Edit tour

Windows Analysis Report
https://eu.knowbe4.com/auth/saml/c33d8069242e

Overview

General Information

Sample URL:	https://eu.knowbe4.com/auth/saml/c33d8069242e
Analysis ID:	1531693
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML title does not match URL

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6260 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4916 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1656 --field-trial-handle=1936,i,5408255694739210393,11818520442255201119,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2680 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://eu.knowbe4.com/auth/saml/c33d8069242e" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://login.microsoftonline.com/b7dba93e-7b6e-4933-abb6-e1739feb42e5/saml2?SAMLRequest=fZLBbtswEER%2FRTeeKIkSLUuEZUCJUcCoWxR2mkMvAUmtGiIU6XKpuv37ygqCuof0uph5s5jdDcrRnkU3xWd3hB8TYEw6RAjReHfvHU4jhBOEn0bD1%2BOhJc8xnlFkGUzpi%2FMXBTzVfszkDMiurEyXZV%2FnVVPwAjItrVVSv5BkN5ONk1fsX4j1341LR6ODRz9E76xxsPDUuleyKYGuVQWUN2VJpVIVBbYumwHUDF8teQVJ9ruWPFVDw1d1VdK%2B7iXlOQMqtaopg7Lm0Cs2VKtZijjB3mGULrakyAtOWU4Ze2Bc5I3g%2BTeSPELAZcsizUnya7QOxTWpJVNwwks0KJwcAUXU4tR9OohZKORbabeW8%2F895%2BCj196S7eaqFst2Yftx7vUO%2BCa7HW5eD%2FV5hux3X7w1%2BnfSWesv9wFkhJbEMAFJPvgwyvh%2BLEvZMjE9HRapgFEa2%2FV9AESSbV9T%2F%2F2I7R8%3D	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/b7dba93e-7b6e-4933-abb6-e1739feb42e5/saml2?SAMLRequest=fZLBbtswEER%2FRTeeKIkSLUuEZUCJUcCoWxR2mkMvAUmtGiIU6XKpuv37ygqCuof0uph5s5jdDcrRnkU3xWd3hB8TYEw6RAjReHfvHU4jhBOEn0bD1%2BOhJc8xnlFkGUzpi%2FMXBTzVfszkDMiurEyXZV%2FnVVPwAjItrVVSv5BkN5ONk1fsX4j1341LR6ODRz9E76xxsPDUuleyKYGuVQWUN2VJpVIVBbYumwHUDF8teQVJ9ruWPFVDw1d1VdK%2B7iXlOQMqtaopg7Lm0Cs2VKtZijjB3mGULrakyAtOWU4Ze2Bc5I3g%2BTeSPELAZcsizUnya7QOxTWpJVNwwks0KJwcAUXU4tR9OohZKORbabeW8%2F895%2BCj196S7eaqFst2Yftx7vUO%2BCa7HW5eD%2FV5hux3X7w1%2BnfSWesv9wFkhJbEMAFJPvgwyvh%2BLEvZMjE9HRapgFEa2%2FV9AESSbV9T%2F%2F2I7R8%3D&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://login.microsoftonline.com/b7dba93e-7b6e-4933-abb6-e1739feb42e5/saml2?SAMLRequest=fZLBbtswEER%2FRTeeKIkSLUuEZUCJUcCoWxR2mkMvAUmtGiIU6XKpuv37ygqCuof0uph5s5jdDcrRnkU3xWd3hB8TYEw6RAjReHfvHU4jhBOEn0bD1%2BOhJc8xnlFkGUzpi%2FMXBTzVfszkDMiurEyXZV%2FnVVPwAjItrVVSv5BkN5ONk1fsX4j1341LR6ODRz9E76xxsPDUuleyKYGuVQWUN2VJpVIVBbYumwHUDF8teQVJ9ruWPFVDw1d1VdK%2B7iXlOQMqtaopg7Lm0Cs2VKtZijjB3mGULrakyAtOWU4Ze2Bc5I3g%2BTeSPELAZcsizUnya7QOxTWpJVNwwks0KJwcAUXU4tR9OohZKORbabeW8%2F895%2BCj196S7eaqFst2Yftx7vUO%2BCa7HW5eD%2FV5hux3X7w1%2BnfSWesv9wFkhJbEMAFJPvgwyvh%2BLEvZMjE9HRapgFEa2%2FV9AESSbV9T%2F%2F2I7R8%3D	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/b7dba93e-7b6e-4933-abb6-e1739feb42e5/saml2?SAMLRequest=fZLBbtswEER%2FRTeeKIkSLUuEZUCJUcCoWxR2mkMvAUmtGiIU6XKpuv37ygqCuof0uph5s5jdDcrRnkU3xWd3hB8TYEw6RAjReHfvHU4jhBOEn0bD1%2BOhJc8xnlFkGUzpi%2FMXBTzVfszkDMiurEyXZV%2FnVVPwAjItrVVSv5BkN5ONk1fsX4j1341LR6ODRz9E76xxsPDUuleyKYGuVQWUN2VJpVIVBbYumwHUDF8teQVJ9ruWPFVDw1d1VdK%2B7iXlOQMqtaopg7Lm0Cs2VKtZijjB3mGULrakyAtOWU4Ze2Bc5I3g%2BTeSPELAZcsizUnya7QOxTWpJVNwwks0KJwcAUXU4tR9OohZKORbabeW8%2F895%2BCj196S7eaqFst2Yftx7vUO%2BCa7HW5eD%2FV5hux3X7w1%2BnfSWesv9wFkhJbEMAFJPvgwyvh%2BLEvZMjE9HRapgFEa2%2FV9AESSbV9T%2F%2F2I7R8%3D&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL

Source: https://login.microsoftonline.com/b7dba93e-7b6e-4933-abb6-e1739feb42e5/saml2?SAMLRequest=fZLBbtswEER%2FRTeeKIkSLUuEZUCJUcCoWxR2mkMvAUmtGiIU6XKpuv37ygqCuof0uph5s5jdDcrRnkU3xWd3hB8TYEw6RAjReHfvHU4jhBOEn0bD1%2BOhJc8xnlFkGUzpi%2FMXBTzVfszkDMiurEyXZV%2FnVVPwAjItrVVSv5BkN5ONk1fsX4j1341LR6ODRz9E76xxsPDUuleyKYGuVQWUN2VJpVIVBbYumwHUDF8teQVJ9ruWPFVDw1d1VdK%2B7iXlOQMqtaopg7Lm0Cs2VKtZijjB3mGULrakyAtOWU4Ze2Bc5I3g%2BTeSPELAZcsizUnya7QOxTWpJVNwwks0KJwcAUXU4tR9OohZKORbabeW8%2F895%2BCj196S7eaqFst2Yftx7vUO%2BCa7HW5eD%2FV5hux3X7w1%2BnfSWesv9wFkhJbEMAFJPvgwyvh%2BLEvZMjE9HRapgFEa2%2FV9AESSbV9T%2F%2F2I7R8%3D&sso_reload=true

HTTP Parser: <input type="password" .../> found

HTTP Parser: No favicon

Source: https://login.microsoftonline.com/b7dba93e-7b6e-4933-abb6-e1739feb42e5/saml2?SAMLRequest=fZLBbtswEER%2FRTeeKIkSLUuEZUCJUcCoWxR2mkMvAUmtGiIU6XKpuv37ygqCuof0uph5s5jdDcrRnkU3xWd3hB8TYEw6RAjReHfvHU4jhBOEn0bD1%2BOhJc8xnlFkGUzpi%2FMXBTzVfszkDMiurEyXZV%2FnVVPwAjItrVVSv5BkN5ONk1fsX4j1341LR6ODRz9E76xxsPDUuleyKYGuVQWUN2VJpVIVBbYumwHUDF8teQVJ9ruWPFVDw1d1VdK%2B7iXlOQMqtaopg7Lm0Cs2VKtZijjB3mGULrakyAtOWU4Ze2Bc5I3g%2BTeSPELAZcsizUnya7QOxTWpJVNwwks0KJwcAUXU4tR9OohZKORbabeW8%2F895%2BCj196S7eaqFst2Yftx7vUO%2BCa7HW5eD%2FV5hux3X7w1%2BnfSWesv9wFkhJbEMAFJPvgwyvh%2BLEvZMjE9HRapgFEa2%2FV9AESSbV9T%2F%2F2I7R8%3D	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/b7dba93e-7b6e-4933-abb6-e1739feb42e5/saml2?SAMLRequest=fZLBbtswEER%2FRTeeKIkSLUuEZUCJUcCoWxR2mkMvAUmtGiIU6XKpuv37ygqCuof0uph5s5jdDcrRnkU3xWd3hB8TYEw6RAjReHfvHU4jhBOEn0bD1%2BOhJc8xnlFkGUzpi%2FMXBTzVfszkDMiurEyXZV%2FnVVPwAjItrVVSv5BkN5ONk1fsX4j1341LR6ODRz9E76xxsPDUuleyKYGuVQWUN2VJpVIVBbYumwHUDF8teQVJ9ruWPFVDw1d1VdK%2B7iXlOQMqtaopg7Lm0Cs2VKtZijjB3mGULrakyAtOWU4Ze2Bc5I3g%2BTeSPELAZcsizUnya7QOxTWpJVNwwks0KJwcAUXU4tR9OohZKORbabeW8%2F895%2BCj196S7eaqFst2Yftx7vUO%2BCa7HW5eD%2FV5hux3X7w1%2BnfSWesv9wFkhJbEMAFJPvgwyvh%2BLEvZMjE9HRapgFEa2%2FV9AESSbV9T%2F%2F2I7R8%3D&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/b7dba93e-7b6e-4933-abb6-e1739feb42e5/saml2?SAMLRequest=fZLBbtswEER%2FRTeeKIkSLUuEZUCJUcCoWxR2mkMvAUmtGiIU6XKpuv37ygqCuof0uph5s5jdDcrRnkU3xWd3hB8TYEw6RAjReHfvHU4jhBOEn0bD1%2BOhJc8xnlFkGUzpi%2FMXBTzVfszkDMiurEyXZV%2FnVVPwAjItrVVSv5BkN5ONk1fsX4j1341LR6ODRz9E76xxsPDUuleyKYGuVQWUN2VJpVIVBbYumwHUDF8teQVJ9ruWPFVDw1d1VdK%2B7iXlOQMqtaopg7Lm0Cs2VKtZijjB3mGULrakyAtOWU4Ze2Bc5I3g%2BTeSPELAZcsizUnya7QOxTWpJVNwwks0KJwcAUXU4tR9OohZKORbabeW8%2F895%2BCj196S7eaqFst2Yftx7vUO%2BCa7HW5eD%2FV5hux3X7w1%2BnfSWesv9wFkhJbEMAFJPvgwyvh%2BLEvZMjE9HRapgFEa2%2FV9AESSbV9T%2F%2F2I7R8%3D&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/b7dba93e-7b6e-4933-abb6-e1739feb42e5/saml2?SAMLRequest=fZLBbtswEER%2FRTeeKIkSLUuEZUCJUcCoWxR2mkMvAUmtGiIU6XKpuv37ygqCuof0uph5s5jdDcrRnkU3xWd3hB8TYEw6RAjReHfvHU4jhBOEn0bD1%2BOhJc8xnlFkGUzpi%2FMXBTzVfszkDMiurEyXZV%2FnVVPwAjItrVVSv5BkN5ONk1fsX4j1341LR6ODRz9E76xxsPDUuleyKYGuVQWUN2VJpVIVBbYumwHUDF8teQVJ9ruWPFVDw1d1VdK%2B7iXlOQMqtaopg7Lm0Cs2VKtZijjB3mGULrakyAtOWU4Ze2Bc5I3g%2BTeSPELAZcsizUnya7QOxTWpJVNwwks0KJwcAUXU4tR9OohZKORbabeW8%2F895%2BCj196S7eaqFst2Yftx7vUO%2BCa7HW5eD%2FV5hux3X7w1%2BnfSWesv9wFkhJbEMAFJPvgwyvh%2BLEvZMjE9HRapgFEa2%2FV9AESSbV9T%2F%2F2I7R8%3D&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/b7dba93e-7b6e-4933-abb6-e1739feb42e5/saml2?SAMLRequest=fZLBbtswEER%2FRTeeKIkSLUuEZUCJUcCoWxR2mkMvAUmtGiIU6XKpuv37ygqCuof0uph5s5jdDcrRnkU3xWd3hB8TYEw6RAjReHfvHU4jhBOEn0bD1%2BOhJc8xnlFkGUzpi%2FMXBTzVfszkDMiurEyXZV%2FnVVPwAjItrVVSv5BkN5ONk1fsX4j1341LR6ODRz9E76xxsPDUuleyKYGuVQWUN2VJpVIVBbYumwHUDF8teQVJ9ruWPFVDw1d1VdK%2B7iXlOQMqtaopg7Lm0Cs2VKtZijjB3mGULrakyAtOWU4Ze2Bc5I3g%2BTeSPELAZcsizUnya7QOxTWpJVNwwks0KJwcAUXU4tR9OohZKORbabeW8%2F895%2BCj196S7eaqFst2Yftx7vUO%2BCa7HW5eD%2FV5hux3X7w1%2BnfSWesv9wFkhJbEMAFJPvgwyvh%2BLEvZMjE9HRapgFEa2%2FV9AESSbV9T%2F%2F2I7R8%3D&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/b7dba93e-7b6e-4933-abb6-e1739feb42e5/saml2?SAMLRequest=fZLBbtswEER%2FRTeeKIkSLUuEZUCJUcCoWxR2mkMvAUmtGiIU6XKpuv37ygqCuof0uph5s5jdDcrRnkU3xWd3hB8TYEw6RAjReHfvHU4jhBOEn0bD1%2BOhJc8xnlFkGUzpi%2FMXBTzVfszkDMiurEyXZV%2FnVVPwAjItrVVSv5BkN5ONk1fsX4j1341LR6ODRz9E76xxsPDUuleyKYGuVQWUN2VJpVIVBbYumwHUDF8teQVJ9ruWPFVDw1d1VdK%2B7iXlOQMqtaopg7Lm0Cs2VKtZijjB3mGULrakyAtOWU4Ze2Bc5I3g%2BTeSPELAZcsizUnya7QOxTWpJVNwwks0KJwcAUXU4tR9OohZKORbabeW8%2F895%2BCj196S7eaqFst2Yftx7vUO%2BCa7HW5eD%2FV5hux3X7w1%2BnfSWesv9wFkhJbEMAFJPvgwyvh%2BLEvZMjE9HRapgFEa2%2FV9AESSbV9T%2F%2F2I7R8%3D	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/b7dba93e-7b6e-4933-abb6-e1739feb42e5/saml2?SAMLRequest=fZLBbtswEER%2FRTeeKIkSLUuEZUCJUcCoWxR2mkMvAUmtGiIU6XKpuv37ygqCuof0uph5s5jdDcrRnkU3xWd3hB8TYEw6RAjReHfvHU4jhBOEn0bD1%2BOhJc8xnlFkGUzpi%2FMXBTzVfszkDMiurEyXZV%2FnVVPwAjItrVVSv5BkN5ONk1fsX4j1341LR6ODRz9E76xxsPDUuleyKYGuVQWUN2VJpVIVBbYumwHUDF8teQVJ9ruWPFVDw1d1VdK%2B7iXlOQMqtaopg7Lm0Cs2VKtZijjB3mGULrakyAtOWU4Ze2Bc5I3g%2BTeSPELAZcsizUnya7QOxTWpJVNwwks0KJwcAUXU4tR9OohZKORbabeW8%2F895%2BCj196S7eaqFst2Yftx7vUO%2BCa7HW5eD%2FV5hux3X7w1%2BnfSWesv9wFkhJbEMAFJPvgwyvh%2BLEvZMjE9HRapgFEa2%2FV9AESSbV9T%2F%2F2I7R8%3D&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/b7dba93e-7b6e-4933-abb6-e1739feb42e5/saml2?SAMLRequest=fZLBbtswEER%2FRTeeKIkSLUuEZUCJUcCoWxR2mkMvAUmtGiIU6XKpuv37ygqCuof0uph5s5jdDcrRnkU3xWd3hB8TYEw6RAjReHfvHU4jhBOEn0bD1%2BOhJc8xnlFkGUzpi%2FMXBTzVfszkDMiurEyXZV%2FnVVPwAjItrVVSv5BkN5ONk1fsX4j1341LR6ODRz9E76xxsPDUuleyKYGuVQWUN2VJpVIVBbYumwHUDF8teQVJ9ruWPFVDw1d1VdK%2B7iXlOQMqtaopg7Lm0Cs2VKtZijjB3mGULrakyAtOWU4Ze2Bc5I3g%2BTeSPELAZcsizUnya7QOxTWpJVNwwks0KJwcAUXU4tR9OohZKORbabeW8%2F895%2BCj196S7eaqFst2Yftx7vUO%2BCa7HW5eD%2FV5hux3X7w1%2BnfSWesv9wFkhJbEMAFJPvgwyvh%2BLEvZMjE9HRapgFEa2%2FV9AESSbV9T%2F%2F2I7R8%3D&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/b7dba93e-7b6e-4933-abb6-e1739feb42e5/saml2?SAMLRequest=fZLBbtswEER%2FRTeeKIkSLUuEZUCJUcCoWxR2mkMvAUmtGiIU6XKpuv37ygqCuof0uph5s5jdDcrRnkU3xWd3hB8TYEw6RAjReHfvHU4jhBOEn0bD1%2BOhJc8xnlFkGUzpi%2FMXBTzVfszkDMiurEyXZV%2FnVVPwAjItrVVSv5BkN5ONk1fsX4j1341LR6ODRz9E76xxsPDUuleyKYGuVQWUN2VJpVIVBbYumwHUDF8teQVJ9ruWPFVDw1d1VdK%2B7iXlOQMqtaopg7Lm0Cs2VKtZijjB3mGULrakyAtOWU4Ze2Bc5I3g%2BTeSPELAZcsizUnya7QOxTWpJVNwwks0KJwcAUXU4tR9OohZKORbabeW8%2F895%2BCj196S7eaqFst2Yftx7vUO%2BCa7HW5eD%2FV5hux3X7w1%2BnfSWesv9wFkhJbEMAFJPvgwyvh%2BLEvZMjE9HRapgFEa2%2FV9AESSbV9T%2F%2F2I7R8%3D&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/b7dba93e-7b6e-4933-abb6-e1739feb42e5/saml2?SAMLRequest=fZLBbtswEER%2FRTeeKIkSLUuEZUCJUcCoWxR2mkMvAUmtGiIU6XKpuv37ygqCuof0uph5s5jdDcrRnkU3xWd3hB8TYEw6RAjReHfvHU4jhBOEn0bD1%2BOhJc8xnlFkGUzpi%2FMXBTzVfszkDMiurEyXZV%2FnVVPwAjItrVVSv5BkN5ONk1fsX4j1341LR6ODRz9E76xxsPDUuleyKYGuVQWUN2VJpVIVBbYumwHUDF8teQVJ9ruWPFVDw1d1VdK%2B7iXlOQMqtaopg7Lm0Cs2VKtZijjB3mGULrakyAtOWU4Ze2Bc5I3g%2BTeSPELAZcsizUnya7QOxTWpJVNwwks0KJwcAUXU4tR9OohZKORbabeW8%2F895%2BCj196S7eaqFst2Yftx7vUO%2BCa7HW5eD%2FV5hux3X7w1%2BnfSWesv9wFkhJbEMAFJPvgwyvh%2BLEvZMjE9HRapgFEa2%2FV9AESSbV9T%2F%2F2I7R8%3D&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:54883 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:54811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:54938 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.6:54977 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:55052 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.6:55074 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:55114 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.6:54810 -> 1.1.1.1:53

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: eu.knowbe4.com to https://login.microsoftonline.com/b7dba93e-7b6e-4933-abb6-e1739feb42e5/saml2?samlrequest=fzlbbtsweer%2frteekiksluuezucjuccowxr2mkmvaumtgiiu6xkpuv37ygqcuof0uph5s5jddcrrnku3xwd3hb8tyew6rajrehfvhu4jhboen0bd1%2bohjc8xnlfkguzpi%2fmxbtzvfszkdmiureyxzv%2fnvvpwajitrvvsv5bkn5onk1fsx4j1341lr6odrz9e76xxspduuleykyguvqwun2vjpvivbbyumwhudf8teqvj9ruwpfvdw1d1vdk%2b7ixloqmqtaopg7lm0cs2vktzijjb3mgulrakyatowu4ze2bc5i3g%2btespelazcsizunya7qoxtwpjvnwwks0kjwcauxu4tr9oohzkorbabew8%2f895%2bcj196s7eaqfst2yftx7vuo%2bca7hw5ed%2fv5hux3x7w1%2bnfswesv9wfkhjbemafjpvgwyvh%2blevzmje9hrapgfea2%2fv9aessbv9t%2f%2f2i7r8%3d

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:54883 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199

Source: global traffic	HTTP traffic detected: GET /auth/saml/c33d8069242e HTTP/1.1Host: eu.knowbe4.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_64Z6dmvJd_mCK0LlAXyiHg2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_64Z6dmvJd_mCK0LlAXyiHg2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /b7dba93e-7b6e-4933-abb6-e1739feb42e5/winauth/ssoprobe?client-request-id=86f3327a-513a-4b17-80a7-f8671ca05158&_=1728655788321 HTTP/1.1Host: autologon.microsoftazuread-sso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1c6b6c8-obob6uz3nidzuuv1qwz2jtykzbgxef3vz5oy-e2m4f4/logintenantbranding/0/illustration?ts=636374910507629828 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1c6b6c8-obob6uz3nidzuuv1qwz2jtykzbgxef3vz5oy-e2m4f4/logintenantbranding/0/bannerlogo?ts=636374909487213813 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1c6b6c8-obob6uz3nidzuuv1qwz2jtykzbgxef3vz5oy-e2m4f4/logintenantbranding/0/illustration?ts=636374910507629828 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1c6b6c8-obob6uz3nidzuuv1qwz2jtykzbgxef3vz5oy-e2m4f4/logintenantbranding/0/bannerlogo?ts=636374909487213813 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /c1c6b6c8-obob6uz3nidzuuv1qwz2jtykzbgxef3vz5oy-e2m4f4/logintenantbranding/0/illustration?ts=636374910507629828 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: eu.knowbe4.com
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msauthimages.net
Source: global traffic	DNS traffic detected: DNS query: autologon.microsoftazuread-sso.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauthimages.net

Source: unknown

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900C4F3X-BM-CBT: 1696488253X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: 1D6F504B5A5A465DBDB84F31C63A581DX-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900C4F3X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshldspcl40,msbdsborgv2co,msbwdsbi920cf,optfsth3,premsbdsbchtupcf,wsbfixcachec,wsbqfasmsall_c,wsbqfminiserp_c,wsbref-cX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 516Connection: Keep-AliveCache-Control: no-cacheCookie: SRCHUID=V=2&GUID=CE2BE0509FF742BD822F50D98AD10391&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231005; SRCHHPGUSR=SRCHLANG=en&HV=1696488191&IPMH=5767d621&IPMID=1696488252989&LUT=1696487541024; MUID=81C61E09498D41CC97CDBBA354824ED1; _SS=SID=1D9FAF807E686D422B86BC217FC66C71&CPID=1696488253968&AC=1&CPH=071f2185; _EDGE_S=SID=1D9FAF807E686D422B86BC217FC66C71; MUIDB=81C61E09498D41CC97CDBBA354824ED1

Source: chromecache_130.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_130.2.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 55040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 55063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55069
Source: unknown	Network traffic detected: HTTP traffic on port 54872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55075
Source: unknown	Network traffic detected: HTTP traffic on port 55028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55073
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55072
Source: unknown	Network traffic detected: HTTP traffic on port 54952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 54975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 54998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 55016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55084
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55083
Source: unknown	Network traffic detected: HTTP traffic on port 55051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55088
Source: unknown	Network traffic detected: HTTP traffic on port 54905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 55086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 54848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 54884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55096
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55095
Source: unknown	Network traffic detected: HTTP traffic on port 54929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55094
Source: unknown	Network traffic detected: HTTP traffic on port 55052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55099
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55098
Source: unknown	Network traffic detected: HTTP traffic on port 55085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 54825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55027
Source: unknown	Network traffic detected: HTTP traffic on port 54962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55030
Source: unknown	Network traffic detected: HTTP traffic on port 54824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55032
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55039
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55036
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55040
Source: unknown	Network traffic detected: HTTP traffic on port 54896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55045
Source: unknown	Network traffic detected: HTTP traffic on port 55076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55043
Source: unknown	Network traffic detected: HTTP traffic on port 54974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55049
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55048
Source: unknown	Network traffic detected: HTTP traffic on port 55098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55047
Source: unknown	Network traffic detected: HTTP traffic on port 54874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55052
Source: unknown	Network traffic detected: HTTP traffic on port 54897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55051
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55057
Source: unknown	Network traffic detected: HTTP traffic on port 55075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55054
Source: unknown	Network traffic detected: HTTP traffic on port 54973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55059
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55064
Source: unknown	Network traffic detected: HTTP traffic on port 55053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55063
Source: unknown	Network traffic detected: HTTP traffic on port 54928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55068
Source: unknown	Network traffic detected: HTTP traffic on port 54951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55060
Source: unknown	Network traffic detected: HTTP traffic on port 54863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54936
Source: unknown	Network traffic detected: HTTP traffic on port 54943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54935
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54934
Source: unknown	Network traffic detected: HTTP traffic on port 54920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54933
Source: unknown	Network traffic detected: HTTP traffic on port 55002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54931
Source: unknown	Network traffic detected: HTTP traffic on port 54989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54930
Source: unknown	Network traffic detected: HTTP traffic on port 55054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54948
Source: unknown	Network traffic detected: HTTP traffic on port 55066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54825
Source: unknown	Network traffic detected: HTTP traffic on port 54919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54949
Source: unknown	Network traffic detected: HTTP traffic on port 54816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54943
Source: unknown	Network traffic detected: HTTP traffic on port 55020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54941
Source: unknown	Network traffic detected: HTTP traffic on port 54869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54956
Source: unknown	Network traffic detected: HTTP traffic on port 55088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54839
Source: unknown	Network traffic detected: HTTP traffic on port 55065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54951
Source: unknown	Network traffic detected: HTTP traffic on port 54817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54950
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54954
Source: unknown	Network traffic detected: HTTP traffic on port 54851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54952
Source: unknown	Network traffic detected: HTTP traffic on port 54881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54849
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54969
Source: unknown	Network traffic detected: HTTP traffic on port 55043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54847
Source: unknown	Network traffic detected: HTTP traffic on port 54944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54960
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54966
Source: unknown	Network traffic detected: HTTP traffic on port 55099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54965
Source: unknown	Network traffic detected: HTTP traffic on port 54870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54964
Source: unknown	Network traffic detected: HTTP traffic on port 55001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54963
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54903
Source: unknown	Network traffic detected: HTTP traffic on port 54942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54908
Source: unknown	Network traffic detected: HTTP traffic on port 54921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54905
Source: unknown	Network traffic detected: HTTP traffic on port 54850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54900
Source: unknown	Network traffic detected: HTTP traffic on port 54988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54909
Source: unknown	Network traffic detected: HTTP traffic on port 54999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54910
Source: unknown	Network traffic detected: HTTP traffic on port 54871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54926
Source: unknown	Network traffic detected: HTTP traffic on port 54860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54924
Source: unknown	Network traffic detected: HTTP traffic on port 54965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54923
Source: unknown	Network traffic detected: HTTP traffic on port 55089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54927
Source: unknown	Network traffic detected: HTTP traffic on port 55022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54920
Source: unknown	Network traffic detected: HTTP traffic on port 55078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54897
Source: unknown	Network traffic detected: HTTP traffic on port 55114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55101 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54973
Source: unknown	Network traffic detected: HTTP traffic on port 54924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54850
Source: unknown	Network traffic detected: HTTP traffic on port 54830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54971
Source: unknown	Network traffic detected: HTTP traffic on port 55009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54970
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54974
Source: unknown	Network traffic detected: HTTP traffic on port 54956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54980
Source: unknown	Network traffic detected: HTTP traffic on port 55058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54989
Source: unknown	Network traffic detected: HTTP traffic on port 55093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54860
Source: unknown	Network traffic detected: HTTP traffic on port 54879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54981
Source: unknown	Network traffic detected: HTTP traffic on port 55024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54987
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54991
Source: unknown	Network traffic detected: HTTP traffic on port 55082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54990
Source: unknown	Network traffic detected: HTTP traffic on port 54901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54879
Source: unknown	Network traffic detected: HTTP traffic on port 54945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54874
Source: unknown	Network traffic detected: HTTP traffic on port 54912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54994
Source: unknown	Network traffic detected: HTTP traffic on port 55059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54876
Source: unknown	Network traffic detected: HTTP traffic on port 54968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54880
Source: unknown	Network traffic detected: HTTP traffic on port 55081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54885
Source: unknown	Network traffic detected: HTTP traffic on port 54852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54887
Source: unknown	Network traffic detected: HTTP traffic on port 54891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54886
Source: unknown	Network traffic detected: HTTP traffic on port 55008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54934 -> 443

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:54811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:54938 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.6:54977 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:55052 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.6:55074 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:55114 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@22/53@24/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1656 --field-trial-handle=1936,i,5408255694739210393,11818520442255201119,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://eu.knowbe4.com/auth/saml/c33d8069242e"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1656 --field-trial-handle=1936,i,5408255694739210393,11818520442255201119,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://login.microsoftonline.com	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
eu.knowbe4.com	52.222.236.7	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
s-part-0023.t-0009.t-msedge.net	13.107.246.51	true	false	unknown
sni1gl.wpc.upsiloncdn.net	152.199.21.175	true	false	unknown
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	unknown
www.google.com	142.250.186.36	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
autologon.microsoftazuread-sso.com	20.190.159.75	true	false	unknown
aadcdn.msauthimages.net	unknown	unknown	false	unknown
identity.nel.measure.office.net	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown
login.microsoftonline.com	unknown	unknown	false	unknown
aadcdn.msftauthimages.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://aadcdn.msauthimages.net/c1c6b6c8-obob6uz3nidzuuv1qwz2jtykzbgxef3vz5oy-e2m4f4/logintenantbranding/0/illustration?ts=636374910507629828	false	unknown
https://login.microsoftonline.com/b7dba93e-7b6e-4933-abb6-e1739feb42e5/saml2?SAMLRequest=fZLBbtswEER%2FRTeeKIkSLUuEZUCJUcCoWxR2mkMvAUmtGiIU6XKpuv37ygqCuof0uph5s5jdDcrRnkU3xWd3hB8TYEw6RAjReHfvHU4jhBOEn0bD1%2BOhJc8xnlFkGUzpi%2FMXBTzVfszkDMiurEyXZV%2FnVVPwAjItrVVSv5BkN5ONk1fsX4j1341LR6ODRz9E76xxsPDUuleyKYGuVQWUN2VJpVIVBbYumwHUDF8teQVJ9ruWPFVDw1d1VdK%2B7iXlOQMqtaopg7Lm0Cs2VKtZijjB3mGULrakyAtOWU4Ze2Bc5I3g%2BTeSPELAZcsizUnya7QOxTWpJVNwwks0KJwcAUXU4tR9OohZKORbabeW8%2F895%2BCj196S7eaqFst2Yftx7vUO%2BCa7HW5eD%2FV5hux3X7w1%2BnfSWesv9wFkhJbEMAFJPvgwyvh%2BLEvZMjE9HRapgFEa2%2FV9AESSbV9T%2F%2F2I7R8%3D&sso_reload=true	false	unknown
https://aadcdn.msftauthimages.net/c1c6b6c8-obob6uz3nidzuuv1qwz2jtykzbgxef3vz5oy-e2m4f4/logintenantbranding/0/illustration?ts=636374910507629828	false	unknown
https://eu.knowbe4.com/auth/saml/c33d8069242e	false	unknown
https://aadcdn.msauthimages.net/c1c6b6c8-obob6uz3nidzuuv1qwz2jtykzbgxef3vz5oy-e2m4f4/logintenantbranding/0/bannerlogo?ts=636374909487213813	false	unknown
https://login.microsoftonline.com/b7dba93e-7b6e-4933-abb6-e1739feb42e5/saml2?SAMLRequest=fZLBbtswEER%2FRTeeKIkSLUuEZUCJUcCoWxR2mkMvAUmtGiIU6XKpuv37ygqCuof0uph5s5jdDcrRnkU3xWd3hB8TYEw6RAjReHfvHU4jhBOEn0bD1%2BOhJc8xnlFkGUzpi%2FMXBTzVfszkDMiurEyXZV%2FnVVPwAjItrVVSv5BkN5ONk1fsX4j1341LR6ODRz9E76xxsPDUuleyKYGuVQWUN2VJpVIVBbYumwHUDF8teQVJ9ruWPFVDw1d1VdK%2B7iXlOQMqtaopg7Lm0Cs2VKtZijjB3mGULrakyAtOWU4Ze2Bc5I3g%2BTeSPELAZcsizUnya7QOxTWpJVNwwks0KJwcAUXU4tR9OohZKORbabeW8%2F895%2BCj196S7eaqFst2Yftx7vUO%2BCa7HW5eD%2FV5hux3X7w1%2BnfSWesv9wFkhJbEMAFJPvgwyvh%2BLEvZMjE9HRapgFEa2%2FV9AESSbV9T%2F%2F2I7R8%3D	false	unknown
https://autologon.microsoftazuread-sso.com/b7dba93e-7b6e-4933-abb6-e1739feb42e5/winauth/ssoprobe?client-request-id=86f3327a-513a-4b17-80a7-f8671ca05158&_=1728655788321	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://login.microsoftonline.com	chromecache_130.2.dr	false	URL Reputation: safe	unknown
https://login.windows-ppe.net	chromecache_130.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.51	s-part-0023.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
13.107.253.45	s-part-0017.t-0009.fb-t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
20.190.159.75	autologon.microsoftazuread-sso.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
152.199.21.175	sni1gl.wpc.upsiloncdn.net	United States	15133	EDGECASTUS	false
52.222.236.7	eu.knowbe4.com	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1531693
Start date and time:	2024-10-11 16:08:38 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 31s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://eu.knowbe4.com/auth/saml/c33d8069242e
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@22/53@24/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.195, 216.58.212.174, 64.233.166.84, 34.104.35.123, 20.190.160.22, 40.126.32.134, 40.126.32.136, 40.126.32.68, 40.126.32.72, 40.126.32.76, 40.126.32.138, 20.190.160.20, 2.16.168.7, 2.16.168.12, 40.126.32.74, 20.190.160.17, 216.58.206.42, 142.250.186.106, 142.250.186.170, 172.217.16.202, 142.250.184.234, 142.250.185.106, 172.217.18.10, 142.250.181.234, 216.58.212.138, 142.250.186.42, 142.250.185.170, 142.250.186.74, 142.250.184.202, 142.250.186.138, 216.58.206.74, 172.217.18.106, 20.190.155.1, 40.126.27.66, 20.190.155.2, 20.190.155.132, 20.190.155.66, 20.190.155.67, 20.190.155.3, 20.190.155.130, 4.175.87.197, 192.229.221.95, 20.242.39.171, 93.184.221.240, 52.165.164.15, 142.250.186.67, 95.101.54.113, 95.101.54.217
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, slscr.update.microsoft.com, clientservices.googleapis.com, ak.privatelink.msidentity.com, a1894.dscb.akamai.net, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, login.live.com, aadcdn.azureedge.net, aadcdn.ec.azureedge.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, login.mso.msidentity.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.tm.ak.prd.aadg.trafficmanager.net, client.wns.windows.com, prdv4a.aadg.msidentity.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, aadcdnoriginwus2.azureedge.net, aadcdn-msft.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, www.tm.ak.prd.aadg.akadns.net, www.tm.v4.a.prd.aadg.akadns.net, wu.ec.azureedge.net, aadcdn-msft.afd.azureedge.
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://eu.knowbe4.com/auth/saml/c33d8069242e

Input	Output
URL: https://login.microsoftonline.com/b7dba93e-7b6e-4933-abb6-e1739feb42e5/saml2?SAMLRequest=fZLBbtswEER%2FRTeeKIkSLUuEZUCJUcCoWxR2mkMvAUmtGiIU6XKpuv37ygqCuof0uph5s5jdDcrRnkU3xWd3hB8TYEw6RAjReHfvHU4jhBOEn0bD1%2BOhJc8xnlFkGUzpi%2FMXBTzVfszkDMiurEyXZV%2FnVVPwAj Model: jbxai	{ "brands":["sonnedix"], "text":"to sign you in", "contains_trigger_text":true, "trigger_text":"to sign you in", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://login.microsoftonline.com/b7dba93e-7b6e-4933-abb6-e1739feb42e5/saml2?SAMLRequest=fZLBbtswEER%2FRTeeKIkSLUuEZUCJUcCoWxR2mkMvAUmtGiIU6XKpuv37ygqCuof0uph5s5jdDcrRnkU3xWd3hB8TYEw6RAjReHfvHU4jhBOEn0bD1%2BOhJc8xnlFkGUzpi%2FMXBTzVfszkDMiurEyXZV%2FnVVPwAj Model: jbxai	{ "brands":["Sonnedia"], "text":"Sign in", "contains_trigger_text":true, "trigger_text":"Sign in", "prominent_button_name":"Next", "text_input_field_labels":["Globi", "someone@sonnedix.com"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://login.microsoftonline.com/b7dba93e-7b6e-4933-abb6-e1739feb42e5/saml2?SAMLRequest=fZLBbtswEER%2FRTeeKIkSLUuEZUCJUcCoWxR2mkMvAUmtGiIU6XKpuv37ygqCuof0uph5s5jdDcrRnkU3xWd3hB8TYEw6RAjReHfvHU4jhBOEn0bD1%2BOhJc8xnlFkGUzpi%2FMXBTzVfszkDMiurEyXZV%2FnVVPwAj Model: jbxai	{ "brands":["Sonnedia"], "text":"Sign in Enter a valid email address, phone number, or Skype name. someone@sonnedix.com Can't access your account? Next", "contains_trigger_text":true, "trigger_text":"Sign in", "prominent_button_name":"Next", "text_input_field_labels":["Enter a valid email address, phone number, or Skype name."], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	dropped
Size (bytes):	116365
Entropy (8bit):	7.997737813291819
Encrypted:	true
SSDEEP:	1536:9IyZY3F6VvgB9lnrhw1h+WbhcNtrpUzwXkqGeKTgcao2AYvXMpclkcKAXWG8NYh:9BZ5hu91Nwz+trpGmkReMgcaQYXlkcjR
MD5:	2D3FBED6DDD719FCC1BFB500B612FCEC
SHA1:	CD91B795DDE806AC8A38E51CCB6E8BAD8E57DA1B
SHA-256:	B2566B646F02DF4CE30B05D8223B78130A719D4EC9E4794A0106C371ADE33CC7
SHA-512:	A870E514B325D6FDC4D154438A8DD333C7AB46E545C1B27AC4869D9F1D8594CA1CDC530F5E96C835220DDAD4E1CEF841673696978031B5237E783972AEE701D1
Malicious:	false
Reputation:	low
Preview:	...........k[.H.(.}..[..-..c.0DFxHBz.I......O.a...#yt......k...J..&...........^.~...._..j...W;.8<.....]....m...~.}<.8~s.~=.(....qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...Z-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..n.w6.%^M.d.;...~2I.Z..fs...S/......F..=?...5....s..N.+.A.mx...j.T......?..W._p6.\|.}\|.{O.....2..`..._......g....j..xb^^...a.y.....s......4....q.Y..^T....X,.....m..~v,.....WP.U...:O".YoRX...7..S...zI.v.......mq.....E.,z.%....L\|.>.M.'i..ki3.u+.~...x.=...?6.%?.[.G.`Z=.$.w..4.."...R.1.k.\|..N.`......3...7.].'.E..).az......<a....4q..6.(..=~..........frk..?M#^Q.z..A..M.f.......S....s..d.e91._,zO.[X.......4.G..!.9Vg.......j.-?~.z.w..f.M............,...Z....w5..#.^..M.P.'.X.n/..mW.\|......0...w../...>\...l.......h...q>.w...FC[....7.

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141866
Category:	dropped
Size (bytes):	49804
Entropy (8bit):	7.994672288751266
Encrypted:	true
SSDEEP:	1536:SMuttwJ0uUmAcZjNL6nnQlL+mwKLiQC7Mn3dxPErr:SwJ0vmAcKnnQF+8LJOMn3DPE/
MD5:	6DE768A4DF1E0D0061CDB52EF06346C4
SHA1:	3829A667B97668008023DDA98F4C0772174C8EF6
SHA-256:	58732EEE2ED9091F4F5776DC8A8A14116CBE5A2BA1CCDA0256896BAB08A52128
SHA-512:	CC6966D2C2B43E762750102E734DA6B88D7BFB92DDB5D482EE25029337D95E997466E83001586F2B63DAEE890B5F3188E8EC0F1B084D5EB67CFEA55EDDFAD47D
Malicious:	false
Reputation:	low
Preview:	...........m[.8.0........OL....;w..nf.0.ff.X.'V......4.r~........=........,..JU.......T~.l..?..E.....X..\|t~P9...TN..G..?^.~.............Xx.0..Q..Fa4.#7.q...F.;......4...Q.W&~.@....O.T.y.37J.+Ggf...P....Pz.N...>..a.D..<.m./A,...Q.....WN.Q...8.Db$.G.H<...'....J,..8..{nG.2@HYkL../......=.pL....A?.&Ng.i,......2lo...$.<.3...?~pW..=...L..&x.QR.u3..#6q2....U.Y1..".M. .<W."7@......w..."H,@......0..P....p:...[...E].A..%..V.K\.......F.ir.}.Lc{s..O.g..(\|.........9o..A.t.K....Wv.l6..T.......t.........+..........-w {l..g...V..\=W.j.oaT}t.J`E..$W......;.k.\.t.w~}".....jf..W..."..a..0y........@.T.1.G0........Y_....../..........@.....]+....q\.cR.....t.3S-5g....'U.j.d......y.n,:).\|.?.FW...d...\|.......*.`.3....kMKf...#..,DM.TY+..g.........e+.>...{y..N/..g-#FV.V.p.......Xs.(..{..}..-.O..H=."...........8M.g..!H..0.~.Tdf.;...$D%N .)..!..V...'r\.... ...&....J\|."Nd%D:uw:.<W.+...H&.Z...L=..U.v....J.t.0%+...U..3M....y...L..G...p='.....pB"-..\|.....j .a".i=O.R Q2..."...

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x95, components 3
Category:	downloaded
Size (bytes):	8999
Entropy (8bit):	7.929846361878721
Encrypted:	false
SSDEEP:	192:Xs8K4J7UbDEth+cQiqDO1k7rDfqtG2zABmdbucX9C9:XszqQstc0qqorDCtVKmdack9
MD5:	BB176E82ED3FD2CA66A8A349C5682BC4
SHA1:	E2AAF6C3CE7A7BA9BA74A7742994E5106AC31C9F
SHA-256:	F698F9720CFF5FE4F2089E058BD55059EFCFA45D308E547C78C0AEAAA784672A
SHA-512:	44D43675B70B26964E734C03790E6C78176E5142AFC952805F2B0C03999C53F93550E39AC399B295743A819146C5E22454700F87C5169B77A48600998311BD8B
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauthimages.net/c1c6b6c8-obob6uz3nidzuuv1qwz2jtykzbgxef3vz5oy-e2m4f4/logintenantbranding/0/bannerlogo?ts=636374909487213813
Preview:	......JFIF......................................................................................................................................................_....".....................................................................!."..#1A$a.49BQSv.......................................................!.1A..."a.Qq....2...#............?.....)O.<x.<x.....S.(.f}Gz..>\.z......rf......r.M.y.R..].........h,p...j\..r.8.......zK.0. ..q-6.....BF.{V.v..O.^;g..."<..............h.[.C-$.Z..J..$...z.t...Vjy..M.r.i..S..l.6.S....x..g.Q.U.j.h[nW:.m....M.C.Nr..>..z..]8....[b..RV.{......W../l@...5....d0G...'..%k2...}......r..r..q.....F.U..........^..V.Zo..Mlf...[.-.[mQ.B.#Gz^..o..[R5..gQZH;.[...Y...l.RF.(.un(P4C...9..h.X...r.H..,6O=q.R5........#Dlw=$.o...N....qU.......G.$>..W..,..C@..=s.4..m...H......Z.M.M..4sf....Z........u 0.+.<P.@.LB...S.Jq...q..^...j...K..ywS.65...W.\.t..k`[7....6.V....3Ae~@...J.$.I.m.. ..8~..zxj."V;..:.r]....G........e&......n.P.B.Mp..

