CEST	443	56341	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.478595018 CEST	56341	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.478600979 CEST	443	56341	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.504066944 CEST	443	56340	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.504390001 CEST	56340	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.504407883 CEST	443	56340	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.504779100 CEST	56340	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.504784107 CEST	443	56340	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.533041954 CEST	443	56343	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.533333063 CEST	56343	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.533348083 CEST	443	56343	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.533668041 CEST	56343	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.533673048 CEST	443	56343	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.566322088 CEST	443	56342	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.566371918 CEST	443	56342	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.566502094 CEST	56342	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.566540003 CEST	56342	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.566540003 CEST	56342	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.566559076 CEST	443	56342	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.566569090 CEST	443	56342	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.568919897 CEST	56345	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.568941116 CEST	443	56345	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.569325924 CEST	56345	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.569325924 CEST	56345	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.569351912 CEST	443	56345	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.578867912 CEST	443	56341	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.578939915 CEST	443	56341	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.579030991 CEST	56341	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.579058886 CEST	56341	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.579071045 CEST	443	56341	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.579082966 CEST	56341	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.579088926 CEST	443	56341	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.580945969 CEST	56346	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.580952883 CEST	443	56346	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.581017017 CEST	56346	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.581144094 CEST	56346	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.581155062 CEST	443	56346	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.611130953 CEST	443	56340	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.611210108 CEST	443	56340	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.611299992 CEST	56340	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.611336946 CEST	56340	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.611350060 CEST	443	56340	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.611358881 CEST	56340	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.611362934 CEST	443	56340	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.613079071 CEST	56347	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.613118887 CEST	443	56347	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.613255024 CEST	56347	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.613387108 CEST	56347	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.613399029 CEST	443	56347	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.650741100 CEST	443	56343	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.650973082 CEST	443	56343	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.651031017 CEST	56343	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.651072025 CEST	56343	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.651084900 CEST	443	56343	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.651096106 CEST	56343	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.651099920 CEST	443	56343	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.652708054 CEST	56348	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.652798891 CEST	443	56348	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.652947903 CEST	56348	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.653048992 CEST	56348	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.653086901 CEST	443	56348	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.751622915 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.752023935 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.752043009 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.752537012 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.752542019 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.812486887 CEST	443	56344	52.149.20.212	192.168.2.5
Oct 11, 2024 16:09:26.812558889 CEST	56344	443	192.168.2.5	52.149.20.212
Oct 11, 2024 16:09:26.813648939 CEST	56344	443	192.168.2.5	52.149.20.212
Oct 11, 2024 16:09:26.813656092 CEST	443	56344	52.149.20.212	192.168.2.5
Oct 11, 2024 16:09:26.814152002 CEST	443	56344	52.149.20.212	192.168.2.5
Oct 11, 2024 16:09:26.815001965 CEST	56344	443	192.168.2.5	52.149.20.212
Oct 11, 2024 16:09:26.855400085 CEST	443	56344	52.149.20.212	192.168.2.5
Oct 11, 2024 16:09:26.872395039 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.872467995 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.872524023 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.872659922 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.872675896 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.872685909 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.872692108 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.875258923 CEST	56349	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.875296116 CEST	443	56349	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:26.875355005 CEST	56349	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.875530958 CEST	56349	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:26.875546932 CEST	443	56349	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.048360109 CEST	443	56344	52.149.20.212	192.168.2.5
Oct 11, 2024 16:09:27.048532009 CEST	56344	443	192.168.2.5	52.149.20.212
Oct 11, 2024 16:09:27.048542023 CEST	443	56344	52.149.20.212	192.168.2.5
Oct 11, 2024 16:09:27.048567057 CEST	56344	443	192.168.2.5	52.149.20.212
Oct 11, 2024 16:09:27.048573017 CEST	443	56344	52.149.20.212	192.168.2.5
Oct 11, 2024 16:09:27.048584938 CEST	443	56344	52.149.20.212	192.168.2.5
Oct 11, 2024 16:09:27.250086069 CEST	443	56345	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.250576973 CEST	56345	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.250583887 CEST	443	56345	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.251024008 CEST	56345	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.251034975 CEST	443	56345	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.251149893 CEST	443	56346	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.251585960 CEST	56346	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.251600981 CEST	443	56346	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.251979113 CEST	56346	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.251983881 CEST	443	56346	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.258590937 CEST	443	56347	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.258857012 CEST	56347	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.258876085 CEST	443	56347	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.259285927 CEST	56347	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.259289980 CEST	443	56347	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.326287031 CEST	443	56348	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.326661110 CEST	56348	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.326678038 CEST	443	56348	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.326999903 CEST	56348	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.327003956 CEST	443	56348	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.354543924 CEST	443	56346	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.354573011 CEST	443	56346	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.354655981 CEST	443	56346	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.354681015 CEST	56346	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.354701042 CEST	56346	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.354854107 CEST	56346	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.354854107 CEST	56346	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.354867935 CEST	443	56346	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.354875088 CEST	443	56346	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.355735064 CEST	443	56345	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.355794907 CEST	443	56345	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.355856895 CEST	56345	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.356205940 CEST	56345	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.356205940 CEST	56345	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.356211901 CEST	443	56345	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.356218100 CEST	443	56345	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.359056950 CEST	443	56347	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.359200954 CEST	443	56347	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.359247923 CEST	56347	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.359596968 CEST	56350	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.359626055 CEST	443	56350	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.359764099 CEST	56350	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.359870911 CEST	56347	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.359884977 CEST	443	56347	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.359894991 CEST	56347	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.359899998 CEST	443	56347	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.361409903 CEST	56351	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.361470938 CEST	443	56351	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.361659050 CEST	56351	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.361763000 CEST	56350	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.361778975 CEST	443	56350	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.362806082 CEST	56352	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.362826109 CEST	443	56352	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.362921000 CEST	56351	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.362952948 CEST	443	56351	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.362977028 CEST	56352	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.363111019 CEST	56352	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.363132954 CEST	443	56352	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.427959919 CEST	443	56348	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.430694103 CEST	443	56348	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.430737019 CEST	443	56348	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.430742025 CEST	56348	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.430799007 CEST	56348	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.430875063 CEST	56348	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.430875063 CEST	56348	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.430902004 CEST	443	56348	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.430924892 CEST	443	56348	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.433254004 CEST	56353	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.433296919 CEST	443	56353	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.433370113 CEST	56353	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.433542013 CEST	56353	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.433561087 CEST	443	56353	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.562979937 CEST	443	56349	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.563317060 CEST	56349	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.563339949 CEST	443	56349	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.563709974 CEST	56349	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.563715935 CEST	443	56349	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.668704033 CEST	443	56349	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.668782949 CEST	443	56349	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.668839931 CEST	56349	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.668956041 CEST	56349	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.668970108 CEST	443	56349	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.668982983 CEST	56349	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.668989897 CEST	443	56349	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.670975924 CEST	56354	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.670990944 CEST	443	56354	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:27.671061993 CEST	56354	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.671181917 CEST	56354	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:27.671196938 CEST	443	56354	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.014978886 CEST	443	56351	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.015450954 CEST	56351	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.015485048 CEST	443	56351	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.015897989 CEST	56351	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.015911102 CEST	443	56351	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.016705036 CEST	443	56352	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.017009974 CEST	56352	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.017040968 CEST	443	56352	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.017381907 CEST	56352	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.017393112 CEST	443	56352	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.034352064 CEST	443	56350	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.035032034 CEST	56350	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.035049915 CEST	443	56350	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.035893917 CEST	56350	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.035898924 CEST	443	56350	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.105915070 CEST	443	56353	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.106364965 CEST	56353	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.106395006 CEST	443	56353	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.106803894 CEST	56353	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.106808901 CEST	443	56353	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.116902113 CEST	443	56351	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.116961002 CEST	443	56351	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.117039919 CEST	56351	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.117259026 CEST	56351	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.117297888 CEST	443	56351	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.117326021 CEST	56351	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.117345095 CEST	443	56351	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.120022058 CEST	56355	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.120047092 CEST	443	56355	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.120126009 CEST	443	56352	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.120137930 CEST	56355	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.120425940 CEST	443	56352	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.120452881 CEST	56355	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.120465040 CEST	443	56355	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.120477915 CEST	56352	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.120486021 CEST	443	56352	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.120501041 CEST	443	56352	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.120592117 CEST	56352	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.120642900 CEST	56352	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.120647907 CEST	443	56352	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.120660067 CEST	56352	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.120663881 CEST	443	56352	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.122879028 CEST	56356	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.122909069 CEST	443	56356	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.122967958 CEST	56356	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.123086929 CEST	56356	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.123097897 CEST	443	56356	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.141289949 CEST	443	56350	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.141438961 CEST	443	56350	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.141490936 CEST	56350	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.141513109 CEST	56350	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.141527891 CEST	443	56350	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.141537905 CEST	56350	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.141542912 CEST	443	56350	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.144700050 CEST	56357	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.144732952 CEST	443	56357	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.144792080 CEST	56357	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.145046949 CEST	56357	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.145065069 CEST	443	56357	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.147789001 CEST	56358	443	192.168.2.5	4.175.87.197
Oct 11, 2024 16:09:28.147819996 CEST	443	56358	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:28.147886992 CEST	56358	443	192.168.2.5	4.175.87.197
Oct 11, 2024 16:09:28.148302078 CEST	56358	443	192.168.2.5	4.175.87.197
Oct 11, 2024 16:09:28.148318052 CEST	443	56358	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:28.211225033 CEST	443	56353	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.211692095 CEST	443	56353	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.211752892 CEST	56353	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.211807966 CEST	56353	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.211813927 CEST	443	56353	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.211822987 CEST	56353	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.211827040 CEST	443	56353	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.213757992 CEST	56359	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.213783026 CEST	443	56359	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.213862896 CEST	56359	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.214023113 CEST	56359	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.214034081 CEST	443	56359	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.350117922 CEST	443	56354	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.350496054 CEST	56354	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.350505114 CEST	443	56354	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.350976944 CEST	56354	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.350981951 CEST	443	56354	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.456439018 CEST	443	56354	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.456598043 CEST	443	56354	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.456665993 CEST	56354	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.456732988 CEST	56354	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.456748009 CEST	443	56354	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.456756115 CEST	56354	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.456760883 CEST	443	56354	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.459403992 CEST	56360	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.459439039 CEST	443	56360	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.459510088 CEST	56360	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.459640980 CEST	56360	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.459656000 CEST	443	56360	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.763887882 CEST	443	56355	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.764367104 CEST	56355	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.764409065 CEST	443	56355	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.764816046 CEST	56355	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.764842987 CEST	443	56355	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.781004906 CEST	443	56356	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.781318903 CEST	56356	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.781352043 CEST	443	56356	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.781680107 CEST	56356	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.781687021 CEST	443	56356	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.789623976 CEST	443	56357	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.789922953 CEST	56357	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.789937019 CEST	443	56357	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.790307045 CEST	56357	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.790318012 CEST	443	56357	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.848289013 CEST	443	56359	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.848623037 CEST	56359	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.848638058 CEST	443	56359	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.848969936 CEST	56359	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.848977089 CEST	443	56359	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.863262892 CEST	443	56355	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.863352060 CEST	443	56355	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.863473892 CEST	56355	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.863527060 CEST	56355	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.863527060 CEST	56355	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.863555908 CEST	443	56355	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.863579988 CEST	443	56355	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.865955114 CEST	56361	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.865988016 CEST	443	56361	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.866060019 CEST	56361	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.866194963 CEST	56361	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.866204977 CEST	443	56361	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.889568090 CEST	443	56357	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.890300035 CEST	443	56357	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.890346050 CEST	56357	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.890420914 CEST	56357	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.890441895 CEST	443	56357	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.890450001 CEST	56357	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.890455008 CEST	443	56357	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.890986919 CEST	443	56356	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.892236948 CEST	56362	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.892250061 CEST	443	56362	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.892400026 CEST	56362	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.892505884 CEST	56362	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.892518997 CEST	443	56362	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.892525911 CEST	443	56356	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.892571926 CEST	56356	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.892580032 CEST	443	56356	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.892633915 CEST	56356	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.892649889 CEST	56356	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.892664909 CEST	443	56356	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.892676115 CEST	56356	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.892680883 CEST	443	56356	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.894448996 CEST	56363	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.894483089 CEST	443	56363	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.894546986 CEST	56363	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.894632101 CEST	56363	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.894646883 CEST	443	56363	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.949156046 CEST	443	56359	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.949182034 CEST	443	56359	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.949225903 CEST	443	56359	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.949235916 CEST	56359	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.949271917 CEST	56359	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.949404001 CEST	56359	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.949409008 CEST	443	56359	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.949419022 CEST	56359	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.949421883 CEST	443	56359	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.951169968 CEST	56364	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.951261044 CEST	443	56364	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.951406002 CEST	56364	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.951514959 CEST	56364	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:28.951536894 CEST	443	56364	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:28.961318970 CEST	443	56358	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:28.961446047 CEST	56358	443	192.168.2.5	4.175.87.197
Oct 11, 2024 16:09:28.962618113 CEST	56358	443	192.168.2.5	4.175.87.197
Oct 11, 2024 16:09:28.962634087 CEST	443	56358	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:28.962975025 CEST	443	56358	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:28.963799953 CEST	56358	443	192.168.2.5	4.175.87.197
Oct 11, 2024 16:09:29.011393070 CEST	443	56358	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:29.116096020 CEST	443	56360	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.116511106 CEST	56360	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.116535902 CEST	443	56360	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.116904974 CEST	56360	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.116909981 CEST	443	56360	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.219589949 CEST	443	56360	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.219789982 CEST	443	56360	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.219851017 CEST	56360	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.219890118 CEST	56360	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.219907045 CEST	443	56360	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.219917059 CEST	56360	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.219922066 CEST	443	56360	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.223306894 CEST	56365	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.223346949 CEST	443	56365	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.223416090 CEST	56365	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.223558903 CEST	56365	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.223573923 CEST	443	56365	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.302603960 CEST	443	56358	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:29.302628994 CEST	443	56358	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:29.302644014 CEST	443	56358	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:29.302690983 CEST	56358	443	192.168.2.5	4.175.87.197
Oct 11, 2024 16:09:29.302706003 CEST	443	56358	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:29.302753925 CEST	56358	443	192.168.2.5	4.175.87.197
Oct 11, 2024 16:09:29.303663969 CEST	443	56358	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:29.303730965 CEST	56358	443	192.168.2.5	4.175.87.197
Oct 11, 2024 16:09:29.303736925 CEST	443	56358	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:29.303745985 CEST	443	56358	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:29.303798914 CEST	56358	443	192.168.2.5	4.175.87.197
Oct 11, 2024 16:09:29.305999994 CEST	56358	443	192.168.2.5	4.175.87.197
Oct 11, 2024 16:09:29.306014061 CEST	443	56358	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:29.306027889 CEST	56358	443	192.168.2.5	4.175.87.197
Oct 11, 2024 16:09:29.306035042 CEST	443	56358	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:29.442238092 CEST	56366	443	192.168.2.5	4.175.87.197
Oct 11, 2024 16:09:29.442284107 CEST	443	56366	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:29.442428112 CEST	56366	443	192.168.2.5	4.175.87.197
Oct 11, 2024 16:09:29.446604967 CEST	56366	443	192.168.2.5	4.175.87.197
Oct 11, 2024 16:09:29.446620941 CEST	443	56366	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:29.500456095 CEST	443	56361	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.500863075 CEST	56361	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.500879049 CEST	443	56361	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.501290083 CEST	56361	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.501295090 CEST	443	56361	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.564807892 CEST	443	56362	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.565274000 CEST	56362	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.565289021 CEST	443	56362	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.565753937 CEST	56362	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.565759897 CEST	443	56362	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.570205927 CEST	443	56363	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.570636988 CEST	56363	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.570667028 CEST	443	56363	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.570986032 CEST	56363	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.570991039 CEST	443	56363	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.599314928 CEST	443	56364	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.599766016 CEST	56364	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.599833012 CEST	443	56364	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.599977970 CEST	56364	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.599994898 CEST	443	56364	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.602655888 CEST	443	56361	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.602710009 CEST	443	56361	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.602765083 CEST	56361	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.602889061 CEST	56361	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.602889061 CEST	56361	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.602902889 CEST	443	56361	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.602916002 CEST	443	56361	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.605360031 CEST	56367	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.605424881 CEST	443	56367	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.605505943 CEST	56367	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.605632067 CEST	56367	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.605664015 CEST	443	56367	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.668062925 CEST	443	56362	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.668267965 CEST	443	56362	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.668365002 CEST	56362	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.668365002 CEST	56362	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.668365002 CEST	56362	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.670656919 CEST	56368	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.670677900 CEST	443	56368	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.670783043 CEST	56368	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.670902014 CEST	56368	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.670913935 CEST	443	56368	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.672333956 CEST	443	56363	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.672411919 CEST	443	56363	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.672456026 CEST	56363	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.672466040 CEST	443	56363	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.672512054 CEST	443	56363	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.672564983 CEST	56363	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.672585964 CEST	443	56363	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.672595978 CEST	56363	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.672595978 CEST	56363	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.672601938 CEST	443	56363	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.672607899 CEST	443	56363	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.674340963 CEST	56369	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.674386024 CEST	443	56369	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.674449921 CEST	56369	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.674581051 CEST	56369	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.674597979 CEST	443	56369	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.701262951 CEST	443	56364	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.702836990 CEST	443	56364	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.703047037 CEST	56364	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.703047037 CEST	56364	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.703315973 CEST	56364	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.703357935 CEST	443	56364	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.704919100 CEST	56370	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.704931974 CEST	443	56370	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.704992056 CEST	56370	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.705080032 CEST	56370	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.705092907 CEST	443	56370	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.878267050 CEST	443	56365	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.878772020 CEST	56365	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.878798008 CEST	443	56365	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.879163027 CEST	56365	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.879168987 CEST	443	56365	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.893476963 CEST	56362	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.893493891 CEST	443	56362	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.978979111 CEST	443	56365	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.979047060 CEST	443	56365	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.979202032 CEST	56365	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.979290962 CEST	56365	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.979310989 CEST	443	56365	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.979322910 CEST	56365	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.979329109 CEST	443	56365	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.981765985 CEST	56371	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.981800079 CEST	443	56371	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:29.981899023 CEST	56371	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.982089043 CEST	56371	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:29.982104063 CEST	443	56371	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.250363111 CEST	443	56366	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:30.250649929 CEST	56366	443	192.168.2.5	4.175.87.197
Oct 11, 2024 16:09:30.251862049 CEST	56366	443	192.168.2.5	4.175.87.197
Oct 11, 2024 16:09:30.251869917 CEST	443	56366	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:30.252264023 CEST	443	56366	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:30.253247023 CEST	56366	443	192.168.2.5	4.175.87.197
Oct 11, 2024 16:09:30.281073093 CEST	443	56367	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.281433105 CEST	56367	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.281502962 CEST	443	56367	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.281831980 CEST	56367	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.281851053 CEST	443	56367	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.299407005 CEST	443	56366	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:30.655877113 CEST	443	56367	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.655945063 CEST	443	56367	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.656148911 CEST	56367	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.656239033 CEST	56367	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.656239033 CEST	56367	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.656286001 CEST	443	56367	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.656316042 CEST	443	56367	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.658763885 CEST	56372	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.658797026 CEST	443	56372	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.659050941 CEST	56372	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.659050941 CEST	56372	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.659079075 CEST	443	56372	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.659678936 CEST	443	56370	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.659759998 CEST	443	56368	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.660029888 CEST	56370	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.660058975 CEST	443	56370	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.660362005 CEST	56368	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.660371065 CEST	443	56368	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.660496950 CEST	56370	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.660504103 CEST	443	56370	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.660753965 CEST	56368	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.660758018 CEST	443	56368	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.661231041 CEST	443	56369	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.661583900 CEST	56369	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.661598921 CEST	443	56369	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.661952972 CEST	56369	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.661957979 CEST	443	56369	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.662064075 CEST	443	56366	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:30.662121058 CEST	443	56366	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:30.662139893 CEST	443	56366	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:30.662173033 CEST	56366	443	192.168.2.5	4.175.87.197
Oct 11, 2024 16:09:30.662192106 CEST	443	56366	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:30.662230015 CEST	56366	443	192.168.2.5	4.175.87.197
Oct 11, 2024 16:09:30.662230015 CEST	56366	443	192.168.2.5	4.175.87.197
Oct 11, 2024 16:09:30.663225889 CEST	443	56366	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:30.663264990 CEST	443	56366	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:30.663311005 CEST	443	56366	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:30.663352013 CEST	56366	443	192.168.2.5	4.175.87.197
Oct 11, 2024 16:09:30.663352013 CEST	56366	443	192.168.2.5	4.175.87.197
Oct 11, 2024 16:09:30.664586067 CEST	56366	443	192.168.2.5	4.175.87.197
Oct 11, 2024 16:09:30.664597988 CEST	443	56366	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:30.664896965 CEST	56366	443	192.168.2.5	4.175.87.197
Oct 11, 2024 16:09:30.664904118 CEST	443	56366	4.175.87.197	192.168.2.5
Oct 11, 2024 16:09:30.760394096 CEST	443	56370	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.761013985 CEST	443	56369	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.762072086 CEST	443	56370	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.762132883 CEST	56370	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.762186050 CEST	443	56369	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.762188911 CEST	56370	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.762188911 CEST	56370	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.762206078 CEST	443	56370	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.762217045 CEST	443	56370	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.762255907 CEST	56369	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.762342930 CEST	56369	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.762351036 CEST	443	56369	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.762361050 CEST	56369	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.762367010 CEST	443	56369	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.763150930 CEST	443	56368	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.763767958 CEST	443	56368	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.763807058 CEST	443	56368	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.763896942 CEST	56368	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.763896942 CEST	56368	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.763943911 CEST	56368	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.763943911 CEST	56368	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.763953924 CEST	443	56368	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.763962984 CEST	443	56368	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.765140057 CEST	56373	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.765182972 CEST	443	56373	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.765412092 CEST	56373	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.765616894 CEST	56373	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.765645027 CEST	443	56373	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.766474962 CEST	56374	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.766495943 CEST	443	56374	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.766643047 CEST	56375	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.766654015 CEST	443	56375	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.766686916 CEST	56374	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.766704082 CEST	56375	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.766817093 CEST	56375	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.766829014 CEST	443	56375	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.766887903 CEST	56374	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.766911030 CEST	443	56374	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.838984013 CEST	443	56371	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.839539051 CEST	56371	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.839550972 CEST	443	56371	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.839997053 CEST	56371	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.840008974 CEST	443	56371	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.943623066 CEST	443	56371	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.943752050 CEST	443	56371	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.943829060 CEST	56371	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.944000959 CEST	56371	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.944000959 CEST	56371	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.944020033 CEST	443	56371	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.944029093 CEST	443	56371	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.946841002 CEST	56376	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.946868896 CEST	443	56376	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:30.947063923 CEST	56376	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.947236061 CEST	56376	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:30.947246075 CEST	443	56376	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.303503036 CEST	443	56372	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.303940058 CEST	56372	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.303956985 CEST	443	56372	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.304342985 CEST	56372	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.304347992 CEST	443	56372	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.404587030 CEST	443	56375	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.405075073 CEST	56375	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.405085087 CEST	443	56375	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.405112982 CEST	443	56372	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.405360937 CEST	56375	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.405365944 CEST	443	56375	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.406033993 CEST	443	56372	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.406091928 CEST	56372	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.406100988 CEST	443	56372	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.406133890 CEST	443	56372	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.406188965 CEST	56372	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.406205893 CEST	443	56372	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.406235933 CEST	56372	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.406235933 CEST	56372	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.406241894 CEST	443	56372	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.406250000 CEST	443	56372	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.408587933 CEST	56377	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.408653975 CEST	443	56377	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.408742905 CEST	56377	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.408896923 CEST	56377	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.408914089 CEST	443	56377	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.412795067 CEST	443	56373	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.413120031 CEST	56373	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.413176060 CEST	443	56373	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.413507938 CEST	56373	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.413522959 CEST	443	56373	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.447444916 CEST	443	56374	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.447762966 CEST	56374	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.447789907 CEST	443	56374	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.448085070 CEST	56374	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.448096037 CEST	443	56374	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.503536940 CEST	443	56375	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.504123926 CEST	443	56375	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.504200935 CEST	56375	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.505404949 CEST	56375	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.505404949 CEST	56375	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.505418062 CEST	443	56375	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.505425930 CEST	443	56375	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.507900953 CEST	56378	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.507946014 CEST	443	56378	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.508018017 CEST	56378	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.508147001 CEST	56378	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.508160114 CEST	443	56378	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.515065908 CEST	443	56373	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.515111923 CEST	443	56373	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.515244007 CEST	56373	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.515296936 CEST	56373	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.515296936 CEST	56373	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.515328884 CEST	443	56373	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.515350103 CEST	443	56373	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.517324924 CEST	56379	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.517369986 CEST	443	56379	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.517486095 CEST	56379	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.517596006 CEST	56379	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.517610073 CEST	443	56379	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.559674025 CEST	443	56374	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.559822083 CEST	443	56374	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.559896946 CEST	56374	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.559930086 CEST	56374	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.559948921 CEST	443	56374	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.559969902 CEST	56374	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.559983969 CEST	443	56374	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.561959028 CEST	56380	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.561985016 CEST	443	56380	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.562156916 CEST	56380	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.562156916 CEST	56380	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.562185049 CEST	443	56380	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.589509964 CEST	443	56376	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.589868069 CEST	56376	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.589899063 CEST	443	56376	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.590286970 CEST	56376	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.590297937 CEST	443	56376	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.688991070 CEST	443	56376	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.689075947 CEST	443	56376	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.689101934 CEST	443	56376	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.689155102 CEST	56376	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.689186096 CEST	56376	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.689186096 CEST	56376	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.689202070 CEST	443	56376	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.689209938 CEST	443	56376	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.691091061 CEST	56381	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.691128016 CEST	443	56381	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:31.691195965 CEST	56381	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.691350937 CEST	56381	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:31.691356897 CEST	443	56381	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.046500921 CEST	443	56377	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.046947002 CEST	56377	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.047019958 CEST	443	56377	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.047347069 CEST	56377	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.047363043 CEST	443	56377	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.145925999 CEST	443	56377	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.146029949 CEST	443	56377	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.146100998 CEST	56377	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.146177053 CEST	56377	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.146218061 CEST	443	56377	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.146260977 CEST	56377	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.146277905 CEST	443	56377	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.148655891 CEST	56382	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.148699045 CEST	443	56382	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.148904085 CEST	56382	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.149040937 CEST	56382	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.149058104 CEST	443	56382	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.151829004 CEST	443	56379	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.152137995 CEST	56379	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.152165890 CEST	443	56379	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.152504921 CEST	56379	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.152518988 CEST	443	56379	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.208916903 CEST	443	56378	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.209376097 CEST	56378	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.209410906 CEST	443	56378	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.209669113 CEST	443	56380	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.209853888 CEST	56378	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.209865093 CEST	443	56378	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.210177898 CEST	56380	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.210190058 CEST	443	56380	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.210635900 CEST	56380	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.210644960 CEST	443	56380	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.254940033 CEST	443	56379	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.255044937 CEST	443	56379	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.255096912 CEST	56379	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.255363941 CEST	56379	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.255388021 CEST	443	56379	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.255402088 CEST	56379	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.255408049 CEST	443	56379	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.257904053 CEST	56383	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.257927895 CEST	443	56383	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.258192062 CEST	56383	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.258192062 CEST	56383	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.258215904 CEST	443	56383	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.308607101 CEST	443	56380	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.308676958 CEST	443	56380	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.308793068 CEST	443	56380	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.308834076 CEST	56380	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.308914900 CEST	56380	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.308914900 CEST	56380	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.308960915 CEST	56380	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.308968067 CEST	443	56380	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.311285019 CEST	56384	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.311316967 CEST	443	56384	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.311423063 CEST	56384	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.311567068 CEST	56384	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.311580896 CEST	443	56384	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.313160896 CEST	443	56378	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.313343048 CEST	443	56378	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.313394070 CEST	443	56378	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.313436031 CEST	56378	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.313497066 CEST	56378	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.313556910 CEST	56378	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.313556910 CEST	56378	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.313599110 CEST	443	56378	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.313627005 CEST	443	56378	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.315572977 CEST	56385	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.315619946 CEST	443	56385	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.315711021 CEST	56385	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.315810919 CEST	56385	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.315834999 CEST	443	56385	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.339449883 CEST	443	56381	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.339838028 CEST	56381	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.339863062 CEST	443	56381	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.340224028 CEST	56381	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.340229034 CEST	443	56381	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.445028067 CEST	443	56381	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.445242882 CEST	443	56381	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.445291996 CEST	56381	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.445354939 CEST	56381	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.445364952 CEST	443	56381	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.445398092 CEST	56381	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.445401907 CEST	443	56381	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.447283983 CEST	56386	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.447376013 CEST	443	56386	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.447457075 CEST	56386	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.447576046 CEST	56386	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.447594881 CEST	443	56386	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.818250895 CEST	443	56382	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.818706036 CEST	56382	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.818728924 CEST	443	56382	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.819169998 CEST	56382	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.819175005 CEST	443	56382	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.909099102 CEST	443	56383	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.909531116 CEST	56383	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.909545898 CEST	443	56383	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.910058022 CEST	56383	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.910063982 CEST	443	56383	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.920419931 CEST	443	56382	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.921252966 CEST	443	56382	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.921302080 CEST	443	56382	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.921330929 CEST	56382	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.921403885 CEST	56382	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.921448946 CEST	56382	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.921468019 CEST	443	56382	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.921509981 CEST	56382	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.921515942 CEST	443	56382	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.924560070 CEST	56387	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.924597025 CEST	443	56387	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.924758911 CEST	56387	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.925064087 CEST	56387	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.925081015 CEST	443	56387	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.967456102 CEST	443	56384	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.967813015 CEST	56384	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.967828035 CEST	443	56384	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.968252897 CEST	56384	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.968261003 CEST	443	56384	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.968554974 CEST	443	56385	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.968925953 CEST	56385	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.969018936 CEST	443	56385	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:32.969104052 CEST	56385	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:32.969122887 CEST	443	56385	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.008479118 CEST	443	56383	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.008639097 CEST	443	56383	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.008692980 CEST	56383	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.008757114 CEST	56383	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.008769989 CEST	443	56383	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.008781910 CEST	56383	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.008789062 CEST	443	56383	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.011169910 CEST	56388	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.011185884 CEST	443	56388	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.011342049 CEST	56388	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.011487007 CEST	56388	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.011498928 CEST	443	56388	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.067030907 CEST	443	56384	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.067101002 CEST	443	56384	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.067179918 CEST	56384	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.067209959 CEST	443	56384	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.067240000 CEST	443	56384	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.067303896 CEST	56384	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.067327976 CEST	56384	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.067343950 CEST	443	56384	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.067357063 CEST	56384	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.067363024 CEST	443	56384	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.068603992 CEST	443	56385	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.068763018 CEST	443	56385	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.068836927 CEST	56385	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.069282055 CEST	56385	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.069305897 CEST	443	56385	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.069320917 CEST	56385	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.069329977 CEST	443	56385	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.072818041 CEST	56389	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.072916031 CEST	443	56389	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.073024988 CEST	56389	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.073729038 CEST	56390	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.073760033 CEST	443	56390	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.073841095 CEST	56389	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.073858976 CEST	443	56389	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.073904991 CEST	56390	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.073970079 CEST	56390	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.073982000 CEST	443	56390	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.141603947 CEST	443	56386	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.141990900 CEST	56386	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.142013073 CEST	443	56386	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.142503977 CEST	56386	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.142513990 CEST	443	56386	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.247306108 CEST	443	56386	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.247381926 CEST	443	56386	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.247488022 CEST	56386	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.248121977 CEST	56386	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.248146057 CEST	443	56386	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.248161077 CEST	56386	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.248169899 CEST	443	56386	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.251491070 CEST	56391	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.251522064 CEST	443	56391	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.251619101 CEST	56391	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.251743078 CEST	56391	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.251753092 CEST	443	56391	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.573810101 CEST	443	56387	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.578207016 CEST	56387	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.578239918 CEST	443	56387	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.578793049 CEST	56387	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.578799963 CEST	443	56387	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.683979988 CEST	443	56387	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.684036016 CEST	443	56387	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.684197903 CEST	56387	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.684458971 CEST	56387	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.684482098 CEST	443	56387	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.684509993 CEST	56387	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.684520006 CEST	443	56387	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.687925100 CEST	56392	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.687948942 CEST	443	56392	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.688235998 CEST	56392	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.688456059 CEST	56392	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.688467979 CEST	443	56392	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.692282915 CEST	443	56388	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.692868948 CEST	56388	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.692882061 CEST	443	56388	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.693504095 CEST	56388	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.693511009 CEST	443	56388	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.759732962 CEST	443	56390	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.760359049 CEST	56390	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.760421991 CEST	443	56390	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.760848999 CEST	56390	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.760864019 CEST	443	56390	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.763676882 CEST	443	56389	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.764081001 CEST	56389	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.764090061 CEST	443	56389	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.764672995 CEST	56389	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.764678001 CEST	443	56389	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.836338997 CEST	443	56388	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.836366892 CEST	443	56388	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.836401939 CEST	443	56388	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.836456060 CEST	56388	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.836524010 CEST	56388	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.836878061 CEST	56388	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.836878061 CEST	56388	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.836898088 CEST	443	56388	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.836905956 CEST	443	56388	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.840645075 CEST	56393	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.840696096 CEST	443	56393	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.840948105 CEST	56393	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.841137886 CEST	56393	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.841156006 CEST	443	56393	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.863219023 CEST	443	56389	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.863552094 CEST	443	56389	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.863794088 CEST	443	56390	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.863857985 CEST	56389	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.863857985 CEST	56389	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.863857985 CEST	56389	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.863905907 CEST	443	56390	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.863980055 CEST	56390	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.864001989 CEST	443	56390	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.864033937 CEST	443	56390	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.864224911 CEST	56390	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.864291906 CEST	56390	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.864320040 CEST	443	56390	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.864352942 CEST	56390	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.864367008 CEST	443	56390	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.867986917 CEST	56394	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.868040085 CEST	443	56394	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.868067980 CEST	56395	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.868093014 CEST	443	56395	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.868144035 CEST	56394	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.868269920 CEST	56395	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.868380070 CEST	56394	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.868396044 CEST	443	56394	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.868489027 CEST	56395	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.868510008 CEST	443	56395	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.926820993 CEST	443	56391	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.935739994 CEST	56391	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.935751915 CEST	443	56391	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:33.936259031 CEST	56391	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:33.936264992 CEST	443	56391	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.030730963 CEST	443	56391	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.032244921 CEST	443	56391	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.032309055 CEST	56391	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.032367945 CEST	56391	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.032367945 CEST	56391	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.032380104 CEST	443	56391	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.032387018 CEST	443	56391	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.035540104 CEST	56396	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.035554886 CEST	443	56396	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.035679102 CEST	56396	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.035835028 CEST	56396	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.035847902 CEST	443	56396	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.174104929 CEST	56389	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.174129963 CEST	443	56389	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.373420000 CEST	443	56392	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.374150038 CEST	56392	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.374172926 CEST	443	56392	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.374661922 CEST	56392	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.374667883 CEST	443	56392	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.472734928 CEST	443	56392	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.472821951 CEST	443	56392	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.472889900 CEST	56392	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.473823071 CEST	56392	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.473823071 CEST	56392	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.473834038 CEST	443	56392	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.473843098 CEST	443	56392	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.477694988 CEST	56397	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.477790117 CEST	443	56397	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.477938890 CEST	56397	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.478125095 CEST	56397	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.478163004 CEST	443	56397	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.479765892 CEST	443	56393	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.480427027 CEST	56393	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.480448008 CEST	443	56393	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.481045008 CEST	56393	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.481051922 CEST	443	56393	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.506072998 CEST	443	56394	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.506515026 CEST	56394	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.506535053 CEST	443	56394	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.507077932 CEST	56394	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.507083893 CEST	443	56394	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.567548037 CEST	443	56395	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.568470001 CEST	56395	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.568478107 CEST	443	56395	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.569192886 CEST	56395	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.569196939 CEST	443	56395	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.577795982 CEST	443	56393	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.578203917 CEST	443	56393	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.578280926 CEST	56393	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.578320026 CEST	56393	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.578335047 CEST	443	56393	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.578351021 CEST	56393	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.578358889 CEST	443	56393	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.582228899 CEST	56398	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.582266092 CEST	443	56398	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.582572937 CEST	56398	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.582572937 CEST	56398	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.582596064 CEST	443	56398	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.606978893 CEST	443	56394	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.607146978 CEST	443	56394	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.607280016 CEST	56394	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.607512951 CEST	56394	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.607526064 CEST	443	56394	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.607541084 CEST	56394	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.607547998 CEST	443	56394	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.612332106 CEST	56399	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.612358093 CEST	443	56399	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.612574100 CEST	56399	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.612734079 CEST	56399	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.612747908 CEST	443	56399	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.672658920 CEST	443	56395	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.673306942 CEST	443	56395	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.673427105 CEST	443	56395	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.673433065 CEST	56395	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.673510075 CEST	56395	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.673604012 CEST	56395	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.673604012 CEST	56395	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.673609972 CEST	443	56395	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.673618078 CEST	443	56395	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.677365065 CEST	56400	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.677398920 CEST	443	56400	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.677489042 CEST	56400	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.677778959 CEST	56400	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.677793980 CEST	443	56400	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.688565969 CEST	443	56396	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.689111948 CEST	56396	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.689126968 CEST	443	56396	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.690010071 CEST	56396	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.690013885 CEST	443	56396	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.789938927 CEST	443	56396	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.790000916 CEST	443	56396	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.790096045 CEST	443	56396	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.790115118 CEST	56396	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.790189028 CEST	56396	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.790379047 CEST	56396	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.790393114 CEST	443	56396	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.790438890 CEST	56396	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.790443897 CEST	443	56396	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.794343948 CEST	56401	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.794384956 CEST	443	56401	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:34.794471025 CEST	56401	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.794683933 CEST	56401	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:34.794703007 CEST	443	56401	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.506053925 CEST	443	56397	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.506587982 CEST	56397	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.506664991 CEST	443	56397	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.506995916 CEST	56397	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.507009983 CEST	443	56397	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.509334087 CEST	443	56399	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.509725094 CEST	56399	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.509767056 CEST	443	56399	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.510112047 CEST	56399	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.510119915 CEST	443	56399	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.516109943 CEST	443	56401	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.516459942 CEST	56401	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.516480923 CEST	443	56401	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.516508102 CEST	443	56400	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.516750097 CEST	56400	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.516772985 CEST	443	56400	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.517076969 CEST	56400	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.517082930 CEST	443	56400	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.517229080 CEST	56401	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.517245054 CEST	443	56401	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.523705959 CEST	443	56398	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.524023056 CEST	56398	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.524053097 CEST	443	56398	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.524384022 CEST	56398	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.524394989 CEST	443	56398	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.606761932 CEST	443	56397	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.607091904 CEST	443	56397	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.607167959 CEST	56397	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.607223034 CEST	56397	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.607261896 CEST	443	56397	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.607287884 CEST	56397	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.607302904 CEST	443	56397	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.609963894 CEST	443	56399	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.610197067 CEST	443	56399	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.610245943 CEST	56402	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.610271931 CEST	56399	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.610276937 CEST	443	56402	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.610325098 CEST	56399	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.610340118 CEST	443	56399	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.610358000 CEST	56399	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.610363007 CEST	443	56399	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.610402107 CEST	56402	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.610485077 CEST	56402	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.610491037 CEST	443	56402	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.612423897 CEST	56403	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.612447977 CEST	443	56403	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.612576008 CEST	56403	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.612657070 CEST	56403	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.612665892 CEST	443	56403	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.615432024 CEST	443	56401	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.615580082 CEST	443	56401	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.616247892 CEST	56401	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.616323948 CEST	56401	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.616324902 CEST	56401	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.616334915 CEST	443	56401	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.616343021 CEST	443	56401	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.617924929 CEST	56404	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.618005991 CEST	443	56404	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.618098974 CEST	56404	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.618187904 CEST	56404	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.618211985 CEST	443	56404	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.619946003 CEST	443	56400	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.620085955 CEST	443	56400	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.620326996 CEST	56400	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.620527029 CEST	56400	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.620536089 CEST	443	56400	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.620553017 CEST	56400	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.620557070 CEST	443	56400	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.623025894 CEST	56405	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.623050928 CEST	443	56405	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.623198986 CEST	56405	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.623378038 CEST	56405	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.623392105 CEST	443	56405	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.664551973 CEST	443	56398	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.664827108 CEST	443	56398	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.664916039 CEST	56398	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.664995909 CEST	56398	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.665020943 CEST	443	56398	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.665045023 CEST	56398	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.665060997 CEST	443	56398	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.667598009 CEST	56406	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.667623043 CEST	443	56406	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:35.667783022 CEST	56406	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.667944908 CEST	56406	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:35.667956114 CEST	443	56406	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.262295961 CEST	443	56403	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.262758017 CEST	56403	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.262777090 CEST	443	56403	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.263442039 CEST	56403	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.263447046 CEST	443	56403	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.263948917 CEST	443	56402	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.264364004 CEST	56402	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.264374971 CEST	443	56402	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.264684916 CEST	56402	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.264688969 CEST	443	56402	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.265968084 CEST	443	56405	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.266345024 CEST	56405	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.266355038 CEST	443	56405	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.266640902 CEST	56405	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.266644955 CEST	443	56405	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.272581100 CEST	443	56404	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.273124933 CEST	56404	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.273190022 CEST	443	56404	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.273328066 CEST	56404	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.273344040 CEST	443	56404	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.310708046 CEST	443	56406	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.311017036 CEST	56406	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.311038017 CEST	443	56406	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.311475992 CEST	56406	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.311480045 CEST	443	56406	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.363634109 CEST	443	56403	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.363744974 CEST	443	56403	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.363854885 CEST	56403	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.364026070 CEST	56403	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.364041090 CEST	443	56403	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.364051104 CEST	56403	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.364057064 CEST	443	56403	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.364782095 CEST	443	56405	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.364939928 CEST	443	56405	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.365010023 CEST	56405	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.365206003 CEST	56405	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.365220070 CEST	443	56405	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.365268946 CEST	56405	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.365274906 CEST	443	56405	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.365382910 CEST	443	56402	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.365596056 CEST	443	56402	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.365803003 CEST	56402	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.366106987 CEST	56402	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.366139889 CEST	443	56402	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.366178036 CEST	56402	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.366184950 CEST	443	56402	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.367436886 CEST	56411	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.367511988 CEST	443	56411	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.367716074 CEST	56411	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.368246078 CEST	56412	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.368278027 CEST	443	56412	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.368428946 CEST	56412	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.368530035 CEST	56411	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.368561983 CEST	443	56411	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.368717909 CEST	56413	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.368756056 CEST	443	56413	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.368853092 CEST	56412	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.368865967 CEST	443	56412	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.368916035 CEST	56413	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.369204044 CEST	56413	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.369223118 CEST	443	56413	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.372526884 CEST	443	56404	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.372598886 CEST	443	56404	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.372700930 CEST	443	56404	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.372783899 CEST	56404	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.372783899 CEST	56404	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.372855902 CEST	56404	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.372879028 CEST	443	56404	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.372895002 CEST	56404	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.372901917 CEST	443	56404	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.374975920 CEST	56414	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.375000954 CEST	443	56414	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.375227928 CEST	56414	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.375418901 CEST	56414	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.375437021 CEST	443	56414	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.419629097 CEST	443	56406	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.420039892 CEST	443	56406	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.420104027 CEST	56406	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.420190096 CEST	56406	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.420207024 CEST	443	56406	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.420217991 CEST	56406	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.420222998 CEST	443	56406	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.422518969 CEST	56415	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.422543049 CEST	443	56415	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:36.422638893 CEST	56415	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.422736883 CEST	56415	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:36.422749996 CEST	443	56415	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.022145987 CEST	443	56411	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.022602081 CEST	56411	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.022660971 CEST	443	56411	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.023000956 CEST	56411	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.023015022 CEST	443	56411	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.029946089 CEST	443	56414	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.030424118 CEST	56414	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.030450106 CEST	443	56414	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.030678988 CEST	56414	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.030689955 CEST	443	56414	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.031486034 CEST	443	56413	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.031902075 CEST	56413	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.031922102 CEST	443	56413	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.032535076 CEST	56413	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.032541037 CEST	443	56413	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.034128904 CEST	443	56412	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.034465075 CEST	56412	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.034480095 CEST	443	56412	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.034887075 CEST	56412	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.034893036 CEST	443	56412	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.106631994 CEST	443	56415	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.107656002 CEST	56415	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.107676983 CEST	443	56415	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.108412027 CEST	56415	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.108417988 CEST	443	56415	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.123662949 CEST	443	56411	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.123864889 CEST	443	56411	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.123934984 CEST	56411	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.124041080 CEST	56411	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.124068975 CEST	443	56411	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.127713919 CEST	56416	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.127752066 CEST	443	56416	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.127959967 CEST	56416	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.128334045 CEST	56416	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.128343105 CEST	443	56416	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.130389929 CEST	443	56414	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.130565882 CEST	443	56414	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.130682945 CEST	443	56414	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.130707026 CEST	56414	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.130829096 CEST	56414	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.130829096 CEST	56414	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.130853891 CEST	56414	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.130875111 CEST	443	56414	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.131617069 CEST	443	56413	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.131783962 CEST	443	56413	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.131876945 CEST	56413	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.131884098 CEST	443	56413	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.132061005 CEST	56413	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.132277012 CEST	56413	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.132277012 CEST	56413	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.132287979 CEST	443	56413	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.132297993 CEST	443	56413	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.134274006 CEST	56417	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.134305000 CEST	443	56417	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.134480000 CEST	56417	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.134624958 CEST	56417	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.134644032 CEST	443	56417	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.135071993 CEST	443	56412	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.135163069 CEST	443	56412	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.135183096 CEST	56418	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.135195017 CEST	443	56418	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.135216951 CEST	56412	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.135226965 CEST	443	56412	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.135265112 CEST	56418	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.135426044 CEST	56418	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.135440111 CEST	443	56418	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.135493994 CEST	443	56412	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.135507107 CEST	56412	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.135533094 CEST	56412	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.135543108 CEST	443	56412	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.135551929 CEST	56412	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.135560989 CEST	443	56412	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.135572910 CEST	443	56412	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.137429953 CEST	56419	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.137447119 CEST	443	56419	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.137541056 CEST	56419	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.137634993 CEST	56419	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.137645006 CEST	443	56419	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.210525036 CEST	443	56415	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.210722923 CEST	443	56415	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.210860014 CEST	56415	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.211028099 CEST	56415	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.211046934 CEST	443	56415	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.211059093 CEST	56415	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.211066961 CEST	443	56415	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.214832067 CEST	56420	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.214896917 CEST	443	56420	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.215121031 CEST	56420	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.215544939 CEST	56420	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.215574026 CEST	443	56420	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.600795984 CEST	49744	443	192.168.2.5	23.1.237.91
Oct 11, 2024 16:09:37.600795984 CEST	49744	443	192.168.2.5	23.1.237.91
Oct 11, 2024 16:09:37.600832939 CEST	443	49744	23.1.237.91	192.168.2.5
Oct 11, 2024 16:09:37.600893021 CEST	49744	443	192.168.2.5	23.1.237.91
Oct 11, 2024 16:09:37.767927885 CEST	443	56416	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.768671036 CEST	56416	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.768695116 CEST	443	56416	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.769376993 CEST	56416	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.769382000 CEST	443	56416	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.776801109 CEST	443	56418	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.777688026 CEST	56418	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.777717113 CEST	443	56418	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.778177977 CEST	56418	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.778183937 CEST	443	56418	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.786948919 CEST	443	56417	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.787666082 CEST	56417	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.787693024 CEST	443	56417	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.788589001 CEST	56417	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.788594007 CEST	443	56417	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.810584068 CEST	443	56419	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.811346054 CEST	56419	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.811357975 CEST	443	56419	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.811693907 CEST	56419	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.811698914 CEST	443	56419	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.874979973 CEST	443	56418	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.875030041 CEST	443	56418	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.875111103 CEST	56418	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.875123024 CEST	443	56418	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.875180006 CEST	443	56418	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.875262976 CEST	56418	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.875478029 CEST	56418	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.875495911 CEST	443	56418	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.877872944 CEST	443	56416	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.877943993 CEST	443	56420	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.878040075 CEST	443	56416	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.878088951 CEST	443	56416	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.878143072 CEST	56416	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.878317118 CEST	56416	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.878331900 CEST	443	56416	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.878345013 CEST	56416	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.878350973 CEST	443	56416	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.878608942 CEST	56422	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.878645897 CEST	443	56422	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.878715992 CEST	56422	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.878968000 CEST	56422	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.878983021 CEST	443	56422	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.879350901 CEST	56420	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.879430056 CEST	443	56420	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.879930973 CEST	56420	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.879946947 CEST	443	56420	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.881364107 CEST	56423	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.881408930 CEST	443	56423	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.882136106 CEST	56423	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.882245064 CEST	56423	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.882270098 CEST	443	56423	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.886835098 CEST	443	56417	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.886975050 CEST	443	56417	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.887161970 CEST	56417	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.887408018 CEST	56417	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.887419939 CEST	443	56417	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.887486935 CEST	56417	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.887495041 CEST	443	56417	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.889611959 CEST	56424	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.889659882 CEST	443	56424	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.889780998 CEST	56424	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.889878035 CEST	56424	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.889899969 CEST	443	56424	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.921535015 CEST	443	56419	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.921804905 CEST	443	56419	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.921842098 CEST	443	56419	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.921890974 CEST	56419	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.922115088 CEST	56419	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.922127962 CEST	443	56419	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.922139883 CEST	56419	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.922144890 CEST	443	56419	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.923980951 CEST	56425	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.924019098 CEST	443	56425	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.924139977 CEST	56425	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.924235106 CEST	56425	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.924242020 CEST	443	56425	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.976758957 CEST	443	56420	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.976795912 CEST	443	56420	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.976864100 CEST	443	56420	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:37.976892948 CEST	56420	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:37.976937056 CEST	56420	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.173254013 CEST	56420	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.173302889 CEST	443	56420	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.173463106 CEST	56420	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.173480988 CEST	443	56420	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.223192930 CEST	56427	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.223244905 CEST	443	56427	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.223498106 CEST	56427	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.223887920 CEST	56427	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.223908901 CEST	443	56427	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.524844885 CEST	443	56423	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.525254965 CEST	56423	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.525306940 CEST	443	56423	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.525650978 CEST	56423	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.525665045 CEST	443	56423	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.568912029 CEST	443	56424	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.569509029 CEST	56424	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.569602013 CEST	443	56424	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.570405006 CEST	56424	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.570420980 CEST	443	56424	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.606982946 CEST	443	56425	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.607952118 CEST	56425	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.607969999 CEST	443	56425	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.608484030 CEST	56425	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.608489037 CEST	443	56425	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.624444962 CEST	443	56423	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.624686956 CEST	443	56423	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.624778032 CEST	56423	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.624857903 CEST	56423	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.624857903 CEST	56423	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.624902964 CEST	443	56423	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.624929905 CEST	443	56423	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.629832983 CEST	56428	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.629878998 CEST	443	56428	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.630676985 CEST	56428	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.630877972 CEST	56428	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.630896091 CEST	443	56428	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.671654940 CEST	443	56424	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.671802044 CEST	443	56424	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.671905041 CEST	56424	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.672499895 CEST	56424	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.672575951 CEST	443	56424	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.672617912 CEST	56424	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.672638893 CEST	443	56424	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.710855961 CEST	443	56425	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.711468935 CEST	443	56425	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.711539984 CEST	443	56425	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.711572886 CEST	56425	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.711601019 CEST	56425	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.729938030 CEST	56425	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.729954004 CEST	443	56425	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.734673977 CEST	56429	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.734704971 CEST	443	56429	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.734772921 CEST	56429	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.736423016 CEST	56430	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.736429930 CEST	443	56430	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.736494064 CEST	56430	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.736845970 CEST	56429	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.736860037 CEST	443	56429	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.737086058 CEST	56430	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.737095118 CEST	443	56430	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.898130894 CEST	443	56427	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.902460098 CEST	56427	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.902549982 CEST	443	56427	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:38.903736115 CEST	56427	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:38.903755903 CEST	443	56427	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.005359888 CEST	443	56427	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.005745888 CEST	443	56427	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.005820036 CEST	56427	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.006772041 CEST	56427	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.006772041 CEST	56427	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.006819010 CEST	443	56427	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.006853104 CEST	443	56427	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.013520002 CEST	56431	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.013562918 CEST	443	56431	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.013631105 CEST	56431	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.014070988 CEST	56431	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.014085054 CEST	443	56431	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.299894094 CEST	443	56428	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.300357103 CEST	56428	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.300395012 CEST	443	56428	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.300915003 CEST	56428	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.300921917 CEST	443	56428	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.397656918 CEST	443	56430	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.398109913 CEST	56430	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.398128986 CEST	443	56430	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.398627996 CEST	56430	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.398643017 CEST	443	56430	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.404130936 CEST	443	56428	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.404198885 CEST	443	56428	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.404309988 CEST	443	56428	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.404340982 CEST	56428	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.404376030 CEST	56428	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.404395103 CEST	56428	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.404412031 CEST	443	56428	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.404424906 CEST	56428	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.404431105 CEST	443	56428	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.406706095 CEST	56432	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.406744957 CEST	443	56432	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.406814098 CEST	56432	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.406950951 CEST	56432	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.406966925 CEST	443	56432	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.418116093 CEST	443	56429	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.418421030 CEST	56429	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.418435097 CEST	443	56429	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.418811083 CEST	56429	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.418814898 CEST	443	56429	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.419622898 CEST	443	56422	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.419902086 CEST	56422	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.419923067 CEST	443	56422	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.420212030 CEST	56422	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.420217037 CEST	443	56422	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.498802900 CEST	443	56430	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.499048948 CEST	443	56430	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.499104023 CEST	56430	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.499114990 CEST	443	56430	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.499165058 CEST	443	56430	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.499213934 CEST	56430	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.499232054 CEST	56430	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.499244928 CEST	443	56430	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.499253988 CEST	56430	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.499260902 CEST	443	56430	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.501399994 CEST	56433	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.501487970 CEST	443	56433	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.501566887 CEST	56433	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.501753092 CEST	56433	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.501785994 CEST	443	56433	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.518954039 CEST	443	56422	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.519203901 CEST	443	56422	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.519270897 CEST	56422	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.519296885 CEST	56422	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.519296885 CEST	56422	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.519309998 CEST	443	56422	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.519316912 CEST	443	56422	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.521001101 CEST	56434	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.521035910 CEST	443	56434	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.521109104 CEST	56434	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.521224022 CEST	56434	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.521250963 CEST	443	56434	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.563873053 CEST	443	56429	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.563932896 CEST	443	56429	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.563978910 CEST	56429	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.564074039 CEST	56429	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.564102888 CEST	56429	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.564104080 CEST	443	56429	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.564116001 CEST	443	56429	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.566523075 CEST	56435	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.566554070 CEST	443	56435	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.566617012 CEST	56435	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.566704035 CEST	56435	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.566720009 CEST	443	56435	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.693239927 CEST	443	56431	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.736474991 CEST	56431	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.736519098 CEST	443	56431	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.736922026 CEST	56431	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.736928940 CEST	443	56431	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.836595058 CEST	443	56431	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.836693048 CEST	443	56431	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.836766005 CEST	56431	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.907776117 CEST	56431	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.907780886 CEST	443	56431	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.987371922 CEST	56439	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.987400055 CEST	443	56439	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:39.987531900 CEST	56439	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.987874031 CEST	56439	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:39.987889051 CEST	443	56439	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.068036079 CEST	443	56432	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.095030069 CEST	56432	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.095053911 CEST	443	56432	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.095927000 CEST	56432	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.095933914 CEST	443	56432	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.143210888 CEST	443	56433	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.174541950 CEST	56433	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.174590111 CEST	443	56433	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.175635099 CEST	56433	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.175647974 CEST	443	56433	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.191121101 CEST	443	56434	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.194773912 CEST	443	56432	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.195930004 CEST	443	56432	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.195992947 CEST	56432	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.196033955 CEST	56432	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.196050882 CEST	443	56432	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.196060896 CEST	56432	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.196067095 CEST	443	56432	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.200851917 CEST	443	56435	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.201318026 CEST	56435	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.201339006 CEST	443	56435	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.202182055 CEST	56435	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.202188969 CEST	443	56435	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.236408949 CEST	56434	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.270689011 CEST	443	56433	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.270862103 CEST	443	56433	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.270986080 CEST	56433	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.280785084 CEST	56434	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.280802011 CEST	443	56434	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.281693935 CEST	56434	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.281704903 CEST	443	56434	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.290177107 CEST	56433	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.290177107 CEST	56433	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.290210009 CEST	443	56433	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.290232897 CEST	443	56433	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.301166058 CEST	443	56435	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.301305056 CEST	443	56435	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.301358938 CEST	56435	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.366981983 CEST	56435	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.367008924 CEST	443	56435	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.367018938 CEST	56435	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.367024899 CEST	443	56435	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.377171993 CEST	443	56434	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.377348900 CEST	443	56434	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.377419949 CEST	56434	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.437892914 CEST	56441	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.437927961 CEST	443	56441	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.437999010 CEST	56441	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.439197063 CEST	56434	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.439244032 CEST	443	56434	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.439271927 CEST	56434	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.439287901 CEST	443	56434	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.442924023 CEST	56441	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.442938089 CEST	443	56441	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.481652975 CEST	56442	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.481695890 CEST	443	56442	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.481762886 CEST	56442	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.483613968 CEST	56442	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.483628988 CEST	443	56442	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.485145092 CEST	56443	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.485171080 CEST	443	56443	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.485297918 CEST	56443	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.486208916 CEST	56443	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.486222029 CEST	443	56443	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.486622095 CEST	56444	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.486660004 CEST	443	56444	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.486712933 CEST	56444	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.487550974 CEST	56444	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.487567902 CEST	443	56444	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.662301064 CEST	443	56439	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.662801981 CEST	56439	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.662820101 CEST	443	56439	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.663584948 CEST	56439	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.663592100 CEST	443	56439	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.760740995 CEST	443	56439	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.760814905 CEST	443	56439	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.760859966 CEST	56439	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.760879993 CEST	443	56439	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.760921955 CEST	443	56439	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.760963917 CEST	56439	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.761195898 CEST	56439	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.761223078 CEST	443	56439	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.761236906 CEST	56439	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.761245012 CEST	443	56439	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.767890930 CEST	56445	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.767944098 CEST	443	56445	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:40.768011093 CEST	56445	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.768688917 CEST	56445	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:40.768726110 CEST	443	56445	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.124382019 CEST	443	56444	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.124844074 CEST	56444	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.124860048 CEST	443	56444	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.125319958 CEST	56444	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.125324965 CEST	443	56444	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.127027988 CEST	443	56442	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.127321959 CEST	56442	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.127338886 CEST	443	56442	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.127648115 CEST	56442	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.127652884 CEST	443	56442	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.127800941 CEST	443	56443	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.128231049 CEST	56443	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.128243923 CEST	443	56443	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.128529072 CEST	56443	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.128534079 CEST	443	56443	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.129506111 CEST	443	56441	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.129764080 CEST	56441	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.129772902 CEST	443	56441	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.130084038 CEST	56441	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.130089045 CEST	443	56441	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.224293947 CEST	