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113401
Category:	downloaded
Size (bytes):	20414
Entropy (8bit):	7.979508934961097
Encrypted:	false
SSDEEP:	384:ekqQ8rNFEhCgMyL2iww6oIR8mWG+Pu9Z5IMU7ULgCsHqZo9v8:9CGEiL/w7R8DW9Z5BU7UMZHqok
MD5:	48981D3CF57E7C58CA7E3E851EF9354E
SHA1:	73593DE7633B10F9FFD0EF0E46280FA40FF433FF
SHA-256:	8A5E756923CC5C3F013862427B7622F58A52501C5A6017FFF2FDB2AFD94A10C2
SHA-512:	4E2B6EA222CE77E6EC12E059362DDDEA13758CDC77259FF5CF449BED5A1677E112CF49CD7ED7B1378F96FFD7C5E21BE66D2CA7EB2A9CD8026732F867FB5AE8B1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css
Preview:	...........}ks.6.....\.R;.J.H=-WR;..&>g^53.G.R[.DY<C..$e.WG..... )...{+'g...l............bw_f7.:x..<x.-.V5)/wE..Y...gy.0.(.-o.e.\|..._..I.....?<{.!x...W..._..^..p..E..'..Y...<.....]..6(. ..D.....Y.......:.ve.?..!..\|t...].+.......a.......\|.P...u.H.d.d.r.c[..~.L..n.-.}e.H3...r..^..iP.u..z.....)..Z.jx..C'......u..{.C...N.o.m~..F(b..f.....h..O.....6....kr.......n2m M$.R..R..i{.~.....n.dKY..#.Kn.4..G...O..l.#.a=..iU..].S.2.wY..O.\|...Z.A....].uU.._%U.<...pp..u=.....C.R..S.....0...A<......&...W..'o.T.."..jO..^+.....DiW.b..7i..7..........lKe.0.~B0.....zQu#...YB.,.{.&.6..G.6..._...J.i.?.LS$( .^.{..u.-.0....K....M&j..s.yB..+....^.)...7e.....]..eFI_.kRX.B......D[.4......+.u=>....R.`QEK...R..d...*S.. ,c5RKBK(......][..eF{T.....6...".....Uk:..S.0Ro.}B.dwJZ}U..S.F.....&.&.~\|......{..Ep.>x..._....}p..=.}...v...7?}...g..1&.......}...^...o.x.>x...../.^....._.........w.v./.........BA...{J..w..$?.}w....?zO.r..5...7.gl..z...g.?.{....R.......yGj

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 119648
Category:	dropped
Size (bytes):	40454
Entropy (8bit):	7.992737010031678
Encrypted:	true
SSDEEP:	768:zJUZY53jznALsvTo+bJoiJRHaLurK8F2v7/t06IRN6m5n18UWUnf+:9c4XAoLo+bJvzq8F2v7F0zRN629nW
MD5:	1D65BDDAE4EAEEFC77CB9CFECC565B5D
SHA1:	A7D87150DA1DF6AE6DB87D98760DB7D753DBF6B9
SHA-256:	B98D5BA052230DB0ABC1B0E7B09D814114F6B7C316836BEB88E7B49057DAFEC0
SHA-512:	F2CF9D120D7E18AE3FD77CD85176401A3EB7DB4AF10E16D58C21D86F738FC74525A21E3A319197435E43E50E61DFA8CB2F7207962105360E7BE5652A28165944
Malicious:	false
Reputation:	low
Preview:	............{{..7..y...D4e.sH.v.w......m.r.....&..b.`.P."r...~k..\(...=n#.2..5.N..N~.v'....g..G......N.~q.i.KWq.d.I..N..Z.'.,-........>.e...&Y..'ON......K\|.KQ.........^..WI.QT.oe.>..V........w.,/.Y.6..U.......Lo..U..C..{U......T....,.==.\..KrY..'wI..2wIyMw.K/.........B..{45r..r..Lw..3....I!l..lL.m....\|!..k...J...Y.......Q.I.Wt...........-....Y..mI...vs.S.TP.....]P..;j3..."..Q.]P?.+qK7.q..]J}....qt[..D.j\."....&j..3.......72.fQ..l%_..A...$.m6..>.QD@... ^F.v..2z@uao,.\|....@../....05.....4x...".I..(.._..e..R..HT.{.2O.....lT.we. _.P.'Iz..\|..y...yM..j.P...~...~6j.D.Li.e..z.tu~.lV~...qN...fg...V.7.;...<..........}...yf...`>.....g.y.<q..7.i....h..\%%.q.z.>.......^...M..u.n..1...z7t.......y..S..Bc.).....X.~.\|F.....B0..E....d.B_.Z.....[.Z./..B8.e..-U....P..]N....k.%p...l<..\......A`W^...m.J5c...._I.j.t.......Q...1..B...>^...+d.p.o.bi.D..O...~... @..m*.4.z..uLd..Bc).:.x?..`..Ey....?.2...".....2}.?.FW.\|d.~9...~.C.V..y.'..M..........`...E.77>..~?=+gs..t

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	downloaded
Size (bytes):	116365
Entropy (8bit):	7.997737813291819
Encrypted:	true
SSDEEP:	1536:9IyZY3F6VvgB9lnrhw1h+WbhcNtrpUzwXkqGeKTgcao2AYvXMpclkcKAXWG8NYh:9BZ5hu91Nwz+trpGmkReMgcaQYXlkcjR
MD5:	2D3FBED6DDD719FCC1BFB500B612FCEC
SHA1:	CD91B795DDE806AC8A38E51CCB6E8BAD8E57DA1B
SHA-256:	B2566B646F02DF4CE30B05D8223B78130A719D4EC9E4794A0106C371ADE33CC7
SHA-512:	A870E514B325D6FDC4D154438A8DD333C7AB46E545C1B27AC4869D9F1D8594CA1CDC530F5E96C835220DDAD4E1CEF841673696978031B5237E783972AEE701D1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js
Preview:	...........k[.H.(.}..[..-..c.0DFxHBz.I......O.a...#yt......k...J..&...........^.~...._..j...W;.8<.....]....m...~.}<.8~s.~=.(....qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...Z-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..n.w6.%^M.d.;...~2I.Z..fs...S/......F..=?...5....s..N.+.A.mx...j.T......?..W._p6.\|.}\|.{O.....2..`..._......g....j..xb^^...a.y.....s......4....q.Y..^T....X,.....m..~v,.....WP.U...:O".YoRX...7..S...zI.v.......mq.....E.,z.%....L\|.>.M.'i..ki3.u+.~...x.=...?6.%?.[.G.`Z=.$.w..4.."...R.1.k.\|..N.`......3...7.].'.E..).az......<a....4q..6.(..=~..........frk..?M#^Q.z..A..M.f.......S....s..d.e91._,zO.[X.......4.G..!.9Vg.......j.-?~.z.w..f.M............,...Z....w5..#.^..M.P.'.X.n/..mW.\|......0...w../...>\...l.......h...q>.w...FC[....7.

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57443
Category:	dropped
Size (bytes):	16326
Entropy (8bit):	7.987374325584103
Encrypted:	false
SSDEEP:	384:GTwafLJjHlgnek9V15z6Brrwb9tYt3skOUAQC1:GTtTJjHlgneqTz658ht/eAQw
MD5:	C217AE35B8592DC9F1E680487DAD094F
SHA1:	2E642562C2BFD8968629317FF212684C7EB59193
SHA-256:	D41992E79D7BCFCC1F32597208DD99033D99C04882EAFCC8508F2FA0EE728C6B
SHA-512:	EAF3BF49BCF58A7F7C39CBF35FD75862FEE98F611536080DFC794D288274CB9D67E95D0299679F7981E110B2577A47579D3623C7F11A6AC2A0CFA56AAEA2CAB0
Malicious:	false
Reputation:	low
Preview:	...........}Ms#.......\.@..'F.........C)$....`.......Q.x7...}..'.}..?e#...QU]....Vo.................?........w!......=.G...P.../......8z....q._5....g..}g..31......l...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.>............4....F,&c.)n.[.pcQp...4...6...i.............CkL=....'.\..L......2.A..o.u..."p.. Xx.......'l.[w..'c/^.FP.....q.h4.R+X.x...d..M.}.Z,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j.7.....?.)..t.z.-..m.]..3y...3@.3YO.KSz]...4.b........V..+.%.[.&........l.H>G.^<..{.$"..-.i.........`qcw...`.[....as[.+.X...n..X..%,:......am."a....^o@@.`].....( (b...k..B.0.....AX.D.?...,..-<@k.;..(*..C.]...:.nn..8..s...."4.. ...J...P.n....F.3G..u..;9&.{.2.80.XB.....@.qw.:../.`.P?.+t..w6.a~..7...8k..U._......k,..o.....yQ..r.....}.E...B.r......?{...\fB....-.).Fb.;.p.N?(..P.?..p....F........)p..,`l...o@.;.x.....:..f.E....<0..#K\...K(?K/OX

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	dropped
Size (bytes):	35168
Entropy (8bit):	7.99275807202193
Encrypted:	true
SSDEEP:	768:FlTfWbX2KT+Hid0L7lumndasuVyeLtCR4sqvrdYnN6UcepZtf/r6:LgbT+Hid0TFbeLtUGvrdCNqepbHr6
MD5:	D3B6AE9986DF244AB03412CC700335D0
SHA1:	BAAA1F9899178938F3881F09B18265E47DA806E3
SHA-256:	CA50059111D30C2E212C90805792EB543548AEF0D4941E886A778E3DCE0B9066
SHA-512:	755C57FBC9BECE435A477F76C5E8198CA8942C23BE667ACAB83A00E5CD4F54075B10AA07C7FDC10C38FC3D5C0C406C9132FEB5B67BA5BCCC57EF796054A84E7C
Malicious:	false
Reputation:	low
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........:..z.>.y..u.....N...^..S.......z~@..;...n...K........x..A]....F.8X&Em..P.s.....a.g.\|.d......._..C`.xQ...\..'...QP....?.R.{?....\|.>........E4.GRz...z.k.z.}....h..>.{[E.:.....Pu. ..e6_.o.p*.w...>...:...o.k~...~..&E._..}}.}%[. ..#......z.5M.b.....z..k.H.4...l..D.o...z..M.+../..`....?y.J4.=....u.....Z.....E.d.....{0H^...8.....9..h......d..6j......../..z..V<.`.F.xm.y..yt.J....

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 119648
Category:	downloaded
Size (bytes):	40454
Entropy (8bit):	7.992737010031678
Encrypted:	true
SSDEEP:	768:zJUZY53jznALsvTo+bJoiJRHaLurK8F2v7/t06IRN6m5n18UWUnf+:9c4XAoLo+bJvzq8F2v7F0zRN629nW
MD5:	1D65BDDAE4EAEEFC77CB9CFECC565B5D
SHA1:	A7D87150DA1DF6AE6DB87D98760DB7D753DBF6B9
SHA-256:	B98D5BA052230DB0ABC1B0E7B09D814114F6B7C316836BEB88E7B49057DAFEC0
SHA-512:	F2CF9D120D7E18AE3FD77CD85176401A3EB7DB4AF10E16D58C21D86F738FC74525A21E3A319197435E43E50E61DFA8CB2F7207962105360E7BE5652A28165944
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js
Preview:	............{{..7..y...D4e.sH.v.w......m.r.....&..b.`.P."r...~k..\(...=n#.2..5.N..N~.v'....g..G......N.~q.i.KWq.d.I..N..Z.'.,-........>.e...&Y..'ON......K\|.KQ.........^..WI.QT.oe.>..V........w.,/.Y.6..U.......Lo..U..C..{U......T....,.==.\..KrY..'wI..2wIyMw.K/.........B..{45r..r..Lw..3....I!l..lL.m....\|!..k...J...Y.......Q.I.Wt...........-....Y..mI...vs.S.TP.....]P..;j3..."..Q.]P?.+qK7.q..]J}....qt[..D.j\."....&j..3.......72.fQ..l%_..A...$.m6..>.QD@... ^F.v..2z@uao,.\|....@../....05.....4x...".I..(.._..e..R..HT.{.2O.....lT.we. _.P.'Iz..\|..y...yM..j.P...~...~6j.D.Li.e..z.tu~.lV~...qN...fg...V.7.;...<..........}...yf...`>.....g.y.<q..7.i....h..\%%.q.z.>.......^...M..u.n..1...z7t.......y..S..Bc.).....X.~.\|F.....B0..E....d.B_.Z.....[.Z./..B8.e..-U....P..]N....k.%p...l<..\......A`W^...m.J5c...._I.j.t.......Q...1..B...>^...+d.p.o.bi.D..O...~... @..m*.4.z..uLd..Bc).:.x?..`..Ey....?.2...".....2}.?.FW.\|d.~9...~.C.V..y.'..M..........`...E.77>..~?=+gs..t

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 11970
Category:	downloaded
Size (bytes):	4880
Entropy (8bit):	7.966397036823352
Encrypted:	false
SSDEEP:	96:ofNeE7Z1LD3/d8kYLn3N+n+D1miSZM0tGb4Ha4tAydO7dEY343WY:okQD3/d8Jd+n+s1jtGcHHtJc7dEYIGY
MD5:	03C76051E45F8BAFD592731BA31E82BB
SHA1:	58F5464CCAB2D8096ABCA4E4324DE38B7C4B829E
SHA-256:	F8D8EEB949623360942057B5ABDB018AC7AEDE91092961BA52A417F4C64700A7
SHA-512:	253A9F9D5F59AEC12DF2B69AB71414F6EA76EBD5464C66DD107347E20E303610BC371764EEFCBEC3FA031CC03A30C556486AD9DD833A2B6FAAA3714BDC2DDA95
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js
Preview:	...........Z{s..._..Fs.2.(9..RX..;[.m..LoWR2..JL)R....K.}...ERV...lfb.yp....'...........;..~:.8a.....=.:{}..pZ..E..(N...u....R.I...L.2...%..8LX$.%S..V2.$.gI.+l..Iv....3.....s}v.....q...lu..B.4S.T.0.ih.:i.X..d7.x.`..S..Y...S...!y.......`.P,.Z.<\|vI+-.\.cN..r .9..`..._..g....'K.;...........e...'N..\|[........Y1U~..\..b....%....w&nWX.'wl..X^....s).R.....z}.....h.<&r..V"!.j.7q.\|.j.'.S..O.O9s...^vz/:.#.&.J..~.;......;.y..@z.;.u.yy...)..?......'..l..i.........>.........s......[h...].^^.....v....NO\|...._...._.._......[..)is:}{..5..{.m......n%...{......7....hw.{^@.s%c....,r.{/.d.....x[..f..D..s.....1_..G.[.....A...E>.W.u"\|.Q.A.n.....+l.>...b..S..Tt....z.,..Gb20'q",..d...>....vx..@.?]..u6............9...y.n.6..k\.U..#..)...R/.b...`...<P.M~.......K.l1...Vm.xX..A............Oa...cq.......[1....@O...Z..d....X..-Gr..UI...,KD....r.v.Yii..s..Z`vl0.F.....Q....Gf.;.2.....\...X#..r.....Q.=L...D.s..d...W.@..#....I@....zmO..fA.g.v.&.......M....,N....

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 11970
Category:	dropped
Size (bytes):	4880
Entropy (8bit):	7.966397036823352
Encrypted:	false
SSDEEP:	96:ofNeE7Z1LD3/d8kYLn3N+n+D1miSZM0tGb4Ha4tAydO7dEY343WY:okQD3/d8Jd+n+s1jtGcHHtJc7dEYIGY
MD5:	03C76051E45F8BAFD592731BA31E82BB
SHA1:	58F5464CCAB2D8096ABCA4E4324DE38B7C4B829E
SHA-256:	F8D8EEB949623360942057B5ABDB018AC7AEDE91092961BA52A417F4C64700A7
SHA-512:	253A9F9D5F59AEC12DF2B69AB71414F6EA76EBD5464C66DD107347E20E303610BC371764EEFCBEC3FA031CC03A30C556486AD9DD833A2B6FAAA3714BDC2DDA95
Malicious:	false
Reputation:	low
Preview:	...........Z{s..._..Fs.2.(9..RX..;[.m..LoWR2..JL)R....K.}...ERV...lfb.yp....'...........;..~:.8a.....=.:{}..pZ..E..(N...u....R.I...L.2...%..8LX$.%S..V2.$.gI.+l..Iv....3.....s}v.....q...lu..B.4S.T.0.ih.:i.X..d7.x.`..S..Y...S...!y.......`.P,.Z.<\|vI+-.\.cN..r .9..`..._..g....'K.;...........e...'N..\|[........Y1U~..\..b....%....w&nWX.'wl..X^....s).R.....z}.....h.<&r..V"!.j.7q.\|.j.'.S..O.O9s...^vz/:.#.&.J..~.;......;.y..@z.;.u.yy...)..?......'..l..i.........>.........s......[h...].^^.....v....NO\|...._...._.._......[..)is:}{..5..{.m......n%...{......7....hw.{^@.s%c....,r.{/.d.....x[..f..D..s.....1_..G.[.....A...E>.W.u"\|.Q.A.n.....+l.>...b..S..Tt....z.,..Gb20'q",..d...>....vx..@.?]..u6............9...y.n.6..k\.U..#..)...R/.b...`...<P.M~.......K.l1...Vm.xX..A............Oa...cq.......[1....@O...Z..d....X..-Gr..UI...,KD....r.v.Yii..s..Z`vl0.F.....Q....Gf.;.2.....\...X#..r.....Q.=L...D.s..d...W.@..#....I@....zmO..fA.g.v.&.......M....,N....

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1310, components 3
Category:	dropped
Size (bytes):	299116
Entropy (8bit):	7.989537663898914
Encrypted:	false
SSDEEP:	6144:j6j3T4Jj8iJ4qDw8P/w2qLQLyBhIaPwmqJh6HQcvwQMVuBJbwEKL+6:1j8iJ5w83gc+9PwBuwcVMVcwxL+6
MD5:	E1D812F9B259083B565389CAB0545077
SHA1:	737A22EBE2AA05A43D32BF2F2E37F2DD8F303161
SHA-256:	186CAC5DD8EB94DA6BD28978EA7125F99808E5C91FCBB78B19AC97915A9A2F90
SHA-512:	B403D630002AB5465FC0D309C30E62322592917AB9C797FCB81C289CFC5953331F4A583305DCD8A6AE3F277B7E8AB40283C7B324201343395102FFD9CEB7BA64
Malicious:	false
Reputation:	low
Preview:	......JFIF.....................................................................".."+)+88K.......................................................".."+)+88K..........."..................................................y...H[...9....;=.....%..e...B..Y.}.'..'...v.Y..\.%..C$.$..L.$$..$........FA.......b.....P..0.Z..[#....Y..T...H.K.7.<c.E......r..U..#...%...3.g..`.&..&<.R+.aH..`...&.".)a.-.....k....'.q.....;.y.....\.^..h.l....)0.o#a...^^Z..y.a.Y\|.BJ....a$....@....@.@..2......)~..1.k2...q..c..u..c.a.....Mwm.[....zs.}^..]{..Mr.....(..P.$..v.o.[...H7YL..1.7.F.. 9E.$v..P.....,Xt"u..C>S..,..9.#..v.;.2^zK.....H...#.K..X........E..r.g...a.6.!) ....I%$.0.$....@.......h...K...z.9.7.q...,....+....6s#cx.....}..-aVAv..e.O.g...I..!.......q.!..#..!........I.GU.t.T.u..5=,f67......d.W.y.$.h6.K.r........$..m..\7..Zl...w.b-^G.s,.W5...6... ....RD`.$..... f..........Y..n...+..l.K.VAJc..?.}a....#.~'...O..]..9..<.a.I$........4:).QZ.q2S8..m.x.i.#.....t..X....0.ze..Ea-K.1U..y.

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1310, components 3
Category:	downloaded
Size (bytes):	299116
Entropy (8bit):	7.989537663898914
Encrypted:	false
SSDEEP:	6144:j6j3T4Jj8iJ4qDw8P/w2qLQLyBhIaPwmqJh6HQcvwQMVuBJbwEKL+6:1j8iJ5w83gc+9PwBuwcVMVcwxL+6
MD5:	E1D812F9B259083B565389CAB0545077
SHA1:	737A22EBE2AA05A43D32BF2F2E37F2DD8F303161
SHA-256:	186CAC5DD8EB94DA6BD28978EA7125F99808E5C91FCBB78B19AC97915A9A2F90
SHA-512:	B403D630002AB5465FC0D309C30E62322592917AB9C797FCB81C289CFC5953331F4A583305DCD8A6AE3F277B7E8AB40283C7B324201343395102FFD9CEB7BA64
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauthimages.net/c1c6b6c8-obob6uz3nidzuuv1qwz2jtykzbgxef3vz5oy-e2m4f4/logintenantbranding/0/illustration?ts=636374910507629828
Preview:	......JFIF.....................................................................".."+)+88K.......................................................".."+)+88K..........."..................................................y...H[...9....;=.....%..e...B..Y.}.'..'...v.Y..\.%..C$.$..L.$$..$........FA.......b.....P..0.Z..[#....Y..T...H.K.7.<c.E......r..U..#...%...3.g..`.&..&<.R+.aH..`...&.".)a.-.....k....'.q.....;.y.....\.^..h.l....)0.o#a...^^Z..y.a.Y\|.BJ....a$....@....@.@..2......)~..1.k2...q..c..u..c.a.....Mwm.[....zs.}^..]{..Mr.....(..P.$..v.o.[...H7YL..1.7.F.. 9E.$v..P.....,Xt"u..C>S..,..9.#..v.;.2^zK.....H...#.K..X........E..r.g...a.6.!) ....I%$.0.$....@.......h...K...z.9.7.q...,....+....6s#cx.....}..-aVAv..e.O.g...I..!.......q.!..#..!........I.GU.t.T.u..5=,f67......d.W.y.$.h6.K.r........$..m..\7..Zl...w.b-^G.s,.W5...6... ....RD`.$..... f..........Y..n...+..l.K.VAJc..?.}a....#.~'...O..]..9..<.a.I$........4:).QZ.q2S8..m.x.i.#.....t..X....0.ze..Ea-K.1U..y.

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	downloaded
Size (bytes):	35168
Entropy (8bit):	7.99275807202193
Encrypted:	true
SSDEEP:	768:FlTfWbX2KT+Hid0L7lumndasuVyeLtCR4sqvrdYnN6UcepZtf/r6:LgbT+Hid0TFbeLtUGvrdCNqepbHr6
MD5:	D3B6AE9986DF244AB03412CC700335D0
SHA1:	BAAA1F9899178938F3881F09B18265E47DA806E3
SHA-256:	CA50059111D30C2E212C90805792EB543548AEF0D4941E886A778E3DCE0B9066
SHA-512:	755C57FBC9BECE435A477F76C5E8198CA8942C23BE667ACAB83A00E5CD4F54075B10AA07C7FDC10C38FC3D5C0C406C9132FEB5B67BA5BCCC57EF796054A84E7C
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........:..z.>.y..u.....N...^..S.......z~@..;...n...K........x..A]....F.8X&Em..P.s.....a.g.\|.d......._..C`.xQ...\..'...QP....?.R.{?....\|.>........E4.GRz...z.k.z.}....h..>.{[E.:.....Pu. ..e6_.o.p*.w...>...:...o.k~...~..&E._..}}.}%[. ..#......z.5M.b.....z..k.H.4...l..D.o...z..M.+../..`....?y.J4.=....u.....Z.....E.d.....{0H^...8.....9..h......d..6j......../..z..V<.`.F.xm.y..yt.J....

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 9285
Category:	downloaded
Size (bytes):	3921
Entropy (8bit):	7.948633187405583
Encrypted:	false
SSDEEP:	96:CAQtXXFpyJsBFK/nyVtNUbGRGVQ3U1owJ6BDWkUapiSNIpI97qT:7cXXj4X/+tCGRWQk6bwxaCpI9W
MD5:	BA9DA2AE129596B81DE1FAFFB02CD0F7
SHA1:	8208ED791107C4D13D2DB619560EAC4707B03074
SHA-256:	23DC170CF8AE0615D3E4A6F406DAE6A0FC002BB3CA385C0C2957BFE7000F147B
SHA-512:	068268534557DE84E01F01EE2E9D025F4651183AA7A46D67286FD2E2482FEC84C618F1559CEE8256F9FC1F5CE1F8EB6F5808A2F67E49CBAB1C05758A80A5FA19
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js
Preview:	...........Zks.6..>..F.d2.9.f.....+;..+...V..EB......m]K.}O.$E..$..26.G..8}.....Q.(.z..#.E^h.>...Bj..Z.R.r..GJ..eo.2..4UY..X....U-^..{N..3..P;:x[w...._y..[...'.....r]D..~.nr...y=..#[-.BN............~4.uV+;.m.:..\siUi...,.KW.......a&h....)...^.N....v.3.@..a.bT.....-!\.......y.WY...J?G.i.V1.T..;;n'...U..Z ..t2...5.....E2..7PoG..s.."....z...M;Ap.z.......8..}..:\|.f8.......I2G....J..Q.....OS.T!c.s........u.....0....;.k.$............s..V..K....xa..H......h....Z.yE.s..oN.x @.gnex.}E..1;7 .A.q.f]..W.!..........7,K&2.`].Y.'..j..X.A..n.I....ZxF.W.......~6O...-..[?..~..y.M...;..=.B.^....h.k.=<...0.Z........4.......K... .1K.@.<...nY.^s..p.......J..p0..>..}5.:l..?.Y.N.Z.Bu[....GTz...`.#..d...3!...4....wzp. ..Iws...W..E.o....5{..3...I\|!.]..E. o.'M..`.. ...U.(.X# .r..:..;.D....JV.Jx..4..j....5}.B.VI....)1x5..dN...(...q.y..cF..*......$......"s$.j...M`.Bu..A2..W.....\...=+...l..6..c.E0q3....7....]....&v..]...^.....u.z.cp..4\.L,.-..(..

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	dropped
Size (bytes):	5529
Entropy (8bit):	7.95514518328613
Encrypted:	false
SSDEEP:	96:/hCpRVAqhJlGWPQXH0xeQysZT1rTr8Ps8RLTJ1ctq5/+XVGbN6obuwSuaGwEan:CRRh430/PdTrv8RtytveNjaGC
MD5:	6DEB44A9FE273266EFABC3214B998BA0
SHA1:	C8BE755694C25E416C81F5057670E3B14B2FE08F
SHA-256:	4A1AA3B8B23FB3C150A62BB681DAE96E6CAB20BFAFB89D74FED2E0BC85826BAF
SHA-512:	EBA11F91C3751574F82FBF82F81338761142ABC13B14534133A2986BEF2F2505125B648E1E991F79C1ACC731A9008F98C3F7937649533E7C4E59C2548D4E7452
Malicious:	false
Reputation:	low
Preview:	...........[}w.F...?.b.(..c.i....8zI..k..f...$F.1.. ........$!..=.13w..s./>.w........u{g.=...u.....>h./{.F..xhS..7.6....9p...(.D..a..Q.\hS.L\|7.FI4.....$....._.X4.At..@.x...s.seZ.....!V..x..'..F.?..z.[..Ppm.z<..'.p.]..$..(..>...6.3..o.47..6..t...AfX..F.($8...= ...'..GDb<.iM..s.D....N..F.<.e.......M....t ...Sk.'wDb.h...M2K...... ..6N.X.o..s...S.....r.`......1..4.c...J....V....ED.7.........p......&i....p....F.C/...W...-.....\|..E...W.v5.....M]?...*s.........~....!........R.....~.A... v....C.S1.X\|.lZ.LL...._.f....h.f.ep.2a>..,G..,...d..G&....dn.....j$..uB.z...Y..x2.......rI. ...?...w<.y.b.vF..h...b..l......\....cq.S.u......'&...E..s.d..-).I.M]..0.;.....;~6K'....$.G....;.8..<_.;.O.]...;.}..[.cWDJ6z..l..H..'8~..6vj5........Q...I..X.Ww..vB.....{v..$...].......d..kAO#.G...0(.....Y..G.6k.%z.S..6....Qw...`H....)1.5.......M...}C..z...2...d.;5..(.!.....}.Y.!..0..n.a.`..'D..@../.N.\|w.OcH.];Z...k.....1g.4.f..t.'...........8i..<!...6M...p...

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57443
Category:	downloaded
Size (bytes):	16326
Entropy (8bit):	7.987374325584103
Encrypted:	false
SSDEEP:	384:GTwafLJjHlgnek9V15z6Brrwb9tYt3skOUAQC1:GTtTJjHlgneqTz658ht/eAQw
MD5:	C217AE35B8592DC9F1E680487DAD094F
SHA1:	2E642562C2BFD8968629317FF212684C7EB59193
SHA-256:	D41992E79D7BCFCC1F32597208DD99033D99C04882EAFCC8508F2FA0EE728C6B
SHA-512:	EAF3BF49BCF58A7F7C39CBF35FD75862FEE98F611536080DFC794D288274CB9D67E95D0299679F7981E110B2577A47579D3623C7F11A6AC2A0CFA56AAEA2CAB0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js
Preview:	...........}Ms#.......\.@..'F.........C)$....`.......Q.x7...}..'.}..?e#...QU]....Vo.................?........w!......=.G...P.../......8z....q._5....g..}g..31......l...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.>............4....F,&c.)n.[.pcQp...4...6...i.............CkL=....'.\..L......2.A..o.u..."p.. Xx.......'l.[w..'c/^.FP.....q.h4.R+X.x...d..M.}.Z,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j.7.....?.)..t.z.-..m.]..3y...3@.3YO.KSz]...4.b........V..+.%.[.&........l.H>G.^<..{.$"..-.i.........`qcw...`.[....as[.+.X...n..X..%,:......am."a....^o@@.`].....( (b...k..B.0.....AX.D.?...,..-<@k.;..(*..C.]...:.nn..8..s...."4.. ...J...P.n....F.3G..u..;9&.{.2.80.XB.....@.qw.:../.`.P?.+t..w6.a~..7...8k..U._......k,..o.....yQ..r.....}.E...B.r......?{...\fB....-.).Fb.;.p.N?(..P.?..p....F........)p..,`l...o@.;.x.....:..f.E....<0..#K\...K(?K/OX

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 9285
Category:	dropped
Size (bytes):	3921
Entropy (8bit):	7.948633187405583
Encrypted:	false
SSDEEP:	96:CAQtXXFpyJsBFK/nyVtNUbGRGVQ3U1owJ6BDWkUapiSNIpI97qT:7cXXj4X/+tCGRWQk6bwxaCpI9W
MD5:	BA9DA2AE129596B81DE1FAFFB02CD0F7
SHA1:	8208ED791107C4D13D2DB619560EAC4707B03074
SHA-256:	23DC170CF8AE0615D3E4A6F406DAE6A0FC002BB3CA385C0C2957BFE7000F147B
SHA-512:	068268534557DE84E01F01EE2E9D025F4651183AA7A46D67286FD2E2482FEC84C618F1559CEE8256F9FC1F5CE1F8EB6F5808A2F67E49CBAB1C05758A80A5FA19
Malicious:	false
Reputation:	low
Preview:	...........Zks.6..>..F.d2.9.f.....+;..+...V..EB......m]K.}O.$E..$..26.G..8}.....Q.(.z..#.E^h.>...Bj..Z.R.r..GJ..eo.2..4UY..X....U-^..{N..3..P;:x[w...._y..[...'.....r]D..~.nr...y=..#[-.BN............~4.uV+;.m.:..\siUi...,.KW.......a&h....)...^.N....v.3.@..a.bT.....-!\.......y.WY...J?G.i.V1.T..;;n'...U..Z ..t2...5.....E2..7PoG..s.."....z...M;Ap.z.......8..}..:\|.f8.......I2G....J..Q.....OS.T!c.s........u.....0....;.k.$............s..V..K....xa..H......h....Z.yE.s..oN.x @.gnex.}E..1;7 .A.q.f]..W.!..........7,K&2.`].Y.'..j..X.A..n.I....ZxF.W.......~6O...-..[?..~..y.M...;..=.B.^....h.k.=<...0.Z........4.......K... .1K.@.<...nY.^s..p.......J..p0..>..}5.:l..?.Y.N.Z.Bu[....GTz...`.#..d...3!...4....wzp. ..Iws...W..E.o....5{..3...I\|!.]..E. o.'M..`.. ...U.(.X# .r..:..;.D....JV.Jx..4..j....5}.B.VI....)1x5..dN...(...q.y..cF..*......$......"s$.j...M`.Bu..A2..W.....\...=+...l..6..c.E0q3....7....]....&v..]...^.....u.z.cp..4\.L,.-..(..

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141866
Category:	downloaded
Size (bytes):	49804
Entropy (8bit):	7.994672288751266
Encrypted:	true
SSDEEP:	1536:SMuttwJ0uUmAcZjNL6nnQlL+mwKLiQC7Mn3dxPErr:SwJ0vmAcKnnQF+8LJOMn3DPE/
MD5:	6DE768A4DF1E0D0061CDB52EF06346C4
SHA1:	3829A667B97668008023DDA98F4C0772174C8EF6
SHA-256:	58732EEE2ED9091F4F5776DC8A8A14116CBE5A2BA1CCDA0256896BAB08A52128
SHA-512:	CC6966D2C2B43E762750102E734DA6B88D7BFB92DDB5D482EE25029337D95E997466E83001586F2B63DAEE890B5F3188E8EC0F1B084D5EB67CFEA55EDDFAD47D
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js
Preview:	...........m[.8.0........OL....;w..nf.0.ff.X.'V......4.r~........=........,..JU.......T~.l..?..E.....X..\|t~P9...TN..G..?^.~.............Xx.0..Q..Fa4.#7.q...F.;......4...Q.W&~.@....O.T.y.37J.+Ggf...P....Pz.N...>..a.D..<.m./A,...Q.....WN.Q...8.Db$.G.H<...'....J,..8..{nG.2@HYkL../......=.pL....A?.&Ng.i,......2lo...$.<.3...?~pW..=...L..&x.QR.u3..#6q2....U.Y1..".M. .<W."7@......w..."H,@......0..P....p:...[...E].A..%..V.K\.......F.ir.}.Lc{s..O.g..(\|.........9o..A.t.K....Wv.l6..T.......t.........+..........-w {l..g...V..\=W.j.oaT}t.J`E..$W......;.k.\.t.w~}".....jf..W..."..a..0y........@.T.1.G0........Y_....../..........@.....]+....q\.cR.....t.3S-5g....'U.j.d......y.n,:).\|.?.FW...d...\|.......*.`.3....kMKf...#..,DM.TY+..g.........e+.>...{y..N/..g-#FV.V.p.......Xs.(..{..}..-.O..H=."...........8M.g..!H..0.~.Tdf.;...$D%N .)..!..V...'r\.... ...&....J\|."Nd%D:uw:.<W.+...H&.Z...L=..U.v....J.t.0%+...U..3M....y...L..G...p='.....pB"-..\|.....j .a".i=O.R Q2..."...

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	downloaded
Size (bytes):	5529
Entropy (8bit):	7.95514518328613
Encrypted:	false
SSDEEP:	96:/hCpRVAqhJlGWPQXH0xeQysZT1rTr8Ps8RLTJ1ctq5/+XVGbN6obuwSuaGwEan:CRRh430/PdTrv8RtytveNjaGC
MD5:	6DEB44A9FE273266EFABC3214B998BA0
SHA1:	C8BE755694C25E416C81F5057670E3B14B2FE08F
SHA-256:	4A1AA3B8B23FB3C150A62BB681DAE96E6CAB20BFAFB89D74FED2E0BC85826BAF
SHA-512:	EBA11F91C3751574F82FBF82F81338761142ABC13B14534133A2986BEF2F2505125B648E1E991F79C1ACC731A9008F98C3F7937649533E7C4E59C2548D4E7452
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js
Preview:	...........[}w.F...?.b.(..c.i....8zI..k..f...$F.1.. ........$!..=.13w..s./>.w........u{g.=...u.....>h./{.F..xhS..7.6....9p...(.D..a..Q.\hS.L\|7.FI4.....$....._.X4.At..@.x...s.seZ.....!V..x..'..F.?..z.[..Ppm.z<..'.p.]..$..(..>...6.3..o.47..6..t...AfX..F.($8...= ...'..GDb<.iM..s.D....N..F.<.e.......M....t ...Sk.'wDb.h...M2K...... ..6N.X.o..s...S.....r.`......1..4.c...J....V....ED.7.........p......&i....p....F.C/...W...-.....\|..E...W.v5.....M]?...*s.........~....!........R.....~.A... v....C.S1.X\|.lZ.LL...._.f....h.f.ep.2a>..,G..,...d..G&....dn.....j$..uB.z...Y..x2.......rI. ...?...w<.y.b.vF..h...b..l......\....cq.S.u......'&...E..s.d..-).I.M]..0.;.....;~6K'....$.G....;.8..<_.;.O.]...;.}..[.cWDJ6z..l..H..'8~..6vj5........Q...I..X.Ww..vB.....{v..$...].......d..kAO#.G...0(.....Y..G.6k.%z.S..6....Qw...`H....)1.5.......M...}C..z...2...d.;5..(.!.....}.Y.!..0..n.a.`..'D..@../.N.\|w.OcH.];Z...k.....1g.4.f..t.'...........8i..<!...6M...p...

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449844
Category:	dropped
Size (bytes):	122196
Entropy (8bit):	7.997583492714224
Encrypted:	true
SSDEEP:	3072:MWJ5pg8e5ohsVyLFWQIe/gD7kMLEDz+0DZzKw:MCXgtCsVyFIe/gXkMLszDZ/
MD5:	0125AB7B8A6A32D455533E12EC95D8B5
SHA1:	A055F757D0A89353F31409FE550A87C61D19A53F
SHA-256:	5E72CA6756E1249E4958D50AF21883E3FE531B0D47CAB6AD063CFA875F719DD5
SHA-512:	BFD4916CB8AEE7F3F53F7CD4E325F688DE3320EB4C031E24C545B1AFD397F62EF8E35B43FD4D9448875BA257AD54F1D4104404A947DC1F22E5B84A86D0020D9F
Malicious:	false
Reputation:	low
Preview:	...........{W.H.8....F3...a,..E.Yc..i......,...Y.J2.1......R.LU....s.AY..................Oix..).NK7...KW...........`....G/..=.....3....0y..F.0......7.l.4..i)yd.Y...$..^.@....R......%o...J..gP.7..(.7.....0..V...j..#.Yi..,.<z.c..s.0..I)b...x...&....R..8..G.ji......-......\.pL...0@/....0h,...[U.DZ..7.R.....}6./...o.....:.;w.jn.1....._..<..b.{.... ..J.....9.8{.16eA...........:B#.K,N...8.T.....$.R..8...?.R.^3...n...$......K...N..p>.....<...........9.Y.......pj{.l.J..Y..W.........A.......:py.m...+..B........l..uO...v.G..q..VMw........`.<..;;.....{}0.US..O..m..v<x..%3..Tu`...U...;.~{....c.?....?...v ..-E..2......{+.?.....va8...i...8)W.....X..7... EC.h..e....D,.GA..W.Na!..T..$k..[..2..ry .1,D}LdY=..a.>\|k...-OE/.A...}./'V/..7%#..o(a.S....e!P8..UI.#.n.{).@.I....u.va.....$z#...[.BX......l.\|.U.Q.....&s\.nT..........Z...LK.~.\|."...D;U{6......T$.C..^\|%...e..!.5..T.......R........hY...~T...Z.....s...xZ\|.vcO..)+k..Up.)#O..!Qr.#ty..

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	36
Entropy (8bit):	4.503258334775644
Encrypted:	false
SSDEEP:	3:Eq62iczBr9ks:EqdiczBys
MD5:	06B313E93DD76909460FBFC0CD98CB6B
SHA1:	C4F9B2BBD840A4328F85F54873C434336A193888
SHA-256:	B4532478707B495D0BB1C21C314AEF959DD1A5E0F66E52DAD5FC332C8B697CBA
SHA-512:	EFD7E8195D9C126883C71FED3EFEDE55916848B784F8434ED2677DF5004436F7EDE9F80277CB4675C4DEB8F243B2705A3806B412FAA8842E039E9DC467C11645
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChgKDQ3RW1FSGgQIVhgCIAEKBw1Xevf9GgA=

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1310, components 3
Category:	downloaded
Size (bytes):	277877
Entropy (8bit):	7.989509438451211
Encrypted:	false
SSDEEP:	6144:j6j3T4Jj8iJ4qDw8P/w2qLQLyBhIaPwmqJh6HQcvwQMVuBj:1j8iJ5w83gc+9PwBuwcVMVc
MD5:	70D2C96D5C2B24736074F9161A0D7C0D
SHA1:	3E13898FFE690801D5DB16F9AB4AA09F1392DF66
SHA-256:	91CD387FD825571814BE95BF3F9B470BC0441D9BF24E60425882AEFEB8344524
SHA-512:	44353F5C3D5E2F05613E7F4E01EC5B663A00D43F6909AA5FC61BF4397730D8B0C49D989C376774D6B6963E24EAFCCBAB12711E218FE5CC31C1A997BA7078C986
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauthimages.net/c1c6b6c8-obob6uz3nidzuuv1qwz2jtykzbgxef3vz5oy-e2m4f4/logintenantbranding/0/illustration?ts=636374910507629828
Preview:	......JFIF.....................................................................".."+)+88K.......................................................".."+)+88K..........."..................................................y...H[...9....;=.....%..e...B..Y.}.'..'...v.Y..\.%..C$.$..L.$$..$........FA.......b.....P..0.Z..[#....Y..T...H.K.7.<c.E......r..U..#...%...3.g..`.&..&<.R+.aH..`...&.".)a.-.....k....'.q.....;.y.....\.^..h.l....)0.o#a...^^Z..y.a.Y\|.BJ....a$....@....@.@..2......)~..1.k2...q..c..u..c.a.....Mwm.[....zs.}^..]{..Mr.....(..P.$..v.o.[...H7YL..1.7.F.. 9E.$v..P.....,Xt"u..C>S..,..9.#..v.;.2^zK.....H...#.K..X........E..r.g...a.6.!) ....I%$.0.$....@.......h...K...z.9.7.q...,....+....6s#cx.....}..-aVAv..e.O.g...I..!.......q.!..#..!........I.GU.t.T.u..5=,f67......d.W.y.$.h6.K.r........$..m..\7..Zl...w.b-^G.s,.W5...6... ....RD`.$..... f..........Y..n...+..l.K.VAJc..?.}a....#.~'...O..]..9..<.a.I$........4:).QZ.q2S8..m.x.i.#.....t..X....0.ze..Ea-K.1U..y.

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449844
Category:	downloaded
Size (bytes):	122196
Entropy (8bit):	7.997583492714224
Encrypted:	true
SSDEEP:	3072:MWJ5pg8e5ohsVyLFWQIe/gD7kMLEDz+0DZzKw:MCXgtCsVyFIe/gXkMLszDZ/
MD5:	0125AB7B8A6A32D455533E12EC95D8B5
SHA1:	A055F757D0A89353F31409FE550A87C61D19A53F
SHA-256:	5E72CA6756E1249E4958D50AF21883E3FE531B0D47CAB6AD063CFA875F719DD5
SHA-512:	BFD4916CB8AEE7F3F53F7CD4E325F688DE3320EB4C031E24C545B1AFD397F62EF8E35B43FD4D9448875BA257AD54F1D4104404A947DC1F22E5B84A86D0020D9F
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_64Z6dmvJd_mCK0LlAXyiHg2.js
Preview:	...........{W.H.8....F3...a,..E.Yc..i......,...Y.J2.1......R.LU....s.AY..................Oix..).NK7...KW...........`....G/..=.....3....0y..F.0......7.l.4..i)yd.Y...$..^.@....R......%o...J..gP.7..(.7.....0..V...j..#.Yi..,.<z.c..s.0..I)b...x...&....R..8..G.ji......-......\.pL...0@/....0h,...[U.DZ..7.R.....}6./...o.....:.;w.jn.1....._..<..b.{.... ..J.....9.8{.16eA...........:B#.K,N...8.T.....$.R..8...?.R.^3...n...$......K...N..p>.....<...........9.Y.......pj{.l.J..Y..W.........A.......:py.m...+..B........l..uO...v.G..q..VMw........`.<..;;.....{}0.US..O..m..v<x..%3..Tu`...U...;.~{....c.?....?...v ..-E..2......{+.?.....va8...i...8)W.....X..7... EC.h..e....D,.GA..W.Na!..T..$k..[..2..ry .1,D}LdY=..a.>\|k...-OE/.A...}./'V/..7%#..o(a.S....e!P8..UI.#.n.{).@.I....u.va.....$z#...[.BX......l.\|.U.Q.....&s\.nT..........Z...LK.~.\|."...D;U{6......T$.C..^\|%...e..!.5..T.......R........hY...~T...Z.....s...xZ\|.vcO..)+k..Up.)#O..!Qr.#ty..

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x95, components 3
Category:	dropped
Size (bytes):	8999
Entropy (8bit):	7.929846361878721
Encrypted:	false
SSDEEP:	192:Xs8K4J7UbDEth+cQiqDO1k7rDfqtG2zABmdbucX9C9:XszqQstc0qqorDCtVKmdack9
MD5:	BB176E82ED3FD2CA66A8A349C5682BC4
SHA1:	E2AAF6C3CE7A7BA9BA74A7742994E5106AC31C9F
SHA-256:	F698F9720CFF5FE4F2089E058BD55059EFCFA45D308E547C78C0AEAAA784672A
SHA-512:	44D43675B70B26964E734C03790E6C78176E5142AFC952805F2B0C03999C53F93550E39AC399B295743A819146C5E22454700F87C5169B77A48600998311BD8B
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................_....".....................................................................!."..#1A$a.49BQSv.......................................................!.1A..."a.Qq....2...#............?.....)O.<x.<x.....S.(.f}Gz..>\.z......rf......r.M.y.R..].........h,p...j\..r.8.......zK.0. ..q-6.....BF.{V.v..O.^;g..."<..............h.[.C-$.Z..J..$...z.t...Vjy..M.r.i..S..l.6.S....x..g.Q.U.j.h[nW:.m....M.C.Nr..>..z..]8....[b..RV.{......W../l@...5....d0G...'..%k2...}......r..r..q.....F.U..........^..V.Zo..Mlf...[.-.[mQ.B.#Gz^..o..[R5..gQZH;.[...Y...l.RF.(.un(P4C...9..h.X...r.H..,6O=q.R5........#Dlw=$.o...N....qU.......G.$>..W..,..C@..=s.4..m...H......Z.M.M..4sf....Z........u 0.+.<P.@.LB...S.Jq...q..^...j...K..ywS.65...W.\.t..k`[7....6.V....3Ae~@...J.$.I.m.. ..8~..zxj."V;..:.r]....G........e&......n.P.B.Mp..