443	56444	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.224325895 CEST	443	56444	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.224371910 CEST	56444	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.224375010 CEST	443	56444	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.224421024 CEST	56444	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.224641085 CEST	56444	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.224664927 CEST	443	56444	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.224678040 CEST	56444	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.224685907 CEST	443	56444	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.225408077 CEST	443	56442	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.225482941 CEST	443	56442	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.225533009 CEST	56442	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.225548983 CEST	443	56442	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.225598097 CEST	443	56442	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.225647926 CEST	56442	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.226682901 CEST	443	56443	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.226872921 CEST	443	56443	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.226923943 CEST	56443	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.227242947 CEST	56442	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.227257013 CEST	443	56442	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.227266073 CEST	56442	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.227271080 CEST	443	56442	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.228888988 CEST	56443	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.228910923 CEST	443	56443	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.228921890 CEST	56443	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.228926897 CEST	443	56443	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.232830048 CEST	443	56441	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.233031988 CEST	443	56441	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.233088970 CEST	56441	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.236861944 CEST	56447	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.236890078 CEST	443	56447	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.236954927 CEST	56447	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.239980936 CEST	56448	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.240022898 CEST	443	56448	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.240088940 CEST	56448	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.240396976 CEST	56441	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.240407944 CEST	443	56441	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.240447998 CEST	56441	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.240452051 CEST	443	56441	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.243412018 CEST	56449	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.243433952 CEST	443	56449	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.243516922 CEST	56449	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.243786097 CEST	56447	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.243808031 CEST	443	56447	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.244165897 CEST	56448	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.244184971 CEST	443	56448	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.244400978 CEST	56449	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.244417906 CEST	443	56449	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.246167898 CEST	56450	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.246177912 CEST	443	56450	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.246254921 CEST	56450	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.246489048 CEST	56450	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.246501923 CEST	443	56450	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.409678936 CEST	443	56445	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.439579010 CEST	56445	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.439671040 CEST	443	56445	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.441095114 CEST	56445	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.441113949 CEST	443	56445	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.570107937 CEST	443	56445	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.570291042 CEST	443	56445	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.570363998 CEST	56445	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.574414968 CEST	56445	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.574454069 CEST	443	56445	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.574482918 CEST	56445	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.574497938 CEST	443	56445	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.584256887 CEST	56452	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.584312916 CEST	443	56452	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.584386110 CEST	56452	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.585088968 CEST	56452	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.585113049 CEST	443	56452	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.887052059 CEST	443	56450	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.888333082 CEST	56450	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.888354063 CEST	443	56450	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.889266014 CEST	56450	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.889273882 CEST	443	56450	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.895003080 CEST	443	56449	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.895967007 CEST	56449	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.895992041 CEST	443	56449	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.897300959 CEST	56449	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.897315979 CEST	443	56449	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.902829885 CEST	443	56447	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.903362036 CEST	56447	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.903388023 CEST	443	56447	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.904253006 CEST	56447	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.904259920 CEST	443	56447	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.958276033 CEST	443	56448	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.959136009 CEST	56448	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.959165096 CEST	443	56448	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:41.960104942 CEST	56448	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:41.960114002 CEST	443	56448	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.003267050 CEST	443	56450	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.003328085 CEST	443	56450	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.003403902 CEST	56450	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.003417969 CEST	443	56450	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.003501892 CEST	443	56450	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.003787041 CEST	56450	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.006380081 CEST	443	56447	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.006464005 CEST	443	56447	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.006563902 CEST	443	56447	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.006727934 CEST	56447	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.008093119 CEST	443	56449	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.008145094 CEST	443	56449	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.008290052 CEST	443	56449	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.008375883 CEST	56449	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.025206089 CEST	56450	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.025206089 CEST	56450	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.025219917 CEST	443	56450	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.025229931 CEST	443	56450	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.061810017 CEST	443	56448	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.062020063 CEST	443	56448	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.062681913 CEST	56448	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.235404015 CEST	443	56452	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.240061045 CEST	56452	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.240124941 CEST	443	56452	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.240624905 CEST	56452	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.240638018 CEST	443	56452	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.243808985 CEST	56448	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.243808985 CEST	56448	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.243844986 CEST	443	56448	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.243856907 CEST	443	56448	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.340888977 CEST	443	56452	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.341187954 CEST	443	56452	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.341229916 CEST	443	56452	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.341279030 CEST	56452	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.341352940 CEST	56452	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.415188074 CEST	56447	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.415220976 CEST	443	56447	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.444890976 CEST	56449	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.444905043 CEST	443	56449	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.558304071 CEST	56452	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.558327913 CEST	443	56452	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.558357954 CEST	56452	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.558372021 CEST	443	56452	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.576134920 CEST	56453	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.576153994 CEST	443	56453	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.576273918 CEST	56453	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.579679012 CEST	56454	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.579684973 CEST	443	56454	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.579844952 CEST	56454	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.581888914 CEST	56455	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.581947088 CEST	443	56455	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.582063913 CEST	56455	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.585294962 CEST	56456	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.585366964 CEST	443	56456	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.585525036 CEST	56456	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.585982084 CEST	56453	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.585994959 CEST	443	56453	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.586425066 CEST	56456	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.586461067 CEST	443	56456	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.586612940 CEST	56454	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.586623907 CEST	443	56454	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.588011026 CEST	56455	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.588052034 CEST	443	56455	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.591881037 CEST	56457	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.591901064 CEST	443	56457	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:42.592242956 CEST	56457	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.592762947 CEST	56457	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:42.592775106 CEST	443	56457	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.239500999 CEST	443	56456	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.240171909 CEST	56456	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:43.240195990 CEST	443	56456	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.240897894 CEST	56456	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:43.240911007 CEST	443	56456	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.242317915 CEST	443	56454	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.242682934 CEST	56454	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:43.242696047 CEST	443	56454	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.243336916 CEST	56454	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:43.243343115 CEST	443	56454	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.243648052 CEST	443	56453	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.244043112 CEST	56453	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:43.244048119 CEST	443	56453	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.244628906 CEST	56453	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:43.244632959 CEST	443	56453	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.523330927 CEST	443	56453	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.523497105 CEST	443	56453	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.523531914 CEST	443	56454	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.523556948 CEST	56453	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:43.523562908 CEST	443	56456	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.523621082 CEST	443	56454	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.523667097 CEST	56454	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:43.523675919 CEST	443	56454	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.523761988 CEST	443	56456	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.523821115 CEST	56456	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:43.523940086 CEST	443	56454	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.524035931 CEST	56454	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:43.529634953 CEST	443	56457	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.529998064 CEST	56454	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:43.530005932 CEST	443	56454	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.530015945 CEST	56454	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:43.530019999 CEST	443	56454	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.530394077 CEST	56457	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:43.530426025 CEST	443	56457	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.530925035 CEST	56457	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:43.530934095 CEST	443	56457	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.531131983 CEST	56453	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:43.531136990 CEST	443	56453	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.531152010 CEST	56453	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:43.531155109 CEST	443	56453	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.531677961 CEST	443	56455	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.532423973 CEST	56455	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:43.532490969 CEST	443	56455	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.533087969 CEST	56455	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:43.533102036 CEST	443	56455	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.533313036 CEST	56456	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:43.533346891 CEST	443	56456	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.533375025 CEST	56456	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:43.533391953 CEST	443	56456	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.536339045 CEST	56460	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:43.536365986 CEST	443	56460	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.536426067 CEST	56460	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:43.536442041 CEST	56461	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:43.536468983 CEST	443	56461	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.536518097 CEST	56461	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:43.536624908 CEST	56460	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:43.536637068 CEST	443	56460	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.536746979 CEST	56461	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:43.536760092 CEST	443	56461	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.537163019 CEST	56462	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:43.537170887 CEST	443	56462	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:43.537230015 CEST	56462	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:43.537343979 CEST	56462	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:43.537353992 CEST	443	56462	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.055377960 CEST	443	56457	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.055532932 CEST	443	56457	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.055672884 CEST	443	56457	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.055675983 CEST	56457	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.055794954 CEST	443	56455	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.055844069 CEST	56457	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.055844069 CEST	56457	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.055967093 CEST	56457	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.055980921 CEST	443	56457	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.056377888 CEST	443	56455	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.056754112 CEST	56455	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.056849957 CEST	56455	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.056850910 CEST	56455	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.056899071 CEST	443	56455	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.056931973 CEST	443	56455	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.059298992 CEST	56464	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.059299946 CEST	56463	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.059322119 CEST	443	56463	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.059329033 CEST	443	56464	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.059406042 CEST	56464	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.059410095 CEST	56463	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.059619904 CEST	56463	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.059621096 CEST	56464	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.059632063 CEST	443	56464	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.059638023 CEST	443	56463	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.587414026 CEST	443	56460	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.588058949 CEST	56460	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.588072062 CEST	443	56460	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.590791941 CEST	56460	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.590797901 CEST	443	56460	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.606379032 CEST	443	56461	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.607450008 CEST	56461	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.607471943 CEST	443	56461	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.611077070 CEST	56461	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.611088991 CEST	443	56461	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.624605894 CEST	443	56462	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.625798941 CEST	56462	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.625852108 CEST	443	56462	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.626013041 CEST	56462	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.626022100 CEST	443	56462	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.686248064 CEST	443	56460	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.686681986 CEST	443	56460	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.686731100 CEST	443	56460	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.686846972 CEST	56460	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.687019110 CEST	56460	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.687019110 CEST	56460	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.687027931 CEST	443	56460	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.687035084 CEST	443	56460	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.690509081 CEST	56465	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.690577984 CEST	443	56465	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.695358038 CEST	56465	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.695358038 CEST	56465	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.695444107 CEST	443	56465	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.696455002 CEST	443	56463	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.696940899 CEST	56463	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.696948051 CEST	443	56463	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.697556019 CEST	443	56464	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.697597027 CEST	56463	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.697601080 CEST	443	56463	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.699011087 CEST	56464	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.699022055 CEST	443	56464	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.699083090 CEST	56464	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.699086905 CEST	443	56464	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.708023071 CEST	443	56461	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.708172083 CEST	443	56461	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.711191893 CEST	56461	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.711191893 CEST	56461	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.711792946 CEST	56461	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.711813927 CEST	443	56461	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.714317083 CEST	56466	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.714354992 CEST	443	56466	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.714540005 CEST	56466	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.714616060 CEST	56466	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.714641094 CEST	443	56466	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.727437973 CEST	443	56462	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.727535009 CEST	443	56462	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.727648020 CEST	56462	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.727650881 CEST	443	56462	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.727864027 CEST	56462	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.727956057 CEST	56462	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.727956057 CEST	56462	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.727974892 CEST	443	56462	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.727986097 CEST	443	56462	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.731980085 CEST	56467	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.731997013 CEST	443	56467	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.732079029 CEST	56467	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.732340097 CEST	56467	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.732352018 CEST	443	56467	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.795572042 CEST	443	56464	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.796139002 CEST	443	56464	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.796252012 CEST	56464	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.796353102 CEST	56464	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.796353102 CEST	56464	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.796361923 CEST	443	56464	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.796370029 CEST	443	56464	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.799076080 CEST	443	56463	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.799163103 CEST	443	56463	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.799284935 CEST	56463	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.799386978 CEST	56463	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.799391985 CEST	443	56463	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.799402952 CEST	56463	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.799407005 CEST	443	56463	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.800276995 CEST	56468	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.800299883 CEST	443	56468	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.800394058 CEST	56468	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.800626040 CEST	56468	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.800641060 CEST	443	56468	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.802375078 CEST	56469	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.802401066 CEST	443	56469	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:44.802525997 CEST	56469	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.802655935 CEST	56469	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:44.802666903 CEST	443	56469	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.342721939 CEST	443	56465	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.343291044 CEST	56465	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.343317986 CEST	443	56465	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.343724966 CEST	56465	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.343736887 CEST	443	56465	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.358315945 CEST	443	56466	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.358740091 CEST	56466	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.358757019 CEST	443	56466	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.359266043 CEST	56466	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.359275103 CEST	443	56466	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.372211933 CEST	443	56467	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.372756004 CEST	56467	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.372765064 CEST	443	56467	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.373262882 CEST	56467	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.373267889 CEST	443	56467	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.445339918 CEST	443	56465	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.445369959 CEST	443	56465	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.445442915 CEST	56465	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.445453882 CEST	443	56465	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.445734978 CEST	56465	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.445775986 CEST	443	56465	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.445802927 CEST	56465	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.445818901 CEST	443	56465	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.445842981 CEST	56465	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.445853949 CEST	443	56465	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.449297905 CEST	56470	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.449333906 CEST	443	56470	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.449486971 CEST	56470	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.449538946 CEST	443	56469	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.449819088 CEST	56469	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.449834108 CEST	443	56469	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.449871063 CEST	56470	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.449882030 CEST	443	56470	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.450203896 CEST	56469	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.450207949 CEST	443	56469	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.455488920 CEST	443	56468	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.455910921 CEST	56468	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.455931902 CEST	443	56468	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.456739902 CEST	56468	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.456747055 CEST	443	56468	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.458467007 CEST	443	56466	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.458662033 CEST	443	56466	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.458837032 CEST	56466	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.458882093 CEST	56466	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.458889961 CEST	443	56466	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.458904982 CEST	56466	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.458909988 CEST	443	56466	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.461836100 CEST	56471	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.461860895 CEST	443	56471	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.461946964 CEST	56471	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.462167978 CEST	56471	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.462193966 CEST	443	56471	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.472744942 CEST	443	56467	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.472995043 CEST	443	56467	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.473081112 CEST	56467	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.473143101 CEST	56467	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.473148108 CEST	443	56467	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.473157883 CEST	56467	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.473164082 CEST	443	56467	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.475750923 CEST	56472	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.475785971 CEST	443	56472	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.475923061 CEST	56472	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.476141930 CEST	56472	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.476155996 CEST	443	56472	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.565767050 CEST	443	56469	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.565876007 CEST	443	56469	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.566046953 CEST	56469	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.566164970 CEST	56469	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.566184044 CEST	443	56469	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.566194057 CEST	56469	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.566200018 CEST	443	56469	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.566466093 CEST	443	56468	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.566529989 CEST	443	56468	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.566591024 CEST	56468	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.566605091 CEST	443	56468	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.566684008 CEST	443	56468	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.566782951 CEST	56468	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.567153931 CEST	56468	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.567153931 CEST	56468	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.567171097 CEST	443	56468	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.567182064 CEST	443	56468	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.570121050 CEST	56473	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.570166111 CEST	443	56473	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.570648909 CEST	56473	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.573920965 CEST	56474	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.573930979 CEST	443	56474	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.574039936 CEST	56474	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.574121952 CEST	56473	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.574136019 CEST	443	56473	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:45.574203968 CEST	56474	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:45.574213982 CEST	443	56474	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.102946997 CEST	443	56470	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.103409052 CEST	56470	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.103420973 CEST	443	56470	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.103897095 CEST	56470	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.103902102 CEST	443	56470	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.111138105 CEST	443	56472	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.111414909 CEST	56472	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.111429930 CEST	443	56472	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.111782074 CEST	56472	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.111788988 CEST	443	56472	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.112014055 CEST	443	56471	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.112406969 CEST	56471	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.112423897 CEST	443	56471	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.112819910 CEST	56471	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.112826109 CEST	443	56471	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.203242064 CEST	443	56470	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.203357935 CEST	443	56470	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.203412056 CEST	56470	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.203428030 CEST	443	56470	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.203490019 CEST	443	56470	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.203543901 CEST	56470	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.203563929 CEST	443	56470	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.203577042 CEST	56470	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.203583002 CEST	443	56470	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.203622103 CEST	56470	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.203625917 CEST	443	56470	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.205966949 CEST	56475	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.206001997 CEST	443	56475	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.206229925 CEST	56475	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.206351995 CEST	56475	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.206361055 CEST	443	56475	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.209991932 CEST	443	56474	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.210268974 CEST	56474	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.210290909 CEST	443	56474	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.210598946 CEST	56474	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.210602999 CEST	443	56474	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.210624933 CEST	443	56471	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.210800886 CEST	443	56471	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.210858107 CEST	56471	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.210880041 CEST	56471	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.210890055 CEST	443	56471	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.210906029 CEST	56471	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.210911036 CEST	443	56471	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.212737083 CEST	56476	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.212764978 CEST	443	56476	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.212822914 CEST	56476	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.212917089 CEST	56476	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.212924957 CEST	443	56476	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.227710009 CEST	443	56473	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.227998018 CEST	56473	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.228005886 CEST	443	56473	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.228317022 CEST	56473	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.228322029 CEST	443	56473	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.309135914 CEST	443	56474	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.309164047 CEST	443	56474	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.309220076 CEST	443	56474	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.309272051 CEST	56474	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.309441090 CEST	56474	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.309458017 CEST	443	56474	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.309468031 CEST	56474	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.309473991 CEST	443	56474	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.311999083 CEST	56477	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.312096119 CEST	443	56477	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.312181950 CEST	56477	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.312335968 CEST	56477	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.312374115 CEST	443	56477	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.329567909 CEST	443	56473	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.329802036 CEST	443	56473	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.329862118 CEST	56473	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.329880953 CEST	56473	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.329886913 CEST	443	56473	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.329896927 CEST	56473	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.329905033 CEST	443	56473	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.332771063 CEST	56478	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.332864046 CEST	443	56478	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.332971096 CEST	56478	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.333123922 CEST	56478	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.333161116 CEST	443	56478	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.338855982 CEST	443	56472	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.339323044 CEST	443	56472	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.339390039 CEST	56472	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.339576960 CEST	56472	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.339592934 CEST	443	56472	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.339607000 CEST	56472	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.339615107 CEST	443	56472	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.341367006 CEST	56479	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.341388941 CEST	443	56479	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.341447115 CEST	56479	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.341589928 CEST	56479	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.341599941 CEST	443	56479	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.775032997 CEST	443	56475	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.777080059 CEST	56475	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.777089119 CEST	443	56475	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.784583092 CEST	56475	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.784588099 CEST	443	56475	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.861655951 CEST	443	56476	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.881702900 CEST	443	56475	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.882235050 CEST	443	56475	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.882292986 CEST	56475	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.889489889 CEST	56476	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.889506102 CEST	443	56476	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.890631914 CEST	56476	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.890635967 CEST	443	56476	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.902585983 CEST	56475	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.902585983 CEST	56475	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.902604103 CEST	443	56475	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.902612925 CEST	443	56475	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.905468941 CEST	56480	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.905498028 CEST	443	56480	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.905567884 CEST	56480	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.905975103 CEST	56480	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.905987024 CEST	443	56480	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.948987007 CEST	443	56477	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.952100992 CEST	56477	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.952200890 CEST	443	56477	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.952908039 CEST	56477	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.952924013 CEST	443	56477	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.986238003 CEST	443	56476	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.986264944 CEST	443	56476	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.986320019 CEST	443	56476	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.986336946 CEST	56476	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.986402035 CEST	56476	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.986593962 CEST	56476	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.986593962 CEST	56476	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.986608982 CEST	443	56476	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.986624956 CEST	443	56476	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.992430925 CEST	56481	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.992527962 CEST	443	56481	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:46.992634058 CEST	56481	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.992958069 CEST	56481	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:46.992996931 CEST	443	56481	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.036941051 CEST	443	56479	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.037714005 CEST	56479	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.037729979 CEST	443	56479	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.038870096 CEST	56479	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.038875103 CEST	443	56479	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.049180984 CEST	443	56478	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.049237013 CEST	443	56477	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.049288034 CEST	443	56477	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.049413919 CEST	56477	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.049829960 CEST	56478	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.049865007 CEST	443	56478	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.050673962 CEST	56478	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.050688028 CEST	443	56478	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.051167965 CEST	56477	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.051203012 CEST	443	56477	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.051233053 CEST	56477	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.051248074 CEST	443	56477	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.054815054 CEST	56482	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.054856062 CEST	443	56482	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.055036068 CEST	56482	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.055129051 CEST	56482	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.055145979 CEST	443	56482	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.532294989 CEST	443	56479	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.532367945 CEST	443	56478	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.532390118 CEST	443	56479	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.532408953 CEST	443	56478	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.532452106 CEST	443	56478	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.532469034 CEST	56479	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.532488108 CEST	56478	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.532562017 CEST	56478	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.532675982 CEST	56479	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.532692909 CEST	443	56479	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.532727003 CEST	56479	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.532733917 CEST	443	56479	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.534796000 CEST	56478	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.534836054 CEST	443	56478	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.534871101 CEST	56478	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.534887075 CEST	443	56478	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.537800074 CEST	56483	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.537821054 CEST	443	56483	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.538058996 CEST	56483	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.539129019 CEST	56484	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.539150953 CEST	443	56484	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.539266109 CEST	56484	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.539659977 CEST	56483	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.539670944 CEST	443	56483	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.540117979 CEST	56484	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.540128946 CEST	443	56484	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.741791964 CEST	443	56482	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.742714882 CEST	56482	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.742748022 CEST	443	56482	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.743200064 CEST	56482	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.743205070 CEST	443	56482	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.749238968 CEST	443	56480	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.749701023 CEST	56480	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.749721050 CEST	443	56480	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.750345945 CEST	56480	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.750353098 CEST	443	56480	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.755009890 CEST	443	56481	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.755489111 CEST	56481	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.755496979 CEST	443	56481	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.756885052 CEST	56481	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.756890059 CEST	443	56481	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.843404055 CEST	443	56482	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.843429089 CEST	443	56482	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.843492985 CEST	56482	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.843523979 CEST	443	56482	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.843542099 CEST	443	56482	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.843600988 CEST	56482	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.843921900 CEST	56482	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.843991041 CEST	443	56482	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.850821018 CEST	56485	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.850863934 CEST	443	56485	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.850920916 CEST	56485	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.851439953 CEST	56485	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.851458073 CEST	443	56485	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.854029894 CEST	443	56480	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.854093075 CEST	443	56480	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.854185104 CEST	56480	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.854271889 CEST	56480	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.854294062 CEST	443	56480	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.854305983 CEST	56480	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.854312897 CEST	443	56480	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.859129906 CEST	56486	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.859141111 CEST	443	56486	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.859160900 CEST	443	56481	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.859194994 CEST	56486	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.859325886 CEST	443	56481	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.859440088 CEST	56481	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.860074997 CEST	56481	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.860074997 CEST	56481	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.860121965 CEST	443	56481	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.860148907 CEST	443	56481	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.860707045 CEST	56486	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.860718966 CEST	443	56486	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.866122007 CEST	56487	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.866154909 CEST	443	56487	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:47.866209984 CEST	56487	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.876661062 CEST	56487	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:47.876674891 CEST	443	56487	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.190069914 CEST	443	56484	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.212115049 CEST	56484	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.212131023 CEST	443	56484	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.212837934 CEST	56484	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.212843895 CEST	443	56484	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.223464966 CEST	443	56483	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.225708961 CEST	56483	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.225723982 CEST	443	56483	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.226600885 CEST	56483	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.226604939 CEST	443	56483	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.307334900 CEST	443	56484	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.307595968 CEST	443	56484	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.307765007 CEST	56484	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.322971106 CEST	56484	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.322987080 CEST	443	56484	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.327573061 CEST	56488	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.327598095 CEST	443	56488	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.327784061 CEST	56488	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.328140020 CEST	56488	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.328154087 CEST	443	56488	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.328758955 CEST	443	56483	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.328829050 CEST	443	56483	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.328876972 CEST	56483	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.328879118 CEST	443	56483	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.328938007 CEST	56483	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.329108953 CEST	56483	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.329123020 CEST	443	56483	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.329133987 CEST	56483	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.329138994 CEST	443	56483	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.332037926 CEST	56489	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.332073927 CEST	443	56489	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.332166910 CEST	56489	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.332407951 CEST	56489	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.332418919 CEST	443	56489	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.491595030 CEST	443	56485	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.492387056 CEST	56485	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.492402077 CEST	443	56485	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.493396044 CEST	56485	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.493402004 CEST	443	56485	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.520574093 CEST	443	56487	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.520953894 CEST	56487	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.520971060 CEST	443	56487	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.521470070 CEST	56487	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.521476030 CEST	443	56487	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.523077965 CEST	443	56486	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.523478031 CEST	56486	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.523499966 CEST	443	56486	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.523821115 CEST	56486	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.523825884 CEST	443	56486	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.590924025 CEST	443	56485	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.591053963 CEST	443	56485	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.591125965 CEST	56485	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.591207981 CEST	56485	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.591218948 CEST	443	56485	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.591255903 CEST	56485	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.591262102 CEST	443	56485	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.593924999 CEST	56490	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.593951941 CEST	443	56490	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.594018936 CEST	56490	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.594157934 CEST	56490	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.594182968 CEST	443	56490	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.618287086 CEST	443	56487	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.618561983 CEST	443	56487	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.618623972 CEST	56487	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.618645906 CEST	56487	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.618660927 CEST	443	56487	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.618670940 CEST	56487	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.618676901 CEST	443	56487	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.621006012 CEST	56491	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.621031046 CEST	443	56491	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.621090889 CEST	56491	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.621212959 CEST	56491	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.621221066 CEST	443	56491	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.625886917 CEST	443	56486	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.626435041 CEST	443	56486	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.626470089 CEST	443	56486	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.626487970 CEST	56486	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.626522064 CEST	56486	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.626559973 CEST	56486	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.626565933 CEST	443	56486	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.626573086 CEST	56486	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.626578093 CEST	443	56486	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.630944014 CEST	56492	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.630979061 CEST	443	56492	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.631038904 CEST	56492	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.631189108 CEST	56492	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.631206036 CEST	443	56492	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.973308086 CEST	443	56489	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.974366903 CEST	56489	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.974396944 CEST	443	56489	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:48.975126982 CEST	56489	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:48.975132942 CEST	443	56489	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.226932049 CEST	443	56489	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.227092981 CEST	443	56489	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.227164030 CEST	56489	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.228040934 CEST	56489	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.228059053 CEST	443	56489	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.228091955 CEST	56489	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.228099108 CEST	443	56489	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.228806019 CEST	443	56488	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.231353045 CEST	56488	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.231368065 CEST	443	56488	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.233248949 CEST	56488	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.233261108 CEST	443	56488	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.236710072 CEST	56493	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.236785889 CEST	443	56493	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.236864090 CEST	56493	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.237014055 CEST	56493	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.237046003 CEST	443	56493	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.408796072 CEST	443	56488	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.409162045 CEST	443	56488	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.409284115 CEST	56488	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.409827948 CEST	56488	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.409838915 CEST	443	56488	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.409866095 CEST	56488	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.409869909 CEST	443	56488	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.414899111 CEST	443	56491	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.415112019 CEST	56494	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.415196896 CEST	443	56494	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.415282011 CEST	56494	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.415817022 CEST	56491	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.415826082 CEST	443	56491	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.417117119 CEST	56491	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.417129993 CEST	443	56491	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.417541027 CEST	56494	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.417583942 CEST	443	56494	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.417735100 CEST	443	56490	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.418337107 CEST	56490	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.418345928 CEST	443	56490	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.419080019 CEST	56490	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.419085979 CEST	443	56490	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.419239044 CEST	443	56492	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.419826031 CEST	56492	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.419837952 CEST	443	56492	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.420695066 CEST	56492	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.420698881 CEST	443	56492	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.518182993 CEST	443	56490	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.518209934 CEST	443	56490	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.518269062 CEST	443	56490	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.518336058 CEST	56490	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.519164085 CEST	56490	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.519175053 CEST	443	56490	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.519186974 CEST	56490	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.519191980 CEST	443	56490	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.520638943 CEST	443	56491	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.520946980 CEST	443	56491	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.521018982 CEST	56491	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.521904945 CEST	56491	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.521917105 CEST	443	56491	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.521933079 CEST	56491	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.521939993 CEST	443	56491	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.523154974 CEST	443	56492	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.524677992 CEST	443	56492	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.524729013 CEST	56492	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.525619030 CEST	56492	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.525624990 CEST	443	56492	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.525634050 CEST	56492	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.525638103 CEST	443	56492	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.531039953 CEST	56496	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.531064987 CEST	443	56496	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.531219006 CEST	56496	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.531244993 CEST	56495	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.531254053 CEST	443	56495	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.531306028 CEST	56495	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.531738997 CEST	56496	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.531750917 CEST	443	56496	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.532048941 CEST	56495	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.532059908 CEST	443	56495	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.534394979 CEST	56497	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.534429073 CEST	443	56497	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.534682989 CEST	56497	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.535067081 CEST	56497	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.535079956 CEST	443	56497	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.879332066 CEST	443	56493	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.880271912 CEST	56493	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.880306959 CEST	443	56493	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.881043911 CEST	56493	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.881053925 CEST	443	56493	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.980448961 CEST	443	56493	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.980611086 CEST	443	56493	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.980679035 CEST	56493	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.980859041 CEST	56493	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.980885029 CEST	443	56493	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.980901957 CEST	56493	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.980911016 CEST	443	56493	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.983859062 CEST	56498	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.983899117 CEST	443	56498	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:49.984179974 CEST	56498	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.984318972 CEST	56498	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:49.984329939 CEST	443	56498	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.079740047 CEST	443	56494	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.080374956 CEST	56494	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.080413103 CEST	443	56494	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.081137896 CEST	56494	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.081146002 CEST	443	56494	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.183924913 CEST	443	56494	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.184081078 CEST	443	56494	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.184153080 CEST	56494	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.184396029 CEST	56494	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.184411049 CEST	443	56494	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.184474945 CEST	56494	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.184482098 CEST	443	56494	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.187887907 CEST	56499	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.187915087 CEST	443	56499	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.188129902 CEST	56499	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.188332081 CEST	56499	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.188342094 CEST	443	56499	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.188599110 CEST	443	56497	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.189060926 CEST	56497	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.189079046 CEST	443	56497	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.189559937 CEST	56497	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.189565897 CEST	443	56497	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.198365927 CEST	443	56496	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.198724031 CEST	56496	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.198729992 CEST	443	56496	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.199170113 CEST	56496	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.199173927 CEST	443	56496	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.199629068 CEST	443	56495	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.199886084 CEST	56495	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.199901104 CEST	443	56495	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.200227976 CEST	56495	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.200232029 CEST	443	56495	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.296953917 CEST	443	56497	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.297327995 CEST	443	56497	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.297405958 CEST	56497	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.297455072 CEST	56497	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.297455072 CEST	56497	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.297463894 CEST	443	56497	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.297472954 CEST	443	56497	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.300057888 CEST	443	56496	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.300213099 CEST	443	56496	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.300370932 CEST	56496	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.300426006 CEST	56496	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.300434113 CEST	443	56496	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.300443888 CEST	56496	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.300447941 CEST	443	56496	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.300821066 CEST	443	56495	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.301115990 CEST	443	56495	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.301177025 CEST	56495	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.301194906 CEST	56495	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.301198959 CEST	443	56495	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.301209927 CEST	56495	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.301213980 CEST	443	56495	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.301621914 CEST	56500	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.301671982 CEST	443	56500	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.302134991 CEST	56500	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.302306890 CEST	56500	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.302325010 CEST	443	56500	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.303152084 CEST	56501	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.303175926 CEST	443	56501	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.303303957 CEST	56501	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.303410053 CEST	56501	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.303416967 CEST	443	56501	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.303498030 CEST	56502	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.303507090 CEST	443	56502	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.303561926 CEST	56502	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.303703070 CEST	56502	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.303714991 CEST	443	56502	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.660142899 CEST	443	56498	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.660720110 CEST	56498	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.660734892 CEST	443	56498	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.661264896 CEST	56498	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.661269903 CEST	443	56498	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.760006905 CEST	443	56498	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.760072947 CEST	443	56498	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.760183096 CEST	443	56498	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.760246038 CEST	56498	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.760405064 CEST	56498	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.760423899 CEST	443	56498	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.760441065 CEST	56498	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.760447979 CEST	443	56498	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.763674974 CEST	56503	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.763727903 CEST	443	56503	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.763813972 CEST	56503	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.764008045 CEST	56503	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.764023066 CEST	443	56503	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.843858957 CEST	443	56499	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.844417095 CEST	56499	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.844448090 CEST	443	56499	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.844877005 CEST	56499	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.844883919 CEST	443	56499	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.941046000 CEST	443	56502	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.942004919 CEST	56502	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.942025900 CEST	443	56502	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.942616940 CEST	56502	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.942625046 CEST	443	56502	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.943670034 CEST	443	56501	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.944094896 CEST	56501	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.944103003 CEST	443	56499	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.944106102 CEST	443	56501	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.944180965 CEST	443	56499	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.944252014 CEST	56499	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.944610119 CEST	56499	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.944610119 CEST	56499	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.944633961 CEST	443	56499	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.944647074 CEST	443	56499	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.944739103 CEST	56501	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.944746971 CEST	443	56501	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.948170900 CEST	56504	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.948209047 CEST	443	56504	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.948278904 CEST	56504	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.948407888 CEST	56504	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.948419094 CEST	443	56504	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.970973969 CEST	443	56500	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.971553087 CEST	56500	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.971595049 CEST	443	56500	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:50.972019911 CEST	56500	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:50.972035885 CEST	443	56500	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.040688038 CEST	443	56502	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.040724039 CEST	443	56502	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.040783882 CEST	443	56502	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.040787935 CEST	56502	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.040893078 CEST	56502	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.041073084 CEST	56502	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.041107893 CEST	443	56502	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.041131973 CEST	56502	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.041140079 CEST	443	56502	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.044233084 CEST	56505	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.044258118 CEST	443	56505	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.044352055 CEST	56505	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.044502974 CEST	56505	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.044517040 CEST	443	56505	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.044692039 CEST	443	56501	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.045609951 CEST	443	56501	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.045675993 CEST	56501	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.045721054 CEST	56501	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.045721054 CEST	56501	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.045730114 CEST	443	56501	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.045739889 CEST	443	56501	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.047580957 CEST	56506	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.047589064 CEST	443	56506	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.047838926 CEST	56506	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.047959089 CEST	56506	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.047971010 CEST	443	56506	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.074508905 CEST	443	56500	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.074579000 CEST	443	56500	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.074656963 CEST	56500	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.074691057 CEST	443	56500	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.074779034 CEST	443	56500	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.074875116 CEST	56500	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.075095892 CEST	56500	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.075119972 CEST	443	56500	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.075216055 CEST	56500	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.075229883 CEST	443	56500	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.081294060 CEST	56507	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.081356049 CEST	443	56507	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.081533909 CEST	56507	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.082093954 CEST	56507	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.082114935 CEST	443	56507	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.428363085 CEST	443	56503	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.429047108 CEST	56503	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.429080009 CEST	443	56503	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.429469109 CEST	56503	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.429476976 CEST	443	56503	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.530483007 CEST	443	56503	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.530556917 CEST	443	56503	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.530662060 CEST	56503	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.530893087 CEST	56503	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.530937910 CEST	443	56503	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.530968904 CEST	56503	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.530983925 CEST	443	56503	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.534190893 CEST	56508	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.534228086 CEST	443	56508	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.534354925 CEST	56508	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.534485102 CEST	56508	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.534499884 CEST	443	56508	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.623938084 CEST	443	56504	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.624424934 CEST	56504	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.624507904 CEST	443	56504	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.624869108 CEST	56504	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.624883890 CEST	443	56504	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.706141949 CEST	443	56506	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.706780910 CEST	56506	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.706795931 CEST	443	56506	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.707376003 CEST	56506	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.707381010 CEST	443	56506	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.708566904 CEST	443	56505	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.708906889 CEST	56505	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.708914995 CEST	443	56505	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.709287882 CEST	56505	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.709291935 CEST	443	56505	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.728193045 CEST	443	56504	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.728272915 CEST	443	56504	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.728372097 CEST	56504	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.728523016 CEST	56504	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.728563070 CEST	443	56504	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.728591919 CEST	56504	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.728607893 CEST	443	56504	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.731870890 CEST	56509	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.731893063 CEST	443	56509	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.731987000 CEST	56509	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.732157946 CEST	56509	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.732176065 CEST	443	56509	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.767455101 CEST	443	56507	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.768578053 CEST	56507	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.768632889 CEST	443	56507	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.771415949 CEST	56507	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.771433115 CEST	443	56507	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.834892988 CEST	443	56505	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.835335016 CEST	443	56505	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.835441113 CEST	56505	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.835441113 CEST	56505	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.835614920 CEST	56505	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.835623026 CEST	443	56505	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.839282036 CEST	56510	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.839294910 CEST	443	56510	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.839561939 CEST	56510	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.839642048 CEST	56510	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.839647055 CEST	443	56510	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.868757010 CEST	443	56507	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.868910074 CEST	443	56507	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.869060993 CEST	56507	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.869060993 CEST	56507	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.869060993 CEST	56507	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.871967077 CEST	56511	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.872004986 CEST	443	56511	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:51.872251034 CEST	56511	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.872251034 CEST	56511	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:51.872288942 CEST	443	56511	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.174343109 CEST	56507	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.174390078 CEST	443	56507	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.191876888 CEST	443	56508	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.193065882 CEST	56508	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.193065882 CEST	56508	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.193101883 CEST	443	56508	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.193109035 CEST	443	56508	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.287775040 CEST	443	56509	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.288918018 CEST	56509	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.288918018 CEST	56509	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.288928986 CEST	443	56509	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.288942099 CEST	443	56509	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.312335968 CEST	443	56508	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.312473059 CEST	443	56508	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.312578917 CEST	56508	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.312674046 CEST	56508	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.312674046 CEST	56508	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.312690020 CEST	443	56508	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.312710047 CEST	443	56508	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.316019058 CEST	56512	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.316042900 CEST	443	56512	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.316365004 CEST	56512	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.316365004 CEST	56512	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.316421986 CEST	443	56512	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.401978016 CEST	443	56509	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.401997089 CEST	443	56509	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.402141094 CEST	56509	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.402146101 CEST	443	56509	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.402297020 CEST	56509	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.402367115 CEST	56509	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.402367115 CEST	56509	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.402378082 CEST	443	56509	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.402385950 CEST	443	56509	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.405221939 CEST	56513	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.405251026 CEST	443	56513	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.405462027 CEST	56513	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.405546904 CEST	56513	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.405560970 CEST	443	56513	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.480509043 CEST	443	56510	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.481544018 CEST	56510	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.481544018 CEST	56510	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.481554985 CEST	443	56510	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.481568098 CEST	443	56510	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.514070034 CEST	443	56511	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.514931917 CEST	56511	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.514950991 CEST	443	56511	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.515314102 CEST	56511	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.515320063 CEST	443	56511	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.579188108 CEST	443	56510	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.579380989 CEST	443	56510	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.579549074 CEST	56510	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.579549074 CEST	56510	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.579657078 CEST	56510	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.579665899 CEST	443	56510	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.582905054 CEST	56514	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.582937002 CEST	443	56514	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.583105087 CEST	56514	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.583225965 CEST	56514	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.583235979 CEST	443	56514	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.613229036 CEST	443	56511	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.613308907 CEST	443	56511	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.613452911 CEST	56511	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.613456011 CEST	443	56511	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.613557100 CEST	56511	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.613557100 CEST	56511	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.613584042 CEST	56511	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.613600969 CEST	443	56511	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.615772963 CEST	56515	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.615837097 CEST	443	56515	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.616055965 CEST	56515	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.616055965 CEST	56515	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.616131067 CEST	443	56515	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.741347075 CEST	443	56506	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.742182970 CEST	443	56506	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.742252111 CEST	56506	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.742253065 CEST	443	56506	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.742314100 CEST	56506	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.742393970 CEST	56506	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.742408037 CEST	443	56506	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.742419004 CEST	56506	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.742425919 CEST	443	56506	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.745640039 CEST	56516	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.745692968 CEST	443	56516	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.745855093 CEST	56516	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.746026993 CEST	56516	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.746036053 CEST	443	56516	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.997297049 CEST	443	56512	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.997912884 CEST	56512	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.997946978 CEST	443	56512	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:52.998447895 CEST	56512	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:52.998461008 CEST	443	56512	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.046483040 CEST	443	56513	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.047074080 CEST	56513	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.047095060 CEST	443	56513	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.047645092 CEST	56513	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.047652006 CEST	443	56513	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.101510048 CEST	443	56512	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.101562977 CEST	443	56512	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.101624966 CEST	56512	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.101658106 CEST	443	56512	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.101723909 CEST	443	56512	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.101795912 CEST	56512	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.101959944 CEST	56512	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.101989985 CEST	443	56512	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.102040052 CEST	56512	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.102057934 CEST	443	56512	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.105420113 CEST	56517	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.105446100 CEST	443	56517	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.105554104 CEST	56517	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.105721951 CEST	56517	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.105734110 CEST	443	56517	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.146821022 CEST	443	56513	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.146847010 CEST	443	56513	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.146914005 CEST	443	56513	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.146924973 CEST	56513	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.146970034 CEST	56513	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.152426004 CEST	56513	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.152441025 CEST	443	56513	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.152468920 CEST	56513	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.152477026 CEST	443	56513	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.155834913 CEST	56518	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.155843973 CEST	443	56518	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.155919075 CEST	56518	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.156070948 CEST	56518	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.156079054 CEST	443	56518	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.222841024 CEST	443	56514	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.223465919 CEST	56514	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.223495007 CEST	443	56514	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.223898888 CEST	56514	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.223906040 CEST	443	56514	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.258244038 CEST	443	56515	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.258614063 CEST	56515	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.258658886 CEST	443	56515	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.259062052 CEST	56515	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.259076118 CEST	443	56515	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.321549892 CEST	443	56514	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.321609020 CEST	443	56514	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.321685076 CEST	56514	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.321702003 CEST	443	56514	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.321837902 CEST	56514	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.321847916 CEST	443	56514	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.321861982 CEST	56514	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.321907997 CEST	443	56514	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.324193001 CEST	56519	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.324228048 CEST	443	56519	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.324476004 CEST	56519	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.324609041 CEST	56519	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.324616909 CEST	443	56519	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.359764099 CEST	443	56515	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.359940052 CEST	443	56515	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.360018969 CEST	56515	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.360090017 CEST	56515	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.360090017 CEST	56515	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.360126972 CEST	443	56515	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.360152006 CEST	443	56515	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.362149000 CEST	56520	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.362175941 CEST	443	56520	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.362234116 CEST	56520	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.362379074 CEST	56520	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.362394094 CEST	443	56520	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.384952068 CEST	443	56516	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.385274887 CEST	56516	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.385286093 CEST	443	56516	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.385684967 CEST	56516	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.385690928 CEST	443	56516	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.832892895 CEST	443	56516	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.833017111 CEST	443	56516	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.833144903 CEST	56516	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.833235025 CEST	56516	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.833255053 CEST	443	56516	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.833268881 CEST	56516	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.833276033 CEST	443	56516	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.836122036 CEST	56521	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.836169004 CEST	443	56521	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:53.836250067 CEST	56521	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.836535931 CEST	56521	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:53.836550951 CEST	443	56521	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.020385027 CEST	443	56518	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.020740986 CEST	56518	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.020750999 CEST	443	56518	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.021161079 CEST	56518	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.021166086 CEST	443	56518	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.022046089 CEST	443	56520	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.022324085 CEST	56520	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.022346020 CEST	443	56520	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.022700071 CEST	56520	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.022706032 CEST	443	56520	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.024445057 CEST	443	56517	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.024718046 CEST	56517	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.024732113 CEST	443	56517	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.025115013 CEST	56517	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.025119066 CEST	443	56517	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.033245087 CEST	443	56519	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.033620119 CEST	56519	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.033649921 CEST	443	56519	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.033986092 CEST	56519	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.033993006 CEST	443	56519	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.120677948 CEST	443	56518	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.121187925 CEST	443	56518	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.121279001 CEST	56518	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.121308088 CEST	56518	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.121319056 CEST	443	56518	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.121357918 CEST	56518	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.121364117 CEST	443	56518	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.121906042 CEST	443	56520	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.121973991 CEST	443	56520	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.122046947 CEST	56520	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.122056961 CEST	443	56520	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.122237921 CEST	56520	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.122245073 CEST	443	56520	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.122256994 CEST	56520	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.122458935 CEST	443	56520	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.123641968 CEST	443	56517	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.123791933 CEST	443	56517	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.123914957 CEST	56517	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.123919010 CEST	56522	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.123964071 CEST	443	56522	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.124047041 CEST	56522	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.124273062 CEST	56522	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.124281883 CEST	443	56522	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.124311924 CEST	56517	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.124324083 CEST	443	56517	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.124341965 CEST	56517	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.124346018 CEST	443	56517	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.124397039 CEST	56523	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.124425888 CEST	443	56523	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.124479055 CEST	56523	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.124581099 CEST	56523	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.124588966 CEST	443	56523	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.126337051 CEST	56524	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.126415014 CEST	443	56524	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.126494884 CEST	56524	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.126594067 CEST	56524	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.126616001 CEST	443	56524	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.150161982 CEST	443	56519	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.150207996 CEST	443	56519	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.150276899 CEST	56519	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.150294065 CEST	443	56519	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.150325060 CEST	443	56519	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.150374889 CEST	56519	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.150438070 CEST	56519	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.150454044 CEST	443	56519	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.150465965 CEST	56519	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.150473118 CEST	443	56519	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.152293921 CEST	56525	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.152328014 CEST	443	56525	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.152429104 CEST	56525	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.152518034 CEST	56525	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.152540922 CEST	443	56525	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.478944063 CEST	443	56521	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.479418039 CEST	56521	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.479444027 CEST	443	56521	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.479870081 CEST	56521	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.479876995 CEST	443	56521	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.623203039 CEST	443	56521	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.623260975 CEST	443	56521	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.623301983 CEST	443	56521	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.623323917 CEST	56521	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.623339891 CEST	443	56521	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.623359919 CEST	56521	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.623394966 CEST	56521	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.705050945 CEST	443	56521	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.705137014 CEST	56521	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.705147028 CEST	443	56521	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.705209970 CEST	443	56521	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.705214977 CEST	56521	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.705235958 CEST	56521	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.705250025 CEST	443	56521	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.705257893 CEST	56521	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.705257893 CEST	443	56521	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.705271959 CEST	443	56521	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.707859993 CEST	56526	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.707900047 CEST	443	56526	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.707998037 CEST	56526	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.708169937 CEST	56526	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.708187103 CEST	443	56526	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.769834042 CEST	443	56523	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.770184040 CEST	56523	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.770199060 CEST	443	56523	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.770608902 CEST	56523	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.770615101 CEST	443	56523	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.774663925 CEST	443	56524	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.774956942 CEST	56524	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.775021076 CEST	443	56524	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.775307894 CEST	56524	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.775324106 CEST	443	56524	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.792565107 CEST	443	56522	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.792887926 CEST	56522	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.792906046 CEST	443	56522	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.793270111 CEST	56522	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.793276072 CEST	443	56522	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.806092024 CEST	443	56525	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.806689978 CEST	56525	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.806689978 CEST	56525	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.806710005 CEST	443	56525	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.806721926 CEST	443	56525	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.870942116 CEST	443	56523	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.870979071 CEST	443	56523	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.870997906 CEST	443	56523	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.871045113 CEST	56523	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.871058941 CEST	443	56523	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.871078968 CEST	56523	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.871124983 CEST	56523	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.873349905 CEST	443	56524	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.873379946 CEST	443	56524	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.873440027 CEST	56524	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.873465061 CEST	443	56524	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.873622894 CEST	56524	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.873647928 CEST	56524	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.873661995 CEST	443	56524	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.873697996 CEST	56524	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.873861074 CEST	443	56524	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.873902082 CEST	443	56524	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.873989105 CEST	56524	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.875962973 CEST	56527	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.876024961 CEST	443	56527	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.876104116 CEST	56527	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.876218081 CEST	56527	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.876246929 CEST	443	56527	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.896212101 CEST	443	56522	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.896258116 CEST	443	56522	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.896305084 CEST	56522	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.896317959 CEST	443	56522	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.896440983 CEST	56522	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.896440983 CEST	56522	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.896447897 CEST	443	56522	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.896821022 CEST	443	56522	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.896914959 CEST	443	56522	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.897229910 CEST	56522	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.898902893 CEST	56528	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.898931026 CEST	443	56528	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.898984909 CEST	56528	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.899152040 CEST	56528	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.899164915 CEST	443	56528	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.906882048 CEST	443	56525	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.906989098 CEST	443	56525	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.907097101 CEST	56525	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.907107115 CEST	443	56525	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.907413960 CEST	56525	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.907427073 CEST	443	56525	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.907438040 CEST	56525	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.907763004 CEST	443	56525	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.907855034 CEST	443	56525	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.907993078 CEST	56525	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.909640074 CEST	56529	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.909674883 CEST	443	56529	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.909753084 CEST	56529	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.909915924 CEST	56529	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.909931898 CEST	443	56529	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.955574036 CEST	443	56523	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.955624104 CEST	443	56523	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.955662012 CEST	56523	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.955671072 CEST	443	56523	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.955683947 CEST	443	56523	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.955708027 CEST	56523	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.955724001 CEST	56523	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.956031084 CEST	56523	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.956034899 CEST	443	56523	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.956044912 CEST	56523	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.956048012 CEST	443	56523	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.957809925 CEST	56530	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.957834959 CEST	443	56530	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:54.957969904 CEST	56530	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.958132029 CEST	56530	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:54.958144903 CEST	443	56530	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.395288944 CEST	443	56526	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.395827055 CEST	56526	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.395847082 CEST	443	56526	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.396332979 CEST	56526	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.396339893 CEST	443	56526	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.498935938 CEST	443	56526	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.499134064 CEST	443	56526	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.499346018 CEST	56526	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.499375105 CEST	56526	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.499404907 CEST	443	56526	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.499424934 CEST	56526	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.499433994 CEST	443	56526	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.501745939 CEST	56531	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.501770973 CEST	443	56531	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.501827955 CEST	56531	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.501995087 CEST	56531	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.501998901 CEST	443	56531	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.535248041 CEST	443	56527	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.535589933 CEST	56527	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.535626888 CEST	443	56527	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.535957098 CEST	56527	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.535968065 CEST	443	56527	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.539716959 CEST	443	56528	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.540050983 CEST	56528	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.540066004 CEST	443	56528	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.540324926 CEST	56528	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.540328979 CEST	443	56528	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.571969986 CEST	443	56529	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.572288036 CEST	56529	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.572316885 CEST	443	56529	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.572693110 CEST	56529	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.572699070 CEST	443	56529	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.654920101 CEST	443	56528	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.655998945 CEST	443	56528	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.656075954 CEST	56528	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.656133890 CEST	56528	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.656133890 CEST	56528	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.656148911 CEST	443	56528	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.656156063 CEST	443	56528	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.657068014 CEST	443	56527	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.657140970 CEST	443	56527	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.657269955 CEST	56527	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.657305956 CEST	56527	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.657318115 CEST	443	56527	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.657407999 CEST	56527	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.657419920 CEST	443	56527	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.658606052 CEST	56532	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.658618927 CEST	443	56532	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.658736944 CEST	56532	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.658973932 CEST	56532	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.658988953 CEST	443	56532	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.659285069 CEST	56533	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.659346104 CEST	443	56533	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.659442902 CEST	56533	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.659523010 CEST	56533	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.659553051 CEST	443	56533	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.664201975 CEST	443	56530	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.664522886 CEST	56530	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.664542913 CEST	443	56530	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.664896965 CEST	56530	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.664902925 CEST	443	56530	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.673353910 CEST	443	56529	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.674645901 CEST	443	56529	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.674705029 CEST	56529	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.674726963 CEST	56529	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.674738884 CEST	443	56529	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.674751997 CEST	56529	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.674758911 CEST	443	56529	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.676358938 CEST	56534	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.676404953 CEST	443	56534	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.676533937 CEST	56534	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.676662922 CEST	56534	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.676680088 CEST	443	56534	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.766515970 CEST	443	56530	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.766608000 CEST	443	56530	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.766664982 CEST	56530	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.766681910 CEST	443	56530	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.766716957 CEST	443	56530	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.766760111 CEST	56530	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.766772985 CEST	443	56530	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.766789913 CEST	56530	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.766789913 CEST	56530	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:55.766798019 CEST	443	56530	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:55.766805887 CEST	443	56530	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:56.169148922 CEST	443	56531	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:56.169645071 CEST	56531	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:56.169655085 CEST	443	56531	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:56.170052052 CEST	56531	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:56.170057058 CEST	443	56531	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:56.274262905 CEST	443	56531	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:56.274635077 CEST	443	56531	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:56.274709940 CEST	56531	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:56.274763107 CEST	56531	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:56.274763107 CEST	56531	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:56.274780989 CEST	443	56531	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:56.274790049 CEST	443	56531	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:56.304111004 CEST	443	56532	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:56.304552078 CEST	56532	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:56.304564953 CEST	443	56532	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:56.304949999 CEST	56532	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:56.304955006 CEST	443	56532	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:56.309443951 CEST	443	56533	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:56.309745073 CEST	56533	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:56.309799910 CEST	443	56533	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:56.310092926 CEST	56533	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:56.310106993 CEST	443	56533	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:56.316524982 CEST	443	56534	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:56.316823006 CEST	56534	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:56.316840887 CEST	443	56534	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:56.317152023 CEST	56534	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:56.317162991 CEST	443	56534	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:56.403439045 CEST	443	56532	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:56.403515100 CEST	443	56532	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:56.403626919 CEST	56532	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:56.403704882 CEST	56532	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:56.403716087 CEST	443	56532	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:56.403728962 CEST	56532	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:56.403734922 CEST	443	56532	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:56.411308050 CEST	443	56533	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:56.411575079 CEST	443	56533	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:56.411650896 CEST	56533	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:56.411701918 CEST	56533	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:56.411701918 CEST	56533	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:56.411736965 CEST	443	56533	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:56.411760092 CEST	443	56533	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:56.417700052 CEST	443	56534	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:56.417769909 CEST	443	56534	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:56.417823076 CEST	56534	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:56.417892933 CEST	56534	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:56.417911053 CEST	443	56534	13.107.246.45	192.168.2.5
Oct 11, 2024 16:09:56.417933941 CEST	56534	443	192.168.2.5	13.107.246.45
Oct 11, 2024 16:09:56.417948008 CEST	443	56534	13.107.246.45	192.168.2.5
Oct 11, 2024 16:10:03.959688902 CEST	60697	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:10:03.964617014 CEST	53	60697	1.1.1.1	192.168.2.5
Oct 11, 2024 16:10:03.964679003 CEST	60697	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:10:03.964703083 CEST	60697	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:10:03.969744921 CEST	53	60697	1.1.1.1	192.168.2.5
Oct 11, 2024 16:10:04.410484076 CEST	53	60697	1.1.1.1	192.168.2.5
Oct 11, 2024 16:10:04.413913012 CEST	60697	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:10:04.419112921 CEST	53	60697	1.1.1.1	192.168.2.5
Oct 11, 2024 16:10:04.419162035 CEST	60697	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:10:05.139868021 CEST	60701	443	192.168.2.5	142.250.185.228
Oct 11, 2024 16:10:05.139894009 CEST	443	60701	142.250.185.228	192.168.2.5
Oct 11, 2024 16:10:05.139964104 CEST	60701	443	192.168.2.5	142.250.185.228
Oct 11, 2024 16:10:05.140750885 CEST	60701	443	192.168.2.5	142.250.185.228
Oct 11, 2024 16:10:05.140769005 CEST	443	60701	142.250.185.228	192.168.2.5
Oct 11, 2024 16:10:05.800693035 CEST	443	60701	142.250.185.228	192.168.2.5
Oct 11, 2024 16:10:05.801299095 CEST	60701	443	192.168.2.5	142.250.185.228
Oct 11, 2024 16:10:05.801321030 CEST	443	60701	142.250.185.228	192.168.2.5
Oct 11, 2024 16:10:05.801661015 CEST	443	60701	142.250.185.228	192.168.2.5
Oct 11, 2024 16:10:05.802520037 CEST	60701	443	192.168.2.5	142.250.185.228
Oct 11, 2024 16:10:05.802584887 CEST	443	60701	142.250.185.228	192.168.2.5
Oct 11, 2024 16:10:05.847166061 CEST	60701	443	192.168.2.5	142.250.185.228
Oct 11, 2024 16:10:15.702250957 CEST	443	60701	142.250.185.228	192.168.2.5
Oct 11, 2024 16:10:15.702310085 CEST	443	60701	142.250.185.228	192.168.2.5
Oct 11, 2024 16:10:15.702516079 CEST	60701	443	192.168.2.5	142.250.185.228
Oct 11, 2024 16:10:16.473311901 CEST	60701	443	192.168.2.5	142.250.185.228
Oct 11, 2024 16:10:16.473378897 CEST	443	60701	142.250.185.228	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 11, 2024 16:09:00.221069098 CEST	53	64113	1.1.1.1	192.168.2.5
Oct 11, 2024 16:09:00.348973036 CEST	53	60203	1.1.1.1	192.168.2.5
Oct 11, 2024 16:09:01.429315090 CEST	53	50819	1.1.1.1	192.168.2.5
Oct 11, 2024 16:09:01.611006975 CEST	55970	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:01.611366034 CEST	62857	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:01.622966051 CEST	53	62857	1.1.1.1	192.168.2.5
Oct 11, 2024 16:09:01.816519022 CEST	53	55970	1.1.1.1	192.168.2.5
Oct 11, 2024 16:09:03.354866982 CEST	52218	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:03.355005980 CEST	52417	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:03.475979090 CEST	53	52417	1.1.1.1	192.168.2.5
Oct 11, 2024 16:09:04.722893953 CEST	54883	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:04.722893953 CEST	61837	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:04.729873896 CEST	53	54883	1.1.1.1	192.168.2.5
Oct 11, 2024 16:09:04.730174065 CEST	53	61837	1.1.1.1	192.168.2.5
Oct 11, 2024 16:09:06.391627073 CEST	58275	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:06.392098904 CEST	64961	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:06.513458967 CEST	53	64961	1.1.1.1	192.168.2.5
Oct 11, 2024 16:09:06.598787069 CEST	49938	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:06.599057913 CEST	54080	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:06.607812881 CEST	53	54691	1.1.1.1	192.168.2.5
Oct 11, 2024 16:09:08.160342932 CEST	51789	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:08.160906076 CEST	57617	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:08.181828976 CEST	59045	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:08.182396889 CEST	55668	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:09.310770035 CEST	62621	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:09.311341047 CEST	53612	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:09.321096897 CEST	55843	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:09.321590900 CEST	53028	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:09.327647924 CEST	56171	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:09.328172922 CEST	60791	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:09.356278896 CEST	53	53612	1.1.1.1	192.168.2.5
Oct 11, 2024 16:09:18.527301073 CEST	53	60916	1.1.1.1	192.168.2.5
Oct 11, 2024 16:09:22.389552116 CEST	51354	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:22.390058041 CEST	53641	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:22.391196966 CEST	59297	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:22.391587019 CEST	54472	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:22.428073883 CEST	53	53641	1.1.1.1	192.168.2.5
Oct 11, 2024 16:09:24.754270077 CEST	53	55003	162.159.36.2	192.168.2.5
Oct 11, 2024 16:09:25.278862953 CEST	51389	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:25.286600113 CEST	53	51389	1.1.1.1	192.168.2.5
Oct 11, 2024 16:09:36.040313959 CEST	52257	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:36.048892975 CEST	52949	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:36.050848961 CEST	63482	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:38.182878971 CEST	59177	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:39.836405039 CEST	53837	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:39.940789938 CEST	51688	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:39.950898886 CEST	50610	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:41.183990955 CEST	49409	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:09:41.185054064 CEST	60743	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:10:03.959333897 CEST	53	53595	1.1.1.1	192.168.2.5
Oct 11, 2024 16:10:04.042551994 CEST	54329	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:10:04.877701044 CEST	57175	53	192.168.2.5	1.1.1.1
Oct 11, 2024 16:10:05.137934923 CEST	53	57175	1.1.1.1	192.168.2.5
Oct 11, 2024 16:10:21.059533119 CEST	50798	53	192.168.2.5	1.1.1.1