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 11, 2024 16:09:31.859808922 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 11, 2024 16:09:31.859808922 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 11, 2024 16:09:32.172343969 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 11, 2024 16:09:33.856738091 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:09:33.856769085 CEST	443	49710	40.113.103.199	192.168.2.6
Oct 11, 2024 16:09:33.856858015 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:09:33.857378960 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:09:33.857393980 CEST	443	49710	40.113.103.199	192.168.2.6
Oct 11, 2024 16:09:34.674932957 CEST	443	49710	40.113.103.199	192.168.2.6
Oct 11, 2024 16:09:34.675010920 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:09:34.678353071 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:09:34.678359985 CEST	443	49710	40.113.103.199	192.168.2.6
Oct 11, 2024 16:09:34.678771973 CEST	443	49710	40.113.103.199	192.168.2.6
Oct 11, 2024 16:09:34.681075096 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:09:34.681139946 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:09:34.681147099 CEST	443	49710	40.113.103.199	192.168.2.6
Oct 11, 2024 16:09:34.681581974 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:09:34.727404118 CEST	443	49710	40.113.103.199	192.168.2.6
Oct 11, 2024 16:09:34.857676983 CEST	443	49710	40.113.103.199	192.168.2.6
Oct 11, 2024 16:09:34.857903957 CEST	443	49710	40.113.103.199	192.168.2.6
Oct 11, 2024 16:09:34.858124971 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:09:36.270540953 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:09:36.270570993 CEST	443	49710	40.113.103.199	192.168.2.6
Oct 11, 2024 16:09:39.979279041 CEST	49716	443	192.168.2.6	52.222.236.7
Oct 11, 2024 16:09:39.979307890 CEST	443	49716	52.222.236.7	192.168.2.6
Oct 11, 2024 16:09:39.979377985 CEST	49716	443	192.168.2.6	52.222.236.7
Oct 11, 2024 16:09:39.979504108 CEST	49717	443	192.168.2.6	52.222.236.7
Oct 11, 2024 16:09:39.979592085 CEST	443	49717	52.222.236.7	192.168.2.6
Oct 11, 2024 16:09:39.979648113 CEST	49717	443	192.168.2.6	52.222.236.7
Oct 11, 2024 16:09:39.979671955 CEST	49716	443	192.168.2.6	52.222.236.7
Oct 11, 2024 16:09:39.979691029 CEST	443	49716	52.222.236.7	192.168.2.6
Oct 11, 2024 16:09:39.979990959 CEST	49717	443	192.168.2.6	52.222.236.7
Oct 11, 2024 16:09:39.980026960 CEST	443	49717	52.222.236.7	192.168.2.6
Oct 11, 2024 16:09:40.705348015 CEST	443	49717	52.222.236.7	192.168.2.6
Oct 11, 2024 16:09:40.705682039 CEST	49717	443	192.168.2.6	52.222.236.7
Oct 11, 2024 16:09:40.705712080 CEST	443	49717	52.222.236.7	192.168.2.6
Oct 11, 2024 16:09:40.707397938 CEST	443	49717	52.222.236.7	192.168.2.6
Oct 11, 2024 16:09:40.707473993 CEST	49717	443	192.168.2.6	52.222.236.7
Oct 11, 2024 16:09:40.707492113 CEST	443	49717	52.222.236.7	192.168.2.6
Oct 11, 2024 16:09:40.707547903 CEST	49717	443	192.168.2.6	52.222.236.7
Oct 11, 2024 16:09:40.708401918 CEST	49717	443	192.168.2.6	52.222.236.7
Oct 11, 2024 16:09:40.708492041 CEST	443	49717	52.222.236.7	192.168.2.6
Oct 11, 2024 16:09:40.708638906 CEST	49717	443	192.168.2.6	52.222.236.7
Oct 11, 2024 16:09:40.708666086 CEST	443	49717	52.222.236.7	192.168.2.6
Oct 11, 2024 16:09:40.736850023 CEST	443	49716	52.222.236.7	192.168.2.6
Oct 11, 2024 16:09:40.737411976 CEST	49716	443	192.168.2.6	52.222.236.7
Oct 11, 2024 16:09:40.737437963 CEST	443	49716	52.222.236.7	192.168.2.6
Oct 11, 2024 16:09:40.738888979 CEST	443	49716	52.222.236.7	192.168.2.6
Oct 11, 2024 16:09:40.738956928 CEST	49716	443	192.168.2.6	52.222.236.7
Oct 11, 2024 16:09:40.738965988 CEST	443	49716	52.222.236.7	192.168.2.6
Oct 11, 2024 16:09:40.739248991 CEST	49716	443	192.168.2.6	52.222.236.7
Oct 11, 2024 16:09:40.739382029 CEST	49716	443	192.168.2.6	52.222.236.7
Oct 11, 2024 16:09:40.739475012 CEST	443	49716	52.222.236.7	192.168.2.6
Oct 11, 2024 16:09:40.750101089 CEST	49717	443	192.168.2.6	52.222.236.7
Oct 11, 2024 16:09:40.779194117 CEST	49716	443	192.168.2.6	52.222.236.7
Oct 11, 2024 16:09:40.779201984 CEST	443	49716	52.222.236.7	192.168.2.6
Oct 11, 2024 16:09:40.829139948 CEST	49716	443	192.168.2.6	52.222.236.7
Oct 11, 2024 16:09:41.043420076 CEST	443	49717	52.222.236.7	192.168.2.6
Oct 11, 2024 16:09:41.043629885 CEST	443	49717	52.222.236.7	192.168.2.6
Oct 11, 2024 16:09:41.043708086 CEST	49717	443	192.168.2.6	52.222.236.7
Oct 11, 2024 16:09:41.044050932 CEST	49717	443	192.168.2.6	52.222.236.7
Oct 11, 2024 16:09:41.044076920 CEST	443	49717	52.222.236.7	192.168.2.6
Oct 11, 2024 16:09:41.469718933 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 11, 2024 16:09:41.469718933 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 11, 2024 16:09:41.488989115 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:41.489084959 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:41.489165068 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:41.489617109 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:41.489638090 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:41.782749891 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 11, 2024 16:09:42.152890921 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.152976036 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.315172911 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.315246105 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.316215992 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.334415913 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.339026928 CEST	49722	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:42.339061975 CEST	443	49722	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:42.339137077 CEST	49722	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:42.339301109 CEST	49722	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:42.339312077 CEST	443	49722	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:42.375417948 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.455266953 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.455324888 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.455367088 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.455425024 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.455456972 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.455462933 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.455504894 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.536163092 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.536196947 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.536268950 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.536288023 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.536322117 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.536458015 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.568120003 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.568171978 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.568203926 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.568219900 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.568250895 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.569664955 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.622514963 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.622575998 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.622658968 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.622699022 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.622726917 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.622749090 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.623621941 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.623667955 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.623719931 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.623732090 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.623759031 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.623791933 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.655153036 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.655174971 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.655282021 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.655306101 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.655355930 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.655419111 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.655436039 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.655484915 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.655498028 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.655548096 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.718944073 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.718987942 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.719050884 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.719065905 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.719096899 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.719118118 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.720381975 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.720424891 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.720459938 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.720470905 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.720495939 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.720516920 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.721750975 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.721801043 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.721821070 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.721832991 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.721857071 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.721877098 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.742571115 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.742589951 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.742695093 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.742707014 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.742757082 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.742780924 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.742789984 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.742801905 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.742826939 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.742871046 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.743561029 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.743578911 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.743634939 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.743647099 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.743674994 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.743696928 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.744399071 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.744467020 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.744476080 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.744513035 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.744550943 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.744577885 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.744592905 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.788285971 CEST	49723	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.788302898 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.788387060 CEST	49723	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.790555000 CEST	49724	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.790595055 CEST	443	49724	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.790652990 CEST	49724	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.790718079 CEST	49723	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.790730953 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.791860104 CEST	49725	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.791910887 CEST	443	49725	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.791969061 CEST	49725	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.791981936 CEST	49724	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.792000055 CEST	443	49724	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.792072058 CEST	49725	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.792088032 CEST	443	49725	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.792968988 CEST	49726	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.792979002 CEST	443	49726	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.793025017 CEST	49726	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.793807983 CEST	49727	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.793822050 CEST	443	49727	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.793869019 CEST	49727	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.793936014 CEST	49726	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.793946981 CEST	443	49726	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.794017076 CEST	49727	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:42.794033051 CEST	443	49727	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:42.913960934 CEST	49728	443	192.168.2.6	142.250.186.36
Oct 11, 2024 16:09:42.913973093 CEST	443	49728	142.250.186.36	192.168.2.6
Oct 11, 2024 16:09:42.914028883 CEST	49728	443	192.168.2.6	142.250.186.36
Oct 11, 2024 16:09:42.914304972 CEST	49728	443	192.168.2.6	142.250.186.36
Oct 11, 2024 16:09:42.914319038 CEST	443	49728	142.250.186.36	192.168.2.6
Oct 11, 2024 16:09:43.002994061 CEST	443	49722	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:43.003262043 CEST	49722	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:43.003273010 CEST	443	49722	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:43.004954100 CEST	443	49722	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:43.005028009 CEST	49729	443	192.168.2.6	184.28.90.27
Oct 11, 2024 16:09:43.005028009 CEST	49722	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:43.005057096 CEST	443	49729	184.28.90.27	192.168.2.6
Oct 11, 2024 16:09:43.005119085 CEST	49729	443	192.168.2.6	184.28.90.27
Oct 11, 2024 16:09:43.005966902 CEST	49722	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:43.006051064 CEST	443	49722	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:43.006165028 CEST	49722	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:43.006171942 CEST	443	49722	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:43.006853104 CEST	49729	443	192.168.2.6	184.28.90.27
Oct 11, 2024 16:09:43.006860971 CEST	443	49729	184.28.90.27	192.168.2.6
Oct 11, 2024 16:09:43.047476053 CEST	49722	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:43.105520010 CEST	443	49722	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:43.105577946 CEST	443	49722	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:43.105600119 CEST	443	49722	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:43.105638027 CEST	443	49722	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:43.105657101 CEST	49722	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:43.105667114 CEST	443	49722	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:43.105674028 CEST	443	49722	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:43.105693102 CEST	49722	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:43.105716944 CEST	49722	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:43.189457893 CEST	443	49722	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:43.189511061 CEST	443	49722	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:43.189795017 CEST	49722	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:43.189826012 CEST	443	49722	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:43.189944029 CEST	49722	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:43.191663027 CEST	443	49722	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:43.191704988 CEST	443	49722	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:43.191746950 CEST	49722	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:43.191754103 CEST	443	49722	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:43.191802979 CEST	443	49722	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:43.191807032 CEST	49722	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:43.191832066 CEST	443	49722	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:43.191879988 CEST	49722	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:43.191885948 CEST	443	49722	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:43.191998005 CEST	443	49722	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:43.192048073 CEST	49722	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:43.192181110 CEST	49722	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:43.192194939 CEST	443	49722	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:43.207151890 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:43.207243919 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:43.207353115 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:43.207597017 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:43.207632065 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:43.525986910 CEST	443	49725	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:43.526599884 CEST	49725	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:43.526622057 CEST	443	49725	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:43.527240038 CEST	49725	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:43.527244091 CEST	443	49725	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:43.530134916 CEST	443	49724	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:43.530591965 CEST	49724	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:43.530611038 CEST	443	49724	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:43.530997038 CEST	443	49727	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:43.531168938 CEST	49724	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:43.531174898 CEST	443	49724	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:43.531409025 CEST	49727	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:43.531424999 CEST	443	49727	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:43.531958103 CEST	49727	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:43.531965017 CEST	443	49727	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:43.533447027 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:43.533833981 CEST	49723	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:43.533848047 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:43.534152985 CEST	49723	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:43.534157038 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:43.961184978 CEST	443	49728	142.250.186.36	192.168.2.6
Oct 11, 2024 16:09:43.961714983 CEST	49728	443	192.168.2.6	142.250.186.36
Oct 11, 2024 16:09:43.961730957 CEST	443	49728	142.250.186.36	192.168.2.6
Oct 11, 2024 16:09:43.962909937 CEST	443	49728	142.250.186.36	192.168.2.6
Oct 11, 2024 16:09:43.962960958 CEST	49728	443	192.168.2.6	142.250.186.36
Oct 11, 2024 16:09:43.964135885 CEST	49728	443	192.168.2.6	142.250.186.36
Oct 11, 2024 16:09:43.964252949 CEST	443	49728	142.250.186.36	192.168.2.6
Oct 11, 2024 16:09:43.970930099 CEST	443	49729	184.28.90.27	192.168.2.6
Oct 11, 2024 16:09:43.971000910 CEST	49729	443	192.168.2.6	184.28.90.27
Oct 11, 2024 16:09:43.972431898 CEST	49729	443	192.168.2.6	184.28.90.27
Oct 11, 2024 16:09:43.972439051 CEST	443	49729	184.28.90.27	192.168.2.6
Oct 11, 2024 16:09:43.972690105 CEST	443	49729	184.28.90.27	192.168.2.6
Oct 11, 2024 16:09:44.013650894 CEST	49728	443	192.168.2.6	142.250.186.36
Oct 11, 2024 16:09:44.013658047 CEST	443	49728	142.250.186.36	192.168.2.6
Oct 11, 2024 16:09:44.013659000 CEST	49729	443	192.168.2.6	184.28.90.27
Oct 11, 2024 16:09:44.020890951 CEST	49729	443	192.168.2.6	184.28.90.27
Oct 11, 2024 16:09:44.063411951 CEST	443	49729	184.28.90.27	192.168.2.6
Oct 11, 2024 16:09:44.064182043 CEST	443	49725	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.064198017 CEST	443	49725	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.064246893 CEST	49725	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.064264059 CEST	443	49725	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.064306974 CEST	49725	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.064474106 CEST	49725	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.064479113 CEST	443	49725	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.064492941 CEST	49725	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.064620018 CEST	443	49725	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.064645052 CEST	443	49725	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.064685106 CEST	49725	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.064723969 CEST	443	49724	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.064796925 CEST	443	49724	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.064846992 CEST	49724	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.065115929 CEST	49728	443	192.168.2.6	142.250.186.36
Oct 11, 2024 16:09:44.065599918 CEST	49724	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.065599918 CEST	49724	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.065609932 CEST	443	49724	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.065619946 CEST	443	49724	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.067430019 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.067457914 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.067502022 CEST	49723	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.067509890 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.067548037 CEST	49723	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.067553997 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.067579031 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.067617893 CEST	49723	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.067694902 CEST	49723	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.067702055 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.067713022 CEST	49723	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.067717075 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.068617105 CEST	443	49727	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.068798065 CEST	443	49727	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.068878889 CEST	49727	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.069073915 CEST	49727	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.069073915 CEST	49727	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.069081068 CEST	443	49727	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.069084883 CEST	443	49727	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.069613934 CEST	49733	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.069636106 CEST	443	49733	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.069689035 CEST	49733	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.069847107 CEST	49733	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.069855928 CEST	443	49733	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.071152925 CEST	49734	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.071158886 CEST	443	49734	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.071208954 CEST	49734	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.071543932 CEST	49735	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.071564913 CEST	443	49735	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.071640968 CEST	49735	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.071850061 CEST	49735	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.071875095 CEST	443	49735	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.072345972 CEST	49734	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.072355032 CEST	443	49734	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.073803902 CEST	49736	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.073821068 CEST	443	49736	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.073890924 CEST	49736	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.073998928 CEST	49736	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.074008942 CEST	443	49736	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.152129889 CEST	443	49726	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.152797937 CEST	49726	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.152820110 CEST	443	49726	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.153225899 CEST	49726	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.153230906 CEST	443	49726	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.158359051 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.158919096 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.158957958 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.162620068 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.162693977 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.163429976 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.163539886 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.163609982 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.204528093 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.204554081 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.250332117 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.263443947 CEST	443	49726	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.263513088 CEST	443	49726	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.263562918 CEST	49726	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.263578892 CEST	443	49726	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.263792038 CEST	443	49726	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.263839006 CEST	49726	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.263947010 CEST	49726	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.263957977 CEST	443	49726	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.263967037 CEST	49726	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.263971090 CEST	443	49726	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.267868996 CEST	49737	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.267890930 CEST	443	49737	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.267951012 CEST	49737	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.268129110 CEST	49737	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.268145084 CEST	443	49737	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.277868986 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.277924061 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.277944088 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.277962923 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.277980089 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.278002024 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.278013945 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.278036118 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.278057098 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.278064966 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.278101921 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.278126001 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.296802044 CEST	443	49729	184.28.90.27	192.168.2.6
Oct 11, 2024 16:09:44.296860933 CEST	443	49729	184.28.90.27	192.168.2.6
Oct 11, 2024 16:09:44.296910048 CEST	49729	443	192.168.2.6	184.28.90.27
Oct 11, 2024 16:09:44.301755905 CEST	49729	443	192.168.2.6	184.28.90.27
Oct 11, 2024 16:09:44.301769018 CEST	443	49729	184.28.90.27	192.168.2.6
Oct 11, 2024 16:09:44.363672018 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.363691092 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.363759041 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.363781929 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.363832951 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.368766069 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.368788958 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.368827105 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.368849993 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.368868113 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.368896961 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.368896961 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.368946075 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.382488966 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.382517099 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.418785095 CEST	49739	443	192.168.2.6	184.28.90.27
Oct 11, 2024 16:09:44.418813944 CEST	443	49739	184.28.90.27	192.168.2.6
Oct 11, 2024 16:09:44.418977976 CEST	49739	443	192.168.2.6	184.28.90.27
Oct 11, 2024 16:09:44.419401884 CEST	49739	443	192.168.2.6	184.28.90.27
Oct 11, 2024 16:09:44.419411898 CEST	443	49739	184.28.90.27	192.168.2.6
Oct 11, 2024 16:09:44.522422075 CEST	49740	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:44.522485018 CEST	443	49740	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:44.522557020 CEST	49740	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:44.537646055 CEST	49740	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:44.537678957 CEST	443	49740	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:44.543903112 CEST	49741	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:44.543924093 CEST	443	49741	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:44.544509888 CEST	49741	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:44.544601917 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:44.544608116 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:44.544737101 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:44.614420891 CEST	49741	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:44.614439964 CEST	443	49741	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:44.614778996 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:44.614790916 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:44.630882025 CEST	54810	53	192.168.2.6	1.1.1.1
Oct 11, 2024 16:09:44.635742903 CEST	53	54810	1.1.1.1	192.168.2.6
Oct 11, 2024 16:09:44.635880947 CEST	54810	53	192.168.2.6	1.1.1.1
Oct 11, 2024 16:09:44.753879070 CEST	443	49734	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.754312992 CEST	443	49736	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.754930019 CEST	443	49735	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.758438110 CEST	443	49733	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.784184933 CEST	54810	53	192.168.2.6	1.1.1.1
Oct 11, 2024 16:09:44.784755945 CEST	49733	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.784785032 CEST	443	49733	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.784792900 CEST	49736	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.784825087 CEST	443	49736	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.785226107 CEST	49736	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.785238028 CEST	443	49736	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.785464048 CEST	49733	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.785468102 CEST	443	49733	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.785558939 CEST	49734	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.785572052 CEST	443	49734	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.786047935 CEST	49734	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.786051035 CEST	443	49734	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.786163092 CEST	49735	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.786183119 CEST	443	49735	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.786374092 CEST	49735	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.786380053 CEST	443	49735	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.789134979 CEST	53	54810	1.1.1.1	192.168.2.6
Oct 11, 2024 16:09:44.798588037 CEST	54811	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:09:44.798651934 CEST	443	54811	40.113.103.199	192.168.2.6
Oct 11, 2024 16:09:44.798804998 CEST	54811	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:09:44.799366951 CEST	54811	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:09:44.799413919 CEST	443	54811	40.113.103.199	192.168.2.6
Oct 11, 2024 16:09:44.895271063 CEST	443	49734	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.895339012 CEST	443	49734	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.895488977 CEST	443	49736	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.895539045 CEST	49734	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.895699024 CEST	443	49736	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.895705938 CEST	49734	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.895720005 CEST	443	49735	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.895720005 CEST	443	49734	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.895730972 CEST	49734	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.895737886 CEST	443	49734	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.895762920 CEST	49736	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.895819902 CEST	443	49735	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.896075010 CEST	49735	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.897314072 CEST	49736	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.897361994 CEST	443	49736	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.897589922 CEST	49736	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.897608995 CEST	443	49736	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.898467064 CEST	49735	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.898477077 CEST	443	49735	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.898602009 CEST	49735	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.898610115 CEST	443	49735	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.900847912 CEST	54813	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.900860071 CEST	443	54813	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.902123928 CEST	54813	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.902123928 CEST	54814	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.902148962 CEST	443	54814	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.902359962 CEST	54814	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.903218985 CEST	54813	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.903218985 CEST	54814	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.903234959 CEST	443	54813	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.903273106 CEST	443	54814	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.904067039 CEST	54815	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.904086113 CEST	443	54815	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.904176950 CEST	54815	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.904270887 CEST	54815	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.904285908 CEST	443	54815	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.961680889 CEST	443	49737	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.962105036 CEST	49737	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.962124109 CEST	443	49737	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:44.962539911 CEST	49737	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:44.962548018 CEST	443	49737	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.021111965 CEST	443	49733	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.021174908 CEST	443	49733	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.021372080 CEST	49733	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.021404982 CEST	49733	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.021420956 CEST	443	49733	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.021425962 CEST	49733	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.021431923 CEST	443	49733	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.023993015 CEST	54816	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.024012089 CEST	443	54816	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.024149895 CEST	54816	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.024339914 CEST	54816	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.024349928 CEST	443	54816	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.077135086 CEST	443	49737	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.077204943 CEST	443	49737	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.077291012 CEST	49737	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.077625036 CEST	49737	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.077636003 CEST	443	49737	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.077646017 CEST	49737	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.077651024 CEST	443	49737	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.080496073 CEST	54817	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.080522060 CEST	443	54817	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.080785990 CEST	54817	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.080997944 CEST	54817	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.081015110 CEST	443	54817	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.099538088 CEST	53	54810	1.1.1.1	192.168.2.6
Oct 11, 2024 16:09:45.103585958 CEST	54810	53	192.168.2.6	1.1.1.1
Oct 11, 2024 16:09:45.109376907 CEST	53	54810	1.1.1.1	192.168.2.6
Oct 11, 2024 16:09:45.109580994 CEST	54810	53	192.168.2.6	1.1.1.1
Oct 11, 2024 16:09:45.128324986 CEST	443	49739	184.28.90.27	192.168.2.6
Oct 11, 2024 16:09:45.128391981 CEST	49739	443	192.168.2.6	184.28.90.27
Oct 11, 2024 16:09:45.129610062 CEST	49739	443	192.168.2.6	184.28.90.27
Oct 11, 2024 16:09:45.129616022 CEST	443	49739	184.28.90.27	192.168.2.6
Oct 11, 2024 16:09:45.129846096 CEST	443	49739	184.28.90.27	192.168.2.6
Oct 11, 2024 16:09:45.130907059 CEST	49739	443	192.168.2.6	184.28.90.27
Oct 11, 2024 16:09:45.175414085 CEST	443	49739	184.28.90.27	192.168.2.6
Oct 11, 2024 16:09:45.196376085 CEST	443	49740	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.196696997 CEST	49740	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.196739912 CEST	443	49740	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.197113991 CEST	443	49740	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.197489977 CEST	49740	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.197561026 CEST	443	49740	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.197638988 CEST	49740	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.239403963 CEST	443	49740	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.250586987 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.251039028 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.251059055 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.254672050 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.254765034 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.255078077 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.255187988 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.255192995 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.255244970 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.301392078 CEST	443	49740	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.301414013 CEST	443	49740	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.301429033 CEST	443	49740	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.301480055 CEST	49740	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.301534891 CEST	443	49740	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.301569939 CEST	49740	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.301598072 CEST	49740	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.308429956 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.308438063 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.321958065 CEST	443	49741	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.322225094 CEST	49741	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.322233915 CEST	443	49741	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.322567940 CEST	443	49741	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.322989941 CEST	49741	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.322989941 CEST	49741	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.323007107 CEST	443	49741	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.323051929 CEST	443	49741	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.355477095 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.356245041 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.356297016 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.356316090 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.356333017 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.356354952 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.356364965 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.356391907 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.356393099 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.356408119 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.356420040 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.356451035 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.371563911 CEST	49741	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.388176918 CEST	443	49740	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.388235092 CEST	443	49740	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.388250113 CEST	49740	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.388287067 CEST	49740	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.388912916 CEST	49740	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.388926983 CEST	443	49740	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.409003019 CEST	443	49705	173.222.162.64	192.168.2.6
Oct 11, 2024 16:09:45.409176111 CEST	49705	443	192.168.2.6	173.222.162.64
Oct 11, 2024 16:09:45.429054976 CEST	443	49741	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.429074049 CEST	443	49741	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.429080963 CEST	443	49741	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.429092884 CEST	443	49741	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.429100037 CEST	443	49741	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.429105997 CEST	443	49741	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.429140091 CEST	49741	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.429151058 CEST	443	49741	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.429195881 CEST	49741	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.429195881 CEST	49741	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.429198980 CEST	443	49741	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.430975914 CEST	49741	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.437618971 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.437669992 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.437714100 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.437722921 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.437762022 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.437781096 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.439651012 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.439694881 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.439733982 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.439755917 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.439779043 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.440846920 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.445394993 CEST	49741	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.445406914 CEST	443	49741	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.452029943 CEST	54820	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.452078104 CEST	443	54820	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.452260971 CEST	54820	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.452701092 CEST	54820	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.452730894 CEST	443	54820	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.461921930 CEST	443	49739	184.28.90.27	192.168.2.6
Oct 11, 2024 16:09:45.461985111 CEST	443	49739	184.28.90.27	192.168.2.6
Oct 11, 2024 16:09:45.462163925 CEST	49739	443	192.168.2.6	184.28.90.27
Oct 11, 2024 16:09:45.462790012 CEST	49739	443	192.168.2.6	184.28.90.27
Oct 11, 2024 16:09:45.462804079 CEST	443	49739	184.28.90.27	192.168.2.6
Oct 11, 2024 16:09:45.462836981 CEST	49739	443	192.168.2.6	184.28.90.27
Oct 11, 2024 16:09:45.462841034 CEST	443	49739	184.28.90.27	192.168.2.6
Oct 11, 2024 16:09:45.523890972 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.523983955 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.523984909 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.524014950 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.524039984 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.524053097 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.524620056 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.524662971 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.524697065 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.524703979 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.524753094 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.524753094 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.525594950 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.525636911 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.525674105 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.525681019 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.525712013 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.525729895 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.527126074 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.527164936 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.527209997 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.527218103 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.527358055 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.569839001 CEST	443	54814	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.570771933 CEST	54814	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.570792913 CEST	443	54814	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.571655035 CEST	54814	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.571666002 CEST	443	54814	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.573154926 CEST	443	54815	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.573750973 CEST	54815	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.573767900 CEST	443	54815	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.575051069 CEST	54815	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.575056076 CEST	443	54815	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.576724052 CEST	443	54811	40.113.103.199	192.168.2.6
Oct 11, 2024 16:09:45.576813936 CEST	54811	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:09:45.580346107 CEST	443	54813	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.582609892 CEST	54811	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:09:45.582618952 CEST	443	54811	40.113.103.199	192.168.2.6
Oct 11, 2024 16:09:45.582868099 CEST	443	54811	40.113.103.199	192.168.2.6
Oct 11, 2024 16:09:45.583369017 CEST	54813	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.583393097 CEST	443	54813	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.584289074 CEST	54813	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.584296942 CEST	443	54813	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.588048935 CEST	54811	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:09:45.588413000 CEST	54811	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:09:45.588426113 CEST	443	54811	40.113.103.199	192.168.2.6
Oct 11, 2024 16:09:45.588588953 CEST	54811	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:09:45.609596968 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.609668016 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.609695911 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.609761953 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.609821081 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.612138033 CEST	49742	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.612152100 CEST	443	49742	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.631421089 CEST	443	54811	40.113.103.199	192.168.2.6
Oct 11, 2024 16:09:45.682832003 CEST	443	54815	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.682992935 CEST	443	54815	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.683053970 CEST	54815	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.691111088 CEST	443	54814	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.691174030 CEST	443	54814	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.691225052 CEST	54814	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.695044041 CEST	443	54813	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.695099115 CEST	443	54813	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.695313931 CEST	54813	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.703589916 CEST	443	54816	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.757266998 CEST	54816	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.762341022 CEST	443	54811	40.113.103.199	192.168.2.6
Oct 11, 2024 16:09:45.762453079 CEST	443	54811	40.113.103.199	192.168.2.6
Oct 11, 2024 16:09:45.762507915 CEST	54811	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:09:45.763005972 CEST	443	54817	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.772433996 CEST	54811	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:09:45.772469997 CEST	443	54811	40.113.103.199	192.168.2.6
Oct 11, 2024 16:09:45.806704998 CEST	54817	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.819962025 CEST	54821	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.820008993 CEST	443	54821	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.820077896 CEST	54821	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.822750092 CEST	54821	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.822772026 CEST	443	54821	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.837856054 CEST	54817	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.837872982 CEST	443	54817	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.838326931 CEST	54817	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.838334084 CEST	443	54817	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.838485003 CEST	54815	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.838505983 CEST	443	54815	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.838516951 CEST	54815	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.838522911 CEST	443	54815	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.840693951 CEST	54814	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.840708017 CEST	443	54814	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.840723991 CEST	54814	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.840730906 CEST	443	54814	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.841500044 CEST	54813	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.841500044 CEST	54813	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.841506958 CEST	443	54813	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.841516972 CEST	443	54813	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.845029116 CEST	54816	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.845035076 CEST	443	54816	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.846010923 CEST	54816	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.846015930 CEST	443	54816	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.846678972 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.846689939 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.846750021 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.846988916 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:45.846997976 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:45.861323118 CEST	54823	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.861380100 CEST	443	54823	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.861959934 CEST	54823	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.862390041 CEST	54823	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.862406969 CEST	443	54823	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.867137909 CEST	54824	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.867181063 CEST	443	54824	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.867245913 CEST	54824	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.867630959 CEST	54824	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.867650986 CEST	443	54824	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.870052099 CEST	54825	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.870084047 CEST	443	54825	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.870165110 CEST	54825	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.871220112 CEST	54825	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.871229887 CEST	443	54825	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.947314978 CEST	443	54817	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.947372913 CEST	443	54817	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.947443008 CEST	54817	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.950686932 CEST	54817	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.950706959 CEST	443	54817	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.950728893 CEST	54817	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.950733900 CEST	443	54817	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.952712059 CEST	443	54816	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.952780008 CEST	443	54816	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.952826023 CEST	54816	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.958893061 CEST	54816	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.958905935 CEST	443	54816	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.958915949 CEST	54816	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.958920956 CEST	443	54816	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.966666937 CEST	54826	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.966695070 CEST	443	54826	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.966757059 CEST	54826	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.976100922 CEST	54827	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.976151943 CEST	443	54827	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.976438046 CEST	54827	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.976454973 CEST	54826	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.976464987 CEST	443	54826	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:45.992605925 CEST	54827	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:45.992633104 CEST	443	54827	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.033921003 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.033955097 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.034039021 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.034290075 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.034306049 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.124394894 CEST	443	54820	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.156303883 CEST	54820	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.156368971 CEST	443	54820	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.156851053 CEST	443	54820	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.166121960 CEST	54820	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.166194916 CEST	443	54820	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.166615963 CEST	54820	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.207406998 CEST	443	54820	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.275067091 CEST	443	54820	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.275085926 CEST	443	54820	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.275121927 CEST	443	54820	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.275129080 CEST	443	54820	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.275147915 CEST	54820	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.275166035 CEST	443	54820	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.275185108 CEST	443	54820	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.275193930 CEST	54820	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.275216103 CEST	54820	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.275227070 CEST	54820	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.352210045 CEST	54820	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.352222919 CEST	443	54820	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.487859011 CEST	443	54821	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.506978989 CEST	54821	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.507045984 CEST	443	54821	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.510663033 CEST	443	54821	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.510752916 CEST	54821	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.511430979 CEST	54821	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.511651993 CEST	443	54821	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.511657953 CEST	54821	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.516370058 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.516818047 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.516839027 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.518543005 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.518615007 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.519207001 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.519298077 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.519686937 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.519704103 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.555433035 CEST	443	54821	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.561526060 CEST	54821	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.561527014 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.561594009 CEST	443	54821	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.567325115 CEST	443	54823	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.567603111 CEST	443	54825	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.568811893 CEST	443	54824	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.592556000 CEST	54823	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.592590094 CEST	443	54823	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.593317986 CEST	54823	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.593323946 CEST	443	54823	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.594114065 CEST	54825	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.594114065 CEST	54825	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.594134092 CEST	443	54825	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.594142914 CEST	443	54825	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.594537973 CEST	54824	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.594626904 CEST	443	54824	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.594873905 CEST	54824	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.594890118 CEST	443	54824	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.608283043 CEST	54821	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.613888979 CEST	443	54821	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.613959074 CEST	443	54821	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.613980055 CEST	443	54821	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.613998890 CEST	443	54821	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.614037037 CEST	54821	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.614038944 CEST	443	54821	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.614058971 CEST	443	54821	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.614078999 CEST	54821	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.614092112 CEST	443	54821	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.614129066 CEST	54821	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.614129066 CEST	54821	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.614129066 CEST	54821	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.614166021 CEST	443	54821	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.614219904 CEST	54821	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.614238977 CEST	443	54821	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.614306927 CEST	443	54821	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.614362001 CEST	54821	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.618098021 CEST	54821	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.618129969 CEST	443	54821	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.621196032 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.621258974 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.621280909 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.621320009 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.621323109 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.621351004 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.621368885 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.621370077 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.621397018 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.621397018 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.621424913 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.674099922 CEST	443	54826	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.674740076 CEST	54826	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.674755096 CEST	443	54826	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.675440073 CEST	54826	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.675443888 CEST	443	54826	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.677772045 CEST	443	54827	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.678160906 CEST	54827	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.678203106 CEST	443	54827	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.678586960 CEST	54827	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.678597927 CEST	443	54827	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.692130089 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.692468882 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.692532063 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.692996025 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.693495035 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.693587065 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.693654060 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.700582981 CEST	443	54825	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.700663090 CEST	443	54825	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.700717926 CEST	54825	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.701280117 CEST	443	54824	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.701353073 CEST	443	54824	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.701579094 CEST	54824	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.703412056 CEST	54825	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.703429937 CEST	443	54825	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.703440905 CEST	54825	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.703445911 CEST	443	54825	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.703598976 CEST	54824	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.703622103 CEST	443	54824	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.703725100 CEST	54824	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.703746080 CEST	443	54824	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.710438967 CEST	54829	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.710438967 CEST	54830	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.710485935 CEST	443	54829	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.710500002 CEST	443	54830	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.710582018 CEST	54829	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.710582018 CEST	54830	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.710721970 CEST	54829	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.710747957 CEST	443	54829	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.710962057 CEST	54830	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.710973024 CEST	443	54830	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.710982084 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.711055994 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.711080074 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.711101055 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.711129904 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.711152077 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.712794065 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.712845087 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.712886095 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.712898970 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.712933064 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.712951899 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.733268023 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.733274937 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.794872046 CEST	443	54826	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.794928074 CEST	443	54826	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.794992924 CEST	54826	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.801311970 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.801379919 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.801537037 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.801610947 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.801656961 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.801681042 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.802360058 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.802412987 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.802453995 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.802469015 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.802555084 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.802555084 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.803173065 CEST	54826	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.803189993 CEST	443	54826	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.803446054 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.803494930 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.803531885 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.803550959 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.803586960 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.803608894 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.804372072 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.804414034 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.804449081 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.804461002 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.804495096 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.804538965 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.805185080 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.805337906 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.805352926 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.805383921 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.805442095 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.807709932 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.807745934 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.807765961 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.807804108 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.807821035 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.807851076 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.807856083 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.807868004 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.807904005 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.807996035 CEST	54831	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.808006048 CEST	54822	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:46.808020115 CEST	443	54831	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.808034897 CEST	443	54822	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:46.808104992 CEST	54831	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.808269024 CEST	54831	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.808283091 CEST	443	54831	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.809360981 CEST	443	54823	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.809700012 CEST	443	54823	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.809763908 CEST	54823	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.809865952 CEST	54823	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.809865952 CEST	54823	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.809897900 CEST	443	54823	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.809920073 CEST	443	54823	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.815685987 CEST	54832	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.815712929 CEST	443	54832	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.815783024 CEST	54832	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.816009998 CEST	54832	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.816025019 CEST	443	54832	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.887705088 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.887732029 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.887784004 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.887798071 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.887831926 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.887854099 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.888926983 CEST	443	54827	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.888993025 CEST	443	54827	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.889072895 CEST	54827	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.890530109 CEST	54827	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.890577078 CEST	443	54827	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.890609980 CEST	54827	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.890626907 CEST	443	54827	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.896068096 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.896095037 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.896122932 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.896138906 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.896162033 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.896183014 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.898422003 CEST	54833	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.898461103 CEST	443	54833	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.898509026 CEST	54833	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.901417971 CEST	54833	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.901432037 CEST	443	54833	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.974227905 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.974252939 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.974303007 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.974322081 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.974345922 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.974373102 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.976039886 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.976062059 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.976108074 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.976118088 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.976145029 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.976171970 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.977466106 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.977484941 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.977521896 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.977530956 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.977572918 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.984450102 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.984471083 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.984536886 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.984551907 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:46.984576941 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:46.984596014 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:47.060584068 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.060702085 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:47.060717106 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.060770035 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.060847044 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:47.349622011 CEST	54828	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:47.349649906 CEST	443	54828	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.351108074 CEST	54834	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:47.351149082 CEST	443	54834	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:47.351247072 CEST	54834	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:47.351680994 CEST	54834	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:47.351690054 CEST	443	54834	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:47.352767944 CEST	54835	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:47.352858067 CEST	443	54835	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:47.352951050 CEST	54835	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:47.353230953 CEST	54836	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:47.353257895 CEST	443	54836	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:47.353352070 CEST	54836	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:47.353574991 CEST	54835	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:47.353617907 CEST	443	54835	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:47.353892088 CEST	54836	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:47.353912115 CEST	443	54836	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:47.466281891 CEST	54837	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:47.466332912 CEST	443	54837	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.466402054 CEST	54837	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:47.468398094 CEST	54837	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:47.468411922 CEST	443	54837	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.474184036 CEST	54838	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:47.474195957 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.474473000 CEST	54838	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:47.475234985 CEST	54838	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:47.475244999 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.748862982 CEST	443	54831	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.752263069 CEST	443	54833	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.755211115 CEST	54831	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:47.755234003 CEST	443	54831	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.756872892 CEST	443	54830	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.757056952 CEST	443	54829	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.758266926 CEST	54831	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:47.758274078 CEST	443	54831	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.759915113 CEST	54833	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:47.759944916 CEST	443	54833	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.762377977 CEST	54833	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:47.762383938 CEST	443	54833	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.763267040 CEST	54830	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:47.763278008 CEST	443	54830	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.773703098 CEST	54830	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:47.773710966 CEST	443	54830	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.776941061 CEST	54829	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:47.776947975 CEST	443	54829	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.777678967 CEST	54829	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:47.777683973 CEST	443	54829	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.838687897 CEST	443	54832	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.839519978 CEST	54832	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:47.839541912 CEST	443	54832	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.840831995 CEST	54832	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:47.840841055 CEST	443	54832	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.862548113 CEST	443	54831	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.862603903 CEST	443	54831	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.862704039 CEST	54831	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:47.868171930 CEST	443	54833	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.868218899 CEST	443	54833	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.868464947 CEST	54833	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:47.881366968 CEST	443	54829	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.881558895 CEST	443	54829	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.881613016 CEST	54829	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:47.882103920 CEST	443	54830	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.882250071 CEST	443	54830	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.882312059 CEST	54830	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:47.964322090 CEST	54831	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:47.964354992 CEST	443	54831	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:47.964392900 CEST	54831	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:47.964401960 CEST	443	54831	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.106728077 CEST	54833	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.106728077 CEST	54833	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.106785059 CEST	443	54833	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.106815100 CEST	443	54833	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.117044926 CEST	54829	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.117060900 CEST	443	54829	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.125967979 CEST	54830	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.125967979 CEST	54830	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.125977039 CEST	443	54830	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.125984907 CEST	443	54830	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.168260098 CEST	443	54832	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.168443918 CEST	443	54832	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.168504953 CEST	54832	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.208034992 CEST	443	54835	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:48.218436956 CEST	443	54834	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:48.224796057 CEST	54832	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.224827051 CEST	443	54832	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.224842072 CEST	54832	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.224850893 CEST	443	54832	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.225476980 CEST	443	54836	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:48.236802101 CEST	443	54837	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.244621992 CEST	54835	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:48.244657040 CEST	443	54835	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:48.244772911 CEST	54834	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:48.244780064 CEST	443	54834	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:48.244956017 CEST	54836	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:48.244972944 CEST	443	54836	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:48.245172977 CEST	54837	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.245182991 CEST	443	54837	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.245345116 CEST	443	54834	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:48.245820045 CEST	443	54837	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.246110916 CEST	443	54835	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:48.247749090 CEST	54834	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:48.247834921 CEST	443	54834	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:48.248194933 CEST	54837	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.248296976 CEST	443	54837	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.248545885 CEST	443	54836	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:48.248635054 CEST	54836	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:48.250288963 CEST	54835	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:48.250495911 CEST	443	54835	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:48.250546932 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.251095057 CEST	54836	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:48.251277924 CEST	443	54836	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:48.251678944 CEST	54834	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:48.252150059 CEST	54837	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.252840042 CEST	54838	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.252862930 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.252939939 CEST	54835	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:48.253170967 CEST	54836	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:48.253182888 CEST	443	54836	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:48.253962040 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.263411999 CEST	54838	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.263411999 CEST	54838	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.263645887 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.269886971 CEST	54839	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.269912958 CEST	443	54839	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.270062923 CEST	54839	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.287271976 CEST	54839	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.287281990 CEST	443	54839	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.288619041 CEST	54840	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.288676977 CEST	443	54840	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.288865089 CEST	54840	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.289011955 CEST	54840	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.289026976 CEST	443	54840	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.289155006 CEST	54841	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.289181948 CEST	443	54841	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.289239883 CEST	54841	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.290065050 CEST	54841	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.290081024 CEST	443	54841	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.295484066 CEST	443	54834	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:48.299396992 CEST	443	54837	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.299400091 CEST	443	54835	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:48.301811934 CEST	54836	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:48.309331894 CEST	54842	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.309357882 CEST	443	54842	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.309583902 CEST	54842	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.310152054 CEST	54843	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.310163975 CEST	443	54843	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.310178995 CEST	54842	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.310199022 CEST	443	54842	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.310211897 CEST	54843	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.312628984 CEST	54843	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.312642097 CEST	443	54843	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.317270041 CEST	54838	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.350574017 CEST	443	54835	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:48.350640059 CEST	443	54835	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:48.350805998 CEST	443	54835	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:48.350872040 CEST	54835	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:48.351361990 CEST	54835	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:48.351385117 CEST	443	54835	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:48.352837086 CEST	443	54834	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:48.352861881 CEST	443	54834	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:48.352919102 CEST	54834	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:48.352922916 CEST	443	54834	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:48.352974892 CEST	54834	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:48.353192091 CEST	443	54836	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:48.353269100 CEST	443	54836	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:48.353324890 CEST	54836	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:48.353343010 CEST	443	54836	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:48.353586912 CEST	54836	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:48.353594065 CEST	443	54836	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:48.353634119 CEST	443	54836	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:48.353799105 CEST	54836	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:48.354100943 CEST	54834	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:48.354108095 CEST	443	54834	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:48.354682922 CEST	54836	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:48.354695082 CEST	443	54836	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:48.371342897 CEST	443	54837	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.371366024 CEST	443	54837	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.371393919 CEST	443	54837	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.371462107 CEST	54837	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.371479988 CEST	443	54837	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.371512890 CEST	443	54837	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.371534109 CEST	54837	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.371551991 CEST	54837	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.372231960 CEST	54837	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.372242928 CEST	443	54837	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.379914045 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.379934072 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.379942894 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.379988909 CEST	54838	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.379997015 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.380007982 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.380058050 CEST	54838	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.380063057 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.380072117 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.380109072 CEST	54838	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.465250015 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.465261936 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.465305090 CEST	54838	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.465318918 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.465346098 CEST	54838	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.465351105 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.465379953 CEST	54838	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.465389967 CEST	54838	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.472067118 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.472084999 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.472125053 CEST	54838	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.472136974 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.472166061 CEST	54838	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.472192049 CEST	54838	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.559130907 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.559148073 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.559210062 CEST	54838	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.559216976 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.559252977 CEST	54838	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.560714006 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.560728073 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.560772896 CEST	54838	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.560777903 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.560830116 CEST	54838	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.564812899 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.564826012 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.564882994 CEST	54838	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.564887047 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.564923048 CEST	54838	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.653295040 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.653311968 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.653357983 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.653366089 CEST	54838	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.653383017 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.653409004 CEST	54838	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.653424978 CEST	54838	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.653476954 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.653597116 CEST	54838	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.653722048 CEST	54838	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:48.653732061 CEST	443	54838	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.878186941 CEST	54844	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:48.878271103 CEST	443	54844	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:48.878371000 CEST	54844	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:48.878506899 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:48.878550053 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:48.878647089 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:48.878751040 CEST	54844	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:48.878783941 CEST	443	54844	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:48.879028082 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:48.879045963 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:48.950922012 CEST	54846	443	192.168.2.6	20.190.159.75
Oct 11, 2024 16:09:48.951020956 CEST	443	54846	20.190.159.75	192.168.2.6
Oct 11, 2024 16:09:48.951102972 CEST	54846	443	192.168.2.6	20.190.159.75
Oct 11, 2024 16:09:48.951431036 CEST	54846	443	192.168.2.6	20.190.159.75
Oct 11, 2024 16:09:48.951472044 CEST	443	54846	20.190.159.75	192.168.2.6
Oct 11, 2024 16:09:48.958713055 CEST	443	54841	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.959373951 CEST	443	54840	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.961159945 CEST	443	54839	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.991074085 CEST	443	54842	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:48.993501902 CEST	443	54843	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.002885103 CEST	54839	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.002887964 CEST	54841	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.002886057 CEST	54840	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.008176088 CEST	54843	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.008188009 CEST	443	54843	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.009306908 CEST	54843	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.009310961 CEST	443	54843	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.009763956 CEST	54841	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.009774923 CEST	443	54841	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.010539055 CEST	54841	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.010544062 CEST	443	54841	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.010987043 CEST	54840	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.010992050 CEST	443	54840	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.011780977 CEST	54840	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.011785984 CEST	443	54840	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.012865067 CEST	54839	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.012872934 CEST	443	54839	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.013955116 CEST	54839	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.013967991 CEST	443	54839	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.016417027 CEST	54842	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.016441107 CEST	443	54842	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.017280102 CEST	54842	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.017287016 CEST	443	54842	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.026956081 CEST	54847	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.026994944 CEST	443	54847	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.027168036 CEST	54847	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.028079987 CEST	54847	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.028091908 CEST	443	54847	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.029177904 CEST	54848	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.029203892 CEST	443	54848	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.029556036 CEST	54848	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.029726982 CEST	54848	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.029737949 CEST	443	54848	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.033457041 CEST	54849	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.033494949 CEST	443	54849	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.033646107 CEST	54849	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.033963919 CEST	54849	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.033982992 CEST	443	54849	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.325766087 CEST	443	54839	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.326422930 CEST	443	54839	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.326509953 CEST	54839	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.327143908 CEST	443	54841	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.327219009 CEST	443	54841	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.327264071 CEST	54841	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.336163998 CEST	443	54843	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.336335897 CEST	443	54843	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.336388111 CEST	54843	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.360371113 CEST	443	54842	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.360426903 CEST	443	54842	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.360491037 CEST	54842	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.361764908 CEST	443	54840	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.362025976 CEST	443	54840	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.362086058 CEST	54840	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.712589025 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:49.739578009 CEST	54842	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.739598036 CEST	443	54842	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.739609957 CEST	54842	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.739614964 CEST	443	54842	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.740096092 CEST	54840	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.740133047 CEST	443	54840	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.740170002 CEST	54840	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.740180016 CEST	443	54840	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.746388912 CEST	54839	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.746412039 CEST	443	54839	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.746465921 CEST	54839	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.746474981 CEST	443	54839	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.748106003 CEST	54841	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.748106003 CEST	54841	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.748112917 CEST	443	54841	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.748119116 CEST	443	54841	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.752943039 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:49.752964973 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:49.753000021 CEST	443	54846	20.190.159.75	192.168.2.6
Oct 11, 2024 16:09:49.753711939 CEST	54846	443	192.168.2.6	20.190.159.75
Oct 11, 2024 16:09:49.753732920 CEST	443	54846	20.190.159.75	192.168.2.6
Oct 11, 2024 16:09:49.754031897 CEST	54843	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.754053116 CEST	443	54843	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.754066944 CEST	54843	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.754071951 CEST	443	54843	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.755002022 CEST	443	54846	20.190.159.75	192.168.2.6
Oct 11, 2024 16:09:49.755067110 CEST	54846	443	192.168.2.6	20.190.159.75
Oct 11, 2024 16:09:49.756766081 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:49.756846905 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:49.769804955 CEST	54850	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.769819021 CEST	443	54850	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.769881010 CEST	54850	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.771255970 CEST	54846	443	192.168.2.6	20.190.159.75
Oct 11, 2024 16:09:49.771482944 CEST	443	54846	20.190.159.75	192.168.2.6
Oct 11, 2024 16:09:49.771923065 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:49.772120953 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:49.772378922 CEST	54846	443	192.168.2.6	20.190.159.75
Oct 11, 2024 16:09:49.772414923 CEST	443	54846	20.190.159.75	192.168.2.6
Oct 11, 2024 16:09:49.772516966 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:49.772525072 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:49.773839951 CEST	54850	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.773855925 CEST	443	54850	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.777009964 CEST	54851	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.777043104 CEST	443	54851	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.777101994 CEST	54851	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.777311087 CEST	54851	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.777327061 CEST	443	54851	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.783231020 CEST	54852	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.783262014 CEST	443	54852	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.783324957 CEST	54852	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.785657883 CEST	54853	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.785701036 CEST	443	54853	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.785768032 CEST	54853	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.787870884 CEST	54854	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.787898064 CEST	443	54854	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.787956953 CEST	54854	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.788578987 CEST	54852	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.788589954 CEST	443	54852	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.788696051 CEST	54853	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.788723946 CEST	443	54853	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.789097071 CEST	54854	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.789122105 CEST	443	54854	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.813946962 CEST	54846	443	192.168.2.6	20.190.159.75
Oct 11, 2024 16:09:49.813987970 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:49.858629942 CEST	443	54844	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:49.861123085 CEST	54844	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:49.861186981 CEST	443	54844	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:49.862693071 CEST	443	54844	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:49.862770081 CEST	54844	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:49.863859892 CEST	54844	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:49.863955975 CEST	443	54844	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:49.864352942 CEST	54844	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:49.864371061 CEST	443	54844	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:49.875432014 CEST	443	54848	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.896724939 CEST	54848	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.896749020 CEST	443	54848	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.897165060 CEST	443	54848	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.903633118 CEST	54848	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.903697968 CEST	443	54848	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.903747082 CEST	443	54849	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.904227972 CEST	54849	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.904237032 CEST	443	54849	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.904355049 CEST	54848	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.904633045 CEST	443	54847	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.905656099 CEST	443	54849	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.905715942 CEST	54849	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.905962944 CEST	54844	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:49.916517019 CEST	54847	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.916536093 CEST	443	54847	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.917129040 CEST	443	54847	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.917285919 CEST	54849	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.917401075 CEST	443	54849	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.918734074 CEST	54847	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.918823957 CEST	443	54847	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.919244051 CEST	54849	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.919258118 CEST	443	54849	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.919284105 CEST	54847	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.951406002 CEST	443	54848	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.959410906 CEST	443	54847	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:49.968606949 CEST	54849	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:49.972240925 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:49.974011898 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:49.974037886 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:49.974077940 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:49.974080086 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:49.974101067 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:49.974118948 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:49.974118948 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:49.974128962 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:49.974152088 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:49.974152088 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:49.974167109 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:49.974199057 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.022475004 CEST	443	54848	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.022489071 CEST	443	54848	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.022553921 CEST	54848	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.022563934 CEST	443	54848	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.024279118 CEST	443	54847	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.024305105 CEST	443	54847	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.024358034 CEST	54847	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.024370909 CEST	443	54847	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.024409056 CEST	54847	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.024410009 CEST	443	54847	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.024451017 CEST	54847	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.024795055 CEST	443	54848	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.024847031 CEST	54848	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.027865887 CEST	443	54849	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.027892113 CEST	443	54849	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.027903080 CEST	443	54849	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.027945042 CEST	54849	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.027966976 CEST	443	54849	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.028069973 CEST	443	54849	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.028117895 CEST	54849	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.062737942 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.062803984 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.062839985 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.062861919 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.062899113 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.062916994 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.064783096 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.064825058 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.064863920 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.064871073 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.064924002 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.077663898 CEST	54848	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.077680111 CEST	443	54848	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.078571081 CEST	54849	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.078583002 CEST	443	54849	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.079054117 CEST	54847	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.079077005 CEST	443	54847	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.099193096 CEST	443	54846	20.190.159.75	192.168.2.6
Oct 11, 2024 16:09:50.099518061 CEST	443	54846	20.190.159.75	192.168.2.6
Oct 11, 2024 16:09:50.099579096 CEST	54846	443	192.168.2.6	20.190.159.75
Oct 11, 2024 16:09:50.149555922 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.149596930 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.149625063 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.149632931 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.149669886 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.149688959 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.151535034 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.151573896 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.151623964 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.151631117 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.151657104 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.151676893 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.152597904 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.152632952 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.152657032 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.152662039 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.152690887 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.152710915 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.153251886 CEST	443	54844	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.154288054 CEST	443	54844	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.154294968 CEST	443	54844	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.154323101 CEST	443	54844	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.154354095 CEST	54844	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.154361963 CEST	443	54844	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.154405117 CEST	54844	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.238389969 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.238457918 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.238481045 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.238488913 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.238533020 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.238857985 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.238903046 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.238924026 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.238929033 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.238955021 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.238974094 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.239231110 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.239274025 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.239310026 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.239315033 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.239326954 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.239353895 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.240185022 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.240227938 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.240237951 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.240257025 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.240281105 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.240298033 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.241017103 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.241067886 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.241091967 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.241097927 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.241146088 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.241847038 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.241887093 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.241909981 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.241914988 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.241940975 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.241961956 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.242892981 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.242934942 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.242964029 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.242969990 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.242995977 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.243019104 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.326880932 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.326900005 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.326993942 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.327001095 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.327049971 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.327327967 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.327342987 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.327403069 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.327409983 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.327450037 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.328140020 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.328186035 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.328224897 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.328232050 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.328270912 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.328284979 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.328548908 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.328563929 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.328600883 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.328605890 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.328650951 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.328742981 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.328792095 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.328834057 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.430454016 CEST	443	54850	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.431031942 CEST	54850	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.431050062 CEST	443	54850	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.431626081 CEST	54850	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.431631088 CEST	443	54850	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.464227915 CEST	443	54852	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.464699984 CEST	54852	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.464732885 CEST	443	54852	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.465266943 CEST	54852	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.465285063 CEST	443	54852	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.478061914 CEST	443	54851	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.478492022 CEST	54851	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.478508949 CEST	443	54851	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.479059935 CEST	54851	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.479064941 CEST	443	54851	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.498347998 CEST	443	54854	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.498670101 CEST	54854	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.498739958 CEST	443	54854	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.499527931 CEST	54854	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.499545097 CEST	443	54854	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.569186926 CEST	443	54850	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.569349051 CEST	443	54850	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.569406986 CEST	54850	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.569485903 CEST	54850	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.569504976 CEST	443	54850	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.569534063 CEST	54850	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.569540977 CEST	443	54850	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.571830034 CEST	443	54853	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.572515011 CEST	54853	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.572560072 CEST	443	54853	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.572715998 CEST	54855	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.572752953 CEST	443	54855	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.572844982 CEST	54855	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.573036909 CEST	54855	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.573050976 CEST	443	54855	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.573131084 CEST	54853	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.573146105 CEST	443	54853	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.574815989 CEST	443	54852	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.574979067 CEST	443	54852	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.575088024 CEST	54852	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.575088024 CEST	54852	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.575117111 CEST	54852	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.575138092 CEST	443	54852	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.579077005 CEST	54856	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.579093933 CEST	443	54856	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.579150915 CEST	54856	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.579304934 CEST	54856	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.579319954 CEST	443	54856	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.592895031 CEST	443	54851	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.592947006 CEST	443	54851	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.592991114 CEST	54851	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.593493938 CEST	54851	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.593514919 CEST	443	54851	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.593528032 CEST	54851	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.593534946 CEST	443	54851	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.596592903 CEST	54857	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.596642017 CEST	443	54857	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.596698999 CEST	54857	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.596813917 CEST	54857	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.596829891 CEST	443	54857	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.617050886 CEST	443	54854	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.617199898 CEST	443	54854	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.617255926 CEST	54854	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.617551088 CEST	54854	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.617588043 CEST	443	54854	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.617614985 CEST	54854	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.617630005 CEST	443	54854	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.619719982 CEST	54858	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.619744062 CEST	443	54858	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.619822979 CEST	54858	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.620021105 CEST	54858	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.620034933 CEST	443	54858	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.717647076 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.720072031 CEST	54846	443	192.168.2.6	20.190.159.75
Oct 11, 2024 16:09:50.720103025 CEST	443	54846	20.190.159.75	192.168.2.6
Oct 11, 2024 16:09:50.727854967 CEST	54845	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.727864981 CEST	443	54845	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.731760979 CEST	54844	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.731798887 CEST	443	54844	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.779362917 CEST	443	54853	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.779444933 CEST	443	54853	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.779576063 CEST	54853	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.865776062 CEST	54860	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:50.865787983 CEST	443	54860	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:50.865854025 CEST	54860	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:50.900418043 CEST	54860	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:50.900434971 CEST	443	54860	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:50.902307034 CEST	54853	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.902307034 CEST	54853	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.902347088 CEST	443	54853	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.902370930 CEST	443	54853	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.907816887 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:50.907826900 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:50.908010960 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:50.908535957 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:50.908548117 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:50.914410114 CEST	54862	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.914454937 CEST	443	54862	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.914522886 CEST	54862	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.914721966 CEST	54862	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:50.914737940 CEST	443	54862	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:50.955121994 CEST	54863	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.955146074 CEST	443	54863	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:50.955600977 CEST	54863	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.956502914 CEST	54863	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:50.956520081 CEST	443	54863	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:51.139575005 CEST	54864	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.139581919 CEST	443	54864	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.139682055 CEST	54864	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.142121077 CEST	54864	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.142132998 CEST	443	54864	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.145528078 CEST	54865	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.145565987 CEST	443	54865	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.145649910 CEST	54865	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.145909071 CEST	54865	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.145924091 CEST	443	54865	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.247519970 CEST	443	54855	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.248068094 CEST	54855	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.248089075 CEST	443	54855	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.248518944 CEST	54855	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.248527050 CEST	443	54855	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.265634060 CEST	443	54856	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.268233061 CEST	54856	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.268255949 CEST	443	54856	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.268861055 CEST	54856	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.268867016 CEST	443	54856	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.285343885 CEST	443	54858	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.285629988 CEST	54858	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.285659075 CEST	443	54858	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.286288023 CEST	54858	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.286293983 CEST	443	54858	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.289779902 CEST	443	54857	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.290263891 CEST	54857	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.290276051 CEST	443	54857	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.290813923 CEST	54857	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.290817022 CEST	443	54857	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.433589935 CEST	443	54855	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.433681965 CEST	443	54855	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.433768034 CEST	54855	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.434170961 CEST	54855	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.434170961 CEST	54855	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.434195042 CEST	443	54855	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.434210062 CEST	443	54855	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.438466072 CEST	54867	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.438522100 CEST	443	54867	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.438592911 CEST	54867	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.438761950 CEST	54867	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.438791990 CEST	443	54867	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.440551996 CEST	443	54856	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.440742970 CEST	443	54856	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.440855026 CEST	54856	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.440984964 CEST	54856	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.440995932 CEST	443	54856	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.441005945 CEST	54856	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.441009998 CEST	443	54856	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.444747925 CEST	54868	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.444767952 CEST	443	54868	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.444833040 CEST	54868	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.445040941 CEST	54868	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.445058107 CEST	443	54868	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.446034908 CEST	443	54857	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.446110964 CEST	443	54857	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.446399927 CEST	54857	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.446953058 CEST	54857	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.446953058 CEST	54857	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.446990967 CEST	443	54857	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.447014093 CEST	443	54857	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.447874069 CEST	443	54858	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.447945118 CEST	443	54858	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.450958014 CEST	54858	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.457504988 CEST	54858	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.457524061 CEST	443	54858	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.457536936 CEST	54858	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.457551003 CEST	443	54858	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.460232019 CEST	54869	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.460258961 CEST	443	54869	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.460393906 CEST	54869	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.460536003 CEST	54870	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.460542917 CEST	443	54870	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.460617065 CEST	54869	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.460628033 CEST	443	54869	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.460637093 CEST	54870	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.460750103 CEST	54870	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.460757971 CEST	443	54870	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.612507105 CEST	443	54860	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.612817049 CEST	54860	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.612827063 CEST	443	54860	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.613137007 CEST	443	54860	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.613539934 CEST	54860	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.613596916 CEST	443	54860	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.613740921 CEST	54860	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.633060932 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:51.633261919 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:51.633270979 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:51.634119034 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:51.634179115 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:51.635202885 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:51.635260105 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:51.635327101 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:51.659399986 CEST	443	54860	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.659622908 CEST	443	54862	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.660213947 CEST	54862	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.660240889 CEST	443	54862	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.660761118 CEST	54862	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.660767078 CEST	443	54862	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.675479889 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:51.686842918 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:51.686856031 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:51.717189074 CEST	443	54860	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.717212915 CEST	443	54860	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.717243910 CEST	443	54860	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.717267036 CEST	54860	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.717279911 CEST	443	54860	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.717308998 CEST	54860	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.717334032 CEST	54860	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.733083963 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:51.776138067 CEST	443	54862	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.776309013 CEST	443	54862	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.776587963 CEST	54862	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.776761055 CEST	54862	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.776782990 CEST	443	54862	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.776794910 CEST	54862	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.776802063 CEST	443	54862	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.781527996 CEST	54871	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.781550884 CEST	443	54871	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.781886101 CEST	54871	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.782056093 CEST	54871	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.782069921 CEST	443	54871	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.802072048 CEST	443	54865	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.802577972 CEST	54865	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.802607059 CEST	443	54865	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.803755999 CEST	443	54865	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.804548979 CEST	54865	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.804728985 CEST	443	54865	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.804861069 CEST	54865	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.804910898 CEST	443	54860	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.804971933 CEST	443	54860	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.804986954 CEST	54860	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.804999113 CEST	443	54860	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.805027008 CEST	54860	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.805039883 CEST	54860	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.806080103 CEST	443	54860	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.806149006 CEST	54860	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.806154966 CEST	443	54860	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.806241989 CEST	443	54860	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.806385994 CEST	54860	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.811695099 CEST	443	54864	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.812448978 CEST	54860	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.812454939 CEST	443	54860	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.814311028 CEST	54864	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.814321995 CEST	443	54864	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.814393997 CEST	443	54863	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:51.814826965 CEST	443	54864	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.833362103 CEST	54863	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:51.833370924 CEST	443	54863	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:51.834005117 CEST	54864	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.834095001 CEST	443	54864	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.834175110 CEST	54864	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.834443092 CEST	443	54863	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:51.834513903 CEST	54863	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:51.835036039 CEST	54863	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:51.835097075 CEST	443	54863	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:51.835405111 CEST	54863	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:51.835411072 CEST	443	54863	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:51.838175058 CEST	54872	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.838187933 CEST	443	54872	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.838421106 CEST	54872	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.838767052 CEST	54872	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.838778973 CEST	443	54872	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.851397991 CEST	443	54865	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.861906052 CEST	54873	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.861916065 CEST	443	54873	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.862020969 CEST	54873	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.862365007 CEST	54873	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.862376928 CEST	443	54873	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.875406027 CEST	443	54864	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.889669895 CEST	54863	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:51.889672995 CEST	54864	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.904333115 CEST	443	54865	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.904481888 CEST	443	54865	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.904701948 CEST	54865	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.908349991 CEST	54865	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.908377886 CEST	443	54865	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.921017885 CEST	54874	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.921025991 CEST	443	54874	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.921463966 CEST	54874	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.921987057 CEST	54874	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:51.921998978 CEST	443	54874	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:51.939435959 CEST	443	54864	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.939461946 CEST	443	54864	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.939472914 CEST	443	54864	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.939491034 CEST	443	54864	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.939498901 CEST	443	54864	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.939507961 CEST	443	54864	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.939507961 CEST	54864	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.939536095 CEST	443	54864	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:51.939563990 CEST	54864	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:51.939595938 CEST	54864	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:52.029310942 CEST	443	54864	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:52.029345036 CEST	443	54864	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:52.029522896 CEST	54864	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:52.029522896 CEST	54864	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:52.029536963 CEST	443	54864	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:52.030006886 CEST	54864	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:52.030064106 CEST	443	54864	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:52.030122995 CEST	54864	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:52.030128956 CEST	443	54864	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:52.030158997 CEST	443	54864	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:52.030177116 CEST	54864	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:52.030205011 CEST	54864	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:52.092856884 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.092921972 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.092941999 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.092962980 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.093002081 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.093018055 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.093027115 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.093060017 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.093061924 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.093079090 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.093105078 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.110723972 CEST	443	54863	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:52.111689091 CEST	443	54863	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:52.111701012 CEST	443	54863	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:52.111723900 CEST	443	54863	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:52.111737013 CEST	443	54863	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:52.111776114 CEST	443	54863	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:52.111825943 CEST	54863	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:52.111845970 CEST	54863	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:52.118422985 CEST	443	54868	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.118536949 CEST	443	54870	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.118757010 CEST	443	54869	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.152869940 CEST	443	54867	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.170466900 CEST	54868	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.170468092 CEST	54869	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.170468092 CEST	54870	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.172367096 CEST	54864	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:52.172384024 CEST	443	54864	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:52.181665897 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.181736946 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.181771040 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.181788921 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.181823015 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.181835890 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.185086966 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.185131073 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.185168028 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.185178041 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.185209990 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.185228109 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.194781065 CEST	54867	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.196580887 CEST	54868	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.196590900 CEST	443	54868	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.197268009 CEST	54868	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.197274923 CEST	443	54868	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.197573900 CEST	54870	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.197582006 CEST	443	54870	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.198023081 CEST	54870	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.198026896 CEST	443	54870	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.198494911 CEST	54869	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.198499918 CEST	443	54869	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.199131012 CEST	54869	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.199135065 CEST	443	54869	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.199531078 CEST	54867	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.199561119 CEST	443	54867	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.200097084 CEST	54867	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.200109005 CEST	443	54867	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.218856096 CEST	54863	443	192.168.2.6	152.199.21.175
Oct 11, 2024 16:09:52.218861103 CEST	443	54863	152.199.21.175	192.168.2.6
Oct 11, 2024 16:09:52.236289024 CEST	54876	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.236358881 CEST	443	54876	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.236448050 CEST	54876	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.236628056 CEST	54876	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.236660004 CEST	443	54876	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.273724079 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.273792982 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.273817062 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.273830891 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.273861885 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.273873091 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.274058104 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.274101019 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.274133921 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.274142027 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.274159908 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.274184942 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.275968075 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.276019096 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.276050091 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.276057959 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.276097059 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.276113987 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.277515888 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.277561903 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.277585983 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.277594090 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.277620077 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.277631998 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.300208092 CEST	443	54868	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.300360918 CEST	443	54868	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.300425053 CEST	54868	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.300523996 CEST	54868	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.300534964 CEST	443	54868	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.300551891 CEST	54868	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.300559044 CEST	443	54868	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.302947044 CEST	54878	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.302982092 CEST	443	54878	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.303042889 CEST	54878	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.303178072 CEST	54878	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.303195953 CEST	443	54878	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.304311991 CEST	443	54869	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.304378033 CEST	443	54869	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.304538012 CEST	54869	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.304538012 CEST	54869	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.304538012 CEST	54869	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.306363106 CEST	54879	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.306400061 CEST	443	54879	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.306469917 CEST	54879	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.306560993 CEST	54879	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.306587934 CEST	443	54879	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.308048964 CEST	443	54867	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.308196068 CEST	443	54867	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.308264017 CEST	54867	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.308402061 CEST	54867	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.308402061 CEST	54867	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.308446884 CEST	443	54867	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.308475971 CEST	443	54867	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.310214043 CEST	54880	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.310234070 CEST	443	54880	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.310383081 CEST	54880	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.310499907 CEST	54880	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.310522079 CEST	443	54880	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.338973045 CEST	443	54870	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.339123011 CEST	443	54870	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.339176893 CEST	54870	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.339200974 CEST	54870	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.339214087 CEST	443	54870	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.339226961 CEST	54870	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.339231968 CEST	443	54870	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.341178894 CEST	54881	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.341193914 CEST	443	54881	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.341346979 CEST	54881	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.341408014 CEST	54881	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.341418028 CEST	443	54881	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.365345955 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.365406990 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.365432978 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.365447998 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.365477085 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.365504026 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.365802050 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.365849018 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.365884066 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.365891933 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.365922928 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.365936995 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.366251945 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.366293907 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.366322041 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.366328955 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.366359949 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.366372108 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.366858006 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.366898060 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.366929054 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.366936922 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.366967916 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.366977930 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.370186090 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.370203972 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.370259047 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.370268106 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.370318890 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.370459080 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.370476961 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.370510101 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.370517969 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.370534897 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.370560884 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.371038914 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.371054888 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.371113062 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.371123075 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.371320009 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.371335983 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.371351004 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.371388912 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.371397018 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.371419907 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.371431112 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.448573112 CEST	443	54871	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.449022055 CEST	54871	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.449037075 CEST	443	54871	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.449430943 CEST	54871	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.449436903 CEST	443	54871	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.457930088 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.457995892 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.458015919 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.458026886 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.458058119 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.458085060 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.458187103 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.458228111 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.458245993 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.458255053 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.458293915 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.458308935 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.458329916 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.458376884 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.458401918 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.458410025 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.458435059 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.458446980 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.458475113 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.458534002 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.458540916 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.458638906 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.458693981 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.459151983 CEST	54861	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.459161997 CEST	443	54861	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.493845940 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.493877888 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.493931055 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.509088039 CEST	443	54872	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:52.514538050 CEST	54872	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:52.514550924 CEST	443	54872	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:52.515053988 CEST	443	54872	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:52.515085936 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:52.515104055 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:52.515391111 CEST	54872	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:52.515474081 CEST	443	54872	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:52.515590906 CEST	54872	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:52.530092955 CEST	443	54873	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.530699968 CEST	54873	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.530710936 CEST	443	54873	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.531055927 CEST	443	54873	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.531462908 CEST	54873	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.531523943 CEST	443	54873	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.531541109 CEST	54873	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.537311077 CEST	49705	443	192.168.2.6	173.222.162.64
Oct 11, 2024 16:09:52.537379980 CEST	49705	443	192.168.2.6	173.222.162.64
Oct 11, 2024 16:09:52.537754059 CEST	54883	443	192.168.2.6	173.222.162.64
Oct 11, 2024 16:09:52.537781000 CEST	443	54883	173.222.162.64	192.168.2.6
Oct 11, 2024 16:09:52.537904978 CEST	54883	443	192.168.2.6	173.222.162.64
Oct 11, 2024 16:09:52.538789988 CEST	54883	443	192.168.2.6	173.222.162.64
Oct 11, 2024 16:09:52.538800955 CEST	443	54883	173.222.162.64	192.168.2.6
Oct 11, 2024 16:09:52.543332100 CEST	443	49705	173.222.162.64	192.168.2.6
Oct 11, 2024 16:09:52.543858051 CEST	443	49705	173.222.162.64	192.168.2.6
Oct 11, 2024 16:09:52.559421062 CEST	443	54872	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:52.567282915 CEST	443	54871	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.567491055 CEST	443	54871	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.567840099 CEST	54871	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.567941904 CEST	54871	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.567948103 CEST	443	54871	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.567961931 CEST	54871	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.567967892 CEST	443	54871	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.570933104 CEST	54884	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.570959091 CEST	443	54884	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.571049929 CEST	54884	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.571228027 CEST	54884	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.571242094 CEST	443	54884	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.575400114 CEST	443	54873	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.576565981 CEST	54873	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.578275919 CEST	443	54874	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.578578949 CEST	54874	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.578587055 CEST	443	54874	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.579096079 CEST	443	54874	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.579549074 CEST	54874	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.579637051 CEST	443	54874	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.579657078 CEST	54874	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.607779026 CEST	54869	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.607793093 CEST	443	54869	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.614953995 CEST	443	54872	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:52.614976883 CEST	443	54872	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:52.615032911 CEST	54872	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:52.615041971 CEST	443	54872	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:52.615180969 CEST	443	54872	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:52.615230083 CEST	54872	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:52.617676020 CEST	54872	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:52.617682934 CEST	443	54872	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:52.620667934 CEST	54874	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.620681047 CEST	443	54874	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.622462034 CEST	54885	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:52.622497082 CEST	443	54885	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:52.622648954 CEST	54885	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:52.622961998 CEST	54885	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:52.622982025 CEST	443	54885	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:52.623606920 CEST	54886	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.623615980 CEST	443	54886	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.623697996 CEST	54886	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.623977900 CEST	54886	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.623991013 CEST	443	54886	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.684688091 CEST	443	54873	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.684762001 CEST	443	54873	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.684782982 CEST	443	54873	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.684823990 CEST	443	54873	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.684830904 CEST	54873	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.684856892 CEST	443	54873	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.684866905 CEST	54873	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.684875965 CEST	443	54873	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.684886932 CEST	54873	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.684911966 CEST	54873	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.684938908 CEST	54873	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.711239100 CEST	443	54874	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.711319923 CEST	443	54874	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.711419106 CEST	54874	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.711960077 CEST	54874	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.711970091 CEST	443	54874	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.762723923 CEST	443	54873	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.762797117 CEST	443	54873	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.762820005 CEST	54873	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.762829065 CEST	443	54873	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.762862921 CEST	54873	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.762885094 CEST	54873	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.763941050 CEST	443	54873	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.764003992 CEST	54873	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.764010906 CEST	443	54873	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.764127970 CEST	443	54873	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.764180899 CEST	54873	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.764559984 CEST	54873	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.764575005 CEST	443	54873	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.904517889 CEST	443	54876	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.912993908 CEST	54876	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.913048029 CEST	443	54876	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.914515972 CEST	443	54876	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.914607048 CEST	54876	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.915138006 CEST	54876	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.915227890 CEST	443	54876	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.915335894 CEST	54876	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.915350914 CEST	443	54876	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.967437983 CEST	54876	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:52.988647938 CEST	443	54880	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:52.989967108 CEST	443	54878	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.002202034 CEST	54880	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.002218008 CEST	443	54880	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.002954960 CEST	54880	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.002964973 CEST	443	54880	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.003146887 CEST	443	54879	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.004336119 CEST	54879	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.004364967 CEST	443	54879	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.004868031 CEST	54879	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.004878998 CEST	443	54879	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.005414963 CEST	54878	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.005444050 CEST	443	54878	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.005955935 CEST	54878	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.005961895 CEST	443	54878	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.008502960 CEST	443	54881	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.008992910 CEST	54881	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.009010077 CEST	443	54881	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.009457111 CEST	54881	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.009462118 CEST	443	54881	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.026937962 CEST	443	54876	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.026966095 CEST	443	54876	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.026976109 CEST	443	54876	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.027009964 CEST	443	54876	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.027024031 CEST	443	54876	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.027026892 CEST	54876	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.027040005 CEST	443	54876	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.027060032 CEST	443	54876	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.027072906 CEST	54876	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.027085066 CEST	54876	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.027103901 CEST	54876	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.107450962 CEST	443	54880	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.107538939 CEST	443	54880	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.107642889 CEST	54880	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.109904051 CEST	443	54876	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.109932899 CEST	443	54876	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.109976053 CEST	54876	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.109991074 CEST	443	54876	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.110021114 CEST	54876	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.110047102 CEST	54876	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.110651016 CEST	443	54876	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.110707045 CEST	54876	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.110721111 CEST	443	54876	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.110742092 CEST	443	54876	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.110776901 CEST	54876	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.110821962 CEST	54876	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.113308907 CEST	54880	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.113308907 CEST	54880	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.113327980 CEST	443	54880	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.113349915 CEST	443	54880	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.120059013 CEST	443	54878	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.120229006 CEST	443	54878	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.120290041 CEST	54878	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.123481035 CEST	443	54881	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.123531103 CEST	443	54881	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.123646975 CEST	54881	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.124860048 CEST	443	54879	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.124932051 CEST	443	54879	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.125052929 CEST	54879	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.140491962 CEST	54879	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.140506983 CEST	443	54879	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.140516996 CEST	54879	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.140521049 CEST	443	54879	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.142518997 CEST	54878	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.142541885 CEST	443	54878	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.142556906 CEST	54878	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.142568111 CEST	443	54878	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.143760920 CEST	54881	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.143762112 CEST	54881	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.143778086 CEST	443	54881	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.143788099 CEST	443	54881	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.162594080 CEST	54876	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.162612915 CEST	443	54876	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.162812948 CEST	443	54883	173.222.162.64	192.168.2.6