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 11, 2024 16:09:01.611006975 CEST	192.168.2.5	1.1.1.1	0xcb4d	Standard query (0)	www.myworkday.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:01.611366034 CEST	192.168.2.5	1.1.1.1	0x9e0	Standard query (0)	www.myworkday.com	65	IN (0x0001)	false
Oct 11, 2024 16:09:03.354866982 CEST	192.168.2.5	1.1.1.1	0xdba8	Standard query (0)	federation.usbank.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:03.355005980 CEST	192.168.2.5	1.1.1.1	0x6d34	Standard query (0)	federation.usbank.com	65	IN (0x0001)	false
Oct 11, 2024 16:09:04.722893953 CEST	192.168.2.5	1.1.1.1	0x4d00	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:04.722893953 CEST	192.168.2.5	1.1.1.1	0xc384	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 11, 2024 16:09:06.391627073 CEST	192.168.2.5	1.1.1.1	0xcf6a	Standard query (0)	federation.usbank.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:06.392098904 CEST	192.168.2.5	1.1.1.1	0xd427	Standard query (0)	federation.usbank.com	65	IN (0x0001)	false
Oct 11, 2024 16:09:06.598787069 CEST	192.168.2.5	1.1.1.1	0xc18f	Standard query (0)	s.go-mpulse.net	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:06.599057913 CEST	192.168.2.5	1.1.1.1	0xb92	Standard query (0)	s.go-mpulse.net	65	IN (0x0001)	false
Oct 11, 2024 16:09:08.160342932 CEST	192.168.2.5	1.1.1.1	0x1bda	Standard query (0)	c.go-mpulse.net	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:08.160906076 CEST	192.168.2.5	1.1.1.1	0x17c9	Standard query (0)	c.go-mpulse.net	65	IN (0x0001)	false
Oct 11, 2024 16:09:08.181828976 CEST	192.168.2.5	1.1.1.1	0x7c13	Standard query (0)	s.go-mpulse.net	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:08.182396889 CEST	192.168.2.5	1.1.1.1	0xaac6	Standard query (0)	s.go-mpulse.net	65	IN (0x0001)	false
Oct 11, 2024 16:09:09.310770035 CEST	192.168.2.5	1.1.1.1	0xb804	Standard query (0)	baxhwiix24leuzyjggaa-f-249fd768e-clientnsv4-s.akamaihd.net	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:09.311341047 CEST	192.168.2.5	1.1.1.1	0x4e32	Standard query (0)	baxhwiix24leuzyjggaa-f-249fd768e-clientnsv4-s.akamaihd.net	65	IN (0x0001)	false
Oct 11, 2024 16:09:09.321096897 CEST	192.168.2.5	1.1.1.1	0x627e	Standard query (0)	0217991c.akstat.io	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:09.321590900 CEST	192.168.2.5	1.1.1.1	0xb1d7	Standard query (0)	0217991c.akstat.io	65	IN (0x0001)	false
Oct 11, 2024 16:09:09.327647924 CEST	192.168.2.5	1.1.1.1	0x4ddd	Standard query (0)	c.go-mpulse.net	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:09.328172922 CEST	192.168.2.5	1.1.1.1	0xfb85	Standard query (0)	c.go-mpulse.net	65	IN (0x0001)	false
Oct 11, 2024 16:09:22.389552116 CEST	192.168.2.5	1.1.1.1	0xcec1	Standard query (0)	baxhwiix24leuzyjgghq-f-8541f95c1-clientnsv4-s.akamaihd.net	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:22.390058041 CEST	192.168.2.5	1.1.1.1	0xa813	Standard query (0)	baxhwiix24leuzyjgghq-f-8541f95c1-clientnsv4-s.akamaihd.net	65	IN (0x0001)	false
Oct 11, 2024 16:09:22.391196966 CEST	192.168.2.5	1.1.1.1	0xa141	Standard query (0)	684dd32a.akstat.io	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:22.391587019 CEST	192.168.2.5	1.1.1.1	0x6e58	Standard query (0)	684dd32a.akstat.io	65	IN (0x0001)	false
Oct 11, 2024 16:09:25.278862953 CEST	192.168.2.5	1.1.1.1	0x1043	Standard query (0)	171.39.242.20.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Oct 11, 2024 16:09:36.040313959 CEST	192.168.2.5	1.1.1.1	0xe324	Standard query (0)	684dd32a.akstat.io	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:36.048892975 CEST	192.168.2.5	1.1.1.1	0x56fd	Standard query (0)	federation.usbank.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:36.050848961 CEST	192.168.2.5	1.1.1.1	0x7320	Standard query (0)	s.go-mpulse.net	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:38.182878971 CEST	192.168.2.5	1.1.1.1	0x1b96	Standard query (0)	c.go-mpulse.net	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:39.836405039 CEST	192.168.2.5	1.1.1.1	0xb89b	Standard query (0)	684dd32b.akstat.io	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:39.940789938 CEST	192.168.2.5	1.1.1.1	0x6b58	Standard query (0)	trial-eum-clientnsv4-s.akamaihd.net	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:39.950898886 CEST	192.168.2.5	1.1.1.1	0x19b4	Standard query (0)	trial-eum-clienttons-s.akamaihd.net	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:41.183990955 CEST	192.168.2.5	1.1.1.1	0xf1db	Standard query (0)	8-46-123-33_s-2-16-164-88_ts-1728655780-clienttons-s.akamaihd.net	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:41.185054064 CEST	192.168.2.5	1.1.1.1	0xae07	Standard query (0)	baxhwiiccn7jgzyjggsa-ponbmr-1fde3c829-clientnsv4-s.akamaihd.net	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:10:04.042551994 CEST	192.168.2.5	1.1.1.1	0x424a	Standard query (0)	baxhwiix24leuzyjgg4q-f-f64507146-clientnsv4-s.akamaihd.net	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:10:04.877701044 CEST	192.168.2.5	1.1.1.1	0x64af	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:10:21.059533119 CEST	192.168.2.5	1.1.1.1	0xec47	Standard query (0)	baxhwiix24leuzyjghfa-f-c915b8d21-clientnsv4-s.akamaihd.net	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 11, 2024 16:09:01.622966051 CEST	1.1.1.1	192.168.2.5	0x9e0	No error (0)	www.myworkday.com	wd1-ash.myworkday.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:01.816519022 CEST	1.1.1.1	192.168.2.5	0xcb4d	No error (0)	www.myworkday.com	wd1-ash.myworkday.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:01.816519022 CEST	1.1.1.1	192.168.2.5	0xcb4d	No error (0)	wd1-ash.myworkday.com		209.177.165.18	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:03.484139919 CEST	1.1.1.1	192.168.2.5	0xdba8	No error (0)	federation.usbank.com	federation.usbank.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:04.729873896 CEST	1.1.1.1	192.168.2.5	0x4d00	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:04.730174065 CEST	1.1.1.1	192.168.2.5	0xc384	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 11, 2024 16:09:06.526391029 CEST	1.1.1.1	192.168.2.5	0xcf6a	No error (0)	federation.usbank.com	federation.usbank.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:06.606580019 CEST	1.1.1.1	192.168.2.5	0xc18f	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:06.606648922 CEST	1.1.1.1	192.168.2.5	0xb92	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:08.167963028 CEST	1.1.1.1	192.168.2.5	0x1bda	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:08.168772936 CEST	1.1.1.1	192.168.2.5	0x17c9	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:08.190340996 CEST	1.1.1.1	192.168.2.5	0xaac6	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:08.190387964 CEST	1.1.1.1	192.168.2.5	0x7c13	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:09.329165936 CEST	1.1.1.1	192.168.2.5	0xb1d7	No error (0)	0217991c.akstat.io	wildcard46.akstat.io.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:09.330456972 CEST	1.1.1.1	192.168.2.5	0x627e	No error (0)	0217991c.akstat.io	wildcard46.akstat.io.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:09.335124016 CEST	1.1.1.1	192.168.2.5	0xfb85	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:09.336002111 CEST	1.1.1.1	192.168.2.5	0x4ddd	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:09.356278896 CEST	1.1.1.1	192.168.2.5	0x4e32	No error (0)	baxhwiix24leuzyjggaa-f-249fd768e-clientnsv4-s.akamaihd.net	baxhwiix24leuzyjggaa-f-249fd768e.ipv4-only.cname.clienttons.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:09.356278896 CEST	1.1.1.1	192.168.2.5	0x4e32	No error (0)	baxhwiix24leuzyjggaa-f-249fd768e.ipv4-only.cname.clienttons.com	a248.b.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:09.365272045 CEST	1.1.1.1	192.168.2.5	0xb804	No error (0)	baxhwiix24leuzyjggaa-f-249fd768e-clientnsv4-s.akamaihd.net	baxhwiix24leuzyjggaa-f-249fd768e.ipv4-only.cname.clienttons.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:09.365272045 CEST	1.1.1.1	192.168.2.5	0xb804	No error (0)	baxhwiix24leuzyjggaa-f-249fd768e.ipv4-only.cname.clienttons.com	a248.b.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:22.399657965 CEST	1.1.1.1	192.168.2.5	0x6e58	No error (0)	684dd32a.akstat.io	wildcard46.akstat.io.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:22.400480032 CEST	1.1.1.1	192.168.2.5	0xa141	No error (0)	684dd32a.akstat.io	wildcard46.akstat.io.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:22.428073883 CEST	1.1.1.1	192.168.2.5	0xa813	No error (0)	baxhwiix24leuzyjgghq-f-8541f95c1-clientnsv4-s.akamaihd.net	baxhwiix24leuzyjgghq-f-8541f95c1.ipv4-only.cname.clienttons.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:22.428073883 CEST	1.1.1.1	192.168.2.5	0xa813	No error (0)	baxhwiix24leuzyjgghq-f-8541f95c1.ipv4-only.cname.clienttons.com	a248.b.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:22.451620102 CEST	1.1.1.1	192.168.2.5	0xcec1	No error (0)	baxhwiix24leuzyjgghq-f-8541f95c1-clientnsv4-s.akamaihd.net	baxhwiix24leuzyjgghq-f-8541f95c1.ipv4-only.cname.clienttons.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:22.451620102 CEST	1.1.1.1	192.168.2.5	0xcec1	No error (0)	baxhwiix24leuzyjgghq-f-8541f95c1.ipv4-only.cname.clienttons.com	a248.b.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:25.286600113 CEST	1.1.1.1	192.168.2.5	0x1043	Name error (3)	171.39.242.20.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Oct 11, 2024 16:09:36.047667980 CEST	1.1.1.1	192.168.2.5	0xe324	No error (0)	684dd32a.akstat.io	wildcard46.akstat.io.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:36.058676004 CEST	1.1.1.1	192.168.2.5	0x7320	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:36.182391882 CEST	1.1.1.1	192.168.2.5	0x56fd	No error (0)	federation.usbank.com	federation.usbank.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:38.190249920 CEST	1.1.1.1	192.168.2.5	0x1b96	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:39.843904018 CEST	1.1.1.1	192.168.2.5	0xb89b	No error (0)	684dd32b.akstat.io	wildcard46.akstat.io.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:39.948015928 CEST	1.1.1.1	192.168.2.5	0x6b58	No error (0)	trial-eum-clientnsv4-s.akamaihd.net	a248.b.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:39.957845926 CEST	1.1.1.1	192.168.2.5	0x19b4	No error (0)	trial-eum-clienttons-s.akamaihd.net	trial-eum.cname.clienttons.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:39.957845926 CEST	1.1.1.1	192.168.2.5	0x19b4	No error (0)	trial-eum.cname.clienttons.com	a1024.dscg.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:41.232011080 CEST	1.1.1.1	192.168.2.5	0xf1db	No error (0)	8-46-123-33_s-2-16-164-88_ts-1728655780-clienttons-s.akamaihd.net	8.46.123.33_s-2.16.164.88_ts-1728655780.cname.clienttons.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:41.232011080 CEST	1.1.1.1	192.168.2.5	0xf1db	No error (0)	8.46.123.33_s-2.16.164.88_ts-1728655780.cname.clienttons.com	a1024.dscg.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:41.392765045 CEST	1.1.1.1	192.168.2.5	0xae07	No error (0)	baxhwiiccn7jgzyjggsa-ponbmr-1fde3c829-clientnsv4-s.akamaihd.net	baxhwiiccn7jgzyjggsa-ponbmr-1fde3c829.ipv4-only.cname.clienttons.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:41.392765045 CEST	1.1.1.1	192.168.2.5	0xae07	No error (0)	baxhwiiccn7jgzyjggsa-ponbmr-1fde3c829.ipv4-only.cname.clienttons.com	a248.b.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:10:04.104756117 CEST	1.1.1.1	192.168.2.5	0x424a	No error (0)	baxhwiix24leuzyjgg4q-f-f64507146-clientnsv4-s.akamaihd.net	baxhwiix24leuzyjgg4q-f-f64507146.ipv4-only.cname.clienttons.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:10:04.104756117 CEST	1.1.1.1	192.168.2.5	0x424a	No error (0)	baxhwiix24leuzyjgg4q-f-f64507146.ipv4-only.cname.clienttons.com	a248.b.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:10:05.137934923 CEST	1.1.1.1	192.168.2.5	0x64af	No error (0)	www.google.com		142.250.185.228	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:10:21.119338989 CEST	1.1.1.1	192.168.2.5	0xec47	No error (0)	baxhwiix24leuzyjghfa-f-c915b8d21-clientnsv4-s.akamaihd.net	baxhwiix24leuzyjghfa-f-c915b8d21.ipv4-only.cname.clienttons.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:10:21.119338989 CEST	1.1.1.1	192.168.2.5	0xec47	No error (0)	baxhwiix24leuzyjghfa-f-c915b8d21.ipv4-only.cname.clienttons.com	a248.b.akamai.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