Oct 11, 2024 16:09:53.162892103 CEST	54883	443	192.168.2.6	173.222.162.64
Oct 11, 2024 16:09:53.169925928 CEST	54887	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.169984102 CEST	443	54887	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.170114994 CEST	54887	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.203563929 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.212867022 CEST	54888	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.212907076 CEST	443	54888	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.212966919 CEST	54888	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.213896990 CEST	54889	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.213937998 CEST	443	54889	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.214221001 CEST	54889	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.214478016 CEST	54887	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.214499950 CEST	443	54887	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.214940071 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.214957952 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.216099024 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.216160059 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.219214916 CEST	54888	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.219259024 CEST	443	54888	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.219485998 CEST	54889	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.219502926 CEST	443	54889	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.221679926 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.221870899 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.222006083 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.222621918 CEST	54890	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.222637892 CEST	443	54890	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.222688913 CEST	54890	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.222876072 CEST	54890	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.222883940 CEST	443	54890	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.228540897 CEST	443	54884	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.263437986 CEST	443	54885	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:53.263478994 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.264166117 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.264179945 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.269242048 CEST	54884	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.282970905 CEST	443	54886	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.295779943 CEST	54884	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.295785904 CEST	443	54884	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.296180010 CEST	54884	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.296185970 CEST	443	54884	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.311367035 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.311367035 CEST	54885	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:53.324505091 CEST	54886	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.337325096 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.337384939 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.337405920 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.337477922 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.337477922 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.337480068 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.337510109 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.337522984 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.337548971 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.337570906 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.337570906 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.337570906 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.337589979 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.358031988 CEST	54885	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:53.358042955 CEST	443	54885	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:53.359297991 CEST	443	54885	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:53.367889881 CEST	54886	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.367894888 CEST	443	54886	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.369441032 CEST	443	54886	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.372817039 CEST	54885	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:53.372898102 CEST	443	54885	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:53.373848915 CEST	54886	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.374034882 CEST	54885	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:53.374049902 CEST	443	54886	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.374078035 CEST	54886	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.404716015 CEST	443	54884	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.404875994 CEST	443	54884	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.405101061 CEST	54884	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.405219078 CEST	54884	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.405229092 CEST	443	54884	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.405246973 CEST	54884	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.405257940 CEST	443	54884	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.408195972 CEST	54891	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.408221006 CEST	443	54891	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.408278942 CEST	54891	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.408494949 CEST	54891	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.408512115 CEST	443	54891	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.415440083 CEST	443	54885	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:53.418217897 CEST	54886	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.418230057 CEST	443	54886	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.428617954 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.428687096 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.428741932 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.428755045 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.428793907 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.428793907 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.431113958 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.431160927 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.431222916 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.431222916 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.431236982 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.431651115 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.558485031 CEST	54883	443	192.168.2.6	173.222.162.64
Oct 11, 2024 16:09:53.558525085 CEST	443	54883	173.222.162.64	192.168.2.6
Oct 11, 2024 16:09:53.558998108 CEST	443	54883	173.222.162.64	192.168.2.6
Oct 11, 2024 16:09:53.559413910 CEST	54883	443	192.168.2.6	173.222.162.64
Oct 11, 2024 16:09:53.559920073 CEST	54883	443	192.168.2.6	173.222.162.64
Oct 11, 2024 16:09:53.559951067 CEST	443	54883	173.222.162.64	192.168.2.6
Oct 11, 2024 16:09:53.560185909 CEST	54883	443	192.168.2.6	173.222.162.64
Oct 11, 2024 16:09:53.603409052 CEST	443	54883	173.222.162.64	192.168.2.6
Oct 11, 2024 16:09:53.831815004 CEST	443	49728	142.250.186.36	192.168.2.6
Oct 11, 2024 16:09:53.831931114 CEST	443	49728	142.250.186.36	192.168.2.6
Oct 11, 2024 16:09:53.832015991 CEST	49728	443	192.168.2.6	142.250.186.36
Oct 11, 2024 16:09:53.832135916 CEST	443	54885	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:53.832195997 CEST	443	54885	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:53.832304955 CEST	443	54886	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.832338095 CEST	443	54886	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.832346916 CEST	54885	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:53.832351923 CEST	443	54886	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.832381964 CEST	443	54885	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:53.832405090 CEST	443	54885	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:53.832411051 CEST	54886	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.832422018 CEST	443	54886	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.832432985 CEST	54885	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:53.832457066 CEST	54885	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:53.832493067 CEST	54886	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.832645893 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.832684040 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.832724094 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.832734108 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.832777023 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.832792997 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.832808971 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.832859039 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.832866907 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.832882881 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.832933903 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.832942963 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.832942963 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.832956076 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.833079100 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.833249092 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.833290100 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.833317995 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.833317995 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.833333969 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.833385944 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.833385944 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.833425045 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.833472013 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.833498001 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.833504915 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.833542109 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.833641052 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.837944031 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.837989092 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.838062048 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.838062048 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.838069916 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.838121891 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.839309931 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.839349985 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.839416027 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.839416027 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.839423895 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.839482069 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.840337992 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.840385914 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.840447903 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.840447903 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.840456963 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.840507984 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.841355085 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.841399908 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.841428041 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.841434956 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.841478109 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.841478109 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.843218088 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.843260050 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.843374014 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.843380928 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.843597889 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.845993042 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.846016884 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.846121073 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.846121073 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.846131086 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.846179008 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.846224070 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.846261978 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.846283913 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.846304893 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.846339941 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.846339941 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.846921921 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.846940994 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.847012043 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.847012997 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.847018003 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.847073078 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.848316908 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.848335981 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.848395109 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.848403931 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.848433018 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.848433018 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.849282980 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.849303961 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.849350929 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.849355936 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.849402905 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.849402905 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.850282907 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.850305080 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.850337982 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.850358009 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.850398064 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.850398064 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.851022005 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.851075888 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.851139069 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.851145983 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.851175070 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:53.851228952 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.856772900 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.857449055 CEST	54885	443	192.168.2.6	13.107.246.51
Oct 11, 2024 16:09:53.857469082 CEST	443	54885	13.107.246.51	192.168.2.6
Oct 11, 2024 16:09:53.869591951 CEST	49728	443	192.168.2.6	142.250.186.36
Oct 11, 2024 16:09:53.869609118 CEST	443	49728	142.250.186.36	192.168.2.6
Oct 11, 2024 16:09:53.871586084 CEST	54886	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:53.871591091 CEST	443	54886	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:53.930017948 CEST	54882	443	192.168.2.6	13.107.246.60
Oct 11, 2024 16:09:53.930037975 CEST	443	54882	13.107.246.60	192.168.2.6
Oct 11, 2024 16:09:54.007956028 CEST	54894	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.007989883 CEST	443	54894	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.008049965 CEST	54894	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.008366108 CEST	54894	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.008380890 CEST	443	54894	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.028264999 CEST	443	54889	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.032027960 CEST	443	54887	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.032646894 CEST	443	54890	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.035674095 CEST	443	54888	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.043695927 CEST	54889	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.043704033 CEST	443	54889	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.044408083 CEST	54889	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.044413090 CEST	443	54889	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.044568062 CEST	54887	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.044584036 CEST	443	54887	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.045833111 CEST	54887	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.045839071 CEST	443	54887	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.046152115 CEST	54890	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.046158075 CEST	443	54890	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.047481060 CEST	54890	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.047497034 CEST	443	54890	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.048074007 CEST	54888	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.048094988 CEST	443	54888	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.048567057 CEST	54888	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.048573017 CEST	443	54888	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.059010983 CEST	443	54883	173.222.162.64	192.168.2.6
Oct 11, 2024 16:09:54.059072018 CEST	54883	443	192.168.2.6	173.222.162.64
Oct 11, 2024 16:09:54.059295893 CEST	443	54883	173.222.162.64	192.168.2.6
Oct 11, 2024 16:09:54.059346914 CEST	443	54883	173.222.162.64	192.168.2.6
Oct 11, 2024 16:09:54.059401035 CEST	54883	443	192.168.2.6	173.222.162.64
Oct 11, 2024 16:09:54.059401035 CEST	54883	443	192.168.2.6	173.222.162.64
Oct 11, 2024 16:09:54.062633991 CEST	443	54891	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.063235044 CEST	54891	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.063244104 CEST	443	54891	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.063779116 CEST	54891	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.063783884 CEST	443	54891	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.147253036 CEST	443	54889	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.147300005 CEST	443	54889	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.147340059 CEST	54889	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.147623062 CEST	54889	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.147634029 CEST	443	54889	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.147648096 CEST	54889	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.147666931 CEST	443	54889	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.151407003 CEST	54896	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.151428938 CEST	443	54896	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.151482105 CEST	54896	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.151854992 CEST	54896	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.151869059 CEST	443	54896	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.152538061 CEST	443	54887	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.152702093 CEST	443	54887	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.152756929 CEST	54887	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.152781963 CEST	54887	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.152790070 CEST	443	54887	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.152800083 CEST	54887	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.152805090 CEST	443	54887	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.155864954 CEST	54897	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.155886889 CEST	443	54897	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.155939102 CEST	54897	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.156233072 CEST	54897	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.156245947 CEST	443	54897	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.156378031 CEST	443	54888	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.156434059 CEST	443	54888	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.156481981 CEST	54888	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.156786919 CEST	54888	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.156796932 CEST	443	54888	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.156809092 CEST	54888	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.156815052 CEST	443	54888	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.156920910 CEST	443	54890	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.156987906 CEST	443	54890	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.157041073 CEST	54890	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.157826900 CEST	54890	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.157849073 CEST	443	54890	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.157895088 CEST	54890	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.157901049 CEST	443	54890	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.161457062 CEST	54898	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.161475897 CEST	443	54898	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.161526918 CEST	54898	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.162084103 CEST	54898	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.162094116 CEST	443	54898	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.163289070 CEST	54899	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.163301945 CEST	443	54899	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.163366079 CEST	54899	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.163489103 CEST	54899	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.163499117 CEST	443	54899	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.173877954 CEST	443	54891	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.174029112 CEST	443	54891	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.174073935 CEST	54891	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.174170971 CEST	54891	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.174185991 CEST	54891	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.174185991 CEST	443	54891	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.174191952 CEST	443	54891	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.176366091 CEST	54900	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.176405907 CEST	443	54900	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.176479101 CEST	54900	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.176887035 CEST	54900	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.176903963 CEST	443	54900	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.675435066 CEST	443	54894	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.719780922 CEST	54894	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.758383036 CEST	54894	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.758399010 CEST	443	54894	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.758938074 CEST	443	54894	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.764199018 CEST	54894	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.764288902 CEST	443	54894	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.770423889 CEST	54894	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.770699978 CEST	443	54898	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.810493946 CEST	443	54896	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.811403990 CEST	443	54894	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.813894987 CEST	443	54899	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.814471960 CEST	443	54897	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.858959913 CEST	54899	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.858966112 CEST	54897	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.861852884 CEST	443	54900	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.874800920 CEST	443	54894	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.874831915 CEST	443	54894	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.874929905 CEST	54894	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.874941111 CEST	443	54894	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.874959946 CEST	443	54894	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:54.874998093 CEST	54894	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.875128984 CEST	54894	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.906387091 CEST	54900	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.906529903 CEST	54898	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:54.906595945 CEST	54896	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.011758089 CEST	54900	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.011766911 CEST	443	54900	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.026196957 CEST	54900	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.026204109 CEST	443	54900	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.028968096 CEST	54898	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.028981924 CEST	443	54898	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.032480955 CEST	54898	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.032488108 CEST	443	54898	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.039257050 CEST	54896	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.039275885 CEST	443	54896	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.042294025 CEST	54896	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.042301893 CEST	443	54896	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.045903921 CEST	54899	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.045921087 CEST	443	54899	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.048850060 CEST	54899	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.048863888 CEST	443	54899	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.052010059 CEST	54897	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.052023888 CEST	443	54897	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.052381992 CEST	54897	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.052387953 CEST	443	54897	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.139537096 CEST	443	54900	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.139714956 CEST	443	54900	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.139775991 CEST	54900	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.142366886 CEST	443	54898	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.142483950 CEST	443	54898	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.142534971 CEST	54898	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.144270897 CEST	443	54896	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.144725084 CEST	443	54896	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.144819975 CEST	54896	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.151772022 CEST	443	54899	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.152129889 CEST	443	54899	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.152178049 CEST	54899	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.156907082 CEST	54900	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.156933069 CEST	443	54900	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.156948090 CEST	54900	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.156955004 CEST	443	54900	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.158701897 CEST	54898	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.158725977 CEST	443	54898	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.158755064 CEST	54898	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.158763885 CEST	443	54898	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.160058022 CEST	54896	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.160058022 CEST	54896	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.160080910 CEST	443	54896	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.160089970 CEST	443	54896	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.161138058 CEST	54899	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.161138058 CEST	54899	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.161147118 CEST	443	54899	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.161154032 CEST	443	54899	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.163444996 CEST	443	54897	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.163583040 CEST	443	54897	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.163633108 CEST	54897	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.167177916 CEST	54897	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.167187929 CEST	443	54897	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.167198896 CEST	54897	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.167202950 CEST	443	54897	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.173044920 CEST	54901	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.173094988 CEST	443	54901	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.173173904 CEST	54901	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.180270910 CEST	54901	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.180300951 CEST	443	54901	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.182487011 CEST	54902	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.182506084 CEST	443	54902	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.182564020 CEST	54902	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.182897091 CEST	54902	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.182914972 CEST	443	54902	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.186846972 CEST	54903	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.186871052 CEST	443	54903	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.186927080 CEST	54903	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.187839031 CEST	54904	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.187886000 CEST	443	54904	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.188211918 CEST	54904	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.189294100 CEST	54905	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.189347982 CEST	443	54905	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.189420938 CEST	54905	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.191713095 CEST	54894	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.191725969 CEST	443	54894	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.192914009 CEST	54903	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.192931890 CEST	443	54903	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.193124056 CEST	54904	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.193147898 CEST	443	54904	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.193217993 CEST	54905	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.193255901 CEST	443	54905	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.854532003 CEST	443	54903	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.855231047 CEST	54903	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.855256081 CEST	443	54903	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.855638027 CEST	443	54904	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.855833054 CEST	54903	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.855840921 CEST	443	54903	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.856093884 CEST	54904	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.856113911 CEST	443	54904	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.856514931 CEST	54904	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.856523037 CEST	443	54904	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.856523991 CEST	443	54901	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.856829882 CEST	54901	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.856874943 CEST	443	54901	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.857162952 CEST	443	54902	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.857312918 CEST	54901	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.857323885 CEST	443	54901	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.857501984 CEST	54902	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.857527018 CEST	443	54902	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.857789040 CEST	54902	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.857798100 CEST	443	54902	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.895174026 CEST	443	54905	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.895884991 CEST	54905	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.895934105 CEST	443	54905	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.896253109 CEST	54905	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.896270990 CEST	443	54905	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.966259956 CEST	443	54901	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.966341019 CEST	443	54901	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.966413021 CEST	54901	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.967190027 CEST	443	54904	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.967247963 CEST	443	54904	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.967298031 CEST	54904	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.969053030 CEST	443	54902	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.969110012 CEST	443	54902	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.969163895 CEST	54902	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.971543074 CEST	443	54903	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.971600056 CEST	443	54903	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.972603083 CEST	54903	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.985404015 CEST	54901	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.985439062 CEST	443	54901	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.985466003 CEST	54901	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.985481024 CEST	443	54901	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.985874891 CEST	54904	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.985892057 CEST	443	54904	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.985939980 CEST	54902	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.985958099 CEST	443	54902	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.985980988 CEST	54902	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.985991955 CEST	443	54902	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.986805916 CEST	54903	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.986825943 CEST	443	54903	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.986836910 CEST	54903	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.986845016 CEST	443	54903	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.989108086 CEST	54908	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.989137888 CEST	443	54908	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.989267111 CEST	54908	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.990449905 CEST	54909	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.990490913 CEST	443	54909	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.990602016 CEST	54909	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.991132021 CEST	54908	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.991147041 CEST	443	54908	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.992011070 CEST	54910	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.992028952 CEST	443	54910	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.992099047 CEST	54910	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.992235899 CEST	54910	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.992261887 CEST	443	54910	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.992321968 CEST	54909	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.992336035 CEST	443	54909	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.993390083 CEST	54911	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.993402958 CEST	443	54911	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:55.993468046 CEST	54911	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.993688107 CEST	54911	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:55.993693113 CEST	443	54911	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.009768963 CEST	443	54905	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.009843111 CEST	443	54905	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.009927034 CEST	54905	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.010155916 CEST	54905	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.010205030 CEST	443	54905	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.010237932 CEST	54905	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.010253906 CEST	443	54905	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.012887001 CEST	54912	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.012943029 CEST	443	54912	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.012999058 CEST	54912	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.013132095 CEST	54912	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.013174057 CEST	443	54912	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.661915064 CEST	443	54909	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.661967993 CEST	443	54908	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.662383080 CEST	54909	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.662408113 CEST	443	54909	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.662426949 CEST	54908	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.662436962 CEST	443	54908	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.664288044 CEST	54909	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.664293051 CEST	443	54909	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.664293051 CEST	54908	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.664299011 CEST	443	54908	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.669608116 CEST	443	54910	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.669974089 CEST	54910	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.669981003 CEST	443	54910	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.670317888 CEST	54910	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.670321941 CEST	443	54910	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.679805994 CEST	443	54911	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.680196047 CEST	54911	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.680206060 CEST	443	54911	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.680428028 CEST	54911	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.680432081 CEST	443	54911	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.686393976 CEST	443	54912	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.686675072 CEST	54912	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.686702967 CEST	443	54912	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.686989069 CEST	54912	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.686995029 CEST	443	54912	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.771905899 CEST	443	54909	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.771960020 CEST	443	54909	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.772007942 CEST	54909	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.772165060 CEST	54909	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.772181988 CEST	443	54909	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.772193909 CEST	54909	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.772200108 CEST	443	54909	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.774947882 CEST	54913	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.774981976 CEST	443	54913	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.775244951 CEST	54913	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.775320053 CEST	54913	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.775337934 CEST	443	54913	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.776041985 CEST	443	54908	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.776096106 CEST	443	54908	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.776205063 CEST	54908	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.776290894 CEST	54908	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.776290894 CEST	54908	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.776305914 CEST	443	54908	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.776313066 CEST	443	54908	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.778445005 CEST	54914	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.778455019 CEST	443	54914	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.778551102 CEST	54914	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.778637886 CEST	54914	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.778651953 CEST	443	54914	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.781316996 CEST	443	54910	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.781354904 CEST	443	54910	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.781414032 CEST	54910	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.781560898 CEST	54910	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.781570911 CEST	443	54910	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.781582117 CEST	54910	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.781588078 CEST	443	54910	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.783536911 CEST	54915	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.783574104 CEST	443	54915	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.783627987 CEST	54915	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.783786058 CEST	54915	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.783801079 CEST	443	54915	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.795442104 CEST	443	54911	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.795494080 CEST	443	54911	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.795597076 CEST	54911	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.795931101 CEST	54911	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.795938015 CEST	443	54911	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.795948029 CEST	54911	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.795953989 CEST	443	54911	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.797039032 CEST	443	54912	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.797112942 CEST	443	54912	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.797161102 CEST	54912	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.797285080 CEST	54912	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.797298908 CEST	443	54912	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.797311068 CEST	54912	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.797318935 CEST	443	54912	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.798410892 CEST	54916	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.798439026 CEST	443	54916	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.798499107 CEST	54916	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.798602104 CEST	54916	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.798613071 CEST	443	54916	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.799413919 CEST	54917	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.799442053 CEST	443	54917	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:56.799545050 CEST	54917	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.799699068 CEST	54917	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:56.799712896 CEST	443	54917	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.376831055 CEST	443	54916	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.425273895 CEST	54916	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.429090977 CEST	443	54913	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.436093092 CEST	54916	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.436108112 CEST	443	54916	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.438684940 CEST	443	54915	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.448328972 CEST	443	54914	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.458436966 CEST	54916	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.458445072 CEST	443	54916	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.458929062 CEST	54914	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.458952904 CEST	443	54914	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.459367990 CEST	54914	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.459374905 CEST	443	54914	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.459849119 CEST	54913	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.459865093 CEST	443	54913	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.460455894 CEST	54913	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.460460901 CEST	443	54913	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.468733072 CEST	443	54917	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.469537973 CEST	54917	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.469553947 CEST	443	54917	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.472244024 CEST	54917	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.472254992 CEST	443	54917	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.482563972 CEST	54915	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.527401924 CEST	54915	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.527431011 CEST	443	54915	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.533565998 CEST	54915	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.533582926 CEST	443	54915	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.564337015 CEST	443	54913	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.564419031 CEST	443	54913	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.564502954 CEST	54913	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.566185951 CEST	443	54916	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.566242933 CEST	443	54916	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.566312075 CEST	54916	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.571434021 CEST	54913	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.571448088 CEST	443	54913	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.571461916 CEST	54913	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.571476936 CEST	443	54913	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.572113991 CEST	443	54914	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.572174072 CEST	443	54914	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.572238922 CEST	54914	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.580504894 CEST	443	54917	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.580656052 CEST	443	54917	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.580741882 CEST	54917	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.620857954 CEST	54916	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.620870113 CEST	443	54916	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.620879889 CEST	54916	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.620883942 CEST	443	54916	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.624581099 CEST	54914	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.624598026 CEST	443	54914	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.624608040 CEST	54914	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.624613047 CEST	443	54914	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.627891064 CEST	54917	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.627891064 CEST	54917	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.627896070 CEST	443	54917	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.627903938 CEST	443	54917	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.647649050 CEST	54918	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.647663116 CEST	443	54918	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.647759914 CEST	54918	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.651644945 CEST	54919	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.651674986 CEST	443	54919	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.651736021 CEST	54919	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.659408092 CEST	54918	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.659409046 CEST	54919	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.659420967 CEST	443	54918	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.659421921 CEST	443	54919	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.659852982 CEST	54920	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.659887075 CEST	443	54920	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.659980059 CEST	54920	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.660233974 CEST	54920	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.660247087 CEST	443	54920	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.665019989 CEST	54921	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.665044069 CEST	443	54921	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.665100098 CEST	54921	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.666028976 CEST	54921	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.666038990 CEST	443	54921	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.731021881 CEST	443	54915	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.731129885 CEST	443	54915	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.731198072 CEST	54915	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.793973923 CEST	54915	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.793973923 CEST	54915	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.794022083 CEST	443	54915	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.794048071 CEST	443	54915	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.855467081 CEST	54922	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.855503082 CEST	443	54922	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:57.855572939 CEST	54922	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.855693102 CEST	54922	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:57.855700016 CEST	443	54922	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.595208883 CEST	443	54918	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.595213890 CEST	443	54920	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.595804930 CEST	54920	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.595843077 CEST	443	54920	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.596203089 CEST	54918	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.596221924 CEST	443	54918	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.596483946 CEST	54918	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.596497059 CEST	443	54918	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.596524000 CEST	54920	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.596529961 CEST	443	54920	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.599970102 CEST	443	54919	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.599987030 CEST	443	54921	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.600260973 CEST	54919	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.600284100 CEST	443	54919	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.600574017 CEST	54921	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.600580931 CEST	443	54921	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.600594997 CEST	54919	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.600600004 CEST	443	54919	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.600999117 CEST	54921	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.601003885 CEST	443	54921	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.710726976 CEST	443	54918	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.710745096 CEST	443	54918	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.711033106 CEST	54918	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.711041927 CEST	443	54918	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.711297035 CEST	443	54918	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.711409092 CEST	54918	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.711409092 CEST	54918	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.711409092 CEST	54918	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.711425066 CEST	443	54918	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.713804960 CEST	54923	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.713815928 CEST	443	54923	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.713979006 CEST	54923	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.714179039 CEST	54923	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.714193106 CEST	443	54923	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.714296103 CEST	443	54919	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.714643955 CEST	443	54919	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.714782953 CEST	54919	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.715153933 CEST	54919	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.715171099 CEST	443	54919	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.715200901 CEST	54919	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.715209007 CEST	443	54919	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.717196941 CEST	54924	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.717242002 CEST	443	54924	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.717365980 CEST	54924	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.717715979 CEST	54924	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.717734098 CEST	443	54924	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.729569912 CEST	443	54920	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.729635954 CEST	443	54920	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.729779005 CEST	54920	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.729852915 CEST	54920	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.729860067 CEST	443	54920	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.729890108 CEST	54920	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.729893923 CEST	443	54920	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.732295990 CEST	54925	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.732337952 CEST	443	54925	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.732430935 CEST	54925	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.732548952 CEST	54925	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.732558966 CEST	443	54925	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.782938004 CEST	443	54921	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.783004045 CEST	443	54921	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.783135891 CEST	443	54921	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.783175945 CEST	54921	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.783265114 CEST	54921	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.783265114 CEST	54921	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.783292055 CEST	54921	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.783302069 CEST	443	54921	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.785479069 CEST	54926	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.785500050 CEST	443	54926	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.785648108 CEST	54926	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.785738945 CEST	54926	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.785747051 CEST	443	54926	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.801995039 CEST	443	54922	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.802736998 CEST	54922	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.802736998 CEST	54922	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.802747965 CEST	443	54922	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.802753925 CEST	443	54922	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.911406994 CEST	443	54922	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.911467075 CEST	443	54922	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.911585093 CEST	443	54922	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.911637068 CEST	54922	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.911716938 CEST	54922	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.911716938 CEST	54922	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.911716938 CEST	54922	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.914371014 CEST	54927	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.914391994 CEST	443	54927	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:58.914630890 CEST	54927	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.914768934 CEST	54927	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:58.914784908 CEST	443	54927	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.014142990 CEST	54918	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.014153004 CEST	443	54918	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.216389894 CEST	54922	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.216403961 CEST	443	54922	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.373289108 CEST	443	54923	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.374325991 CEST	54923	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.374325991 CEST	54923	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.374349117 CEST	443	54923	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.374363899 CEST	443	54923	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.379340887 CEST	443	54924	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.379722118 CEST	54924	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.379785061 CEST	443	54924	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.380095005 CEST	54924	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.380110025 CEST	443	54924	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.383816957 CEST	443	54925	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.384397984 CEST	54925	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.384397984 CEST	54925	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.384412050 CEST	443	54925	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.384423971 CEST	443	54925	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.445642948 CEST	443	54926	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.446508884 CEST	54926	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.446508884 CEST	54926	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.446532011 CEST	443	54926	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.446542025 CEST	443	54926	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.482076883 CEST	443	54923	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.482094049 CEST	443	54923	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.482211113 CEST	54923	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.482220888 CEST	443	54923	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.482424974 CEST	54923	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.482424974 CEST	54923	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.482433081 CEST	443	54923	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.482518911 CEST	443	54923	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.484982967 CEST	54928	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.485008955 CEST	443	54928	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.485189915 CEST	54928	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.485189915 CEST	54928	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.485214949 CEST	443	54928	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.490591049 CEST	443	54924	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.490780115 CEST	443	54924	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.490894079 CEST	54924	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.490894079 CEST	54924	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.490894079 CEST	54924	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.492861032 CEST	54929	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.492902994 CEST	443	54929	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.493300915 CEST	54929	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.493300915 CEST	54929	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.493336916 CEST	443	54929	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.494419098 CEST	443	54925	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.494468927 CEST	443	54925	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.494764090 CEST	54925	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.494764090 CEST	54925	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.494914055 CEST	54925	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.494926929 CEST	443	54925	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.496711969 CEST	54930	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.496722937 CEST	443	54930	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.496968985 CEST	54930	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.496968985 CEST	54930	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.496989012 CEST	443	54930	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.564965010 CEST	443	54926	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.565128088 CEST	443	54926	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.565268993 CEST	54926	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.565268993 CEST	54926	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.565453053 CEST	54926	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.565464973 CEST	443	54926	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.567859888 CEST	54931	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.567877054 CEST	443	54931	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.568101883 CEST	54931	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.568101883 CEST	54931	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.568120956 CEST	443	54931	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.605458021 CEST	443	54927	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.606404066 CEST	54927	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.606404066 CEST	54927	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.606420994 CEST	443	54927	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.606441021 CEST	443	54927	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.711565971 CEST	54924	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.711581945 CEST	443	54924	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.739667892 CEST	443	54927	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.739804983 CEST	443	54927	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.739986897 CEST	54927	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.739988089 CEST	54927	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.740010977 CEST	54927	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.740017891 CEST	443	54927	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.742387056 CEST	54932	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.742404938 CEST	443	54932	13.107.253.45	192.168.2.6
Oct 11, 2024 16:09:59.742700100 CEST	54932	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.742876053 CEST	54932	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:09:59.742888927 CEST	443	54932	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.138521910 CEST	443	54928	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.151730061 CEST	443	54929	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.163436890 CEST	443	54930	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.186914921 CEST	54928	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.203167915 CEST	54929	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.212666988 CEST	54930	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.212666988 CEST	54928	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.212675095 CEST	443	54928	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.218842983 CEST	54928	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.218854904 CEST	443	54928	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.223021984 CEST	54929	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.223036051 CEST	443	54929	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.227288008 CEST	54929	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.227294922 CEST	443	54929	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.227946997 CEST	54930	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.227946997 CEST	54930	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.227953911 CEST	443	54930	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.227968931 CEST	443	54930	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.229640961 CEST	443	54931	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.247306108 CEST	54931	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.247313976 CEST	443	54931	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.250703096 CEST	54931	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.250709057 CEST	443	54931	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.321213007 CEST	443	54928	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.321450949 CEST	443	54928	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.321769953 CEST	54928	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.321770906 CEST	54928	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.322107077 CEST	54928	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.322115898 CEST	443	54928	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.330318928 CEST	443	54929	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.330975056 CEST	443	54929	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.339168072 CEST	54929	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.343365908 CEST	54929	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.343378067 CEST	443	54929	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.345763922 CEST	54929	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.345771074 CEST	443	54929	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.347434044 CEST	54933	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.347493887 CEST	443	54933	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.355070114 CEST	54933	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.356126070 CEST	443	54930	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.356180906 CEST	54933	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.356200933 CEST	443	54930	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.356208086 CEST	443	54933	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.359411001 CEST	54930	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.359411001 CEST	54930	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.363430977 CEST	54930	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.363439083 CEST	443	54930	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.383109093 CEST	443	54931	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.383181095 CEST	443	54931	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.385302067 CEST	54935	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.385308981 CEST	54934	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.385330915 CEST	443	54935	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.385346889 CEST	443	54934	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.385371923 CEST	54931	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.385371923 CEST	54931	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.385371923 CEST	54931	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.385431051 CEST	54935	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.385433912 CEST	54934	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.385745049 CEST	54935	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.385760069 CEST	443	54935	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.395433903 CEST	54934	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.395473003 CEST	443	54934	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.401842117 CEST	54936	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.401868105 CEST	443	54936	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.402093887 CEST	54936	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.407407999 CEST	54936	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.407414913 CEST	443	54936	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.415153027 CEST	443	54932	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.433564901 CEST	54932	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.433579922 CEST	443	54932	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.434988976 CEST	54932	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.434993982 CEST	443	54932	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:00.686606884 CEST	54931	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:00.686615944 CEST	443	54931	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.598875046 CEST	443	54932	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.599041939 CEST	443	54932	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.599102974 CEST	54932	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.599291086 CEST	54932	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.599311113 CEST	443	54932	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.599320889 CEST	54932	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.599325895 CEST	443	54932	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.602307081 CEST	54937	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.602407932 CEST	443	54937	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.602487087 CEST	54937	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.602633953 CEST	54937	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.602665901 CEST	443	54937	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.692881107 CEST	54938	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:01.692949057 CEST	443	54938	40.113.103.199	192.168.2.6
Oct 11, 2024 16:10:01.693099022 CEST	54938	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:01.693609953 CEST	54938	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:01.693638086 CEST	443	54938	40.113.103.199	192.168.2.6
Oct 11, 2024 16:10:01.797190905 CEST	443	54934	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.798122883 CEST	54934	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.798124075 CEST	54934	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.798181057 CEST	443	54934	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.798224926 CEST	443	54934	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.801129103 CEST	443	54933	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.801537991 CEST	54933	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.801565886 CEST	443	54933	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.802175999 CEST	443	54936	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.802238941 CEST	54933	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.802253008 CEST	443	54933	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.802550077 CEST	54936	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.802572012 CEST	443	54936	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.802942038 CEST	54936	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.802942038 CEST	443	54935	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.802968025 CEST	443	54936	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.803435087 CEST	54935	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.803450108 CEST	443	54935	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.803595066 CEST	54935	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.803601980 CEST	443	54935	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.906253099 CEST	443	54934	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.907114029 CEST	443	54934	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.907157898 CEST	443	54934	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.907217026 CEST	54934	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.907263041 CEST	54934	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.907301903 CEST	54934	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.907303095 CEST	54934	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.907335997 CEST	443	54934	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.907360077 CEST	443	54934	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.910454035 CEST	443	54936	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.910512924 CEST	443	54936	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.910543919 CEST	54939	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.910554886 CEST	443	54939	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.910583973 CEST	54936	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.910589933 CEST	443	54936	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.910614014 CEST	443	54936	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.910645008 CEST	54939	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.910701990 CEST	54936	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.910701990 CEST	54936	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.911231995 CEST	443	54935	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.911278963 CEST	54936	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.911286116 CEST	443	54936	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.911781073 CEST	443	54935	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.912060976 CEST	54935	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.912337065 CEST	54939	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.912347078 CEST	443	54939	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.912445068 CEST	443	54933	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.912461996 CEST	54935	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.912461996 CEST	54935	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.912472010 CEST	443	54935	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.912482023 CEST	443	54935	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.912611008 CEST	443	54933	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.913167953 CEST	54933	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.913676023 CEST	54933	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.913676977 CEST	54933	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.913697004 CEST	443	54933	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.913774967 CEST	443	54933	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.918534994 CEST	54940	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.918541908 CEST	54941	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.918549061 CEST	443	54940	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.918576002 CEST	443	54941	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.918652058 CEST	54940	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.918776035 CEST	54941	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.918865919 CEST	54941	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.918894053 CEST	443	54941	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.919930935 CEST	54942	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.919951916 CEST	443	54942	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.920123100 CEST	54940	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.920130014 CEST	54942	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.920136929 CEST	443	54940	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:01.920237064 CEST	54942	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:01.920265913 CEST	443	54942	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:02.263634920 CEST	443	54937	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:02.265283108 CEST	54937	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:02.265284061 CEST	54937	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:02.265355110 CEST	443	54937	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:02.265379906 CEST	443	54937	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:02.374300957 CEST	443	54937	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:02.374557018 CEST	443	54937	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:02.374789000 CEST	54937	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:02.374869108 CEST	54937	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:02.374870062 CEST	54937	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:02.374911070 CEST	443	54937	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:02.374934912 CEST	443	54937	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:02.379398108 CEST	54943	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:02.379431963 CEST	443	54943	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:02.379548073 CEST	54943	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:02.382862091 CEST	54943	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:02.382874966 CEST	443	54943	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:02.494462013 CEST	443	54938	40.113.103.199	192.168.2.6
Oct 11, 2024 16:10:02.494663000 CEST	54938	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:02.520598888 CEST	54938	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:02.520625114 CEST	443	54938	40.113.103.199	192.168.2.6
Oct 11, 2024 16:10:02.520956993 CEST	443	54938	40.113.103.199	192.168.2.6
Oct 11, 2024 16:10:02.522839069 CEST	54938	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:02.523138046 CEST	54938	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:02.523138046 CEST	54938	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:02.523148060 CEST	443	54938	40.113.103.199	192.168.2.6
Oct 11, 2024 16:10:02.563422918 CEST	443	54938	40.113.103.199	192.168.2.6
Oct 11, 2024 16:10:03.266613960 CEST	443	54938	40.113.103.199	192.168.2.6
Oct 11, 2024 16:10:03.266741991 CEST	443	54938	40.113.103.199	192.168.2.6
Oct 11, 2024 16:10:03.266856909 CEST	54938	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:03.267817020 CEST	443	54940	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.268421888 CEST	54938	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:03.268445969 CEST	443	54938	40.113.103.199	192.168.2.6
Oct 11, 2024 16:10:03.269346952 CEST	54940	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.269362926 CEST	443	54940	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.270251989 CEST	54940	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.270258904 CEST	443	54940	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.270641088 CEST	443	54939	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.272782087 CEST	54939	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.272799015 CEST	443	54939	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.274163008 CEST	54939	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.274169922 CEST	443	54939	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.276192904 CEST	443	54941	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.276261091 CEST	443	54942	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.277817011 CEST	54941	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.277834892 CEST	443	54941	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.278563023 CEST	54941	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.278573990 CEST	443	54941	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.280081987 CEST	54942	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.280119896 CEST	443	54942	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.281171083 CEST	54942	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.281182051 CEST	443	54942	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.382417917 CEST	443	54940	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.382926941 CEST	443	54940	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.382965088 CEST	443	54940	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.382978916 CEST	54940	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.383011103 CEST	54940	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.383187056 CEST	54940	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.383203030 CEST	443	54940	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.383228064 CEST	54940	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.383235931 CEST	443	54940	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.384517908 CEST	443	54939	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.384848118 CEST	443	54939	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.384944916 CEST	54939	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.385950089 CEST	54939	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.385970116 CEST	443	54939	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.385983944 CEST	54939	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.385991096 CEST	443	54939	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.387156010 CEST	443	54942	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.387306929 CEST	443	54942	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.387360096 CEST	54942	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.388566971 CEST	54942	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.388566971 CEST	54942	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.388600111 CEST	443	54942	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.388624907 CEST	443	54942	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.394481897 CEST	443	54941	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.394685984 CEST	443	54941	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.394740105 CEST	54941	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.396343946 CEST	54944	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.396367073 CEST	443	54944	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.396425009 CEST	54944	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.399113894 CEST	54945	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.399158955 CEST	443	54945	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.399224043 CEST	54945	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.399470091 CEST	54946	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.399488926 CEST	443	54946	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.399547100 CEST	54946	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.399811983 CEST	54941	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.399811983 CEST	54941	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.399828911 CEST	443	54941	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.399849892 CEST	443	54941	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.403228998 CEST	54947	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.403243065 CEST	443	54947	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.403300047 CEST	54947	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.403484106 CEST	54947	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.403495073 CEST	443	54947	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.403784990 CEST	54946	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.403816938 CEST	443	54946	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.404225111 CEST	54944	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.404237032 CEST	443	54944	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.404628038 CEST	54945	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.404654980 CEST	443	54945	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.470310926 CEST	443	54943	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.471611023 CEST	54943	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.471640110 CEST	443	54943	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.472474098 CEST	54943	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.472481966 CEST	443	54943	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.581778049 CEST	443	54943	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.582222939 CEST	443	54943	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.582298040 CEST	54943	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.582500935 CEST	54943	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.582500935 CEST	54943	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.582509995 CEST	443	54943	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.582523108 CEST	443	54943	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.588304043 CEST	54948	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.588345051 CEST	443	54948	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:03.588398933 CEST	54948	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.588702917 CEST	54948	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:03.588723898 CEST	443	54948	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.059421062 CEST	443	54947	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.060178041 CEST	54947	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.060198069 CEST	443	54947	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.061568022 CEST	54947	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.061574936 CEST	443	54947	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.062443972 CEST	443	54946	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.062952042 CEST	54946	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.062966108 CEST	443	54946	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.063503027 CEST	54946	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.063508987 CEST	443	54946	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.097546101 CEST	443	54945	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.098179102 CEST	54945	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.098198891 CEST	443	54945	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.098689079 CEST	54945	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.098695040 CEST	443	54945	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.110758066 CEST	443	54944	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.112063885 CEST	54944	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.112073898 CEST	443	54944	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.114182949 CEST	54944	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.114190102 CEST	443	54944	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.168906927 CEST	443	54947	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.169054985 CEST	443	54947	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.169162035 CEST	443	54947	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.169326067 CEST	54947	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.169326067 CEST	54947	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.169326067 CEST	54947	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.169377089 CEST	54947	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.169398069 CEST	443	54947	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.172312021 CEST	54949	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.172374964 CEST	443	54949	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.172475100 CEST	54949	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.172652960 CEST	54949	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.172676086 CEST	443	54949	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.192778111 CEST	443	54946	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.192926884 CEST	443	54946	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.193108082 CEST	54946	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.193136930 CEST	54946	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.193162918 CEST	443	54946	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.193178892 CEST	54946	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.193186045 CEST	443	54946	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.195569038 CEST	54950	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.195583105 CEST	443	54950	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.195704937 CEST	54950	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.195791960 CEST	54950	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.195804119 CEST	443	54950	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.213257074 CEST	443	54945	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.213445902 CEST	443	54945	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.213495970 CEST	54945	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.213505983 CEST	443	54945	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.213546038 CEST	443	54945	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.213593006 CEST	54945	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.213615894 CEST	54945	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.213620901 CEST	443	54945	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.213634014 CEST	54945	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.213639021 CEST	443	54945	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.217670918 CEST	54951	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.217694998 CEST	443	54951	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.217839003 CEST	54951	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.218110085 CEST	54951	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.218118906 CEST	443	54951	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.227171898 CEST	443	54944	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.228010893 CEST	443	54944	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.228077888 CEST	54944	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.228147030 CEST	54944	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.228147030 CEST	54944	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.228163004 CEST	443	54944	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.228173971 CEST	443	54944	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.230797052 CEST	54952	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.230825901 CEST	443	54952	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.231040001 CEST	54952	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.231144905 CEST	54952	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.231199026 CEST	443	54952	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.257577896 CEST	443	54948	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.258002996 CEST	54948	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.258017063 CEST	443	54948	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.258559942 CEST	54948	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.258564949 CEST	443	54948	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.367850065 CEST	443	54948	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.368010044 CEST	443	54948	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.368151903 CEST	54948	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.368599892 CEST	54948	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.368616104 CEST	443	54948	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.368622065 CEST	54948	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.368627071 CEST	443	54948	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.373470068 CEST	54953	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.373521090 CEST	443	54953	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:04.373598099 CEST	54953	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.373838902 CEST	54953	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:04.373882055 CEST	443	54953	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.135150909 CEST	443	54950	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.135358095 CEST	443	54949	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.135792017 CEST	54950	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.135838032 CEST	443	54950	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.135874987 CEST	54949	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.135894060 CEST	443	54949	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.135998011 CEST	443	54951	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.136226892 CEST	54950	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.136234045 CEST	443	54950	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.136310101 CEST	54949	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.136315107 CEST	443	54949	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.136579037 CEST	54951	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.136590004 CEST	443	54951	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.136997938 CEST	54951	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.137001991 CEST	443	54951	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.244133949 CEST	443	54950	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.244290113 CEST	443	54950	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.244357109 CEST	54950	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.244535923 CEST	54950	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.244570017 CEST	443	54950	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.244589090 CEST	54950	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.244597912 CEST	443	54950	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.245346069 CEST	443	54949	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.245498896 CEST	443	54949	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.245596886 CEST	54949	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.246180058 CEST	54949	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.246187925 CEST	443	54949	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.246198893 CEST	54949	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.246203899 CEST	443	54949	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.247749090 CEST	443	54951	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.248110056 CEST	443	54951	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.248153925 CEST	54951	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.248187065 CEST	443	54951	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.248219013 CEST	443	54951	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.248301983 CEST	54951	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.249023914 CEST	54951	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.249041080 CEST	443	54951	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.263727903 CEST	54954	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.263755083 CEST	443	54954	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.263811111 CEST	54954	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.264153957 CEST	54954	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.264163017 CEST	443	54954	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.264697075 CEST	54955	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.264719009 CEST	443	54955	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.264784098 CEST	54955	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.264897108 CEST	54955	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.264909029 CEST	443	54955	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.265443087 CEST	54956	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.265475035 CEST	443	54956	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.265846014 CEST	54956	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.266273022 CEST	54956	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.266285896 CEST	443	54956	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.330904961 CEST	443	54953	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.331367016 CEST	54953	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.331444979 CEST	443	54953	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.331767082 CEST	54953	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.331779957 CEST	443	54953	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.337213993 CEST	443	54952	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.337529898 CEST	54952	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.337542057 CEST	443	54952	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.337913990 CEST	54952	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.337918997 CEST	443	54952	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.441106081 CEST	443	54953	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.441435099 CEST	443	54953	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.441520929 CEST	54953	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.441570997 CEST	54953	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.441571951 CEST	54953	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.441605091 CEST	443	54953	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.441625118 CEST	443	54953	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.444014072 CEST	54957	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.444051027 CEST	443	54957	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.444118023 CEST	54957	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.444219112 CEST	54957	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.444231033 CEST	443	54957	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.450611115 CEST	443	54952	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.451235056 CEST	443	54952	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.451294899 CEST	54952	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.451349020 CEST	54952	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.451355934 CEST	443	54952	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.451411009 CEST	54952	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.451415062 CEST	443	54952	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.453429937 CEST	54958	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.453440905 CEST	443	54958	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.453502893 CEST	54958	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.453612089 CEST	54958	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.453625917 CEST	443	54958	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.957905054 CEST	443	54956	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.958472013 CEST	54956	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.958484888 CEST	443	54956	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.959407091 CEST	54956	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.959413052 CEST	443	54956	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.968981028 CEST	443	54954	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.969320059 CEST	54954	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.969362020 CEST	443	54954	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:05.969654083 CEST	54954	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:05.969667912 CEST	443	54954	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.069607019 CEST	443	54956	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.069749117 CEST	443	54956	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.069843054 CEST	54956	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.069916964 CEST	54956	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.069916964 CEST	54956	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.069930077 CEST	443	54956	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.069932938 CEST	443	54956	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.072900057 CEST	54959	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.072917938 CEST	443	54959	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.073278904 CEST	54959	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.073278904 CEST	54959	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.073301077 CEST	443	54959	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.097539902 CEST	443	54954	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.097671986 CEST	443	54954	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.097764015 CEST	54954	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.097821951 CEST	54954	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.097822905 CEST	54954	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.097850084 CEST	443	54954	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.097872019 CEST	443	54954	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.100071907 CEST	54960	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.100101948 CEST	443	54960	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.100188971 CEST	54960	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.100332975 CEST	54960	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.100351095 CEST	443	54960	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.124708891 CEST	443	54957	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.125272036 CEST	54957	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.125288963 CEST	443	54957	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.125830889 CEST	54957	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.125838041 CEST	443	54957	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.148238897 CEST	443	54958	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.148550034 CEST	54958	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.148564100 CEST	443	54958	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.149138927 CEST	54958	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.149143934 CEST	443	54958	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.258672953 CEST	443	54957	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.258759022 CEST	443	54957	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.258811951 CEST	54957	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.258991957 CEST	54957	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.259011984 CEST	443	54957	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.259026051 CEST	54957	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.259037971 CEST	443	54957	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.262037992 CEST	54961	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.262085915 CEST	443	54961	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.262279034 CEST	54961	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.262430906 CEST	54961	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.262449026 CEST	443	54961	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.271908045 CEST	443	54958	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.271991968 CEST	443	54958	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.272624969 CEST	54958	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.295541048 CEST	54958	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.295553923 CEST	443	54958	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.295567036 CEST	54958	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.295572996 CEST	443	54958	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.301362991 CEST	54962	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.301409006 CEST	443	54962	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.301536083 CEST	54962	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.301980972 CEST	54962	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.302000046 CEST	443	54962	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.763283968 CEST	443	54959	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.763735056 CEST	54959	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.763755083 CEST	443	54959	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.764364004 CEST	54959	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.764370918 CEST	443	54959	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.788711071 CEST	443	54960	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.789294004 CEST	54960	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.789343119 CEST	443	54960	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.789699078 CEST	54960	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.789709091 CEST	443	54960	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.873434067 CEST	443	54959	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.873748064 CEST	443	54959	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.873800993 CEST	443	54959	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.873857021 CEST	54959	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.873920918 CEST	54959	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.873934031 CEST	443	54959	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.876774073 CEST	54963	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.876816988 CEST	443	54963	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.876899004 CEST	54963	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.877053022 CEST	54963	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.877073050 CEST	443	54963	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.909091949 CEST	443	54960	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.909235001 CEST	443	54960	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.909310102 CEST	54960	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.909495115 CEST	54960	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.909507036 CEST	443	54960	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.909540892 CEST	54960	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.909547091 CEST	443	54960	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.912739038 CEST	54964	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.912763119 CEST	443	54964	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.912920952 CEST	54964	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.913115978 CEST	54964	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.913130999 CEST	443	54964	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.954890966 CEST	443	54962	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.955336094 CEST	54962	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.955363035 CEST	443	54962	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.956193924 CEST	54962	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.956207037 CEST	443	54962	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.978681087 CEST	443	54961	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.982943058 CEST	54961	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.982963085 CEST	443	54961	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:06.984401941 CEST	54961	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:06.984411001 CEST	443	54961	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:07.076997995 CEST	443	54962	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:07.077217102 CEST	443	54962	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:07.077305079 CEST	54962	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:07.077332973 CEST	54962	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:07.077353001 CEST	443	54962	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:07.077388048 CEST	54962	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:07.077394962 CEST	443	54962	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:07.080539942 CEST	54965	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:07.080566883 CEST	443	54965	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:07.080717087 CEST	54965	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:07.080887079 CEST	54965	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:07.080899000 CEST	443	54965	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:07.098494053 CEST	443	54961	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:07.098561049 CEST	443	54961	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:07.098680973 CEST	54961	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:07.098782063 CEST	54961	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:07.098809958 CEST	443	54961	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:07.098822117 CEST	54961	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:07.098826885 CEST	443	54961	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:07.101191998 CEST	54966	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:07.101206064 CEST	443	54966	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:07.101279974 CEST	54966	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:07.101433992 CEST	54966	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:07.101444960 CEST	443	54966	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.462199926 CEST	443	54963	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.462723017 CEST	54963	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.462786913 CEST	443	54963	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.463164091 CEST	54963	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.463181973 CEST	443	54963	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.569636106 CEST	443	54965	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.569916010 CEST	443	54963	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.570058107 CEST	443	54963	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.570121050 CEST	443	54963	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.570167065 CEST	54963	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.570230007 CEST	54963	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.570348024 CEST	54963	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.570348024 CEST	54963	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.570391893 CEST	443	54963	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.570405006 CEST	54965	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.570417881 CEST	443	54963	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.570422888 CEST	443	54965	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.570899963 CEST	54965	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.570904970 CEST	443	54965	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.572354078 CEST	443	54966	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.572890043 CEST	54966	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.572896957 CEST	443	54966	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.573271036 CEST	54966	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.573275089 CEST	443	54966	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.573708057 CEST	54967	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.573798895 CEST	443	54967	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.573893070 CEST	54967	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.574111938 CEST	54967	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.574150085 CEST	443	54967	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.574357033 CEST	443	54955	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.574707985 CEST	54955	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.574738979 CEST	443	54955	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.574986935 CEST	443	54964	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.575069904 CEST	54955	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.575076103 CEST	443	54955	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.575305939 CEST	54964	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.575326920 CEST	443	54964	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.575625896 CEST	54964	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.575639009 CEST	443	54964	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.679267883 CEST	443	54965	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.679435968 CEST	443	54965	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.679481030 CEST	443	54965	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.679621935 CEST	54965	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.679759026 CEST	54965	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.679759026 CEST	54965	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.679774046 CEST	443	54965	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.679783106 CEST	443	54965	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.682519913 CEST	443	54966	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.682564020 CEST	54968	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.682590008 CEST	443	54968	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.682715893 CEST	54968	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.682781935 CEST	443	54966	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.683995962 CEST	443	54955	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.684161901 CEST	54968	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.684176922 CEST	443	54968	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.684261084 CEST	54966	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.684359074 CEST	54966	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.684359074 CEST	54966	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.684365034 CEST	443	54966	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.684370995 CEST	443	54966	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.684777021 CEST	443	54955	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.684871912 CEST	443	54955	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.685267925 CEST	54955	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.685444117 CEST	54955	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.685444117 CEST	54955	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.685462952 CEST	443	54955	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.685476065 CEST	443	54955	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.688502073 CEST	54969	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.688524008 CEST	443	54969	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.688555002 CEST	54970	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.688561916 CEST	443	54970	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.688688993 CEST	54970	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.688688993 CEST	54969	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.688858032 CEST	54969	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.688872099 CEST	443	54969	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.688960075 CEST	54970	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.688970089 CEST	443	54970	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.693605900 CEST	443	54964	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.693737030 CEST	443	54964	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.696616888 CEST	54964	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.705813885 CEST	54964	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.705813885 CEST	54964	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.705857038 CEST	443	54964	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.705883980 CEST	443	54964	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.711863041 CEST	54971	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.711883068 CEST	443	54971	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:08.712120056 CEST	54971	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.712120056 CEST	54971	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:08.712150097 CEST	443	54971	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.247942924 CEST	443	54967	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.248775959 CEST	54967	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.248812914 CEST	443	54967	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.249125957 CEST	54967	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.249141932 CEST	443	54967	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.354135990 CEST	443	54968	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.355030060 CEST	54968	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.355030060 CEST	54968	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.355046988 CEST	443	54968	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.355063915 CEST	443	54968	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.358632088 CEST	443	54967	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.359198093 CEST	443	54967	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.359261990 CEST	443	54967	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.359456062 CEST	54967	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.359457016 CEST	54967	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.360608101 CEST	54967	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.360646963 CEST	443	54967	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.361938000 CEST	54972	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.362001896 CEST	443	54972	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.362943888 CEST	54972	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.363115072 CEST	54972	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.363143921 CEST	443	54972	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.373235941 CEST	443	54969	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.374614954 CEST	54969	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.374639988 CEST	443	54969	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.376631975 CEST	54969	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.376638889 CEST	443	54969	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.378900051 CEST	443	54970	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.387017012 CEST	54970	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.387036085 CEST	443	54970	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.387537956 CEST	54970	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.387550116 CEST	443	54970	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.399147987 CEST	443	54971	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.399529934 CEST	54971	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.399549961 CEST	443	54971	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.399947882 CEST	54971	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.399952888 CEST	443	54971	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.693279982 CEST	443	54968	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.693438053 CEST	443	54968	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.693501949 CEST	54968	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.693612099 CEST	54968	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.693629980 CEST	443	54968	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.694298983 CEST	443	54969	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.694318056 CEST	443	54970	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.694360018 CEST	443	54969	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.694382906 CEST	443	54970	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.694422960 CEST	54969	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.694442987 CEST	443	54969	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.694470882 CEST	54970	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.694480896 CEST	443	54969	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.694632053 CEST	54969	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.694653988 CEST	443	54971	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.694711924 CEST	443	54971	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.694797993 CEST	54969	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.694808006 CEST	54971	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.694811106 CEST	443	54971	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.694812059 CEST	443	54969	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.694833994 CEST	54969	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.694838047 CEST	443	54969	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.694868088 CEST	54971	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.695178986 CEST	54970	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.695183992 CEST	443	54970	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.695194006 CEST	54970	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.695195913 CEST	443	54970	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.695822001 CEST	54971	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.695837975 CEST	443	54971	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.695851088 CEST	54971	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.695858002 CEST	443	54971	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.698726892 CEST	54973	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.698770046 CEST	443	54973	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.698884964 CEST	54974	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.698894024 CEST	443	54974	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.698915958 CEST	54973	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.699201107 CEST	54974	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.699593067 CEST	54975	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.699632883 CEST	443	54975	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.699665070 CEST	54976	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.699692011 CEST	443	54976	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.699696064 CEST	54975	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.699775934 CEST	54976	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.699790955 CEST	54973	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.699816942 CEST	443	54973	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.699987888 CEST	54975	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.700001001 CEST	443	54975	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.700010061 CEST	54976	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.700025082 CEST	443	54976	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:09.700052977 CEST	54974	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:09.700088024 CEST	443	54974	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.040429115 CEST	443	54972	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.040992975 CEST	54972	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.041039944 CEST	443	54972	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.041508913 CEST	54972	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.041522026 CEST	443	54972	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.149657011 CEST	443	54972	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.149749041 CEST	443	54972	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.149853945 CEST	54972	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.150011063 CEST	54972	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.150048018 CEST	443	54972	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.150074959 CEST	54972	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.150089979 CEST	443	54972	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.152741909 CEST	54977	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.152759075 CEST	443	54977	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.152827024 CEST	54977	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.153023958 CEST	54977	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.153037071 CEST	443	54977	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.360380888 CEST	443	54975	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.360938072 CEST	54975	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.361002922 CEST	443	54975	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.361428022 CEST	54975	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.361444950 CEST	443	54975	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.362746000 CEST	443	54974	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.363279104 CEST	54974	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.363303900 CEST	443	54974	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.363537073 CEST	54974	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.363543034 CEST	443	54974	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.370537996 CEST	443	54976	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.370863914 CEST	54976	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.370896101 CEST	443	54976	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.371258020 CEST	54976	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.371263981 CEST	443	54976	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.385479927 CEST	443	54973	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.385934114 CEST	54973	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.385955095 CEST	443	54973	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.386182070 CEST	54973	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.386188030 CEST	443	54973	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.470731020 CEST	443	54974	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.470900059 CEST	443	54974	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.470963001 CEST	54974	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.471021891 CEST	54974	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.471041918 CEST	443	54974	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.471051931 CEST	54974	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.471057892 CEST	443	54974	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.473459959 CEST	54978	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.473505974 CEST	443	54978	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.473622084 CEST	54978	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.474246025 CEST	54978	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.474258900 CEST	443	54978	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.475280046 CEST	443	54975	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.475357056 CEST	443	54975	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.475465059 CEST	54975	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.475492954 CEST	443	54975	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.475553989 CEST	54975	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.475594997 CEST	54975	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.475627899 CEST	443	54975	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.475656986 CEST	54975	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.475672960 CEST	443	54975	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.477972984 CEST	54979	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.477988958 CEST	443	54979	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.478065968 CEST	54979	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.478193998 CEST	54979	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.478203058 CEST	443	54979	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.478607893 CEST	443	54976	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.478741884 CEST	443	54976	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.478815079 CEST	54976	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.478832006 CEST	54976	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.478838921 CEST	443	54976	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.478852987 CEST	54976	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.478856087 CEST	443	54976	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.480484009 CEST	54980	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.480525970 CEST	443	54980	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.480603933 CEST	54980	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.480734110 CEST	54980	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.480762005 CEST	443	54980	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.498430014 CEST	443	54973	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.499001026 CEST	443	54973	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.499070883 CEST	54973	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.499097109 CEST	54973	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.499103069 CEST	443	54973	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.499113083 CEST	54973	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.499115944 CEST	443	54973	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.500761032 CEST	54981	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.500777006 CEST	443	54981	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.500840902 CEST	54981	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.500957012 CEST	54981	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.500971079 CEST	443	54981	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.572825909 CEST	443	49716	52.222.236.7	192.168.2.6
Oct 11, 2024 16:10:10.572904110 CEST	443	49716	52.222.236.7	192.168.2.6
Oct 11, 2024 16:10:10.573028088 CEST	49716	443	192.168.2.6	52.222.236.7
Oct 11, 2024 16:10:10.638696909 CEST	49716	443	192.168.2.6	52.222.236.7
Oct 11, 2024 16:10:10.638710976 CEST	443	49716	52.222.236.7	192.168.2.6
Oct 11, 2024 16:10:10.823023081 CEST	443	54977	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.823621035 CEST	54977	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.823638916 CEST	443	54977	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.826915979 CEST	54977	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.826922894 CEST	443	54977	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.933964014 CEST	443	54977	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.934030056 CEST	443	54977	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.934134007 CEST	443	54977	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.934195042 CEST	54977	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.934417963 CEST	54977	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.934417963 CEST	54977	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.934432030 CEST	443	54977	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.934449911 CEST	54977	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.934454918 CEST	443	54977	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.938832045 CEST	54982	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.938852072 CEST	443	54982	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:10.938930988 CEST	54982	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.943099022 CEST	54982	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:10.943114042 CEST	443	54982	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.066092968 CEST	443	54979	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.068139076 CEST	54979	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.068165064 CEST	443	54979	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.069015026 CEST	54979	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.069020033 CEST	443	54979	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.139302015 CEST	443	54980	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.159164906 CEST	54980	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.159231901 CEST	443	54980	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.163434029 CEST	54980	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.163449049 CEST	443	54980	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.173261881 CEST	443	54978	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.179404020 CEST	54978	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.179419994 CEST	443	54978	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.180716038 CEST	54978	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.180721998 CEST	443	54978	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.180830956 CEST	443	54979	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.181080103 CEST	443	54979	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.182619095 CEST	54979	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.183561087 CEST	54979	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.183561087 CEST	54979	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.183574915 CEST	443	54979	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.183583975 CEST	443	54979	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.199321985 CEST	443	54981	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.211419106 CEST	54981	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.211452007 CEST	443	54981	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.214629889 CEST	54981	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.214634895 CEST	443	54981	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.233311892 CEST	54983	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.233387947 CEST	443	54983	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.234882116 CEST	54983	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.239152908 CEST	54983	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.239185095 CEST	443	54983	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.268316031 CEST	443	54980	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.268562078 CEST	443	54980	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.270901918 CEST	54980	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.273165941 CEST	54980	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.273165941 CEST	54980	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.273195982 CEST	443	54980	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.273207903 CEST	443	54980	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.290802956 CEST	54984	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.290848017 CEST	443	54984	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.295058012 CEST	54984	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.295058012 CEST	54984	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.295099974 CEST	443	54984	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.332179070 CEST	443	54981	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.332258940 CEST	443	54981	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.332372904 CEST	443	54981	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.335191011 CEST	54981	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.345618963 CEST	443	54978	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.345767975 CEST	443	54978	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.349927902 CEST	54981	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.349941015 CEST	443	54981	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.349973917 CEST	54978	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.349992037 CEST	54981	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.349997044 CEST	443	54981	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.365845919 CEST	54978	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.365861893 CEST	443	54978	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.366060019 CEST	54978	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.366067886 CEST	443	54978	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.369942904 CEST	54985	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.369942904 CEST	54986	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.369978905 CEST	443	54985	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.369992971 CEST	443	54986	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.370057106 CEST	54985	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.370057106 CEST	54986	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.370317936 CEST	54985	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.370331049 CEST	443	54985	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.370691061 CEST	54986	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.370702028 CEST	443	54986	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.629997015 CEST	443	54982	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.630599022 CEST	54982	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.630614042 CEST	443	54982	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.631300926 CEST	54982	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.631305933 CEST	443	54982	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.744214058 CEST	443	54982	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.744393110 CEST	443	54982	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.744482994 CEST	54982	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.744648933 CEST	54982	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.744648933 CEST	54982	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.744659901 CEST	443	54982	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.744673014 CEST	443	54982	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.748377085 CEST	54987	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.748420000 CEST	443	54987	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.748512030 CEST	54987	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.749315023 CEST	54987	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.749336958 CEST	443	54987	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.898191929 CEST	443	54983	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.898895025 CEST	54983	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.898955107 CEST	443	54983	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.899574995 CEST	54983	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.899590015 CEST	443	54983	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.958190918 CEST	443	54984	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.958678961 CEST	54984	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.958703995 CEST	443	54984	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:11.959211111 CEST	54984	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:11.959216118 CEST	443	54984	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.016146898 CEST	443	54983	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.016222000 CEST	443	54983	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.016285896 CEST	54983	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.016318083 CEST	443	54983	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.016349077 CEST	443	54983	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.016407013 CEST	54983	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.016535997 CEST	54983	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.016570091 CEST	443	54983	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.016597986 CEST	54983	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.016613007 CEST	443	54983	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.020358086 CEST	54988	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.020390987 CEST	443	54988	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.020464897 CEST	54988	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.020634890 CEST	54988	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.020649910 CEST	443	54988	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.045375109 CEST	443	54985	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.045727968 CEST	54985	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.045738935 CEST	443	54985	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.046128988 CEST	54985	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.046133995 CEST	443	54985	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.064696074 CEST	443	54986	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.065047979 CEST	54986	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.065059900 CEST	443	54986	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.065457106 CEST	54986	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.065469980 CEST	443	54986	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.082161903 CEST	443	54984	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.082312107 CEST	443	54984	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.082380056 CEST	54984	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.082423925 CEST	54984	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.082437992 CEST	443	54984	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.082447052 CEST	54984	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.082452059 CEST	443	54984	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.085035086 CEST	54989	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.085052967 CEST	443	54989	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.085129023 CEST	54989	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.085314035 CEST	54989	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.085323095 CEST	443	54989	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.153289080 CEST	443	54985	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.153630018 CEST	443	54985	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.153693914 CEST	54985	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.153765917 CEST	54985	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.153774023 CEST	443	54985	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.153801918 CEST	54985	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.153808117 CEST	443	54985	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.161778927 CEST	54990	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.161799908 CEST	443	54990	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.161922932 CEST	54990	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.162518978 CEST	54990	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.162528992 CEST	443	54990	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.175719976 CEST	443	54986	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.175905943 CEST	443	54986	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.175957918 CEST	54986	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.176743984 CEST	54986	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.176748991 CEST	443	54986	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.176764011 CEST	54986	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.176767111 CEST	443	54986	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.187586069 CEST	54991	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.187625885 CEST	443	54991	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.187695026 CEST	54991	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.187850952 CEST	54991	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.187870026 CEST	443	54991	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.423491955 CEST	443	54987	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.424016953 CEST	54987	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.424027920 CEST	443	54987	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.424483061 CEST	54987	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.424488068 CEST	443	54987	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.536087990 CEST	443	54987	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.536232948 CEST	443	54987	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.536325932 CEST	54987	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.536547899 CEST	54987	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.536556959 CEST	443	54987	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.536567926 CEST	54987	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.536572933 CEST	443	54987	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.539618015 CEST	54992	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.539664984 CEST	443	54992	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.539742947 CEST	54992	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.539952993 CEST	54992	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.539968014 CEST	443	54992	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.685187101 CEST	443	54988	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.685735941 CEST	54988	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.685800076 CEST	443	54988	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.686253071 CEST	54988	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.686266899 CEST	443	54988	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.764334917 CEST	443	54989	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.764874935 CEST	54989	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.764893055 CEST	443	54989	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.765645027 CEST	54989	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.765650034 CEST	443	54989	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.814812899 CEST	443	54988	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.815135956 CEST	443	54988	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.815285921 CEST	54988	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.815285921 CEST	54988	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.815363884 CEST	54988	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.815397024 CEST	443	54988	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.818157911 CEST	54993	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.818195105 CEST	443	54993	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:12.818453074 CEST	54993	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.818453074 CEST	54993	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:12.818514109 CEST	443	54993	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:13.132354021 CEST	443	54989	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:13.132498980 CEST	443	54989	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:13.132731915 CEST	54989	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:13.132791996 CEST	54989	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:13.132807016 CEST	443	54989	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:13.132838011 CEST	54989	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:13.132843971 CEST	443	54989	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:13.135937929 CEST	54994	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:13.136018038 CEST	443	54994	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:13.136315107 CEST	54994	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:13.136316061 CEST	54994	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:13.136394978 CEST	443	54994	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:13.137495041 CEST	443	54991	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:13.137681007 CEST	443	54990	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:13.137936115 CEST	54991	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:13.137969017 CEST	443	54991	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:13.137996912 CEST	54990	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:13.138006926 CEST	443	54990	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:13.138432026 CEST	54991	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:13.138437033 CEST	54990	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:13.138437986 CEST	443	54991	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:13.138441086 CEST	443	54990	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:13.247029066 CEST	443	54991	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:13.247096062 CEST	443	54991	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:13.247199059 CEST	443	54991	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:13.247430086 CEST	54991	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:13.247430086 CEST	54991	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:13.247430086 CEST	54991	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:13.249721050 CEST	443	54990	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:13.249954939 CEST	443	54990	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:13.250756979 CEST	54990	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:13.250819921 CEST	54990	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:13.250819921 CEST	54990	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:13.250834942 CEST	443	54990	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:13.250838995 CEST	443	54990	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:13.251128912 CEST	54995	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:13.251148939 CEST	443	54995	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:13.251307964 CEST	54995	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:13.253676891 CEST	54995	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:13.253690958 CEST	443	54995	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:13.253710985 CEST	54996	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:13.253734112 CEST	443	54996	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:13.253982067 CEST	54996	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:13.254302025 CEST	54996	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:13.254317999 CEST	443	54996	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:13.561578035 CEST	54991	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:13.561640024 CEST	443	54991	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.372241974 CEST	443	54992	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.373111010 CEST	443	54993	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.425337076 CEST	54993	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.429295063 CEST	54992	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.578370094 CEST	443	54994	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.583415985 CEST	443	54995	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.633074999 CEST	54995	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.633090973 CEST	54994	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.687925100 CEST	54992	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.687938929 CEST	443	54992	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.690428019 CEST	54992	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.690439939 CEST	443	54992	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.691946030 CEST	54993	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.692011118 CEST	443	54993	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.694647074 CEST	54993	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.694659948 CEST	443	54993	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.701777935 CEST	54994	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.701788902 CEST	443	54994	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.703325987 CEST	54994	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.703336954 CEST	443	54994	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.705288887 CEST	54995	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.705300093 CEST	443	54995	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.707225084 CEST	54995	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.707230091 CEST	443	54995	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.801723957 CEST	443	54993	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.801858902 CEST	443	54992	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.801893950 CEST	443	54993	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.801974058 CEST	54993	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.802265882 CEST	54993	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.802265882 CEST	54993	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.802304983 CEST	443	54993	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.802328110 CEST	443	54993	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.802548885 CEST	443	54992	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.802607059 CEST	54992	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.814806938 CEST	443	54995	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.814858913 CEST	443	54995	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.814914942 CEST	54995	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.814925909 CEST	443	54995	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.814986944 CEST	443	54995	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.815040112 CEST	54995	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.888361931 CEST	54992	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.888381958 CEST	443	54992	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.888392925 CEST	54992	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.888398886 CEST	443	54992	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.892170906 CEST	54995	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.892174006 CEST	443	54995	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.892185926 CEST	54995	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.892189980 CEST	443	54995	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.925775051 CEST	54997	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.925816059 CEST	443	54997	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.925874949 CEST	54997	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.928689957 CEST	54998	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.928698063 CEST	443	54998	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.928750992 CEST	54998	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.930154085 CEST	54997	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.930167913 CEST	443	54997	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.930404902 CEST	54998	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.930414915 CEST	443	54998	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.932147026 CEST	54999	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.932178974 CEST	443	54999	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:14.932380915 CEST	54999	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.932986021 CEST	54999	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:14.933005095 CEST	443	54999	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.229809046 CEST	443	54994	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.230169058 CEST	443	54994	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.230223894 CEST	54994	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.230489969 CEST	54994	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.230489969 CEST	54994	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.230525017 CEST	443	54994	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.230549097 CEST	443	54994	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.236727953 CEST	55000	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.236762047 CEST	443	55000	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.236818075 CEST	55000	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.237226009 CEST	55000	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.237235069 CEST	443	55000	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.331063032 CEST	443	54996	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.331693888 CEST	54996	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.331706047 CEST	443	54996	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.333090067 CEST	54996	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.333095074 CEST	443	54996	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.450325012 CEST	443	54996	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.451864958 CEST	443	54996	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.451903105 CEST	443	54996	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.451905012 CEST	54996	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.451965094 CEST	54996	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.452028990 CEST	54996	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.452039957 CEST	443	54996	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.452264071 CEST	54996	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.452270031 CEST	443	54996	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.459069967 CEST	55001	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.459104061 CEST	443	55001	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.459177017 CEST	55001	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.459444046 CEST	55001	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.459465981 CEST	443	55001	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.587786913 CEST	443	54998	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.588197947 CEST	54998	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.588232040 CEST	443	54998	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.588670015 CEST	54998	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.588679075 CEST	443	54998	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.619782925 CEST	443	54999	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.619807005 CEST	443	54997	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.620254040 CEST	54999	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.620265961 CEST	54997	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.620271921 CEST	443	54999	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.620274067 CEST	443	54997	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.620649099 CEST	54997	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.620652914 CEST	443	54997	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.620929003 CEST	54999	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.620934963 CEST	443	54999	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.700206995 CEST	443	54998	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.700413942 CEST	443	54998	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.700501919 CEST	443	54998	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.700516939 CEST	54998	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.700608969 CEST	54998	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.700608969 CEST	54998	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.700630903 CEST	54998	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.700643063 CEST	443	54998	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.702809095 CEST	55002	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.702872992 CEST	443	55002	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.702969074 CEST	55002	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.703068972 CEST	55002	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.703090906 CEST	443	55002	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.732637882 CEST	443	54997	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.732767105 CEST	443	54997	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.732913971 CEST	54997	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.732913971 CEST	54997	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.732980967 CEST	54997	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.732989073 CEST	443	54997	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.734977961 CEST	55003	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.735002041 CEST	443	55003	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.735299110 CEST	55003	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.735400915 CEST	55003	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.735410929 CEST	443	55003	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.741477013 CEST	443	54999	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.741620064 CEST	443	54999	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.741695881 CEST	54999	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.741708040 CEST	443	54999	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.741738081 CEST	443	54999	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.741828918 CEST	54999	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.741828918 CEST	54999	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.741892099 CEST	54999	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.741902113 CEST	443	54999	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.743648052 CEST	55004	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.743673086 CEST	443	55004	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.743858099 CEST	55004	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.743858099 CEST	55004	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.743881941 CEST	443	55004	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.891748905 CEST	443	55000	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.892385006 CEST	55000	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.892400026 CEST	443	55000	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:15.895251989 CEST	55000	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:15.895256042 CEST	443	55000	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.003611088 CEST	443	55000	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.004091024 CEST	443	55000	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.004410982 CEST	55000	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.008858919 CEST	55000	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.008858919 CEST	55000	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.008866072 CEST	443	55000	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.008872986 CEST	443	55000	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.055306911 CEST	55005	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.055339098 CEST	443	55005	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.058862925 CEST	55005	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.067009926 CEST	55005	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.067023039 CEST	443	55005	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.141175985 CEST	443	55001	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.142113924 CEST	55001	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.142136097 CEST	443	55001	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.143151045 CEST	55001	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.143162012 CEST	443	55001	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.251208067 CEST	443	55001	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.251226902 CEST	443	55001	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.251281977 CEST	443	55001	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.251327991 CEST	55001	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.251327991 CEST	55001	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.251669884 CEST	55001	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.251669884 CEST	55001	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.251693964 CEST	443	55001	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.251718998 CEST	443	55001	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.269398928 CEST	55006	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.269413948 CEST	443	55006	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.269555092 CEST	55006	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.307152033 CEST	55006	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.307164907 CEST	443	55006	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.453193903 CEST	443	55003	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.499123096 CEST	55003	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.531651020 CEST	55003	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.531651020 CEST	55003	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.531662941 CEST	443	55003	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.531680107 CEST	443	55003	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.638335943 CEST	443	55003	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.638859034 CEST	443	55003	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.638962030 CEST	443	55003	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.638992071 CEST	55003	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.639036894 CEST	55003	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.640063047 CEST	55003	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.640084982 CEST	443	55003	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.640110016 CEST	55003	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.640115976 CEST	443	55003	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.647036076 CEST	55007	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.647068977 CEST	443	55007	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.647214890 CEST	55007	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.648164034 CEST	55007	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.648184061 CEST	443	55007	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.759834051 CEST	443	55005	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.811340094 CEST	55005	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.815320969 CEST	55005	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.815325975 CEST	443	55005	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.815998077 CEST	55005	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.816001892 CEST	443	55005	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.917793989 CEST	443	55005	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.918183088 CEST	443	55005	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.918250084 CEST	55005	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.970021009 CEST	55005	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.970031023 CEST	443	55005	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.970057964 CEST	55005	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.970062971 CEST	443	55005	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.978539944 CEST	55008	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.978574038 CEST	443	55008	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:16.978631020 CEST	55008	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.978768110 CEST	55008	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:16.978776932 CEST	443	55008	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.003314972 CEST	443	55006	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.018109083 CEST	55006	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.018115997 CEST	443	55006	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.023664951 CEST	55006	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.023669958 CEST	443	55006	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.131627083 CEST	443	55006	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.132091045 CEST	443	55006	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.132148981 CEST	55006	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.155237913 CEST	55006	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.155237913 CEST	55006	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.155247927 CEST	443	55006	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.155255079 CEST	443	55006	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.158365011 CEST	55009	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.158380985 CEST	443	55009	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.158456087 CEST	55009	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.158848047 CEST	55009	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.158860922 CEST	443	55009	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.257181883 CEST	443	55007	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.269005060 CEST	55007	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.269023895 CEST	443	55007	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.272317886 CEST	55007	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.272324085 CEST	443	55007	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.327855110 CEST	443	55002	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.328207016 CEST	55002	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.328272104 CEST	443	55002	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.328660011 CEST	55002	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.328675985 CEST	443	55002	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.378482103 CEST	443	55004	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.378776073 CEST	55004	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.378788948 CEST	443	55004	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.379214048 CEST	55004	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.379220963 CEST	443	55004	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.379560947 CEST	443	55007	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.379632950 CEST	443	55007	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.379681110 CEST	55007	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.379688978 CEST	443	55007	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.379754066 CEST	443	55007	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.379797935 CEST	55007	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.379848957 CEST	55007	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.379862070 CEST	443	55007	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.379873037 CEST	55007	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.379879951 CEST	443	55007	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.382273912 CEST	55010	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.382291079 CEST	443	55010	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.382350922 CEST	55010	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.382494926 CEST	55010	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.382514954 CEST	443	55010	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.442435980 CEST	443	55002	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.442502975 CEST	443	55002	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.442572117 CEST	55002	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.442606926 CEST	443	55002	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.442665100 CEST	55002	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.442718029 CEST	55002	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.442761898 CEST	443	55002	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.442790985 CEST	55002	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.442806005 CEST	443	55002	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.445031881 CEST	55011	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.445053101 CEST	443	55011	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.445118904 CEST	55011	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.445251942 CEST	55011	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.445264101 CEST	443	55011	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.523787975 CEST	443	55004	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.523935080 CEST	443	55004	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.524005890 CEST	55004	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.529598951 CEST	55004	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.529623032 CEST	443	55004	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.529839039 CEST	55004	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.529845953 CEST	443	55004	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.549330950 CEST	55012	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.549352884 CEST	443	55012	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.549460888 CEST	55012	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.550276041 CEST	55012	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.550285101 CEST	443	55012	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.670600891 CEST	443	55008	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.671606064 CEST	55008	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.671614885 CEST	443	55008	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.673156977 CEST	55008	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.673176050 CEST	443	55008	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.782179117 CEST	443	55008	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.782247066 CEST	443	55008	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.782366991 CEST	55008	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.782841921 CEST	55008	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.782841921 CEST	55008	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.782855988 CEST	443	55008	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.782866001 CEST	443	55008	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.787765980 CEST	55013	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.787837982 CEST	443	55013	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.787959099 CEST	55013	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.788171053 CEST	55013	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.788207054 CEST	443	55013	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.824486971 CEST	443	55009	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.825263977 CEST	55009	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.825293064 CEST	443	55009	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.826472998 CEST	55009	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.826477051 CEST	443	55009	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.933510065 CEST	443	55009	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.933921099 CEST	443	55009	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.933976889 CEST	55009	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.933988094 CEST	443	55009	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.934024096 CEST	443	55009	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.934073925 CEST	55009	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.934149981 CEST	55009	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.934159040 CEST	443	55009	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.934165001 CEST	55009	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.934169054 CEST	443	55009	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.939213037 CEST	55014	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.939300060 CEST	443	55014	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:17.939377069 CEST	55014	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.939637899 CEST	55014	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:17.939655066 CEST	443	55014	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.077589035 CEST	443	55010	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.078455925 CEST	55010	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.078464985 CEST	443	55010	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.079654932 CEST	55010	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.079660892 CEST	443	55010	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.149224043 CEST	443	55011	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.150317907 CEST	55011	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.150317907 CEST	55011	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.150333881 CEST	443	55011	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.150341988 CEST	443	55011	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.228913069 CEST	443	55010	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.229698896 CEST	443	55010	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.229779005 CEST	55010	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.229811907 CEST	55010	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.229821920 CEST	443	55010	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.229829073 CEST	55010	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.229835033 CEST	443	55010	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.233129978 CEST	55015	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.233165979 CEST	443	55015	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.233302116 CEST	55015	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.233469009 CEST	55015	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.233480930 CEST	443	55015	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.242172956 CEST	443	55012	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.242774010 CEST	55012	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.242786884 CEST	443	55012	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.243344069 CEST	55012	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.243347883 CEST	443	55012	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.274756908 CEST	443	55011	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.274996996 CEST	443	55011	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.275120020 CEST	443	55011	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.275191069 CEST	55011	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.275300980 CEST	55011	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.275300980 CEST	55011	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.275314093 CEST	443	55011	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.275322914 CEST	443	55011	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.277978897 CEST	55016	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.278012037 CEST	443	55016	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.278166056 CEST	55016	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.278403997 CEST	55016	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.278418064 CEST	443	55016	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.355792046 CEST	443	55012	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.356029987 CEST	443	55012	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.356129885 CEST	55012	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.356237888 CEST	55012	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.356237888 CEST	55012	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.356251001 CEST	443	55012	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.356260061 CEST	443	55012	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.359534979 CEST	55017	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.359574080 CEST	443	55017	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.359647036 CEST	55017	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.360510111 CEST	55017	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.360522985 CEST	443	55017	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.470685005 CEST	443	55013	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.471146107 CEST	55013	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.471172094 CEST	443	55013	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.471908092 CEST	55013	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.471923113 CEST	443	55013	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.588330984 CEST	443	55013	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.588407040 CEST	443	55013	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.588502884 CEST	55013	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.588764906 CEST	55013	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.588766098 CEST	55013	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.588809967 CEST	443	55013	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.588855982 CEST	443	55013	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.591542959 CEST	55018	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.591582060 CEST	443	55018	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.591653109 CEST	55018	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.591819048 CEST	55018	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.591830015 CEST	443	55018	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.625982046 CEST	443	55014	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.626342058 CEST	55014	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.626389027 CEST	443	55014	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.626733065 CEST	55014	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.626744986 CEST	443	55014	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.737912893 CEST	443	55014	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.739563942 CEST	443	55014	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.739701986 CEST	55014	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.739764929 CEST	55014	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.739765882 CEST	55014	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.739804983 CEST	443	55014	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.739839077 CEST	443	55014	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.742297888 CEST	55019	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.742322922 CEST	443	55019	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.742590904 CEST	55019	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.742749929 CEST	55019	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.742763996 CEST	443	55019	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.894788980 CEST	443	55015	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.899600029 CEST	55015	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.899626970 CEST	443	55015	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.900573015 CEST	55015	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.900588036 CEST	443	55015	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.948807955 CEST	443	55016	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.950066090 CEST	55016	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.950078011 CEST	443	55016	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:18.950455904 CEST	55016	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:18.950462103 CEST	443	55016	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.004467010 CEST	443	55015	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.004611015 CEST	443	55015	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.004673958 CEST	55015	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.004766941 CEST	55015	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.004766941 CEST	55015	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.004781961 CEST	443	55015	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.004791021 CEST	443	55015	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.007148981 CEST	55020	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.007194042 CEST	443	55020	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.007335901 CEST	55020	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.007473946 CEST	55020	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.007496119 CEST	443	55020	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.063471079 CEST	443	55016	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.063618898 CEST	443	55016	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.063683987 CEST	55016	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.063755989 CEST	55016	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.063755989 CEST	55016	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.063766003 CEST	443	55016	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.063774109 CEST	443	55016	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.065500975 CEST	443	55017	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.065800905 CEST	55017	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.065825939 CEST	443	55017	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.065880060 CEST	55021	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.065911055 CEST	443	55021	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.065983057 CEST	55021	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.066118956 CEST	55021	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.066143990 CEST	443	55021	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.066159010 CEST	55017	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.066163063 CEST	443	55017	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.185050964 CEST	443	55017	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.185273886 CEST	443	55017	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.185324907 CEST	55017	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.185339928 CEST	443	55017	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.185376883 CEST	443	55017	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.185420990 CEST	55017	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.185477972 CEST	55017	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.185477972 CEST	55017	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.185489893 CEST	443	55017	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.185497046 CEST	443	55017	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.187813997 CEST	55022	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.187886000 CEST	443	55022	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.187958956 CEST	55022	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.188147068 CEST	55022	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.188179970 CEST	443	55022	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.244378090 CEST	443	55018	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.265369892 CEST	55018	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.265379906 CEST	443	55018	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.266066074 CEST	55018	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.266069889 CEST	443	55018	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.369617939 CEST	443	55018	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.369976044 CEST	443	55018	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.370045900 CEST	55018	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.370069027 CEST	55018	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.370080948 CEST	443	55018	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.370094061 CEST	55018	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.370099068 CEST	443	55018	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.372936010 CEST	55023	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.372960091 CEST	443	55023	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.373156071 CEST	55023	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.373281956 CEST	55023	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.373298883 CEST	443	55023	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.402681112 CEST	443	55019	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.403062105 CEST	55019	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.403074980 CEST	443	55019	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.403402090 CEST	55019	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.403407097 CEST	443	55019	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.512825012 CEST	443	55019	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.512900114 CEST	443	55019	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.512943983 CEST	55019	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.512959957 CEST	443	55019	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.513031006 CEST	443	55019	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.513076067 CEST	55019	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.513103008 CEST	443	55019	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.513113022 CEST	55019	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.513113022 CEST	55019	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.513118982 CEST	443	55019	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.513123989 CEST	443	55019	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.515182018 CEST	55024	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.515239000 CEST	443	55024	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.515422106 CEST	55024	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.515548944 CEST	55024	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.515598059 CEST	443	55024	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.668800116 CEST	443	55020	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.669224977 CEST	55020	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.669245958 CEST	443	55020	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.669625044 CEST	55020	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.669634104 CEST	443	55020	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.778008938 CEST	443	55021	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.778388023 CEST	55021	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.778425932 CEST	443	55021	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.778764009 CEST	55021	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.778774023 CEST	443	55021	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.779083967 CEST	443	55020	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.779233932 CEST	443	55020	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.779298067 CEST	55020	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.779325008 CEST	55020	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.779342890 CEST	443	55020	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.779355049 CEST	55020	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.779361963 CEST	443	55020	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.781699896 CEST	55025	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.781721115 CEST	443	55025	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.781776905 CEST	55025	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.781883001 CEST	55025	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.781891108 CEST	443	55025	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.859098911 CEST	443	55022	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.859431028 CEST	55022	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.859458923 CEST	443	55022	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.859751940 CEST	55022	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.859761953 CEST	443	55022	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.898062944 CEST	443	55021	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.898917913 CEST	443	55021	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.898977995 CEST	55021	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.898993969 CEST	443	55021	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.899022102 CEST	443	55021	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.899068117 CEST	55021	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.899115086 CEST	55021	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.899142981 CEST	443	55021	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.899168015 CEST	55021	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.899180889 CEST	443	55021	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.901253939 CEST	55026	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.901266098 CEST	443	55026	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.901318073 CEST	55026	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.901443005 CEST	55026	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.901451111 CEST	443	55026	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.970520973 CEST	443	55022	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.970760107 CEST	443	55022	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.970958948 CEST	55022	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.971008062 CEST	55022	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.971008062 CEST	55022	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.971034050 CEST	443	55022	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.971055031 CEST	443	55022	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.973265886 CEST	55027	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.973356962 CEST	443	55027	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:19.973437071 CEST	55027	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.973570108 CEST	55027	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:19.973608971 CEST	443	55027	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.040112019 CEST	443	55023	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.040447950 CEST	55023	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.040478945 CEST	443	55023	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.040832043 CEST	55023	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.040838957 CEST	443	55023	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.149072886 CEST	443	55023	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.149174929 CEST	443	55023	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.149211884 CEST	443	55023	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.149229050 CEST	55023	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.149267912 CEST	55023	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.149372101 CEST	55023	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.149386883 CEST	443	55023	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.149415970 CEST	55023	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.149425983 CEST	443	55023	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.151863098 CEST	55028	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.151911974 CEST	443	55028	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.151993990 CEST	55028	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.152126074 CEST	55028	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.152157068 CEST	443	55028	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.175297022 CEST	443	55024	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.175645113 CEST	55024	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.175682068 CEST	443	55024	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.176054955 CEST	55024	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.176067114 CEST	443	55024	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.295795918 CEST	443	55024	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.295938015 CEST	443	55024	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.296032906 CEST	55024	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.305226088 CEST	55024	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.305278063 CEST	443	55024	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.305309057 CEST	55024	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.305325031 CEST	443	55024	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.308156013 CEST	55029	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.308195114 CEST	443	55029	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.308312893 CEST	55029	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.308418989 CEST	55029	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.308425903 CEST	443	55029	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.438302040 CEST	443	55025	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.438699961 CEST	55025	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.438711882 CEST	443	55025	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.439127922 CEST	55025	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.439131975 CEST	443	55025	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.572295904 CEST	443	55025	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.572345972 CEST	443	55025	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.572478056 CEST	443	55025	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.572499037 CEST	55025	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.572571993 CEST	55025	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.572685957 CEST	55025	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.572685957 CEST	55025	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.572706938 CEST	443	55025	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.572715044 CEST	443	55025	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.575328112 CEST	55030	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.575360060 CEST	443	55030	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.575500965 CEST	55030	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.575643063 CEST	55030	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.575654984 CEST	443	55030	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.602190018 CEST	443	55026	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.602695942 CEST	55026	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.602714062 CEST	443	55026	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.603214979 CEST	55026	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.603219986 CEST	443	55026	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.665532112 CEST	443	55027	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.666027069 CEST	55027	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.666049957 CEST	443	55027	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.666465044 CEST	55027	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.666480064 CEST	443	55027	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.774060965 CEST	443	55027	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.774266005 CEST	443	55027	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.774319887 CEST	55027	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.774357080 CEST	443	55027	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.774389029 CEST	443	55027	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.774447918 CEST	55027	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.774490118 CEST	443	55027	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.774521112 CEST	55027	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.774521112 CEST	55027	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.774540901 CEST	443	55027	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.774559975 CEST	443	55027	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.777070045 CEST	55031	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.777159929 CEST	443	55031	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.777241945 CEST	55031	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.777399063 CEST	55031	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.777430058 CEST	443	55031	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.785252094 CEST	443	55026	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.785290003 CEST	443	55026	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.785352945 CEST	443	55026	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.785357952 CEST	55026	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.785430908 CEST	55026	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.785552979 CEST	55026	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.785562992 CEST	443	55026	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.785653114 CEST	55026	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.785659075 CEST	443	55026	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.787786961 CEST	55032	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.787857056 CEST	443	55032	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.788064957 CEST	55032	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.788230896 CEST	55032	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.788261890 CEST	443	55032	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.805502892 CEST	443	55028	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.806030989 CEST	55028	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.806093931 CEST	443	55028	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.806349993 CEST	55028	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.806365967 CEST	443	55028	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.915944099 CEST	443	55028	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.916388988 CEST	443	55028	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.916462898 CEST	55028	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.916538000 CEST	55028	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.916538954 CEST	55028	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.916578054 CEST	443	55028	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.916605949 CEST	443	55028	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.918854952 CEST	55033	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.918889046 CEST	443	55033	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.918987036 CEST	55033	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.919145107 CEST	55033	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.919162035 CEST	443	55033	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.967225075 CEST	443	55029	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.967606068 CEST	55029	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.967619896 CEST	443	55029	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:20.968132973 CEST	55029	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:20.968137980 CEST	443	55029	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.076687098 CEST	443	55029	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.076757908 CEST	443	55029	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.076853991 CEST	443	55029	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.076914072 CEST	55029	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.077060938 CEST	55029	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.077068090 CEST	443	55029	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.077078104 CEST	55029	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.077081919 CEST	443	55029	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.079855919 CEST	55034	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.079888105 CEST	443	55034	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.080015898 CEST	55034	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.080166101 CEST	55034	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.080183983 CEST	443	55034	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.244304895 CEST	443	55030	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.244882107 CEST	55030	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.244895935 CEST	443	55030	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.245367050 CEST	55030	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.245371103 CEST	443	55030	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.371529102 CEST	443	55032	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.371929884 CEST	55032	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.371953964 CEST	443	55032	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.372320890 CEST	55032	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.372327089 CEST	443	55032	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.427943945 CEST	443	55031	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.428428888 CEST	55031	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.428451061 CEST	443	55031	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.428844929 CEST	55031	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.428855896 CEST	443	55031	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.481786966 CEST	443	55032	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.482285023 CEST	443	55032	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.482475996 CEST	55032	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.482512951 CEST	55032	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.482539892 CEST	443	55032	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.482552052 CEST	55032	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.482558012 CEST	443	55032	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.485214949 CEST	55035	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.485241890 CEST	443	55035	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.485479116 CEST	55035	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.485665083 CEST	55035	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.485677958 CEST	443	55035	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.569139957 CEST	443	55031	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.569164991 CEST	443	55031	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.569211006 CEST	443	55031	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.569355011 CEST	55031	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.569355011 CEST	55031	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.569492102 CEST	55031	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.569538116 CEST	443	55031	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.569570065 CEST	55031	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.569587946 CEST	443	55031	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.571780920 CEST	55036	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.571820974 CEST	443	55036	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.572069883 CEST	55036	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.572235107 CEST	55036	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.572248936 CEST	443	55036	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.598222017 CEST	443	55030	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.598290920 CEST	443	55030	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.598366022 CEST	55030	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.598490953 CEST	55030	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.598490953 CEST	55030	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.598506927 CEST	443	55030	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.598531961 CEST	443	55030	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.600748062 CEST	55037	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.600781918 CEST	443	55037	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.601061106 CEST	55037	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.601061106 CEST	55037	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.601097107 CEST	443	55037	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.601123095 CEST	443	55033	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.601463079 CEST	55033	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.601480007 CEST	443	55033	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.601874113 CEST	55033	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.601880074 CEST	443	55033	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.715091944 CEST	443	55033	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.715156078 CEST	443	55033	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.715230942 CEST	55033	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.715255976 CEST	443	55033	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.715277910 CEST	443	55033	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.715329885 CEST	55033	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.715490103 CEST	55033	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.715502977 CEST	443	55033	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.715512991 CEST	55033	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.715517044 CEST	443	55033	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.718780994 CEST	55038	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.718805075 CEST	443	55038	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.718873024 CEST	55038	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.719243050 CEST	55038	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.719264030 CEST	443	55038	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.761565924 CEST	443	55034	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.761982918 CEST	55034	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.762003899 CEST	443	55034	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.762439966 CEST	55034	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.762445927 CEST	443	55034	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.904520988 CEST	443	55034	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.905376911 CEST	443	55034	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.905471087 CEST	55034	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.905540943 CEST	55034	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.905550003 CEST	443	55034	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.905561924 CEST	55034	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.905565977 CEST	443	55034	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.908029079 CEST	55039	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.908066034 CEST	443	55039	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:21.908174992 CEST	55039	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.908297062 CEST	55039	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:21.908309937 CEST	443	55039	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.166955948 CEST	443	55035	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.167459011 CEST	55035	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.167511940 CEST	443	55035	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.167918921 CEST	55035	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.167932034 CEST	443	55035	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.222428083 CEST	443	55036	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.222917080 CEST	55036	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.222928047 CEST	443	55036	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.223583937 CEST	55036	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.223587990 CEST	443	55036	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.280996084 CEST	443	55035	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.281569004 CEST	443	55035	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.281691074 CEST	443	55035	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.281699896 CEST	55035	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.281812906 CEST	55035	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.281918049 CEST	55035	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.281943083 CEST	443	55035	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.281956911 CEST	55035	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.281964064 CEST	443	55035	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.285007000 CEST	55040	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.285051107 CEST	443	55040	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.285348892 CEST	55040	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.285542011 CEST	55040	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.285562038 CEST	443	55040	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.317964077 CEST	443	55037	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.318620920 CEST	55037	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.318638086 CEST	443	55037	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.319394112 CEST	55037	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.319397926 CEST	443	55037	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.331854105 CEST	443	55036	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.332869053 CEST	443	55036	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.332936049 CEST	55036	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.332959890 CEST	55036	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.332973003 CEST	443	55036	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.333008051 CEST	55036	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.333014011 CEST	443	55036	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.336138964 CEST	55041	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.336183071 CEST	443	55041	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.336263895 CEST	55041	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.336416960 CEST	55041	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.336432934 CEST	443	55041	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.392359972 CEST	443	55038	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.394426107 CEST	55038	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.394437075 CEST	443	55038	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.395342112 CEST	55038	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.395349026 CEST	443	55038	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.438286066 CEST	443	55037	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.439197063 CEST	443	55037	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.439265966 CEST	55037	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.439408064 CEST	55037	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.439408064 CEST	55037	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.439419031 CEST	443	55037	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.439428091 CEST	443	55037	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.442908049 CEST	55042	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.442945004 CEST	443	55042	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.443013906 CEST	55042	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.443198919 CEST	55042	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.443217993 CEST	443	55042	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.579204082 CEST	443	55038	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.579226971 CEST	443	55038	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.579269886 CEST	443	55038	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.579288006 CEST	55038	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.579411983 CEST	55038	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.579669952 CEST	55038	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.579669952 CEST	55038	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.579679966 CEST	443	55038	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.579688072 CEST	443	55038	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.583174944 CEST	443	55039	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.583218098 CEST	55043	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.583261967 CEST	443	55043	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.583653927 CEST	55043	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.583653927 CEST	55039	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.583682060 CEST	443	55039	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.583832979 CEST	55043	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.583848000 CEST	443	55043	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.584160089 CEST	55039	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.584168911 CEST	443	55039	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.745362043 CEST	443	55039	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.745523930 CEST	443	55039	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.745598078 CEST	55039	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.745795965 CEST	55039	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.745795965 CEST	55039	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.745814085 CEST	443	55039	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.745824099 CEST	443	55039	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.749382019 CEST	55044	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.749402046 CEST	443	55044	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.749753952 CEST	55044	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.749954939 CEST	55044	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.749969006 CEST	443	55044	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.990122080 CEST	443	55040	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.991127968 CEST	55040	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.991127968 CEST	55040	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:22.991157055 CEST	443	55040	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:22.991167068 CEST	443	55040	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.031599045 CEST	443	55041	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.032685041 CEST	55041	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.032744884 CEST	443	55041	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.033638000 CEST	55041	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.033651114 CEST	443	55041	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.102293015 CEST	443	55040	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.102448940 CEST	443	55040	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.102571011 CEST	55040	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.102747917 CEST	55040	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.102747917 CEST	55040	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.102760077 CEST	443	55040	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.102768898 CEST	443	55040	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.105885029 CEST	55045	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.105916977 CEST	443	55045	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.106060028 CEST	55045	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.106359005 CEST	55045	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.106370926 CEST	443	55045	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.131925106 CEST	443	55042	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.132389069 CEST	55042	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.132426977 CEST	443	55042	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.132983923 CEST	55042	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.132994890 CEST	443	55042	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.145273924 CEST	443	55041	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.145535946 CEST	443	55041	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.145586967 CEST	443	55041	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.145617962 CEST	55041	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.145685911 CEST	55041	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.145780087 CEST	55041	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.145808935 CEST	443	55041	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.145843983 CEST	55041	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.145857096 CEST	443	55041	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.148380995 CEST	55046	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.148396015 CEST	443	55046	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.148607969 CEST	55046	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.148668051 CEST	55046	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.148678064 CEST	443	55046	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.169970989 CEST	443	55043	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.170633078 CEST	55043	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.170645952 CEST	443	55043	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.171411991 CEST	55043	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.171416044 CEST	443	55043	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.243274927 CEST	443	55042	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.243347883 CEST	443	55042	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.243437052 CEST	55042	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.243568897 CEST	55042	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.243568897 CEST	55042	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.243597031 CEST	443	55042	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.243621111 CEST	443	55042	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.246598959 CEST	55047	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.246630907 CEST	443	55047	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.246911049 CEST	55047	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.247415066 CEST	55047	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.247426987 CEST	443	55047	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.283705950 CEST	443	55043	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.283910990 CEST	443	55043	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.283955097 CEST	443	55043	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.284161091 CEST	55043	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.284161091 CEST	55043	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.284713030 CEST	55043	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.284723997 CEST	443	55043	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.286793947 CEST	55048	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.286823988 CEST	443	55048	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.287395954 CEST	55048	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.287395954 CEST	55048	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.287437916 CEST	443	55048	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.436060905 CEST	443	55044	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.436785936 CEST	55044	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.436809063 CEST	443	55044	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.438118935 CEST	55044	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.438123941 CEST	443	55044	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.568202972 CEST	443	55044	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.568331957 CEST	443	55044	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.568460941 CEST	55044	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.568622112 CEST	55044	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.568634987 CEST	443	55044	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.568658113 CEST	55044	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.568670034 CEST	443	55044	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.571957111 CEST	55049	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.572047949 CEST	443	55049	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.572288990 CEST	55049	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.572515011 CEST	55049	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.572554111 CEST	443	55049	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.764548063 CEST	443	55046	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.765165091 CEST	55046	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.765198946 CEST	443	55046	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.765769958 CEST	55046	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.765775919 CEST	443	55046	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.778187037 CEST	443	55045	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.778661013 CEST	55045	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.778669119 CEST	443	55045	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.779196024 CEST	55045	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.779200077 CEST	443	55045	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.878133059 CEST	443	55046	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.878160000 CEST	443	55046	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.878211021 CEST	443	55046	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.878227949 CEST	55046	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.878281116 CEST	55046	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.878526926 CEST	55046	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.878537893 CEST	443	55046	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.878585100 CEST	55046	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.878588915 CEST	443	55046	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.881961107 CEST	55050	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.881995916 CEST	443	55050	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.882072926 CEST	55050	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.882253885 CEST	55050	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.882282972 CEST	443	55050	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.891872883 CEST	443	55045	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.892034054 CEST	443	55045	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.892111063 CEST	55045	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.892301083 CEST	55045	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.892304897 CEST	443	55045	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.892317057 CEST	55045	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.892319918 CEST	443	55045	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.895294905 CEST	55051	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.895332098 CEST	443	55051	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.895405054 CEST	55051	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.895740032 CEST	55051	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.895754099 CEST	443	55051	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.913934946 CEST	443	55047	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.914613008 CEST	55047	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.914632082 CEST	443	55047	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.915131092 CEST	55047	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.915138960 CEST	443	55047	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.961571932 CEST	443	55048	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.962086916 CEST	55048	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.962106943 CEST	443	55048	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.962619066 CEST	55048	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:23.962635994 CEST	443	55048	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:23.993835926 CEST	55052	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:23.993865013 CEST	443	55052	40.113.103.199	192.168.2.6
Oct 11, 2024 16:10:23.994007111 CEST	55052	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:23.994731903 CEST	55052	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:23.994748116 CEST	443	55052	40.113.103.199	192.168.2.6
Oct 11, 2024 16:10:24.023313999 CEST	443	55047	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.023925066 CEST	443	55047	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.023994923 CEST	55047	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.024044037 CEST	55047	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.024058104 CEST	443	55047	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.024169922 CEST	55047	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.024177074 CEST	443	55047	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.027057886 CEST	55053	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.027096033 CEST	443	55053	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.027177095 CEST	55053	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.027365923 CEST	55053	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.027385950 CEST	443	55053	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.076059103 CEST	443	55048	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.076145887 CEST	443	55048	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.076258898 CEST	55048	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.076461077 CEST	55048	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.076461077 CEST	55048	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.076483011 CEST	443	55048	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.076493979 CEST	443	55048	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.080130100 CEST	55054	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.080164909 CEST	443	55054	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.080423117 CEST	55054	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.080590963 CEST	55054	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.080607891 CEST	443	55054	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.229279041 CEST	443	55049	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.229773045 CEST	55049	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.229799986 CEST	443	55049	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.230293036 CEST	55049	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.230304956 CEST	443	55049	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.340564966 CEST	443	55049	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.341212034 CEST	443	55049	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.341252089 CEST	443	55049	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.341286898 CEST	55049	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.341334105 CEST	55049	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.341391087 CEST	55049	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.341409922 CEST	443	55049	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.341422081 CEST	55049	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.341427088 CEST	443	55049	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.344590902 CEST	55055	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.344633102 CEST	443	55055	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.344692945 CEST	55055	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.344842911 CEST	55055	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.344856024 CEST	443	55055	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.537158012 CEST	443	55050	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.537601948 CEST	55050	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.537626028 CEST	443	55050	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.538045883 CEST	55050	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.538050890 CEST	443	55050	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.596769094 CEST	443	55051	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.597408056 CEST	55051	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.597438097 CEST	443	55051	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.597569942 CEST	55051	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.597574949 CEST	443	55051	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.666740894 CEST	443	55050	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.667443991 CEST	443	55050	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.667500019 CEST	55050	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.667531013 CEST	55050	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.667542934 CEST	443	55050	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.670509100 CEST	55056	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.670538902 CEST	443	55056	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.670608044 CEST	55056	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.670739889 CEST	55056	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.670753002 CEST	443	55056	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.711359978 CEST	443	55051	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.711628914 CEST	443	55051	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.711674929 CEST	443	55051	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.711697102 CEST	55051	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.711752892 CEST	55051	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.711772919 CEST	55051	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.711772919 CEST	55051	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.711782932 CEST	443	55051	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.711791039 CEST	443	55051	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.713890076 CEST	55057	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.713928938 CEST	443	55057	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.714046955 CEST	55057	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.714181900 CEST	55057	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.714199066 CEST	443	55057	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.718770027 CEST	443	55053	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.719613075 CEST	55053	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.719639063 CEST	443	55053	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.720166922 CEST	55053	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.720172882 CEST	443	55053	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.760262966 CEST	443	55054	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.760799885 CEST	55054	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.760824919 CEST	443	55054	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.761239052 CEST	55054	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.761245012 CEST	443	55054	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.799779892 CEST	443	55052	40.113.103.199	192.168.2.6
Oct 11, 2024 16:10:24.799844980 CEST	55052	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:24.801542997 CEST	55052	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:24.801552057 CEST	443	55052	40.113.103.199	192.168.2.6
Oct 11, 2024 16:10:24.801809072 CEST	443	55052	40.113.103.199	192.168.2.6
Oct 11, 2024 16:10:24.803451061 CEST	55052	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:24.803505898 CEST	55052	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:24.803512096 CEST	443	55052	40.113.103.199	192.168.2.6
Oct 11, 2024 16:10:24.803631067 CEST	55052	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:24.840965986 CEST	443	55053	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.841142893 CEST	443	55053	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.841337919 CEST	55053	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.841422081 CEST	55053	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.841422081 CEST	55053	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.841465950 CEST	443	55053	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.841494083 CEST	443	55053	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.845462084 CEST	55058	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.845484972 CEST	443	55058	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.845563889 CEST	55058	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.845896006 CEST	55058	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.845911026 CEST	443	55058	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.847397089 CEST	443	55052	40.113.103.199	192.168.2.6
Oct 11, 2024 16:10:24.873225927 CEST	443	55054	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.873853922 CEST	443	55054	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.873939991 CEST	55054	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.874321938 CEST	55054	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.874349117 CEST	443	55054	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.874375105 CEST	55054	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.874389887 CEST	443	55054	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.876533031 CEST	55059	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.876564026 CEST	443	55059	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.876660109 CEST	55059	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.876792908 CEST	55059	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:24.876805067 CEST	443	55059	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:24.978728056 CEST	443	55052	40.113.103.199	192.168.2.6
Oct 11, 2024 16:10:24.978878021 CEST	443	55052	40.113.103.199	192.168.2.6
Oct 11, 2024 16:10:24.979032993 CEST	55052	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:24.983721972 CEST	55052	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:24.983752012 CEST	443	55052	40.113.103.199	192.168.2.6
Oct 11, 2024 16:10:24.983766079 CEST	55052	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:25.015738964 CEST	443	55055	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.016314030 CEST	55055	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:25.016330957 CEST	443	55055	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.016835928 CEST	55055	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:25.016841888 CEST	443	55055	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.127183914 CEST	443	55055	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.127360106 CEST	443	55055	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.127424955 CEST	55055	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:25.127532005 CEST	55055	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:25.127552032 CEST	443	55055	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.127563953 CEST	55055	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:25.127571106 CEST	443	55055	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.130245924 CEST	55060	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:25.130312920 CEST	443	55060	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.130393028 CEST	55060	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:25.130542040 CEST	55060	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:25.130558968 CEST	443	55060	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.318794966 CEST	443	55056	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.319221020 CEST	55056	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:25.319255114 CEST	443	55056	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.319622040 CEST	55056	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:25.319628954 CEST	443	55056	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.394067049 CEST	443	55057	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.394632101 CEST	55057	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:25.394654989 CEST	443	55057	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.395134926 CEST	55057	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:25.395140886 CEST	443	55057	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.430161953 CEST	443	55056	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.430425882 CEST	443	55056	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.430466890 CEST	443	55056	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.430470943 CEST	55056	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:25.430520058 CEST	55056	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:25.430541039 CEST	55056	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:25.430552006 CEST	443	55056	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.430566072 CEST	55056	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:25.430569887 CEST	443	55056	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.433098078 CEST	55061	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:25.433141947 CEST	443	55061	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.433233023 CEST	55061	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:25.433391094 CEST	55061	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:25.433408022 CEST	443	55061	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.506412983 CEST	443	55057	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.506573915 CEST	443	55057	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.506680965 CEST	55057	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:25.506724119 CEST	55057	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:25.506724119 CEST	55057	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:25.506747007 CEST	443	55057	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.506758928 CEST	443	55057	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.509237051 CEST	55062	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:25.509282112 CEST	443	55062	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.509363890 CEST	55062	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:25.509510994 CEST	55062	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:25.509527922 CEST	443	55062	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.513125896 CEST	443	55058	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.513478994 CEST	55058	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:25.513498068 CEST	443	55058	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:25.513989925 CEST	55058	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:25.513998032 CEST	443	55058	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.581285000 CEST	443	55058	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.581319094 CEST	443	55058	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.581366062 CEST	443	55058	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.581393957 CEST	55058	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.581454992 CEST	55058	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.581662893 CEST	55058	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.581686974 CEST	443	55058	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.581739902 CEST	55058	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.581748009 CEST	443	55058	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.582746029 CEST	443	55059	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.583125114 CEST	55059	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.583153963 CEST	443	55059	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.583693027 CEST	55059	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.583698034 CEST	443	55059	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.584497929 CEST	55063	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.584527016 CEST	443	55063	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.584613085 CEST	55063	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.584743023 CEST	55063	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.584754944 CEST	443	55063	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.705534935 CEST	443	55059	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.705964088 CEST	443	55059	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.706017017 CEST	55059	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.706056118 CEST	55059	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.706075907 CEST	443	55059	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.706088066 CEST	55059	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.706094027 CEST	443	55059	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.708787918 CEST	55064	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.708830118 CEST	443	55064	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.708895922 CEST	55064	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.709027052 CEST	55064	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.709044933 CEST	443	55064	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.777040958 CEST	443	55060	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.777446032 CEST	55060	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.777489901 CEST	443	55060	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.777654886 CEST	443	55061	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.777962923 CEST	55060	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.777977943 CEST	443	55060	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.778148890 CEST	55061	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.778179884 CEST	443	55061	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.778517962 CEST	55061	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.778522968 CEST	443	55061	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.779764891 CEST	443	55062	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.780359983 CEST	55062	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.780375004 CEST	443	55062	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.780673027 CEST	55062	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.780677080 CEST	443	55062	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.887051105 CEST	443	55060	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.887082100 CEST	443	55060	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.887131929 CEST	443	55060	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.887137890 CEST	55060	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.887200117 CEST	55060	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.887439966 CEST	55060	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.887439966 CEST	55060	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.887481928 CEST	443	55060	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.887509108 CEST	443	55060	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.888297081 CEST	443	55061	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.888586998 CEST	443	55061	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.888653040 CEST	55061	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.888755083 CEST	55061	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.888787985 CEST	443	55061	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.888804913 CEST	55061	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.888813019 CEST	443	55061	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.892023087 CEST	55065	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.892051935 CEST	443	55065	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.892121077 CEST	55065	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.892152071 CEST	55066	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.892159939 CEST	443	55066	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.892205954 CEST	55066	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.892311096 CEST	55065	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.892327070 CEST	443	55065	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.892405033 CEST	55066	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.892414093 CEST	443	55066	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.896215916 CEST	443	55062	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.896347046 CEST	443	55062	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.896469116 CEST	55062	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.896514893 CEST	55062	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.896514893 CEST	55062	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.896541119 CEST	443	55062	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.896557093 CEST	443	55062	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.898518085 CEST	55067	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.898554087 CEST	443	55067	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:26.898616076 CEST	55067	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.898806095 CEST	55067	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:26.898822069 CEST	443	55067	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.271436930 CEST	443	55063	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.271927118 CEST	55063	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.271958113 CEST	443	55063	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.272417068 CEST	55063	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.272422075 CEST	443	55063	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.367785931 CEST	443	55064	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.368278980 CEST	55064	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.368310928 CEST	443	55064	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.368891954 CEST	55064	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.368897915 CEST	443	55064	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.406569004 CEST	443	55063	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.406653881 CEST	443	55063	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.406702042 CEST	55063	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.407139063 CEST	55063	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.407170057 CEST	55063	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.407180071 CEST	443	55063	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.407186031 CEST	443	55063	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.410547018 CEST	55068	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.410587072 CEST	443	55068	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.410646915 CEST	55068	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.410799026 CEST	55068	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.410809994 CEST	443	55068	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.503046989 CEST	443	55064	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.503119946 CEST	443	55064	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.503168106 CEST	443	55064	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.503175020 CEST	55064	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.503216028 CEST	55064	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.503434896 CEST	55064	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.503457069 CEST	443	55064	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.506217957 CEST	55069	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.506257057 CEST	443	55069	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.507477045 CEST	55069	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.507602930 CEST	55069	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.507613897 CEST	443	55069	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.571890116 CEST	443	55065	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.572335005 CEST	55065	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.572357893 CEST	443	55065	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.573141098 CEST	55065	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.573144913 CEST	443	55065	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.573167086 CEST	443	55066	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.573604107 CEST	55066	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.573622942 CEST	443	55066	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.573975086 CEST	55066	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.573977947 CEST	443	55066	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.576191902 CEST	443	55067	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.576539993 CEST	55067	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.576575994 CEST	443	55067	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.577380896 CEST	55067	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.577390909 CEST	443	55067	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.686953068 CEST	443	55066	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.687066078 CEST	443	55066	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.687278986 CEST	55066	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.687313080 CEST	55066	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.687313080 CEST	55066	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.687329054 CEST	443	55066	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.687338114 CEST	443	55066	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.690587997 CEST	55070	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.690623045 CEST	443	55070	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.690843105 CEST	55070	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.690843105 CEST	55070	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.690871000 CEST	443	55070	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.696295977 CEST	443	55065	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.696955919 CEST	443	55065	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.697102070 CEST	55065	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.697102070 CEST	55065	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.697753906 CEST	55065	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.697758913 CEST	443	55065	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.700126886 CEST	55071	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.700177908 CEST	443	55071	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.700304031 CEST	55071	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.700372934 CEST	55071	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.700387955 CEST	443	55071	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.718455076 CEST	443	55067	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.718635082 CEST	443	55067	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.718867064 CEST	55067	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.718867064 CEST	55067	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.719309092 CEST	55067	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.719332933 CEST	443	55067	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.721142054 CEST	55072	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.721158981 CEST	443	55072	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:27.721342087 CEST	55072	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.721342087 CEST	55072	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:27.721365929 CEST	443	55072	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.078207970 CEST	443	55068	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.079754114 CEST	55068	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.079793930 CEST	443	55068	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.084629059 CEST	55068	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.084645033 CEST	443	55068	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.166064024 CEST	443	55069	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.187046051 CEST	55069	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.187072039 CEST	443	55069	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.187709093 CEST	55069	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.187715054 CEST	443	55069	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.192301035 CEST	443	55068	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.192527056 CEST	443	55068	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.193892002 CEST	55068	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.193969965 CEST	55068	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.193969965 CEST	55068	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.193993092 CEST	443	55068	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.194003105 CEST	443	55068	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.199817896 CEST	55073	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.199863911 CEST	443	55073	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.201153040 CEST	55073	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.201503038 CEST	55073	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.201519012 CEST	443	55073	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.291402102 CEST	443	55070	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.293540001 CEST	55070	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.293540001 CEST	55070	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.293556929 CEST	443	55070	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.293574095 CEST	443	55070	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.307435989 CEST	443	55069	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.307735920 CEST	443	55069	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.307871103 CEST	55069	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.309498072 CEST	55069	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.309510946 CEST	443	55069	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.309521914 CEST	55069	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.309528112 CEST	443	55069	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.322827101 CEST	55074	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.322844982 CEST	443	55074	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.324629068 CEST	55074	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.328447104 CEST	55074	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.328457117 CEST	443	55074	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.352459908 CEST	443	55071	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.353662014 CEST	55071	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.353729963 CEST	443	55071	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.357403040 CEST	55071	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.357424974 CEST	443	55071	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.406455994 CEST	443	55070	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.406763077 CEST	443	55070	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.412311077 CEST	55070	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.414325953 CEST	443	55072	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.444256067 CEST	55070	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.444256067 CEST	55070	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.444288969 CEST	443	55070	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.444299936 CEST	443	55070	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.462332964 CEST	443	55071	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.462480068 CEST	443	55071	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.462593079 CEST	55071	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.468631029 CEST	55072	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.517014027 CEST	55072	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.517046928 CEST	443	55072	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.526228905 CEST	55071	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.526228905 CEST	55072	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.526258945 CEST	443	55071	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.526274920 CEST	443	55072	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.637897968 CEST	443	55072	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.637928009 CEST	443	55072	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.637981892 CEST	443	55072	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.638020039 CEST	55072	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.640631914 CEST	55072	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.684664965 CEST	55075	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.684762955 CEST	443	55075	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.688692093 CEST	55075	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.693700075 CEST	55076	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.693742990 CEST	443	55076	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.693821907 CEST	55076	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.697256088 CEST	55072	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.697256088 CEST	55072	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.697285891 CEST	443	55072	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.697309971 CEST	443	55072	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.710621119 CEST	55075	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.710652113 CEST	443	55075	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.710762978 CEST	55076	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.710783958 CEST	443	55076	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.724180937 CEST	55077	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.724225044 CEST	443	55077	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:28.724395037 CEST	55077	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.727673054 CEST	55077	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:28.727686882 CEST	443	55077	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.022495985 CEST	443	55073	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.023564100 CEST	55073	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.023587942 CEST	443	55073	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.024677992 CEST	55073	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.024682045 CEST	443	55073	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.145631075 CEST	443	55073	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.145795107 CEST	443	55073	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.145853043 CEST	55073	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.146230936 CEST	55073	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.146250010 CEST	443	55073	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.146260023 CEST	55073	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.146265030 CEST	443	55073	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.151695967 CEST	55078	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.151729107 CEST	443	55078	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.151791096 CEST	55078	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.152291059 CEST	55078	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.152301073 CEST	443	55078	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.214078903 CEST	443	55074	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.214521885 CEST	55074	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.214556932 CEST	443	55074	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.214967012 CEST	55074	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.214971066 CEST	443	55074	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.327995062 CEST	443	55074	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.328022003 CEST	443	55074	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.328066111 CEST	443	55074	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.328072071 CEST	55074	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.328110933 CEST	55074	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.328270912 CEST	55074	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.328290939 CEST	443	55074	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.328300953 CEST	55074	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.328306913 CEST	443	55074	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.330969095 CEST	55079	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.331013918 CEST	443	55079	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.331091881 CEST	55079	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.331212044 CEST	55079	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.331228971 CEST	443	55079	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.386903048 CEST	443	55076	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.387334108 CEST	55076	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.387352943 CEST	443	55076	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.387948990 CEST	55076	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.387957096 CEST	443	55076	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.404843092 CEST	443	55075	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.405245066 CEST	55075	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.405276060 CEST	443	55075	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.405781031 CEST	55075	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.405788898 CEST	443	55075	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.415127993 CEST	443	55077	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.415473938 CEST	55077	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.415493965 CEST	443	55077	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.415956974 CEST	55077	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.415966988 CEST	443	55077	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.498590946 CEST	443	55076	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.498775005 CEST	443	55076	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.498819113 CEST	55076	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.498833895 CEST	443	55076	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.498848915 CEST	443	55076	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.498897076 CEST	55076	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.498974085 CEST	55076	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.498974085 CEST	55076	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.498989105 CEST	443	55076	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.498996973 CEST	443	55076	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.503191948 CEST	55080	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.503240108 CEST	443	55080	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.503298044 CEST	55080	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.503498077 CEST	55080	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.503510952 CEST	443	55080	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.755137920 CEST	443	55077	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.755217075 CEST	443	55077	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.755326986 CEST	55077	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.755568981 CEST	443	55075	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.755667925 CEST	443	55075	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.755728006 CEST	55075	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.756517887 CEST	55077	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.756537914 CEST	443	55077	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.756551981 CEST	55077	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.756556988 CEST	443	55077	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.758198023 CEST	55075	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.758230925 CEST	443	55075	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.758246899 CEST	55075	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.758255005 CEST	443	55075	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.766447067 CEST	55081	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.766489029 CEST	443	55081	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.766571045 CEST	55081	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.768366098 CEST	55082	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.768381119 CEST	443	55082	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.768486977 CEST	55082	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.769097090 CEST	55081	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.769109964 CEST	443	55081	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.770318985 CEST	55082	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.770339966 CEST	443	55082	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.950984001 CEST	443	55078	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.952019930 CEST	55078	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.952043056 CEST	443	55078	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:29.953063965 CEST	55078	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:29.953071117 CEST	443	55078	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.013228893 CEST	443	55079	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.013864994 CEST	55079	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.013900042 CEST	443	55079	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.014645100 CEST	55079	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.014651060 CEST	443	55079	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.074657917 CEST	443	55078	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.074867964 CEST	443	55078	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.075108051 CEST	55078	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.075357914 CEST	55078	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.075390100 CEST	443	55078	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.075404882 CEST	55078	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.075412035 CEST	443	55078	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.080991030 CEST	55083	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.081051111 CEST	443	55083	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.081285954 CEST	55083	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.081491947 CEST	55083	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.081511021 CEST	443	55083	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.132961035 CEST	443	55079	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.133094072 CEST	443	55079	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.133203030 CEST	55079	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.133644104 CEST	55079	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.133645058 CEST	55079	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.133681059 CEST	443	55079	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.133693933 CEST	443	55079	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.141242027 CEST	55084	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.141309977 CEST	443	55084	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.141437054 CEST	55084	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.141974926 CEST	55084	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.141997099 CEST	443	55084	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.410706043 CEST	443	55080	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.411504030 CEST	55080	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.411581039 CEST	443	55080	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.412275076 CEST	55080	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.412298918 CEST	443	55080	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.429562092 CEST	443	55082	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.436760902 CEST	55082	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.436788082 CEST	443	55082	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.442676067 CEST	55082	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.442689896 CEST	443	55082	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.465234995 CEST	443	55081	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.474772930 CEST	55081	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.474800110 CEST	443	55081	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.488471031 CEST	55081	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.488496065 CEST	443	55081	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.520211935 CEST	443	55080	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.520245075 CEST	443	55080	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.520299911 CEST	443	55080	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.520313025 CEST	55080	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.520412922 CEST	55080	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.520611048 CEST	55080	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.520658016 CEST	443	55080	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.520689011 CEST	55080	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.520704985 CEST	443	55080	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.568759918 CEST	443	55082	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.568856955 CEST	443	55082	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.568924904 CEST	55082	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.585638046 CEST	55082	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.585668087 CEST	443	55082	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.585680962 CEST	55082	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.585689068 CEST	443	55082	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.591970921 CEST	55085	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.592032909 CEST	443	55085	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.592139006 CEST	55085	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.595396042 CEST	55085	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.595418930 CEST	443	55085	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.596230984 CEST	443	55081	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.596297979 CEST	443	55081	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.596343994 CEST	55081	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.596560001 CEST	55081	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.596566916 CEST	443	55081	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.596595049 CEST	55081	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.596599102 CEST	443	55081	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.598229885 CEST	55086	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.598246098 CEST	443	55086	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.598342896 CEST	55086	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.598721981 CEST	55086	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.598737955 CEST	443	55086	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.603363991 CEST	55087	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.603408098 CEST	443	55087	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.603548050 CEST	55087	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.603699923 CEST	55087	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.603705883 CEST	443	55087	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.763624907 CEST	443	55083	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.764123917 CEST	55083	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.764163971 CEST	443	55083	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.764667034 CEST	55083	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.764674902 CEST	443	55083	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.805829048 CEST	443	55084	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.806199074 CEST	55084	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.806230068 CEST	443	55084	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.806587934 CEST	55084	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.806592941 CEST	443	55084	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.882759094 CEST	443	55083	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.882776976 CEST	443	55083	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.882817984 CEST	443	55083	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.882822990 CEST	55083	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.882852077 CEST	55083	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.883060932 CEST	55083	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.883079052 CEST	443	55083	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.883100033 CEST	55083	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.883105993 CEST	443	55083	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.885620117 CEST	55088	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.885667086 CEST	443	55088	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.885796070 CEST	55088	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.885984898 CEST	55088	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.885999918 CEST	443	55088	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.918555021 CEST	443	55084	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.918623924 CEST	443	55084	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.918752909 CEST	55084	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.918852091 CEST	55084	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.918865919 CEST	443	55084	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.918880939 CEST	55084	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.918885946 CEST	443	55084	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.921489000 CEST	55089	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.921523094 CEST	443	55089	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:30.921758890 CEST	55089	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.921926022 CEST	55089	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:30.921936989 CEST	443	55089	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.284904003 CEST	443	55087	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.287456036 CEST	55087	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.287477970 CEST	443	55087	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.287905931 CEST	55087	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.287909985 CEST	443	55087	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.289247990 CEST	443	55085	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.293608904 CEST	55085	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.293642998 CEST	443	55085	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.294233084 CEST	55085	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.294244051 CEST	443	55085	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.308090925 CEST	443	55086	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.308603048 CEST	55086	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.308619976 CEST	443	55086	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.309509993 CEST	55086	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.309514999 CEST	443	55086	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.399405003 CEST	443	55087	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.399430037 CEST	443	55087	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.399485111 CEST	55087	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.399498940 CEST	443	55087	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.399538040 CEST	55087	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.399667978 CEST	55087	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.399687052 CEST	443	55087	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.399714947 CEST	55087	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.399720907 CEST	443	55087	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.403076887 CEST	55091	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.403110981 CEST	443	55091	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.403281927 CEST	55091	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.403458118 CEST	55091	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.403470993 CEST	443	55091	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.405400038 CEST	443	55085	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.405416965 CEST	443	55085	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.405477047 CEST	55085	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.405503035 CEST	443	55085	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.405978918 CEST	55085	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.405992985 CEST	443	55085	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.406058073 CEST	55085	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.406112909 CEST	443	55085	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.406141996 CEST	443	55085	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.406191111 CEST	55085	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.410085917 CEST	55092	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.410120010 CEST	443	55092	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.410288095 CEST	55092	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.410558939 CEST	55092	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.410573959 CEST	443	55092	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.421992064 CEST	443	55086	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.422034979 CEST	443	55086	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.422089100 CEST	55086	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.422095060 CEST	443	55086	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.422136068 CEST	55086	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.422350883 CEST	55086	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.422369003 CEST	443	55086	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.422382116 CEST	55086	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.422389030 CEST	443	55086	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.426423073 CEST	55093	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.426511049 CEST	443	55093	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.426594973 CEST	55093	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.426697969 CEST	55093	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.426748037 CEST	443	55093	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.595915079 CEST	443	55088	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.603641987 CEST	443	55089	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.620296001 CEST	55088	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.620321035 CEST	443	55088	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.621112108 CEST	55088	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.621119976 CEST	443	55088	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.621733904 CEST	55089	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.621771097 CEST	443	55089	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.622286081 CEST	55089	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.622292042 CEST	443	55089	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.727693081 CEST	443	55089	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.727770090 CEST	443	55089	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.727827072 CEST	55089	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.728133917 CEST	55089	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.728149891 CEST	443	55089	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.728158951 CEST	55089	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.728163958 CEST	443	55089	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.729387999 CEST	443	55088	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.729412079 CEST	443	55088	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.729444027 CEST	55088	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.729459047 CEST	443	55088	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.730051994 CEST	443	55088	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.730094910 CEST	55088	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.731056929 CEST	55088	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.731070995 CEST	443	55088	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.731080055 CEST	55088	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.731086016 CEST	443	55088	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.738302946 CEST	55094	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.738339901 CEST	443	55094	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.738392115 CEST	55094	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.739773989 CEST	55095	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.739810944 CEST	443	55095	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.739851952 CEST	55095	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.740266085 CEST	55094	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.740279913 CEST	443	55094	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:31.740478039 CEST	55095	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:31.740488052 CEST	443	55095	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.108026981 CEST	443	55093	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.108625889 CEST	55093	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.108658075 CEST	443	55093	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.109159946 CEST	55093	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.109164953 CEST	443	55093	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.112586021 CEST	443	55091	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.112947941 CEST	55091	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.112960100 CEST	443	55091	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.113339901 CEST	443	55092	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.113353968 CEST	55091	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.113358974 CEST	443	55091	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.113694906 CEST	55092	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.113718987 CEST	443	55092	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.114325047 CEST	55092	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.114335060 CEST	443	55092	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.221740961 CEST	443	55093	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.221826077 CEST	443	55093	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.221880913 CEST	55093	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.222179890 CEST	55093	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.222206116 CEST	443	55093	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.222223997 CEST	55093	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.222230911 CEST	443	55093	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.225342989 CEST	55096	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.225389004 CEST	443	55096	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.225485086 CEST	55096	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.225725889 CEST	55096	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.225743055 CEST	443	55096	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.229057074 CEST	443	55092	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.229242086 CEST	443	55092	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.229298115 CEST	55092	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.229341030 CEST	55092	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.229356050 CEST	443	55092	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.229368925 CEST	55092	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.229374886 CEST	443	55092	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.231954098 CEST	55097	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.231990099 CEST	443	55097	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.232053995 CEST	55097	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.232347012 CEST	55097	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.232357025 CEST	443	55097	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.233095884 CEST	443	55091	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.233279943 CEST	443	55091	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.233342886 CEST	55091	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.233489990 CEST	55091	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.233505011 CEST	443	55091	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.233521938 CEST	55091	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.233526945 CEST	443	55091	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.236088991 CEST	55098	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.236099958 CEST	443	55098	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.236170053 CEST	55098	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.236327887 CEST	55098	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.236335993 CEST	443	55098	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.317579985 CEST	443	55095	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.318140984 CEST	55095	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.318166971 CEST	443	55095	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.318619013 CEST	55095	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.318629026 CEST	443	55095	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.428658009 CEST	443	55095	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.428685904 CEST	443	55095	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.428755999 CEST	55095	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.428783894 CEST	443	55095	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.428822041 CEST	55095	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.429138899 CEST	55095	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.429143906 CEST	443	55095	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.429160118 CEST	55095	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.429160118 CEST	443	55095	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.429218054 CEST	443	55095	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.434858084 CEST	55099	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.434906006 CEST	443	55099	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.434983015 CEST	55099	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.435106993 CEST	55099	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.435118914 CEST	443	55099	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.475028038 CEST	443	55094	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.476100922 CEST	55094	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.476136923 CEST	443	55094	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.476814032 CEST	55094	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.476820946 CEST	443	55094	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.589798927 CEST	443	55094	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.589823008 CEST	443	55094	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.589905024 CEST	55094	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.589943886 CEST	443	55094	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.590001106 CEST	443	55094	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.590066910 CEST	55094	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.602169991 CEST	55094	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.602170944 CEST	55094	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.602224112 CEST	443	55094	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.602248907 CEST	443	55094	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.649403095 CEST	55100	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.649463892 CEST	443	55100	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.649534941 CEST	55100	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.649905920 CEST	55100	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.649923086 CEST	443	55100	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.896862030 CEST	443	55097	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.897815943 CEST	55097	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.897815943 CEST	55097	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.897842884 CEST	443	55097	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.897850990 CEST	443	55097	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.905430079 CEST	443	55098	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.906055927 CEST	55098	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.906085014 CEST	443	55098	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.906598091 CEST	55098	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.906605959 CEST	443	55098	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.912127972 CEST	443	55096	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.912558079 CEST	55096	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.912602901 CEST	443	55096	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:32.913199902 CEST	55096	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:32.913211107 CEST	443	55096	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.023777008 CEST	443	55098	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.023837090 CEST	443	55098	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.023879051 CEST	443	55098	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.023943901 CEST	55098	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.023960114 CEST	443	55098	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.024012089 CEST	55098	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.024013042 CEST	55098	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.032650948 CEST	443	55096	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.032713890 CEST	443	55096	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.032757044 CEST	443	55096	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.032804966 CEST	55096	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.032840967 CEST	443	55096	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.032874107 CEST	55096	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.033175945 CEST	55096	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.033723116 CEST	443	55097	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.033765078 CEST	443	55097	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.033888102 CEST	443	55097	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.033915043 CEST	55097	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.034048080 CEST	55097	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.034048080 CEST	55097	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.034104109 CEST	55097	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.034116983 CEST	443	55097	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.037035942 CEST	55101	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.037127972 CEST	443	55101	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.037434101 CEST	55101	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.037559032 CEST	55101	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.037591934 CEST	443	55101	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.095935106 CEST	443	55099	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.097740889 CEST	55099	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.097740889 CEST	55099	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.097779989 CEST	443	55099	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.097814083 CEST	443	55099	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.105618954 CEST	443	55098	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.105680943 CEST	443	55098	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.105808020 CEST	55098	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.105808020 CEST	55098	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.105825901 CEST	443	55098	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.105848074 CEST	443	55098	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.105911970 CEST	55098	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.105911970 CEST	55098	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.105911970 CEST	55098	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.105927944 CEST	443	55098	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.109214067 CEST	55102	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.109266043 CEST	443	55102	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.109694004 CEST	55102	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.109694004 CEST	55102	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.109741926 CEST	443	55102	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.115643024 CEST	443	55096	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.115823984 CEST	443	55096	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.115850925 CEST	55096	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.115852118 CEST	55096	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.115916967 CEST	443	55096	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.115940094 CEST	55096	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.115940094 CEST	55096	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.115947008 CEST	443	55096	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.115952969 CEST	443	55096	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.118741989 CEST	55103	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.118786097 CEST	443	55103	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.119189978 CEST	55103	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.119189978 CEST	55103	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.119231939 CEST	443	55103	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.207797050 CEST	443	55099	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.207825899 CEST	443	55099	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.207931042 CEST	443	55099	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.207952023 CEST	55099	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.208204031 CEST	55099	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.208317995 CEST	55099	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.208338976 CEST	443	55099	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.208370924 CEST	55099	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.208376884 CEST	443	55099	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.211407900 CEST	55104	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.211443901 CEST	443	55104	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.211751938 CEST	55104	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.211751938 CEST	55104	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.211792946 CEST	443	55104	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.316651106 CEST	443	55100	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.317764997 CEST	55100	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.317796946 CEST	443	55100	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.318649054 CEST	55100	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.318655968 CEST	443	55100	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.462281942 CEST	443	55100	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.462315083 CEST	443	55100	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.462383032 CEST	443	55100	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.462414026 CEST	55100	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.462549925 CEST	55100	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.462738037 CEST	55100	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.462762117 CEST	443	55100	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.462795019 CEST	55100	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.462800980 CEST	443	55100	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.465715885 CEST	55105	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.465766907 CEST	443	55105	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.466084957 CEST	55105	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.466269016 CEST	55105	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.466285944 CEST	443	55105	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.700630903 CEST	443	55101	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.701215029 CEST	55101	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.701289892 CEST	443	55101	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.701693058 CEST	55101	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.701709032 CEST	443	55101	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.775497913 CEST	443	55103	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.776047945 CEST	55103	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.776089907 CEST	443	55103	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.776510954 CEST	55103	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.776519060 CEST	443	55103	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.784337044 CEST	443	55102	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.784768105 CEST	55102	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.784796953 CEST	443	55102	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.785232067 CEST	55102	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.785239935 CEST	443	55102	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.866996050 CEST	443	55104	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.867552042 CEST	55104	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.867585897 CEST	443	55104	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.867997885 CEST	55104	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.868002892 CEST	443	55104	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.888416052 CEST	443	55103	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.888485909 CEST	443	55103	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.888659000 CEST	55103	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.888708115 CEST	55103	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.888730049 CEST	443	55103	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.888745070 CEST	55103	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.888751984 CEST	443	55103	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.891469955 CEST	55106	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.891513109 CEST	443	55106	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.891578913 CEST	55106	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.891726971 CEST	55106	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.891736031 CEST	443	55106	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.917716980 CEST	443	55102	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.917778015 CEST	443	55102	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.917916059 CEST	55102	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.917943001 CEST	55102	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.917962074 CEST	443	55102	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.917974949 CEST	55102	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.917982101 CEST	443	55102	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.920500040 CEST	55107	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.920555115 CEST	443	55107	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.920624971 CEST	55107	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.920787096 CEST	55107	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.920802116 CEST	443	55107	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.977874994 CEST	443	55104	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.978030920 CEST	443	55104	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.978104115 CEST	55104	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.978255987 CEST	55104	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.978272915 CEST	443	55104	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.978287935 CEST	55104	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.978292942 CEST	443	55104	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.980514050 CEST	55108	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.980551958 CEST	443	55108	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:33.980638981 CEST	55108	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.980899096 CEST	55108	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:33.980911970 CEST	443	55108	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.047122002 CEST	443	55101	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.047187090 CEST	443	55101	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.047655106 CEST	55101	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:34.047683001 CEST	55101	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:34.047703028 CEST	443	55101	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.047717094 CEST	55101	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:34.047724009 CEST	443	55101	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.050272942 CEST	55109	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:34.050296068 CEST	443	55109	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.050352097 CEST	55109	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:34.050507069 CEST	55109	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:34.050515890 CEST	443	55109	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.166740894 CEST	443	55105	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.167130947 CEST	55105	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:34.167152882 CEST	443	55105	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.167571068 CEST	55105	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:34.167574883 CEST	443	55105	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.294456959 CEST	443	55105	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.294604063 CEST	443	55105	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.294648886 CEST	443	55105	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.294707060 CEST	55105	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:34.294817924 CEST	55105	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:34.294831991 CEST	443	55105	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.294842958 CEST	55105	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:34.294847965 CEST	443	55105	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.799159050 CEST	443	55109	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.799616098 CEST	55109	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:34.799643040 CEST	443	55109	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.800219059 CEST	55109	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:34.800225019 CEST	443	55109	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.807219028 CEST	443	55107	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.807523966 CEST	55107	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:34.807555914 CEST	443	55107	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.807967901 CEST	55107	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:34.807974100 CEST	443	55107	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.810256004 CEST	443	55106	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.810551882 CEST	55106	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:34.810569048 CEST	443	55106	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.811018944 CEST	55106	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:34.811023951 CEST	443	55106	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.812135935 CEST	443	55108	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.812477112 CEST	55108	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:34.812504053 CEST	443	55108	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.812815905 CEST	55108	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:34.812823057 CEST	443	55108	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.919145107 CEST	443	55109	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.919212103 CEST	443	55109	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.919260025 CEST	55109	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:34.919446945 CEST	55109	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:34.919466972 CEST	443	55109	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.919481039 CEST	55109	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:34.919487000 CEST	443	55109	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.923327923 CEST	443	55108	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.923652887 CEST	443	55108	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.923721075 CEST	55108	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:34.923779964 CEST	55108	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:34.923779964 CEST	55108	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:34.923804998 CEST	443	55108	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.923810005 CEST	443	55108	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.956233978 CEST	443	55107	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.956320047 CEST	443	55107	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.956377029 CEST	55107	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:34.956511021 CEST	55107	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:34.956535101 CEST	443	55107	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:34.956548929 CEST	55107	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:34.956556082 CEST	443	55107	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:35.142851114 CEST	443	55106	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:35.142916918 CEST	443	55106	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:35.142963886 CEST	55106	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:35.143352032 CEST	55106	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:35.143371105 CEST	443	55106	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:35.143393040 CEST	55106	443	192.168.2.6	13.107.253.45
Oct 11, 2024 16:10:35.143399954 CEST	443	55106	13.107.253.45	192.168.2.6
Oct 11, 2024 16:10:42.968337059 CEST	55111	443	192.168.2.6	142.250.186.36
Oct 11, 2024 16:10:42.968405008 CEST	443	55111	142.250.186.36	192.168.2.6
Oct 11, 2024 16:10:42.968486071 CEST	55111	443	192.168.2.6	142.250.186.36
Oct 11, 2024 16:10:42.968759060 CEST	55111	443	192.168.2.6	142.250.186.36
Oct 11, 2024 16:10:42.968786001 CEST	443	55111	142.250.186.36	192.168.2.6
Oct 11, 2024 16:10:43.599879980 CEST	443	55111	142.250.186.36	192.168.2.6
Oct 11, 2024 16:10:43.618832111 CEST	55111	443	192.168.2.6	142.250.186.36
Oct 11, 2024 16:10:43.618918896 CEST	443	55111	142.250.186.36	192.168.2.6
Oct 11, 2024 16:10:43.619282007 CEST	443	55111	142.250.186.36	192.168.2.6
Oct 11, 2024 16:10:43.620059013 CEST	55111	443	192.168.2.6	142.250.186.36
Oct 11, 2024 16:10:43.620131969 CEST	443	55111	142.250.186.36	192.168.2.6
Oct 11, 2024 16:10:43.670224905 CEST	55111	443	192.168.2.6	142.250.186.36
Oct 11, 2024 16:10:52.279875040 CEST	55114	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:52.279918909 CEST	443	55114	40.113.103.199	192.168.2.6
Oct 11, 2024 16:10:52.280038118 CEST	55114	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:52.281800985 CEST	55114	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:52.281816959 CEST	443	55114	40.113.103.199	192.168.2.6
Oct 11, 2024 16:10:53.347270966 CEST	443	55114	40.113.103.199	192.168.2.6
Oct 11, 2024 16:10:53.347362041 CEST	55114	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:53.350680113 CEST	55114	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:53.350694895 CEST	443	55114	40.113.103.199	192.168.2.6
Oct 11, 2024 16:10:53.350909948 CEST	443	55114	40.113.103.199	192.168.2.6
Oct 11, 2024 16:10:53.353089094 CEST	55114	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:53.353089094 CEST	55114	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:53.353106976 CEST	443	55114	40.113.103.199	192.168.2.6
Oct 11, 2024 16:10:53.353305101 CEST	55114	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:53.395426989 CEST	443	55114	40.113.103.199	192.168.2.6
Oct 11, 2024 16:10:53.519467115 CEST	443	55111	142.250.186.36	192.168.2.6
Oct 11, 2024 16:10:53.519546032 CEST	443	55111	142.250.186.36	192.168.2.6
Oct 11, 2024 16:10:53.519701958 CEST	55111	443	192.168.2.6	142.250.186.36
Oct 11, 2024 16:10:53.526592016 CEST	443	55114	40.113.103.199	192.168.2.6
Oct 11, 2024 16:10:53.526824951 CEST	443	55114	40.113.103.199	192.168.2.6
Oct 11, 2024 16:10:53.526882887 CEST	55114	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:53.527034998 CEST	55114	443	192.168.2.6	40.113.103.199
Oct 11, 2024 16:10:54.643240929 CEST	55111	443	192.168.2.6	142.250.186.36
Oct 11, 2024 16:10:54.643273115 CEST	443	55111	142.250.186.36	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 11, 2024 16:09:38.327275038 CEST	53	59550	1.1.1.1	192.168.2.6
Oct 11, 2024 16:09:38.429563999 CEST	53	52018	1.1.1.1	192.168.2.6
Oct 11, 2024 16:09:39.452305079 CEST	53	57200	1.1.1.1	192.168.2.6
Oct 11, 2024 16:09:39.970995903 CEST	64816	53	192.168.2.6	1.1.1.1
Oct 11, 2024 16:09:39.971374035 CEST	63487	53	192.168.2.6	1.1.1.1
Oct 11, 2024 16:09:39.978446007 CEST	53	63487	1.1.1.1	192.168.2.6
Oct 11, 2024 16:09:39.978530884 CEST	53	64816	1.1.1.1	192.168.2.6
Oct 11, 2024 16:09:41.047382116 CEST	52373	53	192.168.2.6	1.1.1.1
Oct 11, 2024 16:09:41.047382116 CEST	65299	53	192.168.2.6	1.1.1.1
Oct 11, 2024 16:09:42.905761003 CEST	53879	53	192.168.2.6	1.1.1.1
Oct 11, 2024 16:09:42.905894041 CEST	57555	53	192.168.2.6	1.1.1.1
Oct 11, 2024 16:09:42.913175106 CEST	53	57555	1.1.1.1	192.168.2.6
Oct 11, 2024 16:09:42.913192034 CEST	53	53879	1.1.1.1	192.168.2.6
Oct 11, 2024 16:09:44.324552059 CEST	62781	53	192.168.2.6	1.1.1.1
Oct 11, 2024 16:09:44.324698925 CEST	59133	53	192.168.2.6	1.1.1.1
Oct 11, 2024 16:09:44.510099888 CEST	60668	53	192.168.2.6	1.1.1.1
Oct 11, 2024 16:09:44.510858059 CEST	53432	53	192.168.2.6	1.1.1.1
Oct 11, 2024 16:09:44.517093897 CEST	53	60668	1.1.1.1	192.168.2.6
Oct 11, 2024 16:09:44.517573118 CEST	53	53432	1.1.1.1	192.168.2.6
Oct 11, 2024 16:09:44.626130104 CEST	53	54587	1.1.1.1	192.168.2.6
Oct 11, 2024 16:09:48.861501932 CEST	64448	53	192.168.2.6	1.1.1.1
Oct 11, 2024 16:09:48.862046003 CEST	63885	53	192.168.2.6	1.1.1.1
Oct 11, 2024 16:09:48.942334890 CEST	53155	53	192.168.2.6	1.1.1.1
Oct 11, 2024 16:09:48.942531109 CEST	65355	53	192.168.2.6	1.1.1.1
Oct 11, 2024 16:09:48.949765921 CEST	53	65355	1.1.1.1	192.168.2.6
Oct 11, 2024 16:09:48.950273037 CEST	53	53155	1.1.1.1	192.168.2.6
Oct 11, 2024 16:09:50.877854109 CEST	59375	53	192.168.2.6	1.1.1.1
Oct 11, 2024 16:09:50.899835110 CEST	60259	53	192.168.2.6	1.1.1.1
Oct 11, 2024 16:09:50.943464041 CEST	57978	53	192.168.2.6	1.1.1.1
Oct 11, 2024 16:09:50.943667889 CEST	53631	53	192.168.2.6	1.1.1.1
Oct 11, 2024 16:09:51.201045036 CEST	53	49417	1.1.1.1	192.168.2.6
Oct 11, 2024 16:09:51.954052925 CEST	55332	53	192.168.2.6	1.1.1.1
Oct 11, 2024 16:09:51.954189062 CEST	64005	53	192.168.2.6	1.1.1.1
Oct 11, 2024 16:09:52.468905926 CEST	54292	53	192.168.2.6	1.1.1.1
Oct 11, 2024 16:09:52.469085932 CEST	58298	53	192.168.2.6	1.1.1.1
Oct 11, 2024 16:10:38.550391912 CEST	53	54056	1.1.1.1	192.168.2.6
Oct 11, 2024 16:10:45.293884993 CEST	62843	53	192.168.2.6	1.1.1.1
Oct 11, 2024 16:10:45.294476032 CEST	59465	53	192.168.2.6	1.1.1.1