www.myworkday.com

https:

www.bing.com

fs.microsoft.com

otelrules.azureedge.net

slscr.update.microsoft.com

fe3cr.delivery.mp.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	209.177.165.18	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:02 UTC	725	OUT	GET /usbank/email-universal/inst/779$21901907/rel-task/2997$4086.htmld HTTP/1.1 Host: www.myworkday.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:02 UTC	1150	IN	HTTP/1.1 302 Date: Fri, 11 Oct 2024 14:09:02 GMT Content-Length: 0 Connection: close Set-Cookie: wd-browser-id=279e0276-d02d-4c5a-9893-ff9434b96d70; Path=/; Secure; HttpOnly; SameSite=None Referer: /usbank/email-universal/inst/779$21901907/rel-task/2997$4086.htmld X-Robots-Tag: noindex, nofollow X-FRAME-OPTIONS: SAMEORIGIN X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT Cache-Control: no-store, no-cache Pragma: no-cache Location: https://www.myworkday.com/usbank/d/inst/779$21901907/rel-task/2997$4086.htmld Content-Language: en Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rFZ2bceiNst4mMZEnpaecXSP0f%2BjQn16ohUtYInHmXHBwDsQ%2F3ICvri%2BJfHF%2FqpDJdhB7CBI0RjCHYcEBPqg8k6Rfpd0UNeEhb3XsU8PCZgwOeOfFgBadXKaOBy0EfHbDn8t"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: wd-alt-sessionid=; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: WorkdayLB_UI=2634780682.47670.0000; path=/; Httponly; Secure; SameSite=none
2024-10-11 14:09:02 UTC	667	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 41 45 5a 4b 45 47 35 44 77 42 62 59 45 6b 43 77 4a 39 44 39 43 67 71 72 4f 73 42 54 71 59 55 43 31 41 79 76 69 6c 38 48 51 43 49 2d 31 37 32 38 36 35 35 37 34 32 2d 31 2e 30 2e 31 2e 31 2d 66 33 63 66 6f 6d 70 58 50 4a 54 76 45 64 34 31 61 34 51 55 78 37 36 41 4d 56 39 56 53 6d 68 48 36 79 64 43 70 33 4c 4d 58 54 58 2e 43 66 6a 71 68 73 4d 73 62 35 6f 78 4a 72 54 41 67 55 6a 78 34 74 75 50 52 63 6d 4c 5a 4d 33 46 44 59 58 78 31 6d 6e 62 43 51 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 31 31 2d 4f 63 74 2d 32 34 20 31 34 3a 33 39 3a 30 32 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 77 77 77 2e 6d 79 77 6f 72 6b 64 61 79 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 Data Ascii: Set-Cookie: __cf_bm=AEZKEG5DwBbYEkCwJ9D9CgqrOsBTqYUC1Ayvil8HQCI-1728655742-1.0.1.1-f3cfompXPJTvEd41a4QUx76AMV9VSmhH6ydCp3LMXTX.CfjqhsMsb5oxJrTAgUjx4tuPRcmLZM3FDYXx1mnbCQ; path=/; expires=Fri, 11-Oct-24 14:39:02 GMT; domain=.www.myworkday.com; HttpOnly; Se