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 11, 2024 16:09:50.908998966 CEST	192.168.2.6	1.1.1.1	c2dc	(Port unreachable)	Destination Unreachable
Oct 11, 2024 16:09:52.493544102 CEST	192.168.2.6	1.1.1.1	c2dc	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 11, 2024 16:09:39.970995903 CEST	192.168.2.6	1.1.1.1	0x2b3e	Standard query (0)	eu.knowbe4.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:39.971374035 CEST	192.168.2.6	1.1.1.1	0x5c58	Standard query (0)	eu.knowbe4.com	65	IN (0x0001)	false
Oct 11, 2024 16:09:41.047382116 CEST	192.168.2.6	1.1.1.1	0x9827	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:41.047382116 CEST	192.168.2.6	1.1.1.1	0xd11	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Oct 11, 2024 16:09:42.905761003 CEST	192.168.2.6	1.1.1.1	0x8ecb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:42.905894041 CEST	192.168.2.6	1.1.1.1	0x7edc	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 11, 2024 16:09:44.324552059 CEST	192.168.2.6	1.1.1.1	0x235b	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:44.324698925 CEST	192.168.2.6	1.1.1.1	0xa4f2	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Oct 11, 2024 16:09:44.510099888 CEST	192.168.2.6	1.1.1.1	0xc09	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:44.510858059 CEST	192.168.2.6	1.1.1.1	0xb12a	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Oct 11, 2024 16:09:48.861501932 CEST	192.168.2.6	1.1.1.1	0x1d2b	Standard query (0)	aadcdn.msauthimages.net	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:48.862046003 CEST	192.168.2.6	1.1.1.1	0x4b17	Standard query (0)	aadcdn.msauthimages.net	65	IN (0x0001)	false
Oct 11, 2024 16:09:48.942334890 CEST	192.168.2.6	1.1.1.1	0x6a5c	Standard query (0)	autologon.microsoftazuread-sso.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:48.942531109 CEST	192.168.2.6	1.1.1.1	0xd153	Standard query (0)	autologon.microsoftazuread-sso.com	65	IN (0x0001)	false
Oct 11, 2024 16:09:50.877854109 CEST	192.168.2.6	1.1.1.1	0xaef5	Standard query (0)	aadcdn.msftauthimages.net	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:50.899835110 CEST	192.168.2.6	1.1.1.1	0xf064	Standard query (0)	aadcdn.msftauthimages.net	65	IN (0x0001)	false
Oct 11, 2024 16:09:50.943464041 CEST	192.168.2.6	1.1.1.1	0xc89f	Standard query (0)	aadcdn.msauthimages.net	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:50.943667889 CEST	192.168.2.6	1.1.1.1	0xa252	Standard query (0)	aadcdn.msauthimages.net	65	IN (0x0001)	false
Oct 11, 2024 16:09:51.954052925 CEST	192.168.2.6	1.1.1.1	0x47c	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:51.954189062 CEST	192.168.2.6	1.1.1.1	0xa238	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Oct 11, 2024 16:09:52.468905926 CEST	192.168.2.6	1.1.1.1	0x82e0	Standard query (0)	aadcdn.msftauthimages.net	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:52.469085932 CEST	192.168.2.6	1.1.1.1	0x1701	Standard query (0)	aadcdn.msftauthimages.net	65	IN (0x0001)	false
Oct 11, 2024 16:10:45.293884993 CEST	192.168.2.6	1.1.1.1	0x4546	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:10:45.294476032 CEST	192.168.2.6	1.1.1.1	0xb59b	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 11, 2024 16:09:39.978530884 CEST	1.1.1.1	192.168.2.6	0x2b3e	No error (0)	eu.knowbe4.com		52.222.236.7	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:39.978530884 CEST	1.1.1.1	192.168.2.6	0x2b3e	No error (0)	eu.knowbe4.com		52.222.236.86	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:39.978530884 CEST	1.1.1.1	192.168.2.6	0x2b3e	No error (0)	eu.knowbe4.com		52.222.236.127	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:39.978530884 CEST	1.1.1.1	192.168.2.6	0x2b3e	No error (0)	eu.knowbe4.com		52.222.236.116	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:41.054524899 CEST	1.1.1.1	192.168.2.6	0x9827	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:41.054832935 CEST	1.1.1.1	192.168.2.6	0xd11	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:42.336590052 CEST	1.1.1.1	192.168.2.6	0xe8f5	No error (0)	shed.dual-low.s-part-0023.t-0009.t-msedge.net	s-part-0023.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:42.336590052 CEST	1.1.1.1	192.168.2.6	0xe8f5	No error (0)	s-part-0023.t-0009.t-msedge.net		13.107.246.51	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:42.913175106 CEST	1.1.1.1	192.168.2.6	0x7edc	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 11, 2024 16:09:42.913192034 CEST	1.1.1.1	192.168.2.6	0x8ecb	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:43.206094027 CEST	1.1.1.1	192.168.2.6	0x193f	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:43.206094027 CEST	1.1.1.1	192.168.2.6	0x193f	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:43.206094027 CEST	1.1.1.1	192.168.2.6	0x193f	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:44.334588051 CEST	1.1.1.1	192.168.2.6	0x235b	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:44.334758043 CEST	1.1.1.1	192.168.2.6	0xa4f2	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:44.517093897 CEST	1.1.1.1	192.168.2.6	0xc09	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:44.517093897 CEST	1.1.1.1	192.168.2.6	0xc09	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:44.517093897 CEST	1.1.1.1	192.168.2.6	0xc09	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:44.517573118 CEST	1.1.1.1	192.168.2.6	0xb12a	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:44.517573118 CEST	1.1.1.1	192.168.2.6	0xb12a	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:48.869740009 CEST	1.1.1.1	192.168.2.6	0x4b17	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:48.869740009 CEST	1.1.1.1	192.168.2.6	0x4b17	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:48.870882988 CEST	1.1.1.1	192.168.2.6	0x1d2b	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:48.870882988 CEST	1.1.1.1	192.168.2.6	0x1d2b	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:48.870882988 CEST	1.1.1.1	192.168.2.6	0x1d2b	No error (0)	sni1gl.wpc.upsiloncdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:48.950273037 CEST	1.1.1.1	192.168.2.6	0x6a5c	No error (0)	autologon.microsoftazuread-sso.com		20.190.159.75	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:48.950273037 CEST	1.1.1.1	192.168.2.6	0x6a5c	No error (0)	autologon.microsoftazuread-sso.com		20.190.159.64	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:48.950273037 CEST	1.1.1.1	192.168.2.6	0x6a5c	No error (0)	autologon.microsoftazuread-sso.com		20.190.159.68	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:48.950273037 CEST	1.1.1.1	192.168.2.6	0x6a5c	No error (0)	autologon.microsoftazuread-sso.com		40.126.31.73	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:48.950273037 CEST	1.1.1.1	192.168.2.6	0x6a5c	No error (0)	autologon.microsoftazuread-sso.com		20.190.159.2	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:48.950273037 CEST	1.1.1.1	192.168.2.6	0x6a5c	No error (0)	autologon.microsoftazuread-sso.com		40.126.31.69	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:48.950273037 CEST	1.1.1.1	192.168.2.6	0x6a5c	No error (0)	autologon.microsoftazuread-sso.com		20.190.159.71	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:48.950273037 CEST	1.1.1.1	192.168.2.6	0x6a5c	No error (0)	autologon.microsoftazuread-sso.com		20.190.159.23	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:50.885680914 CEST	1.1.1.1	192.168.2.6	0xaef5	No error (0)	aadcdn.msftauthimages.net	aadcdn-msft.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:50.885680914 CEST	1.1.1.1	192.168.2.6	0xaef5	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:50.885680914 CEST	1.1.1.1	192.168.2.6	0xaef5	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:50.908757925 CEST	1.1.1.1	192.168.2.6	0xf064	No error (0)	aadcdn.msftauthimages.net	aadcdn-msft.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:50.951446056 CEST	1.1.1.1	192.168.2.6	0xa252	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:50.951446056 CEST	1.1.1.1	192.168.2.6	0xa252	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:50.951486111 CEST	1.1.1.1	192.168.2.6	0xc89f	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:50.951486111 CEST	1.1.1.1	192.168.2.6	0xc89f	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:50.951486111 CEST	1.1.1.1	192.168.2.6	0xc89f	No error (0)	sni1gl.wpc.upsiloncdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:51.961275101 CEST	1.1.1.1	192.168.2.6	0x47c	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:51.961359024 CEST	1.1.1.1	192.168.2.6	0xa238	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:52.479259968 CEST	1.1.1.1	192.168.2.6	0x82e0	No error (0)	aadcdn.msftauthimages.net	aadcdn-msft.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:52.479259968 CEST	1.1.1.1	192.168.2.6	0x82e0	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:52.479259968 CEST	1.1.1.1	192.168.2.6	0x82e0	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:09:52.493467093 CEST	1.1.1.1	192.168.2.6	0x1701	No error (0)	aadcdn.msftauthimages.net	aadcdn-msft.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:53.412128925 CEST	1.1.1.1	192.168.2.6	0xb65d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:09:53.412128925 CEST	1.1.1.1	192.168.2.6	0xb65d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:10:45.301846027 CEST	1.1.1.1	192.168.2.6	0x4546	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:10:45.303158998 CEST	1.1.1.1	192.168.2.6	0xb59b	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 16:10:52.198669910 CEST	1.1.1.1	192.168.2.6	0xd92	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 11, 2024 16:10:52.198669910 CEST	1.1.1.1	192.168.2.6	0xd92	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

eu.knowbe4.com

otelrules.azureedge.net

https:

aadcdn.msauth.net

autologon.microsoftazuread-sso.com

aadcdn.msauthimages.net

aadcdn.msftauthimages.net

www.bing.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49710	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:34 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 55 4f 2b 4d 6a 65 69 54 76 55 32 56 35 76 6e 34 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 62 66 61 31 38 30 64 62 62 34 63 30 34 35 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: UO+MjeiTvU2V5vn4.1Context: bbfa180dbb4c045a
2024-10-11 14:09:34 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-11 14:09:34 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 55 4f 2b 4d 6a 65 69 54 76 55 32 56 35 76 6e 34 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 62 66 61 31 38 30 64 62 62 34 63 30 34 35 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 61 44 52 51 4e 58 33 35 6b 44 70 62 4d 35 7a 31 49 78 31 6b 4b 42 78 45 30 44 34 31 32 47 48 4c 72 63 39 45 6a 7a 76 58 32 78 64 78 2f 63 49 2b 70 39 64 6e 74 31 6b 33 68 67 69 4a 77 44 72 2b 36 75 75 75 45 62 79 77 4e 75 68 41 78 6e 71 6e 4c 67 38 71 64 70 70 67 39 51 64 6e 39 66 4a 36 57 34 45 66 72 31 2b 38 64 7a 69 50 62 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: UO+MjeiTvU2V5vn4.2Context: bbfa180dbb4c045a<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAaDRQNX35kDpbM5z1Ix1kKBxE0D412GHLrc9EjzvX2xdx/cI+p9dnt1k3hgiJwDr+6uuuEbywNuhAxnqnLg8qdppg9Qdn9fJ6W4Efr1+8dziPb
2024-10-11 14:09:34 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 55 4f 2b 4d 6a 65 69 54 76 55 32 56 35 76 6e 34 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 62 66 61 31 38 30 64 62 62 34 63 30 34 35 61 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: UO+MjeiTvU2V5vn4.3Context: bbfa180dbb4c045a<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-11 14:09:34 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-11 14:09:34 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 65 47 36 30 35 38 4c 75 51 30 47 45 59 37 72 74 73 49 4c 37 58 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: eG6058LuQ0GEY7rtsIL7Xw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49717	52.222.236.7	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:40 UTC	679	OUT	GET /auth/saml/c33d8069242e HTTP/1.1 Host: eu.knowbe4.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:41 UTC	1311	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Date: Fri, 11 Oct 2024 14:09:40 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Location: https://login.microsoftonline.com/b7dba93e-7b6e-4933-abb6-e1739feb42e5/saml2?SAMLRequest=fZLBbtswEER%2FRTeeKIkSLUuEZUCJUcCoWxR2mkMvAUmtGiIU6XKpuv37ygqCuof0uph5s5jdDcrRnkU3xWd3hB8TYEw6RAjReHfvHU4jhBOEn0bD1%2BOhJc8xnlFkGUzpi%2FMXBTzVfszkDMiurEyXZV%2FnVVPwAjItrVVSv5BkN5ONk1fsX4j1341LR6ODRz9E76xxsPDUuleyKYGuVQWUN2VJpVIVBbYumwHUDF8teQVJ9ruWPFVDw1d1VdK%2B7iXlOQMqtaopg7Lm0Cs2VKtZijjB3mGULrakyAtOWU4Ze2Bc5I3g%2BTeSPELAZcsizUnya7QOxTWpJVNwwks0KJwcAUXU4tR9OohZKORbabeW8%2F895%2BCj196S7eaqFst2Yftx7vUO%2BCa7HW5eD%2FV5hux3X7w1%2BnfSWesv9wFkhJbEMAFJPvgwyvh%2BLEvZMjE9HRapgFEa2%2FV9AESSbV9T%2F%2F2I7R8%3D Cache-Control: no-cache Content-Security-Policy: X-Request-Id: b053472c-68a2-48b2-9c7f-720c6d6d1bbd X-Runtime: 0.046166 Strict-Transport-Security: max-age=63113904; includeSubDomains; preload X-Cache: Miss from cloudfront Via: 1.1 ce765e91525a836efb6bc0a409334a5e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: i6T9q4UZmHv7jbkmRQSbSuvINARyP2oCspyaU68gbNYsDdUz8QSmDg==