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49710	209.177.165.18	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:02 UTC	1124	OUT	GET /usbank/d/inst/779$21901907/rel-task/2997$4086.htmld HTTP/1.1 Host: www.myworkday.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd-browser-id=279e0276-d02d-4c5a-9893-ff9434b96d70; wd-alt-sessionid=; WorkdayLB_UI=2634780682.47670.0000; __cf_bm=AEZKEG5DwBbYEkCwJ9D9CgqrOsBTqYUC1Ayvil8HQCI-1728655742-1.0.1.1-f3cfompXPJTvEd41a4QUx76AMV9VSmhH6ydCp3LMXTX.CfjqhsMsb5oxJrTAgUjx4tuPRcmLZM3FDYXx1mnbCQ; __cflb=02DiuErDpuS6PzRvyTPnTkgbHDx3LySgJDgREpF93D5Br; _cfuvid=cnGc6M4ZOMCEvD6XzNexh2K4L7cCSqc01NVD.wxTxd4-1728655742422-0.0.1.1-604800000
2024-10-11 14:09:02 UTC	1085	IN	HTTP/1.1 200 Date: Fri, 11 Oct 2024 14:09:02 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 448 Connection: close Referer: /usbank/d/inst/779$21901907/rel-task/2997$4086.htmld X-Robots-Tag: noindex, nofollow Set-Cookie: JSESSIONID=F132CF3A176E11C4C42674362230ABBF.ui-server-prod-p4np7mro.prod-ui.pr501.cust.ash.wd; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: WorkdayLB_UI=2634780682.47670.0000; path=/; Httponly; Secure; SameSite=none Expires: Thu, 01 Jan 1970 00:00:00 GMT Cache-Control: no-store, no-cache Pragma: no-cache Content-Language: en Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xM9%2FMAntRKlmgX3Jd%2B47EWWta%2Fll%2BJHwY7pDQhc7NrRu925LaY2ut9gykZ4eP2JJD1%2BkQVKAzpaH6C6UFqLPi%2FOUpi0MXJYAQyCIQedz4wFtBEXnJ8T%2BeS4QaCvCHIJwAX5A"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d0f6cf6cbf8c347-EWR alt-svc: h3=":443"; ma=86400
2024-10-11 14:09:02 UTC	284	IN	Data Raw: 0d 0a 0d 0a 0d 0a 0d 0a 0a 0a 3c 68 74 6d 6c 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 0a 20 20 20 20 0a 09 0a 09 76 61 72 20 72 65 64 69 72 65 63 74 55 72 6c 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 79 77 6f 72 6b 64 61 79 2e 63 6f 6d 2f 77 64 61 79 2f 61 75 74 68 67 77 79 2f 75 73 62 61 6e 6b 2f 6c 6f 67 69 6e 2e 68 74 6d 6c 64 3f 72 65 74 75 72 6e 54 6f 3d 25 32 66 75 73 62 61 6e 6b 25 32 66 64 25 32 66 69 6e 73 74 25 32 66 37 37 39 25 32 34 32 31 39 30 31 39 30 37 25 32 66 72 65 6c 2d 74 61 73 6b 25 32 66 32 39 39 37 25 32 34 34 30 38 36 2e 68 74 6d 6c 64 27 3b 0a 09 76 61 72 20 61 6e 63 68 6f 72 20 3d 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e Data Ascii: <html><body><script type="text/javascript"> var redirectUrl = 'https://www.myworkday.com/wday/authgwy/usbank/login.htmld?returnTo=%2fusbank%2fd%2finst%2f779%2421901907%2frel-task%2f2997%244086.htmld';var anchor = encodeURICompon
2024-10-11 14:09:02 UTC	164	IN	Data Raw: 66 20 28 61 6e 63 68 6f 72 2e 6c 65 6e 67 74 68 20 3e 20 30 29 20 7b 0a 09 09 72 65 64 69 72 65 63 74 55 72 6c 20 3d 20 72 65 64 69 72 65 63 74 55 72 6c 2e 72 65 70 6c 61 63 65 28 2f 28 5b 3f 7c 26 5d 72 65 74 75 72 6e 54 6f 3d 5b 5e 5c 26 3b 5d 2b 29 2f 2c 20 27 24 31 27 20 2b 20 61 6e 63 68 6f 72 29 3b 0a 09 7d 0a 09 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 20 3d 20 72 65 64 69 72 65 63 74 55 72 6c 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: f (anchor.length > 0) {redirectUrl = redirectUrl.replace(/([?\|&]returnTo=[^\&;]+)/, '$1' + anchor);}window.location = redirectUrl;</script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49712	209.177.165.18	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:03 UTC	1352	OUT	GET /wday/authgwy/usbank/login.htmld?returnTo=%2fusbank%2fd%2finst%2f779%2421901907%2frel-task%2f2997%244086.htmld HTTP/1.1 Host: www.myworkday.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://www.myworkday.com/usbank/d/inst/779$21901907/rel-task/2997$4086.htmld Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd-browser-id=279e0276-d02d-4c5a-9893-ff9434b96d70; wd-alt-sessionid=; WorkdayLB_UI=2634780682.47670.0000; __cf_bm=AEZKEG5DwBbYEkCwJ9D9CgqrOsBTqYUC1Ayvil8HQCI-1728655742-1.0.1.1-f3cfompXPJTvEd41a4QUx76AMV9VSmhH6ydCp3LMXTX.CfjqhsMsb5oxJrTAgUjx4tuPRcmLZM3FDYXx1mnbCQ; __cflb=02DiuErDpuS6PzRvyTPnTkgbHDx3LySgJDgREpF93D5Br; _cfuvid=cnGc6M4ZOMCEvD6XzNexh2K4L7cCSqc01NVD.wxTxd4-1728655742422-0.0.1.1-604800000; JSESSIONID=F132CF3A176E11C4C42674362230ABBF.ui-server-prod-p4np7mro.prod-ui.pr501.cust.ash.wd
2024-10-11 14:09:03 UTC	1355	IN	HTTP/1.1 302 Date: Fri, 11 Oct 2024 14:09:03 GMT Content-Length: 0 Connection: close Set-Cookie: JSESSIONID=0BB3E93064EA45C33A5E8E6107C67350.authgwy-prod-w4u6xire.prod-ui-auth.pr502.cust.ash.wd; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: wd-alt-sessionid=; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: wd-alt-sessionid=5b8971ad26452e2f657e0107b62c6dbea2920856322dc68fd310bdd49a141bec.authgwy-prod-w4u6xire.prod-ui-auth.pr502.cust.ash.wd; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: WorkdayLB_UIAUTHGWY=3211694090.58935.0000; path=/; Httponly; Secure; SameSite=none X-Robots-Tag: noindex, nofollow X-Frame-Options: SAMEORIGIN Expires: Thu, 01 Jan 1970 00:00:00 GMT Cache-Control: no-store, no-cache Pragma: no-cache Location: https://federation.usbank.com/idp/startSSO.ping?PartnerSpId=http%3A%2F%2Fwww.workday.com%2Fusbank Content-Language: en-US Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=orouCFTmbia25i8jMWwZ8Ais6g8UL4TBmXmVmGa5UjinXDczVz5DKvqv4M105wvpBA%2BZmCgxo%2FBSz2e3mWNVhqztoTmNS5zRe%2FDrLcPbWGyhyhj8OjZMvDp2%2FQJgHKzezb2v"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
2024-10-11 14:09:03 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 64 30 66 36 63 66 62 35 66 61 66 38 63 30 36 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8d0f6cfb5faf8c06-EWRalt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49719	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:05 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-11 14:09:06 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=95778 Date: Fri, 11 Oct 2024 14:09:05 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49720	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:07 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-11 14:09:07 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=95807 Date: Fri, 11 Oct 2024 14:09:07 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-11 14:09:07 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.5	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:07 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:07 UTC	540	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:07 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 09 Oct 2024 03:56:29 GMT ETag: "0x8DCE8165B436280" x-ms-request-id: 933bb64d-501e-00a3-36e1-1ac0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140907Z-17db6f7c8cffjrz2m4352snqkw00000002e000000000448u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:07 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-11 14:09:07 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-11 14:09:07 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-11 14:09:07 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-11 14:09:07 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-11 14:09:07 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-11 14:09:07 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-11 14:09:07 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-11 14:09:07 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-11 14:09:07 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.5	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:08 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:08 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 1c7a9c3a-e01e-001f-4b80-1b1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140908Z-17db6f7c8cf5mtxmr1c51513n0000000028g000000004v35 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:08 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:08 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:08 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:08 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: a65062bf-401e-00ac-0ea3-1b0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140908Z-17db6f7c8cfbd7pgux3k6qfa6000000000tg00000000seu7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:08 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.5	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:08 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:08 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:08 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 3735e006-a01e-006f-3de4-1a13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140908Z-17db6f7c8cfthz27m290apz38g00000001kg00000000k0um x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:08 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:08 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:08 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:08 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 995dd301-801e-0035-24cd-1a752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140908Z-17db6f7c8cf5r84x48eqzcskcn00000001sg000000008fkh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:08 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:08 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:08 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 695c64e8-001e-0034-5de7-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140908Z-17db6f7c8cfnqpbkckdefmqa4400000002400000000003df x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:08 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49726	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:08 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Wo1VoYpRxAHS6LG&MD=DU4kBOnV HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-11 14:09:09 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: b015ff0a-f43d-49ad-a86a-c88e3055c939 MS-RequestId: dbf23425-58af-4d19-b333-92ef0996e1a3 MS-CV: bIr0vO3c8Uuqcetz.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 11 Oct 2024 14:09:08 GMT Connection: close Content-Length: 24490
2024-10-11 14:09:09 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-11 14:09:09 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:09 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:09 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: e4dd17a3-501e-007b-21d7-1a5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140909Z-17db6f7c8cf4g2pjavqhm24vp4000000022g00000000vcea x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:09 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:09 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:09 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: a417ae39-101e-008e-1f1c-1bcf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140909Z-17db6f7c8cf88vf5xverd8dar400000001hg000000005461 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:09 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:09 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:09 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 66411a6b-c01e-00a1-1eca-1a7e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140909Z-17db6f7c8cfnqpbkckdefmqa44000000021000000000cd94 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:09 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:09 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:09 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: dbc5b3b7-c01e-00a2-28e5-1a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140909Z-17db6f7c8cfq2j6f03aq9y8dns000000013000000000svat x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:09 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:09 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:09 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 6aeebda2-001e-008d-31ea-1ad91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140909Z-17db6f7c8cf5r84x48eqzcskcn00000001t00000000063gm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:09 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49744	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:09 UTC	2100	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1728655716085&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-10-11 14:09:09 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-10-11 14:09:09 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-10-11 14:09:10 UTC	475	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: ABE38FF872F64C9887B85317A9DCC0D5 Ref B: LAXEDGE1611 Ref C: 2024-10-11T14:09:10Z Date: Fri, 11 Oct 2024 14:09:10 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.2ded0117.1728655750.a2d0a49

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:10 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:10 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 4a155f70-001e-0017-2dd7-1a0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140910Z-17db6f7c8cfp6mfve0htepzbps00000001f0000000006t4v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:10 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:10 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:10 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: c9e2a668-e01e-001f-5fd7-1a1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140910Z-17db6f7c8cfthz27m290apz38g00000001p0000000009r8c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:10 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:10 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:10 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 458f517b-301e-000c-2fe6-1a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140910Z-17db6f7c8cftxb58mdzsfx75h400000001kg00000000bdbw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:10 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:10 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:10 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: e456ac6c-b01e-0097-6bbf-1a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140910Z-17db6f7c8cf5mtxmr1c51513n0000000022000000000vz0g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:10 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:10 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:10 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: bef1d05a-c01e-0034-2ea3-1b2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140910Z-17db6f7c8cf96l6t7bwyfgbkhw00000000x000000000uhpt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:10 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:11 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:11 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5355bdce-701e-0021-10ea-1a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140911Z-17db6f7c8cf5r84x48eqzcskcn00000001r000000000etkx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:11 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:11 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:11 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b85ce019-d01e-0028-4fe2-1a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140911Z-17db6f7c8cfspvtq2pgqb2w5k000000001xg000000008k63 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:11 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:11 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:11 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: f907bcfc-101e-007a-11f5-1a047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140911Z-17db6f7c8cf5r84x48eqzcskcn00000001qg00000000g21a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:11 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:11 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:11 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: e5c54f26-c01e-00a1-35de-1a7e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140911Z-17db6f7c8cfkzc2r8tan3gsa7n0000000250000000008emc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:11 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:11 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:11 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 77080ea6-601e-003e-13e1-1a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140911Z-17db6f7c8cfgqlr45m385mnngs00000000k00000000052k2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:11 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:11 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:11 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 94af9378-501e-0047-4aca-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140911Z-17db6f7c8cfbr2wt66emzt78g400000001m0000000007xpw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:11 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:11 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:11 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: fa6a24a8-e01e-0099-78e3-1ada8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140911Z-17db6f7c8cf88vf5xverd8dar400000001f000000000e8tg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:11 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:11 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:12 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:12 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: ec733f58-401e-0035-529c-1b82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140911Z-17db6f7c8cf6qp7g7r97wxgbqc000000017g00000000s1zc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:12 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:12 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:12 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:12 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 5007ca28-801e-00a0-7d20-1b2196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140912Z-17db6f7c8cfrkvzta66cx5wm6800000001g000000000e8f2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:12 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:12 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:12 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:12 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: f7492d67-a01e-000d-0ae4-1ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140912Z-17db6f7c8cf5r84x48eqzcskcn00000001p000000000pqn3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:12 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:12 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:12 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:12 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 7708100b-601e-003e-5be1-1a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140912Z-17db6f7c8cfhrxld7punfw920n00000000qg00000000n525 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:12 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:13 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:13 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:13 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 1507c9f1-d01e-007a-72eb-1af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140913Z-17db6f7c8cffjrz2m4352snqkw00000002e00000000044rp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:13 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:13 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:13 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:13 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 6ec52d65-901e-0083-299c-1bbb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140913Z-17db6f7c8cfgqlr45m385mnngs00000000e0000000004vfz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:13 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:13 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:13 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:13 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: c832ddd9-b01e-0084-55ca-1ad736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140913Z-17db6f7c8cf4g2pjavqhm24vp4000000024000000000r0zm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:13 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:13 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:13 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:13 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 94af937e-501e-0047-50ca-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140913Z-17db6f7c8cftxb58mdzsfx75h400000001kg00000000bdh5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:13 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:13 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:13 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:13 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: b59689ad-601e-005c-3fe1-1af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140913Z-17db6f7c8cftxb58mdzsfx75h400000001f000000000qr92 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:13 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:14 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:14 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:14 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 30f6abec-501e-005b-072b-1ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140914Z-17db6f7c8cfbr2wt66emzt78g400000001n0000000003cht x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:14 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:14 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:14 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:14 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: b8f0ecbf-701e-005c-16e0-1abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140914Z-17db6f7c8cfthz27m290apz38g00000001rg0000000001xs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:14 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:14 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:14 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:14 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 69483ed4-001e-0034-56df-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140914Z-17db6f7c8cfvzwz27u5rnq9kpc00000002cg000000003w85 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:14 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:14 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:14 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:14 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f4abfb5c-001e-00a2-33e5-1ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140914Z-17db6f7c8cfkzc2r8tan3gsa7n000000026000000000424n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:14 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:14 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:14 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:14 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 49fa3939-001e-0017-20cd-1a0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140914Z-17db6f7c8cfq2j6f03aq9y8dns000000019000000000392t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:14 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:14 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:15 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:14 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 65388d65-201e-0051-79ef-1a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140914Z-17db6f7c8cfspvtq2pgqb2w5k000000001u000000000pzwf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:15 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:15 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:15 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:15 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 38f28e88-001e-0046-4a22-1bda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140915Z-17db6f7c8cffjrz2m4352snqkw00000002bg00000000edq4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:15 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:15 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:15 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:15 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: e9bc8845-c01e-008d-06d9-1a2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140915Z-17db6f7c8cffjrz2m4352snqkw00000002ag00000000hp24 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:15 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:15 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:15 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:15 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 5aec4ebb-b01e-0002-57ca-1a1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140915Z-17db6f7c8cfnqpbkckdefmqa4400000001y000000000r94a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:15 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:15 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:15 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:15 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 72dafb48-001e-0079-44ea-1a12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140915Z-17db6f7c8cfhrxld7punfw920n00000000n000000000v4yc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:15 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:15 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:15 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:15 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 725817be-301e-0052-7ede-1a65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140915Z-17db6f7c8cfqxt4wrzg7st2fm8000000020000000000y74p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:15 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:15 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:16 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:15 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 95529de3-401e-0064-4a25-1b54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140915Z-17db6f7c8cfbd7pgux3k6qfa6000000000wg00000000eq6c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:16 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:15 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:16 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:15 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 9ba87e07-d01e-008e-2ae9-1a387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140915Z-17db6f7c8cf5r84x48eqzcskcn00000001pg00000000n9f4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:16 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:16 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:16 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:16 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 06589d36-d01e-0065-18bf-1ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140916Z-17db6f7c8cfq2j6f03aq9y8dns000000019000000000398k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:16 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:16 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:16 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:16 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 4508f1f3-f01e-0096-78e2-1a10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140916Z-17db6f7c8cfhzb2znbk0zyvf6n00000001pg00000000efwx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:16 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:16 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:16 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:16 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 77f86656-001e-000b-08e7-1a15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140916Z-17db6f7c8cfgqlr45m385mnngs00000000d0000000005ck4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:16 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:16 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:16 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:16 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 24993946-c01e-008e-55d7-1a7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140916Z-17db6f7c8cfspvtq2pgqb2w5k000000001tg00000000sz4w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:16 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:16 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:16 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c769d364-a01e-0032-511e-1b1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140916Z-17db6f7c8cfrkvzta66cx5wm6800000001gg00000000c19m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:17 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:17 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:17 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: bf053e75-701e-000d-6f20-1b6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140917Z-17db6f7c8cfgqlr45m385mnngs00000000m00000000052me x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:17 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:17 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:17 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:17 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 6dd9b2f2-501e-0035-4e87-1bc923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140917Z-17db6f7c8cfhrxld7punfw920n00000000t000000000aku8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:17 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:17 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:17 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:17 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 401112aa-201e-005d-70d7-1aafb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140917Z-17db6f7c8cfthz27m290apz38g00000001h000000000q3nw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:17 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:17 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:17 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:17 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 150221b2-d01e-007a-13e9-1af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140917Z-17db6f7c8cftxb58mdzsfx75h400000001eg00000000s3kw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:17 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:17 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:17 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:17 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: a2dd0523-901e-0064-1fe2-1ae8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140917Z-17db6f7c8cfbtxhfpq53x2ehdn00000002300000000012tf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:17 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:17 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:17 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:17 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: fed7985d-c01e-0034-3cd8-1a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140917Z-17db6f7c8cfkzc2r8tan3gsa7n0000000270000000000g80 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:17 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:17 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:18 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:17 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: a45e7bac-201e-003c-72f3-1a30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140917Z-17db6f7c8cf5mtxmr1c51513n0000000026g00000000cygv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:18 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:18 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:18 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:18 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: b3584e95-501e-0029-5500-1bd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140918Z-17db6f7c8cffjrz2m4352snqkw00000002eg0000000029v2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:18 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:18 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:18 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:18 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: e64af527-401e-0015-1bcc-1a0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140918Z-17db6f7c8cf5r84x48eqzcskcn00000001tg000000003v6c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:18 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:18 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:18 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:18 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 640ec2fa-901e-0083-59e1-1abb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140918Z-17db6f7c8cfhk56jxffpddwkzw00000001g000000000q79x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:18 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:18 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:18 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:18 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 54149fda-b01e-0001-69e2-1a46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140918Z-17db6f7c8cfhzb2znbk0zyvf6n00000001m000000000pkrd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:18 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:18 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:18 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:18 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 94508d5b-e01e-0052-6824-1ad9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140918Z-17db6f7c8cfrkvzta66cx5wm6800000001mg000000000v18 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:18 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:18 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:19 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:18 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 5dd409ef-301e-0099-0e1e-1b6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140918Z-17db6f7c8cffjrz2m4352snqkw000000028g00000000shmq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:19 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:19 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:19 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:19 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: fe1a2dd9-a01e-0053-57d8-1a8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140919Z-17db6f7c8cfbtxhfpq53x2ehdn0000000220000000004q20 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:19 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:19 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:19 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:19 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: cda1fd3a-301e-0096-2fde-1ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140919Z-17db6f7c8cfrkvzta66cx5wm6800000001fg00000000g7nr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:19 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:19 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:19 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:19 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 9542a535-401e-0064-601f-1b54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140919Z-17db6f7c8cfq2j6f03aq9y8dns00000001900000000039fa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:19 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:19 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:20 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:19 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: a0500a35-c01e-002b-5eef-1a6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140919Z-17db6f7c8cf5r84x48eqzcskcn00000001tg000000003v80 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:20 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:19 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:20 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:20 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 69457385-001e-0034-42de-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140920Z-17db6f7c8cfq2j6f03aq9y8dns000000019g000000001hp4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:20 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:20 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:20 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:20 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: b5702fc7-501e-0047-59e6-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140920Z-17db6f7c8cf96l6t7bwyfgbkhw000000012g000000006n95 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:20 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:20 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:20 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:20 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 4a3f7a17-001e-0017-5de5-1a0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140920Z-17db6f7c8cfspvtq2pgqb2w5k000000001v000000000megk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:20 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:21 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:22 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:21 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 0588c624-801e-0048-72e0-1af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140921Z-17db6f7c8cfkzc2r8tan3gsa7n000000022g00000000kds6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:22 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:21 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:22 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:21 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: a41636a0-e01e-0051-20e2-1a84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140921Z-17db6f7c8cfhzb2znbk0zyvf6n00000001p000000000gaqc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:22 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:21 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:22 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 7d3f2e15-101e-00a2-5aca-1a9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140921Z-17db6f7c8cfgqlr45m385mnngs00000000ng000000003egp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:22 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:21 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:22 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:21 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 67a092be-301e-0099-76e2-1a6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140921Z-17db6f7c8cftxb58mdzsfx75h400000001e000000000tswy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:22 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:23 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:24 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:24 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 7dbe029a-c01e-007a-2397-1bb877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140924Z-17db6f7c8cfhrxld7punfw920n00000000ng00000000uud7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:24 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:23 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:24 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:23 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 5cdd4b1c-301e-005d-338a-1be448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140923Z-17db6f7c8cf96l6t7bwyfgbkhw00000000xg00000000trtu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:24 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:23 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:24 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:24 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 9ad66ff1-501e-00a0-38ec-1a9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140924Z-17db6f7c8cf6qp7g7r97wxgbqc00000001a000000000gv3q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:24 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:23 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:24 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:24 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f76b9983-801e-0047-0eec-1a7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140924Z-17db6f7c8cfthz27m290apz38g00000001g000000000szn4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:24 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:24 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:25 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:24 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 8957210b-901e-005b-0df7-1a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140924Z-17db6f7c8cf5r84x48eqzcskcn00000001m000000000stgk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:25 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:24 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:25 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:24 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 2eee43c6-d01e-0066-0203-1bea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140924Z-17db6f7c8cfhzb2znbk0zyvf6n00000001kg00000000sndq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:25 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:24 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:25 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:24 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: c154ba59-a01e-0070-01d7-1a573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140924Z-17db6f7c8cf5mtxmr1c51513n00000000280000000006kcr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:25 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:24 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:25 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:24 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 588a334f-a01e-0098-1acf-1a8556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140924Z-17db6f7c8cfnqpbkckdefmqa44000000021000000000ce2a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:25 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	56336	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:25 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:25 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:25 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: defb5908-e01e-0033-2de2-1a4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140925Z-17db6f7c8cf5mtxmr1c51513n0000000023000000000ttak x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:25 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	56335	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:25 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:25 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:25 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: a671d058-901e-00a0-5ad6-1a6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140925Z-17db6f7c8cfwtn5x6ye8p8q9m000000000kg0000000077ky x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:25 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	56337	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:25 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:25 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:25 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 7d81a33d-101e-00a2-42e1-1a9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140925Z-17db6f7c8cf96l6t7bwyfgbkhw000000011000000000d9b5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:25 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	56338	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:25 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:25 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:25 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 07ebf894-801e-008c-19d8-1a7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140925Z-17db6f7c8cfbd7pgux3k6qfa6000000000u000000000sm1p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:25 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	56339	20.242.39.171	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:25 UTC	142	OUT	GET /clientwebservice/ping HTTP/1.1 Connection: Keep-Alive User-Agent: DNS resiliency checker/1.0 Host: fe3cr.delivery.mp.microsoft.com
2024-10-11 14:09:25 UTC	234	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Expires: -1 Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Date: Fri, 11 Oct 2024 14:09:25 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	56342	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:26 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:26 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:26 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: e6504dd7-401e-0015-6cce-1a0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140926Z-17db6f7c8cf5r84x48eqzcskcn00000001pg00000000nac9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:26 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	56341	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:26 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:26 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:26 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 07f85e87-a01e-003d-78df-1a98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140926Z-17db6f7c8cf5r84x48eqzcskcn00000001ng00000000qya6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:26 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	56340	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:26 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:26 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:26 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: d1236033-501e-008f-33ea-1a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140926Z-17db6f7c8cfnqpbkckdefmqa44000000021000000000ce4u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:26 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	56343	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:26 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:26 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:26 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: d1e3fcb8-a01e-001e-0795-1b49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140926Z-17db6f7c8cfbd7pgux3k6qfa6000000000yg0000000064zr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:26 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:26 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:26 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:26 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: fdc7e0a4-c01e-0034-181f-1b2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140926Z-17db6f7c8cf88vf5xverd8dar400000001k0000000003632 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:26 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	56344	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:26 UTC	124	OUT	GET /sls/ping HTTP/1.1 Connection: Keep-Alive User-Agent: DNS resiliency checker/1.0 Host: slscr.update.microsoft.com
2024-10-11 14:09:27 UTC	318	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Expires: -1 MS-CV: W0h6SMFlBUeJEjHi.0 MS-RequestId: 0bd5b244-00a5-44ce-b29c-984d90ed6bd8 MS-CorrelationId: 7e24b76a-a2cb-48fb-b0fa-0bc5854d59bd X-Content-Type-Options: nosniff Date: Fri, 11 Oct 2024 14:09:26 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	56345	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:27 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:27 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:27 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 36ec684a-f01e-0052-24da-1a9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140927Z-17db6f7c8cfhk56jxffpddwkzw00000001mg00000000ankh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:27 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	56346	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:27 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:27 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:27 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: b764448c-501e-008c-4097-1bcd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140927Z-17db6f7c8cfbd7pgux3k6qfa6000000000z0000000003wps x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:27 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	56347	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:27 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:27 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:27 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: efbad5a3-301e-0000-2ec0-1aeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140927Z-17db6f7c8cfthz27m290apz38g00000001qg000000003nsv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:27 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	56348	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:27 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:27 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:27 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 3f82dd78-601e-005c-4797-1bf06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140927Z-17db6f7c8cfbd7pgux3k6qfa6000000000wg00000000er2r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:27 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	56349	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:27 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:27 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:27 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 8d6d9129-701e-0001-43c0-1ab110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140927Z-17db6f7c8cfbtxhfpq53x2ehdn00000001wg00000000rprf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:27 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	56351	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:28 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:28 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:28 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: fe1a38a0-a01e-0053-6ad8-1a8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140928Z-17db6f7c8cf5mtxmr1c51513n0000000025000000000muta x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:28 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	56352	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:28 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:28 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:28 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: fd1eaa3c-c01e-0034-22e2-1a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140928Z-17db6f7c8cfkzc2r8tan3gsa7n0000000250000000008fxk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:28 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	56350	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:28 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:28 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:28 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: e8fbd797-601e-005c-7ee6-1af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140928Z-17db6f7c8cfq2j6f03aq9y8dns000000016000000000ezwn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:28 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	56353	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:28 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:28 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:28 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 35289574-d01e-00ad-2923-1be942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140928Z-17db6f7c8cf88vf5xverd8dar400000001fg00000000dm6w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:28 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	56354	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:28 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:28 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:28 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 44110a29-201e-00aa-4c81-1a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140928Z-17db6f7c8cfnqpbkckdefmqa44000000021000000000ce8g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:28 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	56355	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:28 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:28 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:28 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: fa68fd7e-e01e-0099-0ae2-1ada8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140928Z-17db6f7c8cf88vf5xverd8dar400000001fg00000000dm8t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:28 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	56356	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:28 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:28 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:28 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 5892b05f-f01e-0085-23d9-1a88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140928Z-17db6f7c8cfrkvzta66cx5wm6800000001g000000000e9gp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:28 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	56357	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:28 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:28 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:28 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: f4958516-001e-00a2-15de-1ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140928Z-17db6f7c8cf5r84x48eqzcskcn00000001s000000000avvy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:28 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	56359	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:28 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:28 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:28 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: d113afee-501e-008f-14e4-1a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140928Z-17db6f7c8cf96l6t7bwyfgbkhw00000000zg00000000mbe8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:28 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	56358	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:28 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Wo1VoYpRxAHS6LG&MD=DU4kBOnV HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-11 14:09:29 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 4eea87af-f83e-492f-9a8e-5a926311530b MS-RequestId: df138d61-0a51-4ff9-8767-8e30e6ed45a4 MS-CV: SSQwKeh1LEaGkWwA.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 11 Oct 2024 14:09:29 GMT Connection: close Content-Length: 24490
2024-10-11 14:09:29 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-11 14:09:29 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	56360	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:29 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:29 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:29 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: aa10c15c-401e-0067-377e-1b09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140929Z-17db6f7c8cf6qp7g7r97wxgbqc000000018g00000000q272 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:29 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	56361	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:29 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:29 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:29 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 05046913-601e-000d-6fd8-1a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140929Z-17db6f7c8cftxb58mdzsfx75h400000001dg00000000uzyu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:29 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	56362	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:29 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:29 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:29 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: a032a6e1-c01e-002b-15e5-1a6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140929Z-17db6f7c8cf96l6t7bwyfgbkhw00000000z000000000p1cy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:29 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	56363	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:29 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:29 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:29 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 03f8bcf3-701e-0098-27e6-1a395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140929Z-17db6f7c8cfbtxhfpq53x2ehdn000000020g00000000a18w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:29 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	56364	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:29 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:29 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:29 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: ecaa5255-c01e-008d-52bf-1a2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140929Z-17db6f7c8cf4g2pjavqhm24vp40000000280000000009h57 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:29 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	56365	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:29 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:29 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:29 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 083451f6-401e-0035-25c0-1a82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140929Z-17db6f7c8cf4g2pjavqhm24vp4000000027g00000000bg46 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:29 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	56366	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:30 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Wo1VoYpRxAHS6LG&MD=DU4kBOnV HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-11 14:09:30 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 9df49dad-cca8-4cbd-bc12-e5425198d63d MS-RequestId: e2e5f5f3-d926-43e8-b24e-f7ea2c1d75e8 MS-CV: SKZfAx9MDka/xAi7.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 11 Oct 2024 14:09:29 GMT Connection: close Content-Length: 30005
2024-10-11 14:09:30 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-11 14:09:30 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	56367	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:30 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:30 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:30 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 1c06004d-d01e-005a-0ee5-1a7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140930Z-17db6f7c8cfqxt4wrzg7st2fm80000000260000000004b5v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:30 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	56370	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:30 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:30 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:30 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 842b74fa-501e-008c-2f04-1acd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140930Z-17db6f7c8cf4g2pjavqhm24vp4000000022g00000000vdw8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:30 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	56368	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:30 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:30 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:30 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: d1a23a3b-201e-0085-4ca2-1b34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140930Z-17db6f7c8cf6qp7g7r97wxgbqc00000001a000000000gvdg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:30 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	56369	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:30 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:30 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:30 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: df344972-701e-001e-12cd-1af5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140930Z-17db6f7c8cf9t48t10xeshst8c00000001ug00000000thwx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:30 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	56371	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:30 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:30 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:30 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: c08f385d-301e-0033-1fca-1afa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140930Z-17db6f7c8cfspvtq2pgqb2w5k000000001t000000000tqax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:30 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	56372	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:31 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:31 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:31 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 0506fa48-b01e-001e-4cc1-1a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140931Z-17db6f7c8cfspvtq2pgqb2w5k000000001u000000000q0r0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:31 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	56375	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:31 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:31 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:31 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: c21fd998-001e-0014-4ce5-1a5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140931Z-17db6f7c8cfwtn5x6ye8p8q9m000000000p00000000045ta x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:31 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	56373	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:31 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:31 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:31 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 3f82ef55-601e-005c-0a97-1bf06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140931Z-17db6f7c8cfgqlr45m385mnngs00000000g000000000512u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:31 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	56374	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:31 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:31 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:31 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 62bb5aab-101e-0034-27d7-1a96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140931Z-17db6f7c8cffjrz2m4352snqkw00000002a000000000n8zs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:31 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	56376	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:31 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:31 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:31 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 08565fb3-401e-0029-27c4-1a9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140931Z-17db6f7c8cfthz27m290apz38g00000001n000000000e7zh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:31 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	56377	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:32 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:32 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:32 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: e2476cc5-001e-00ad-1ecd-1a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140932Z-17db6f7c8cfspvtq2pgqb2w5k000000001u000000000q0s1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:32 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	56379	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:32 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:32 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:32 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: e28c1875-001e-00ad-40e2-1a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140932Z-17db6f7c8cf88vf5xverd8dar400000001k00000000036he x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:32 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	56378	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:32 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:32 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:32 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: ecb94678-501e-0035-51d8-1ac923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140932Z-17db6f7c8cf88vf5xverd8dar400000001gg000000009gzv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:32 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	56380	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:32 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:32 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:32 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 83ee3589-001e-00ad-137e-1b554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140932Z-17db6f7c8cfgqlr45m385mnngs00000000k00000000053ud x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:32 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	56381	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:32 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:32 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:32 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 6eea93bb-701e-0097-0521-1bb8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140932Z-17db6f7c8cf5r84x48eqzcskcn00000001m000000000su76 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:32 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	56382	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:32 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:32 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:32 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: b9726785-901e-00ac-76d7-1ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140932Z-17db6f7c8cfgqlr45m385mnngs00000000n0000000005nvh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:32 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	56383	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:32 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:33 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:32 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 18adff54-401e-008c-27da-1a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140932Z-17db6f7c8cfqxt4wrzg7st2fm8000000023g00000000gypb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:33 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	56384	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:32 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:33 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:32 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 374dd3c9-a01e-006f-2dec-1a13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140932Z-17db6f7c8cfqxt4wrzg7st2fm80000000270000000000a9p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:33 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	56385	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:32 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:33 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:32 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: f766e345-d01e-0014-78e6-1aed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140932Z-17db6f7c8cfvzwz27u5rnq9kpc000000028000000000pyxn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:33 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	56386	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:33 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:33 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:33 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 63590950-201e-0085-2bd8-1a34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140933Z-17db6f7c8cfthz27m290apz38g00000001mg00000000etkn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:33 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	56387	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:33 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:33 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:33 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 934b2f53-501e-00a3-32e6-1ac0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140933Z-17db6f7c8cfqkqk8bn4ck6f72000000001pg00000000txrm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:33 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	56388	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:33 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:33 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:33 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 17ba822c-f01e-001f-0875-1a5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140933Z-17db6f7c8cf6qp7g7r97wxgbqc000000018000000000qvhd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:33 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	56390	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:33 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:33 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:33 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 7843ce7c-701e-0053-331e-1b3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140933Z-17db6f7c8cf9t48t10xeshst8c00000001t000000000xehb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:33 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	56389	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:33 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:33 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:33 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: cb98536f-301e-003f-4895-1b266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140933Z-17db6f7c8cfhrxld7punfw920n00000000n000000000v6f7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:33 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	56391	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:33 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:34 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:33 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 6e61a485-701e-0097-1ff3-1ab8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140933Z-17db6f7c8cf5mtxmr1c51513n0000000023000000000ttue x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:34 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	56392	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:34 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:34 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:34 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: d178e097-d01e-005a-72ac-1b7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140934Z-17db6f7c8cfbd7pgux3k6qfa6000000000y0000000007v15 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:34 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	56393	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:34 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:34 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:34 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 0a20bae4-d01e-005a-49d9-1a7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140934Z-17db6f7c8cfqkqk8bn4ck6f72000000001u000000000899z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:34 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	56394	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:34 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:34 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:34 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 83695c77-e01e-001f-80c4-1a1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140934Z-17db6f7c8cfbtxhfpq53x2ehdn00000001x000000000qu70 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:34 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Target ID:	0
Start time:	10:08:55
Start date:	11/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	10:08:58
Start date:	11/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1976,i,17685590314672914304,1235028069142282676,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	10:09:00
Start date:	11/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.myworkday.com/usbank/email-universal/inst/779$21901907/rel-task/2997$4086.htmld"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://federation.usbank.com/idp/startSSO.ping?PartnerSpId=http%3A%2F%2Fwww.workday.com%2Fusbank	HTTP Parser: Number of links: 0
Source: https://federation.usbank.com/idp/N5ARsUgk1K/resumeSAML20/idp/startSSO.ping	HTTP Parser: Number of links: 0

Source: https://federation.usbank.com/idp/startSSO.ping?PartnerSpId=http%3A%2F%2Fwww.workday.com%2Fusbank	HTTP Parser: No favicon
Source: https://federation.usbank.com/idp/startSSO.ping?PartnerSpId=http%3A%2F%2Fwww.workday.com%2Fusbank	HTTP Parser: No favicon
Source: https://federation.usbank.com/idp/N5ARsUgk1K/resumeSAML20/idp/startSSO.ping	HTTP Parser: No favicon
Source: https://federation.usbank.com/idp/N5ARsUgk1K/resumeSAML20/idp/startSSO.ping	HTTP Parser: No favicon
Source: https://federation.usbank.com/idp/N5ARsUgk1K/resumeSAML20/idp/startSSO.ping	HTTP Parser: No favicon
Source: https://federation.usbank.com/idp/N5ARsUgk1K/resumeSAML20/idp/startSSO.ping	HTTP Parser: No favicon

Source: https://federation.usbank.com/idp/startSSO.ping?PartnerSpId=http%3A%2F%2Fwww.workday.com%2Fusbank	HTTP Parser: No <meta name="author".. found
Source: https://federation.usbank.com/idp/startSSO.ping?PartnerSpId=http%3A%2F%2Fwww.workday.com%2Fusbank	HTTP Parser: No <meta name="author".. found
Source: https://federation.usbank.com/idp/N5ARsUgk1K/resumeSAML20/idp/startSSO.ping	HTTP Parser: No <meta name="author".. found
Source: https://federation.usbank.com/idp/N5ARsUgk1K/resumeSAML20/idp/startSSO.ping	HTTP Parser: No <meta name="author".. found
Source: https://federation.usbank.com/idp/N5ARsUgk1K/resumeSAML20/idp/startSSO.ping	HTTP Parser: No <meta name="author".. found

Source: https://federation.usbank.com/idp/startSSO.ping?PartnerSpId=http%3A%2F%2Fwww.workday.com%2Fusbank	HTTP Parser: No <meta name="copyright".. found
Source: https://federation.usbank.com/idp/startSSO.ping?PartnerSpId=http%3A%2F%2Fwww.workday.com%2Fusbank	HTTP Parser: No <meta name="copyright".. found
Source: https://federation.usbank.com/idp/N5ARsUgk1K/resumeSAML20/idp/startSSO.ping	HTTP Parser: No <meta name="copyright".. found
Source: https://federation.usbank.com/idp/N5ARsUgk1K/resumeSAML20/idp/startSSO.ping	HTTP Parser: No <meta name="copyright".. found
Source: https://federation.usbank.com/idp/N5ARsUgk1K/resumeSAML20/idp/startSSO.ping	HTTP Parser: No <meta name="copyright".. found

Source: global traffic	TCP traffic: 192.168.2.5:60697 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.5:56334 -> 162.159.36.2:53

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: global traffic	DNS traffic detected: DNS query: www.myworkday.com
Source: global traffic	DNS traffic detected: DNS query: federation.usbank.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: s.go-mpulse.net
Source: global traffic	DNS traffic detected: DNS query: c.go-mpulse.net
Source: global traffic	DNS traffic detected: DNS query: baxhwiix24leuzyjggaa-f-249fd768e-clientnsv4-s.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: 0217991c.akstat.io
Source: global traffic	DNS traffic detected: DNS query: baxhwiix24leuzyjgghq-f-8541f95c1-clientnsv4-s.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: 684dd32a.akstat.io
Source: global traffic	DNS traffic detected: DNS query: 171.39.242.20.in-addr.arpa
Source: global traffic	DNS traffic detected: DNS query: 684dd32b.akstat.io
Source: global traffic	DNS traffic detected: DNS query: trial-eum-clientnsv4-s.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: trial-eum-clienttons-s.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: 8-46-123-33_s-2-16-164-88_ts-1728655780-clienttons-s.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: baxhwiiccn7jgzyjggsa-ponbmr-1fde3c829-clientnsv4-s.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: baxhwiix24leuzyjgg4q-f-f64507146-clientnsv4-s.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: baxhwiix24leuzyjghfa-f-c915b8d21-clientnsv4-s.akamaihd.net

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.myworkday.com/usbank/email-universal/inst/779$21901907/rel-task/2997$4086.htmld

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2276_1720006286\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2276_1720006286\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2276_1720006286\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2276_1720006286\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2276_1720006286\sets.json

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Windows Analysis Report
https://www.myworkday.com/usbank/email-universal/inst/779$21901907/rel-task/2997$4086.htmld