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.6	49721	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:42 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:42 UTC	561	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:42 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Thu, 10 Oct 2024 22:59:49 GMT ETag: "0x8DCE97F3E383602" x-ms-request-id: c0577c57-401e-0015-067d-1b0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140942Z-1597f696844gnxkv9xdcpvd3zn00000003m000000000ytq1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:42 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-11 14:09:42 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-11 14:09:42 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-11 14:09:42 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-11 14:09:42 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-11 14:09:42 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-11 14:09:42 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-11 14:09:42 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-11 14:09:42 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-11 14:09:42 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49722	13.107.246.51	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:42 UTC	633	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:43 UTC	797	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:43 GMT Content-Type: application/x-javascript Content-Length: 49804 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Mon, 05 Aug 2024 15:32:28 GMT ETag: 0x8DCB563D09FF90F x-ms-request-id: e20fe720-101e-0032-05e2-1ab49e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241011T140943Z-17db6f7c8cffjrz2m4352snqkw00000002ag00000000hrr4 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:43 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a e8 6e 66 80 30 04 66 66 17 58 2e 27 56 c0 dd c1 ce da 0e 34 13 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 c1 45 ef fc a2 d2 ff 58 b9 f8 7c 74 7e 50 39 83 b7 7f 54 4e fb 17 47 fb 87 3f 5e 0f 7e 14 ff bf b8 f7 e3 ca d8 9f 88 0a fc 0e dd 58 78 95 30 a8 84 51 c5 0f 46 61 34 0d 23 37 11 71 e5 01 fe 46 be 3b a9 8c a3 f0 a1 92 dc 8b ca 34 0a bf 88 51 12 57 26 7e 9c 40 a1 a1 98 84 4f 95 2a 54 17 79 95 33 37 4a 9e 2b 47 67 66 1d ea 17 50 9b 7f e7 07 50 7a 14 4e 9f e1 f9 3e a9 04 61 e2 8f 44 c5 0d 3c aa 6d 02 2f 41 2c 2a b3 c0 13 51 e5 e9 de 1f dd 57 4e fc 51 14 c6 e1 38 a9 44 62 24 Data Ascii: m[80OL;wnf0ffX.'V4r~=,JUT~l?EX\|t~P9TNG?^~Xx0QFa4#7qF;4QW&~@OTy37J+GgfPPzN>aD<m/A,QWNQ8Db$
2024-10-11 14:09:43 UTC	16384	IN	Data Raw: a1 fe a6 75 c8 0d 27 1c c8 cc 3b 47 70 68 d3 97 de 38 51 da 2b 6d ae c3 c3 92 66 30 2c c7 e2 0e a7 d6 2d 0d 94 23 88 9f 19 2d 1f 22 de b2 95 e2 e1 43 fe ba 22 db f8 db c7 de c7 bd 8f bb 46 5e a9 e2 79 8b bb 39 80 f2 13 69 1c da 46 ac bd 01 17 40 95 be ca 7a c8 5e 78 9e 4e f0 34 2a 49 07 20 d2 55 18 4e aa f9 a9 79 19 46 01 fd be 74 21 2c 48 25 ed 0b d8 5c e1 21 97 5b fb 1f fa e7 08 c5 f1 db 24 52 d4 24 94 ea 86 a0 ac 71 9b a5 70 df 6e 64 32 7d bb 49 7e 1c 3a 35 86 3a 0b bc 11 b9 bc 63 53 13 db b6 21 b2 17 b6 8c 6c 3a de c8 b0 48 30 1a 78 e1 93 b1 f2 84 d9 a0 da 32 3b 49 9d 0e a3 ba 0c c0 20 f1 60 44 0e bf e1 b1 1f 00 db 07 eb f8 0b 93 7a ee 80 51 71 65 d0 f1 46 c6 4d b5 e4 80 4a d1 c1 db 33 01 93 60 94 84 63 3e bb 8d 4e f6 d7 4e 72 4b bf 55 91 07 da 56 22 Data Ascii: u';Gph8Q+mf0,-#-"C"F^y9iF@z^xN4*I UNyFt!,H%\![$R$qpnd2}I~:5:cS!l:H0x2;I `DzQqeFMJ3`c>NNrKUV"
2024-10-11 14:09:43 UTC	16384	IN	Data Raw: 49 49 78 a3 6d 90 4f f2 d1 5f e3 49 57 25 53 20 30 da 2c 5f 9e fb be 25 d9 53 ac e2 06 6d fc 67 4d 28 10 b5 f0 53 88 c0 7e 3e c3 5e b0 96 88 a4 6a 56 81 ac 3c e2 4c 74 3e 79 ed bb 38 fd f9 09 7e 74 9f 32 42 c7 41 04 97 ac e7 a6 59 52 fe 59 8b 9a b4 f3 4a 8b b4 d6 10 bd d9 0f af 84 78 1b c9 34 c0 e1 99 a8 cd 23 a0 ce 8d b4 0e 00 99 43 46 38 aa 5e e1 a4 f2 b1 1e 2b 7f d5 16 32 3e 8d f2 99 ec b5 f7 ea 3d de 6a 55 6b ab 45 a6 da 10 6c 86 da dd 41 0a 35 3a 57 9c 6d af f8 17 dd 86 fe 9a 8f 67 27 ed 3a 5b 96 b7 fe 68 25 95 d8 2b b0 d4 b5 c8 c6 c9 ae 2d 62 2a 76 b4 6a a4 5b 48 7c 83 75 29 d5 f1 80 c1 6d 15 f3 46 e2 9d 67 bd 75 10 d5 0f fa 52 85 d6 65 ac 67 bd 66 c1 72 a4 33 6d ea 5c 99 93 86 6e a9 fd 34 e0 24 b4 0d 56 b1 61 56 94 05 d2 f1 9b 06 fa d6 bf 56 69 91 Data Ascii: IIxmO_IW%S 0,_%SmgM(S~>^jV<Lt>y8~t2BAYRYJx4#CF8^+2>=jUkElA5:Wmg':[h%+-b*vj[H\|u)mFguRegfr3m\n4$VaVVi
2024-10-11 14:09:43 UTC	1449	IN	Data Raw: 45 2f 63 f8 e4 e0 0e d0 f4 68 6c d8 37 44 70 d3 c6 9c 6a 8d 33 2e 82 62 3b 12 9c f1 56 32 89 89 b7 1c f8 4d 92 80 1d 13 a3 81 6b 0f 74 b0 f6 84 70 e9 e9 2c 49 af 92 78 a0 74 57 ec ad 25 df 18 38 c3 d4 53 29 e6 ae 8e 8b 93 b1 d2 56 e2 b7 bf 85 b6 94 6e 6e da cf 4a 54 d6 75 6d ac a3 fc 6d 23 e6 09 04 32 6d 06 4d 28 cf 16 35 28 24 8a d7 e3 11 0c 87 53 1f 83 11 24 c4 fc c3 89 41 42 39 c4 98 16 56 9e 4f 6d b3 c6 ef 84 26 af d9 dd a3 84 63 8c fa 7b eb 2a bd af dc 00 b7 88 03 05 8e ec fa fd 82 bd 9f 8c 0b 40 5f cc ab 16 c9 2c 13 c1 24 45 9b f2 c5 95 32 0f ac 16 0c f7 e9 05 a9 ed 10 12 2b 87 10 71 c9 25 6e 4c d0 b4 d8 26 e3 b3 13 af d7 74 bb 7d 5f d3 95 83 db 5b 37 ea 39 ca bb f7 00 bc c7 7d 71 70 80 36 07 87 17 11 46 47 79 ad 8b 01 fd 00 09 4b 55 8e 3a 38 8f 1e Data Ascii: E/chl7Dpj3.b;V2Mktp,IxtW%8S)VnnJTumm#2mM(5($S$AB9VOm&c{*@_,$E2+q%nL&t}_[79}qp6FGyKU:8

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.6	49725	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:43 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:44 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:43 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: b9d87bc3-001e-008d-128c-15d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140943Z-r154656d9bcxgrn9bkxmc6s93s00000000tg00000000xxmq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:44 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.6	49724	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:43 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:44 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:43 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: beffec96-b01e-0097-50a3-1b4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140943Z-1597f6968449cxlldwc92t48ds00000003hg00000000gzre x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:44 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.6	49727	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:43 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:44 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:43 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 415adc63-301e-0052-5ea3-1b65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140943Z-1597f696844r6vmva1wkvnf04w000000018g00000000y8cc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:44 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.6	49723	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:43 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:44 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:44 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: a65062bf-401e-00ac-0ea3-1b0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140943Z-r154656d9bcqc2n2s48bp5ktg800000001r000000000vwg7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:44 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49729	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:44 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-11 14:09:44 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=95739 Date: Fri, 11 Oct 2024 14:09:44 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.6	49726	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:44 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:44 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:44 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: e1b47659-601e-00ab-14a3-1b66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140944Z-1597f6968449cxlldwc92t48ds00000003h000000000mcrk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:44 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49730	13.107.253.45	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:44 UTC	408	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:44 UTC	791	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:44 GMT Content-Type: application/x-javascript Content-Length: 49804 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Mon, 05 Aug 2024 15:32:28 GMT ETag: 0x8DCB563D09FF90F x-ms-request-id: 048b3f37-e01e-004c-294b-1a5366000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241011T140944Z-1597f696844rxj9pg4nkdptn1w00000002mg00000000cx0r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:44 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a e8 6e 66 80 30 04 66 66 17 58 2e 27 56 c0 dd c1 ce da 0e 34 13 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 c1 45 ef fc a2 d2 ff 58 b9 f8 7c 74 7e 50 39 83 b7 7f 54 4e fb 17 47 fb 87 3f 5e 0f 7e 14 ff bf b8 f7 e3 ca d8 9f 88 0a fc 0e dd 58 78 95 30 a8 84 51 c5 0f 46 61 34 0d 23 37 11 71 e5 01 fe 46 be 3b a9 8c a3 f0 a1 92 dc 8b ca 34 0a bf 88 51 12 57 26 7e 9c 40 a1 a1 98 84 4f 95 2a 54 17 79 95 33 37 4a 9e 2b 47 67 66 1d ea 17 50 9b 7f e7 07 50 7a 14 4e 9f e1 f9 3e a9 04 61 e2 8f 44 c5 0d 3c aa 6d 02 2f 41 2c 2a b3 c0 13 51 e5 e9 de 1f dd 57 4e fc 51 14 c6 e1 38 a9 44 62 24 Data Ascii: m[80OL;wnf0ffX.'V4r~=,JUT~l?EX\|t~P9TNG?^~Xx0QFa4#7qF;4QW&~@OTy37J+GgfPPzN>aD<m/A,QWNQ8Db$
2024-10-11 14:09:44 UTC	16384	IN	Data Raw: 27 1c c8 cc 3b 47 70 68 d3 97 de 38 51 da 2b 6d ae c3 c3 92 66 30 2c c7 e2 0e a7 d6 2d 0d 94 23 88 9f 19 2d 1f 22 de b2 95 e2 e1 43 fe ba 22 db f8 db c7 de c7 bd 8f bb 46 5e a9 e2 79 8b bb 39 80 f2 13 69 1c da 46 ac bd 01 17 40 95 be ca 7a c8 5e 78 9e 4e f0 34 2a 49 07 20 d2 55 18 4e aa f9 a9 79 19 46 01 fd be 74 21 2c 48 25 ed 0b d8 5c e1 21 97 5b fb 1f fa e7 08 c5 f1 db 24 52 d4 24 94 ea 86 a0 ac 71 9b a5 70 df 6e 64 32 7d bb 49 7e 1c 3a 35 86 3a 0b bc 11 b9 bc 63 53 13 db b6 21 b2 17 b6 8c 6c 3a de c8 b0 48 30 1a 78 e1 93 b1 f2 84 d9 a0 da 32 3b 49 9d 0e a3 ba 0c c0 20 f1 60 44 0e bf e1 b1 1f 00 db 07 eb f8 0b 93 7a ee 80 51 71 65 d0 f1 46 c6 4d b5 e4 80 4a d1 c1 db 33 01 93 60 94 84 63 3e bb 8d 4e f6 d7 4e 72 4b bf 55 91 07 da 56 22 f5 25 bb 62 d4 f0 Data Ascii: ';Gph8Q+mf0,-#-"C"F^y9iF@z^xN4*I UNyFt!,H%\![$R$qpnd2}I~:5:cS!l:H0x2;I `DzQqeFMJ3`c>NNrKUV"%b
2024-10-11 14:09:44 UTC	16384	IN	Data Raw: 4f f2 d1 5f e3 49 57 25 53 20 30 da 2c 5f 9e fb be 25 d9 53 ac e2 06 6d fc 67 4d 28 10 b5 f0 53 88 c0 7e 3e c3 5e b0 96 88 a4 6a 56 81 ac 3c e2 4c 74 3e 79 ed bb 38 fd f9 09 7e 74 9f 32 42 c7 41 04 97 ac e7 a6 59 52 fe 59 8b 9a b4 f3 4a 8b b4 d6 10 bd d9 0f af 84 78 1b c9 34 c0 e1 99 a8 cd 23 a0 ce 8d b4 0e 00 99 43 46 38 aa 5e e1 a4 f2 b1 1e 2b 7f d5 16 32 3e 8d f2 99 ec b5 f7 ea 3d de 6a 55 6b ab 45 a6 da 10 6c 86 da dd 41 0a 35 3a 57 9c 6d af f8 17 dd 86 fe 9a 8f 67 27 ed 3a 5b 96 b7 fe 68 25 95 d8 2b b0 d4 b5 c8 c6 c9 ae 2d 62 2a 76 b4 6a a4 5b 48 7c 83 75 29 d5 f1 80 c1 6d 15 f3 46 e2 9d 67 bd 75 10 d5 0f fa 52 85 d6 65 ac 67 bd 66 c1 72 a4 33 6d ea 5c 99 93 86 6e a9 fd 34 e0 24 b4 0d 56 b1 61 56 94 05 d2 f1 9b 06 fa d6 bf 56 69 91 4c 38 d2 41 5f b8 Data Ascii: O_IW%S 0,_%SmgM(S~>^jV<Lt>y8~t2BAYRYJx4#CF8^+2>=jUkElA5:Wmg':[h%+-b*vj[H\|u)mFguRegfr3m\n4$VaVViL8A_
2024-10-11 14:09:44 UTC	1443	IN	Data Raw: 0e d0 f4 68 6c d8 37 44 70 d3 c6 9c 6a 8d 33 2e 82 62 3b 12 9c f1 56 32 89 89 b7 1c f8 4d 92 80 1d 13 a3 81 6b 0f 74 b0 f6 84 70 e9 e9 2c 49 af 92 78 a0 74 57 ec ad 25 df 18 38 c3 d4 53 29 e6 ae 8e 8b 93 b1 d2 56 e2 b7 bf 85 b6 94 6e 6e da cf 4a 54 d6 75 6d ac a3 fc 6d 23 e6 09 04 32 6d 06 4d 28 cf 16 35 28 24 8a d7 e3 11 0c 87 53 1f 83 11 24 c4 fc c3 89 41 42 39 c4 98 16 56 9e 4f 6d b3 c6 ef 84 26 af d9 dd a3 84 63 8c fa 7b eb 2a bd af dc 00 b7 88 03 05 8e ec fa fd 82 bd 9f 8c 0b 40 5f cc ab 16 c9 2c 13 c1 24 45 9b f2 c5 95 32 0f ac 16 0c f7 e9 05 a9 ed 10 12 2b 87 10 71 c9 25 6e 4c d0 b4 d8 26 e3 b3 13 af d7 74 bb 7d 5f d3 95 83 db 5b 37 ea 39 ca bb f7 00 bc c7 7d 71 70 80 36 07 87 17 11 46 47 79 ad 8b 01 fd 00 09 4b 55 8e 3a 38 8f 1e 84 6f dd b5 0c 51 Data Ascii: hl7Dpj3.b;V2Mktp,IxtW%8S)VnnJTumm#2mM(5($S$AB9VOm&c{*@_,$E2+q%nL&t}_[79}qp6FGyKU:8oQ

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.6	49736	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:44 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:44 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:44 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: ce6c75d1-b01e-003e-3ead-1b8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140944Z-r154656d9bcpnqc46yk454phh800000009tg00000000ufmb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:44 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.6	49733	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:44 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:45 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:44 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: d225827d-d01e-005a-71e7-1b7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140944Z-1597f696844mgqk65a7x24zwr8000000012000000000xmst x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-11 14:09:45 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.6	49734	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:44 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:44 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:44 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 999224e7-101e-0079-39d7-1a5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140944Z-1597f696844nzckq75sv4z36ng00000002d0000000000cxe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:44 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.6	49735	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:44 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:44 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:44 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 66411a6b-c01e-00a1-1eca-1a7e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140944Z-1597f696844l6hhwkgu2fa0dk000000000rg00000000t1sh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:44 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.6	49737	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:44 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:45 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:44 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: d99c8186-c01e-0066-1d32-1aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140944Z-1597f696844r6vmva1wkvnf04w00000001g0000000000en8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:45 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49739	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:45 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-11 14:09:45 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=95769 Date: Fri, 11 Oct 2024 14:09:45 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-11 14:09:45 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49740	13.107.246.51	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:45 UTC	658	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:45 UTC	781	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:45 GMT Content-Type: text/css Content-Length: 20414 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 03 Jul 2024 21:48:08 GMT ETag: 0x8DC9BA9D4131BFD x-ms-request-id: c23edfe9-d01e-0009-651c-1bb928000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241011T140945Z-17db6f7c8cftxb58mdzsfx75h400000001p0000000001epf x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:45 UTC	15603	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 7d 6b 73 e3 36 b2 e8 f7 f9 15 5c a7 52 3b ce 4a 8c 48 3d 2d 57 52 3b 99 cc 26 3e 67 5e 35 33 d9 47 a5 52 5b b4 44 59 3c 43 89 ba 24 65 8f 57 47 ff fd e2 8d 06 d0 20 29 8f b3 d9 7b 2b 27 67 13 0b dd 6c 00 dd 8d 06 1a e8 06 be fe ea 0f c1 f3 62 77 5f 66 37 eb 3a 78 fa fc 3c 78 95 2d ca a2 2a 56 35 29 2f 77 45 99 d4 59 b1 0d 83 67 79 1e 30 a4 2a 28 d3 2a 2d 6f d3 65 18 7c f5 f5 d7 5f fd e1 49 bf fb ff 05 ef 3f 3c 7b f7 21 78 f3 97 e0 c3 8f 57 ef be 0f de 92 5f ff 08 5e bf f9 70 f5 fc 45 d0 99 ca 93 27 1f d6 59 15 ac b2 3c 0d c8 7f af 93 2a 5d 06 c5 36 28 ca 20 db 2e 44 ab d3 2a d8 90 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 f4 21 cf aa 9a 7c 74 9d e6 c5 5d f0 94 90 2b 97 c1 db a4 ac ef 83 ab b7 e7 61 f0 81 e0 16 Data Ascii: }ks6\R;JH=-WR;&>g^53GR[DY<C$eWG ){+'glbw_f7:x<x-V5)/wEYgy0(-oe\|_I?<{!xW_^pE'Y<]6( .D*Y:ve?!\|t]+a
2024-10-11 14:09:45 UTC	4811	IN	Data Raw: e7 bc b1 e2 92 61 7d df b0 68 ac ab 2c aa b1 88 da cb c6 22 89 f4 a2 b1 42 53 1e da 58 e7 55 1e b5 fb a5 96 31 c6 85 9c 5c 95 58 0f 77 34 04 a7 bc ef e9 bc 62 55 e4 cb 9d 46 11 60 f2 34 8a 20 ba 0a e1 1d 2d b3 ba 41 d4 6a 33 50 25 58 6c a8 15 02 68 eb 56 83 ba b5 a0 21 5d f4 aa e1 60 30 5e 26 13 b7 4f 5a e3 0c 32 50 fb 10 40 6b 9f fc 5a d9 82 86 f5 c9 a7 ad bc 4f 0f 53 c6 3e 8f 75 ef 81 fb bb e5 60 13 bf d0 d1 86 c0 d4 70 43 60 72 bc 81 ca 0c ee 7b ca cd 06 61 90 56 01 34 34 b4 0d 0f 13 81 b8 e1 dc 70 52 d0 d3 64 f3 b6 df 8a 2c 1c d2 a7 e1 c5 ec 1c b9 2b 18 00 b1 42 22 26 de 7d 9d 59 8d 1f 8e 83 89 00 6e 65 8f 64 aa a2 fc c3 d8 65 70 5f b6 f7 9c 65 7e ea 83 9d 2c f7 31 10 e4 08 df ce 47 c4 df 33 f4 3c 40 c9 2e 2b 17 af 8a ce 37 c9 36 db ed 73 c6 5e f7 a6 Data Ascii: a}h,"BSXU1\Xw4bUF`4 -Aj3P%XlhV!]`0^&OZ2P@kZOS>u`pC`r{aV44pRd,+B"&}Ynedep_e~,1G3<@.+76s^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49742	13.107.246.51	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:45 UTC	635	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_64Z6dmvJd_mCK0LlAXyiHg2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:45 UTC	819	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:45 GMT Content-Type: application/x-javascript Content-Length: 122196 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Sep 2024 20:27:05 GMT ETag: 0x8DCD1D6EFD1736A x-ms-request-id: 85c4a316-801e-0075-357f-1ba87a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241011T140945Z-17db6f7c8cfnqpbkckdefmqa4400000001z000000000ne93 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:45 UTC	15565	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 7b 57 e3 48 92 38 fa ff fd 14 46 33 97 b6 1b 61 2c bf b0 45 ab 59 63 a0 8a 69 c0 0c 86 ea 9e a5 18 8e 2c a5 8d 1a 59 f2 4a 32 8f 31 de cf fe 8b 88 cc 94 52 b6 4c 55 cd ee b9 f7 dc 73 e7 41 59 99 91 af c8 c8 c8 88 c8 c8 c8 bd 9f b7 fe af d2 cf a5 dd ef ff 4f 69 78 d3 bb be 29 0d 4e 4b 37 9f cf ae 8f 4b 57 f0 f5 8f d2 e5 e0 e6 ac 7f f2 fd f5 60 a3 f8 ff 9b 47 2f 2e 8d 3d 9f 95 e0 df 91 1d 33 b7 14 06 a5 30 2a 79 81 13 46 b3 30 b2 13 16 97 a6 f0 37 f2 6c bf 34 8e c2 69 29 79 64 a5 59 14 fe c9 9c 24 2e f9 5e 9c 40 a1 11 f3 c3 97 52 19 aa 8b dc d2 95 1d 25 6f a5 b3 ab 4a 15 ea 67 50 9b 37 f1 02 28 ed 84 b3 37 f8 fd 98 94 82 30 f1 1c 56 b2 03 97 6a f3 e1 23 88 59 69 1e b8 2c 2a bd 3c 7a ce 63 e9 c2 73 a2 30 0e c7 49 29 62 0e Data Ascii: {WH8F3a,EYci,YJ21RLUsAYOix)NK7KW`G/.=30yF07l4i)ydY$.^@R%oJgP7(70Vj#Yi,<zcs0I)b
2024-10-11 14:09:45 UTC	16384	IN	Data Raw: 33 ec 50 0c 78 b1 89 cb 38 91 37 ca f7 5f a9 3f 83 28 67 02 2d a0 00 a4 9f 32 3f ff 4e b8 0b 43 59 2d 34 63 ec a9 cc 95 57 9c 30 b4 90 4d 67 78 3b 83 bb 97 58 45 7b 0e f0 14 00 1c 64 83 61 59 85 95 6f 98 9c 0e 32 fb 86 27 3d 71 3f 9a 36 1d 4d 00 06 9a 00 84 ca 0f d2 b7 b8 f0 9b cd 58 bc 52 0e f5 77 f4 40 01 85 e9 d8 8e 9e b2 ab f9 e8 fb 99 f3 8e 3b 42 9f 2d f2 37 c4 1b 07 ab b9 bf a3 ef 96 92 bb 56 9f 65 a3 d8 84 fe ac 74 4d e3 12 af 34 c3 1e 52 75 01 2a 4b 49 74 85 6e 61 8d 47 1b 5c f4 98 15 55 8b 5c 21 cb 95 8f fa 2d fc ce 70 1b fd 68 00 c2 11 0d c1 96 68 54 f2 aa 8e 9c e9 18 16 1d 06 8c 83 6d 5a b3 29 88 04 86 73 dc f5 70 00 dc c7 33 f4 35 7d f1 ec b1 17 b4 0d fa e6 82 af a4 2f 69 42 d1 ea f6 d6 79 26 ea 79 22 ec 05 22 26 2e bc 79 c1 55 93 00 f2 d1 e3 Data Ascii: 3Px87_?(g-2?NCY-4cW0Mgx;XE{daYo2'=q?6MXRw@;B-7VetM4Ru*KItnaG\U\!-phhTmZ)sp35}/iBy&y""&.yU
2024-10-11 14:09:45 UTC	16384	IN	Data Raw: 6f a8 a7 04 6d 3c 1f 81 fe 1f 7e 0d 1f 33 6b 26 db 17 e1 cd bb 80 55 c3 c9 89 06 71 82 d6 e0 5d c8 95 e1 cd ef 89 8d 93 18 31 cd 6f 44 5a 11 c8 bc 4f de 07 ce 93 88 fd 0f 5c 39 d3 e9 57 ef c3 f1 ee c1 e1 1b 32 87 e2 7e ae ce b0 02 54 d4 63 99 97 aa ee cd a9 2a 4f 6c a2 c5 48 3f 05 4a b0 68 8d 92 1e a6 d3 33 31 37 0a ea 1e e2 6e ca 04 bc 81 c1 58 4c 46 4c 7d 22 32 e1 84 1c c6 bd 08 89 80 5b 42 69 b4 85 1f 21 9d 21 cf 1b 75 b3 8f 08 4b e9 cc 05 6f b0 18 36 03 bf 0f b0 97 f2 95 0d ae 21 b5 ee ca 06 77 e6 34 ae d2 84 8f 92 ce 5a b6 7b 5e b1 08 5a 61 42 c1 d4 a2 cc ab 7a 96 4e f4 62 1c 70 43 9f d3 bc 8a c5 45 2b 55 a0 26 32 76 de 98 d5 d5 36 0f b7 8d 61 ee a2 f7 70 a6 01 44 1e 64 1f 58 ff 9c 1a 29 af e4 bc a1 ec 68 e5 6a aa 51 5b 77 e2 2e d4 b5 b1 03 98 3e d3 Data Ascii: om<~3k&Uq]1oDZO\9W2~Tc*OlH?Jh317nXLFL}"2[Bi!!uKo6!w4Z{^ZaBzNbpCE+U&2v6apDdX)hjQ[w.>
2024-10-11 14:09:45 UTC	16384	IN	Data Raw: 38 5e 4e 95 9e b2 71 e2 90 54 3c 45 cf 67 0a 60 e0 c9 a6 2b 98 84 7a 8a 1a 30 67 79 7f 74 8d dc f1 24 79 13 8e 87 8f 22 f7 94 ee ee 59 18 90 12 59 9e 0f a3 b2 2c da 93 19 6f 50 6c c2 b6 c6 89 f4 bd 8c 7e 96 14 8d fc 83 fd 84 9b 09 8f c0 d7 71 9c 6b 0d c5 df 60 9b 67 68 5b 21 be 4e 0a 70 e8 f7 64 8c a1 a6 e2 bb b8 ac 3b 47 43 70 53 77 dc b6 92 c9 5d 37 1a eb e2 5e 18 9b 8f b8 3e 85 94 45 cf fe 69 90 08 a9 15 d2 d4 ef d1 b5 04 3c 11 35 d8 72 da 81 97 3f 49 f3 78 f0 f8 f9 26 4a d8 0c 30 3b cd d3 11 94 49 3b a1 1f 63 44 9b ae 5d a3 d4 80 b1 47 5c a1 4c 32 73 c9 e8 0c b0 f5 1a 15 ae 26 79 c0 ab e8 26 fd 28 ab fc d8 60 89 04 2a b7 21 4a 15 f6 d0 f1 79 d6 00 22 b4 41 c2 ab c6 8f e8 37 e8 47 17 f0 84 5e 38 c1 a7 36 6f c4 59 03 25 b8 ca e7 3f 22 5e 6c 2b 4e ad 86 Data Ascii: 8^NqT<Eg`+z0gyt$y"YY,oPl~qk`gh[!Npd;GCpSw]7^>Ei<5r?Ix&J0;I;cD]G\L2s&y&(`*!Jy"A7G^86oY%?"^l+N
2024-10-11 14:09:45 UTC	16384	IN	Data Raw: 5b a6 a3 2e 85 6e 49 b4 88 c3 f6 13 62 1f 5c 13 69 51 a1 5b c9 01 c9 4f 59 48 56 58 39 0c 4c 0f 13 2c 26 ab 06 78 03 3f 2d f5 d6 8a ac 0b cb 37 8b 5a 9b a4 80 fc 4c 9f 67 a3 22 ce 6f 38 df 06 8f 42 ff 99 f6 43 83 5f 3c 32 21 d1 01 5f d1 07 c9 70 a5 39 7d 04 8d 1a ff 9c 5f 47 4e 4d 1a 4a 24 84 9e c6 d8 d6 0c 4b b3 1d 95 55 57 30 42 d6 5f 3a 1d 59 82 34 07 d2 38 75 36 35 7b 5e 51 7d b5 f0 0c 94 a0 79 a0 84 bf 95 db 10 88 82 9c 86 0e 3e f3 76 7b 97 34 ee 3f 89 a2 68 04 fc 0e d8 e5 20 11 33 70 73 e6 9d 34 30 0e cd 43 98 49 e0 08 6d 96 42 4a ac 30 83 0c c5 1e c2 61 54 a2 0c b3 9a 4e 71 93 11 cb 89 aa 4b 98 8c 29 a2 4d 3c 7d be 2f 65 56 33 79 b4 c1 79 5c 84 48 28 b8 b3 00 74 1b 68 ab c0 ac 53 8f 78 6d 21 df 63 e8 fa e5 d0 41 fa 0d 46 3c ae 3e d2 ed 15 20 61 b2 Data Ascii: [.nIb\iQ[OYHVX9L,&x?-7ZLg"o8BC_<2!_p9}_GNMJ$KUW0B_:Y48u65{^Q}y>v{4?h 3ps40CImBJ0aTNqK)M<}/eV3yy\H(thSxm!cAF<> a
2024-10-11 14:09:45 UTC	16384	IN	Data Raw: 11 b9 79 04 fb 38 f0 39 70 21 48 c2 c4 8f dc 30 0e 1d 06 30 6a f9 bf 73 67 29 8b 02 d7 cf e2 c8 8b a5 2d 45 92 b0 28 97 99 60 51 9c c3 c4 e2 f9 dd 2c e7 d5 6e 6a 0e 9a 32 20 1d 6c 74 e0 1b 38 55 02 3b 5a 32 9e 08 bc 81 80 c5 4c ee 07 cd bd 14 58 26 40 9a b9 c7 03 99 60 0e 1d 27 b7 65 16 b8 22 8f bd 3c f4 f6 83 7b 35 c7 4f fd 44 ba be 93 70 97 b1 58 7a 8e 2f 6d 9b 27 59 e0 04 22 b6 31 af fb 21 27 3f 75 12 b0 9b c0 f7 45 9e 44 71 10 24 98 b0 2c 89 c2 24 49 f2 80 83 4b ec a5 9b 5a 42 a5 36 48 28 77 5c 01 8a cd bd c4 f6 13 37 f0 30 9c 20 11 79 60 b3 ec 6e de a7 b5 ce d2 d8 e1 2c 72 79 e0 aa 7f 7d 8f 71 10 55 12 e7 be 0d a4 70 dc bb 39 ec 56 bb 09 0d 8f c8 22 70 ed 3c 03 57 95 76 68 83 53 c8 d8 0b 44 c8 6c 26 7c 1e ef 87 78 c3 34 e1 a1 b0 c1 45 6d 21 93 0c 1c Data Ascii: y89p!H00jsg)-E(`Q,nj2 lt8U;Z2LX&@`'e"<{5ODpXz/m'Y"1!'?uEDq$,$IKZB6H(w\70 y`n,ry}qUp9V"p<WvhSDl&\|x4Em!
2024-10-11 14:09:45 UTC	16384	IN	Data Raw: af 7a 38 98 4c 26 07 44 f0 d1 68 dc 7a 3f 7e 01 ed 9d 82 25 9e ff f4 e4 41 1f b1 d5 b3 37 7f d9 b9 1d 64 0d a3 bb 9f 37 d2 5c a5 0f 41 76 e6 a9 7e b9 d1 73 30 25 bf 37 d3 5b f5 ad 7a ed 0f 9b fa ab 13 56 fe c0 68 33 7a b9 ae c6 fc ed c2 f1 89 c2 9b d6 ad 9c 9f 95 0b c3 33 d7 8c fc f5 cf 5f 8e c7 e1 f3 79 55 be 4c 5f 86 b6 97 bf 5d 12 da 26 db f8 db 4f 50 9d ce 4c ab f6 85 7a 65 f8 f2 f3 fe bd 2a 2a 0d ee f3 66 9f bd ed d9 ac 5f fe bd 99 a0 65 c1 cd 2a c9 37 8c bf d1 ea b4 92 64 6d 97 fc 52 e6 77 8a fc 6a ea cd a7 0d 91 93 ea 6f f3 c7 a5 90 cf 0b 4c 7a bd b9 b4 93 01 d2 34 f7 1b 29 3f ff a4 80 02 21 0f e9 16 b1 2f 4b ff f9 a7 9a 99 27 ab 5c 78 f9 fa 33 cb 8e cf eb 49 dd 99 a2 ef 44 49 bf be 6e af bd eb c4 15 7e 55 04 d7 d2 4b a9 f6 5f 18 5a df 49 ad 9f 55 Data Ascii: z8L&Dhz?~%A7d7\Av~s0%7[zVh3z3_yUL_]&OPLze*f_e7dmRwjoLz4)?!/K'\x3IDIn~UK_ZIU
2024-10-11 14:09:45 UTC	8327	IN	Data Raw: 3d 48 ed 9f f0 22 a8 60 92 f6 2f 2c ff 8e 60 c0 9e c3 08 74 02 37 e5 29 58 35 42 a4 57 2c 51 d7 42 0b a5 87 50 f0 75 c4 42 ac 83 4a 05 cf 63 fa 98 4e 15 5d 56 82 4b 2d c0 c7 b8 6a ef 40 cd c1 db 98 14 e1 f9 4b 9b 64 70 3a 44 e2 9b 6b 11 99 ee ec 50 e9 eb 65 e0 45 99 29 5d 8b 49 06 38 a0 27 28 6c c7 37 5a 42 18 08 70 e1 60 4a 18 92 4a 73 f9 b3 1f 83 f4 d5 d2 c1 27 9e 78 12 45 97 73 82 4f e6 fc c9 4b db 25 0e 8c 07 9f 2d f9 b3 13 8e c2 0c 53 35 50 6f 3a 74 38 14 c9 9f c7 f0 6f ac c1 83 53 20 04 12 1f 24 49 e4 06 48 fb 00 12 58 04 06 f0 b7 d4 cc e5 63 83 c1 29 8f 84 c4 a3 65 51 b2 bd c4 37 c0 41 15 ef 18 55 5c 73 20 e0 61 32 43 32 3c 3f 64 33 3a 09 e7 37 27 21 96 3f 05 6d 04 06 e3 28 0b 23 f4 4e 42 81 5c 48 cf 4f 9e 30 b8 22 56 7d 24 e2 94 82 c7 c0 d5 3e 49 Data Ascii: =H"`/,`t7)X5BW,QBPuBJcN]VK-j@Kdp:DkPeE)]I8'(l7ZBp`JJs'xEsOK%-S5Po:t8oS $IHXc)eQ7AU\s a2C2<?d3:7'!?m(#NB\HO0"V}$>I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49741	13.107.246.51	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:45 UTC	654	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:45 UTC	797	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:45 GMT Content-Type: application/x-javascript Content-Length: 16326 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Aug 2024 20:17:04 GMT ETag: 0x8DCC6D537C7BF24 x-ms-request-id: 8aa8dd4a-001e-003e-2626-1b2396000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241011T140945Z-17db6f7c8cfbr2wt66emzt78g400000001kg000000009kzn x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:45 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 43 29 24 19 d1 04 8a 60 bf 01 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 db b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd db 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'FC)$`Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-10-11 14:09:45 UTC	739	IN	Data Raw: 30 e4 dc 87 8c f2 c0 f5 c3 79 67 55 de 72 6e 30 47 45 07 e2 e0 a1 a2 03 90 e8 a9 c6 72 0b fd 96 e1 b7 f4 fb 30 27 7d 00 6e 0b 06 59 a2 2f a7 1c 41 90 d7 5b 39 85 15 c9 af 0c df e0 d5 1a c3 7b 00 1d 0f 96 cc 31 14 f8 fd 00 92 38 f0 07 26 68 1f 8a 8f 02 83 09 f8 cc cc 8d 10 e1 e4 34 aa 0f 19 70 c2 8e cc 1c 39 82 4b ab 1f 9a f8 7d 5e 19 dd 82 51 6d 02 c8 68 0d cb 82 19 3d e0 68 3d 30 aa b2 07 f1 03 a3 85 32 be c1 a2 68 3c 24 e9 d6 00 eb 78 77 f8 c7 f3 e6 f9 e9 f9 49 d1 16 aa f8 dc e2 69 8e a0 fd 42 2a 87 f5 62 64 3c c1 2e c0 ac c9 aa 68 99 3c f0 39 1d 83 58 1d 4b 3a 00 96 ae dc 70 b4 e4 a7 ce 65 58 05 b4 fb 8e bc bf 10 3f 36 46 40 70 c5 0c 77 b9 d3 3a eb 0f b1 16 fb 6f 13 4b 51 87 90 96 0d 41 58 63 98 25 73 3f 2c 27 3c fd b0 42 76 1c 0c 01 29 d3 64 e9 c3 21 Data Ascii: 0ygUrn0GEr0'}nY/A[9{18&h4p9K}^Qmh=h=02h<$xwIiB*bd<.h<9XK:peX?6F@pw:oKQAXc%s?,'<Bv)d!

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	54814	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:45 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:45 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:45 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 097d5197-001e-0066-50de-1b561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140945Z-r154656d9bcq7mrvshhcb7rrsn00000002cg00000000e924 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:45 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.6	54815	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:45 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:45 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:45 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 38c0e901-901e-0016-3f33-1aefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140945Z-1597f696844dq2z42yxqsye8f400000003ng00000000t1pt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:45 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	54813	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:45 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:45 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:45 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: bef1d05a-c01e-0034-2ea3-1b2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140945Z-r154656d9bcpcz2wp6sxz2m5qw00000000kg00000000c09m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:45 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	54811	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:45 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 4d 61 53 62 35 35 45 42 56 45 36 4d 62 69 41 44 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 32 38 32 34 66 34 64 66 30 37 64 61 30 63 37 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: MaSb55EBVE6MbiAD.1Context: 22824f4df07da0c7
2024-10-11 14:09:45 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-11 14:09:45 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 4d 61 53 62 35 35 45 42 56 45 36 4d 62 69 41 44 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 32 38 32 34 66 34 64 66 30 37 64 61 30 63 37 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 61 44 52 51 4e 58 33 35 6b 44 70 62 4d 35 7a 31 49 78 31 6b 4b 42 78 45 30 44 34 31 32 47 48 4c 72 63 39 45 6a 7a 76 58 32 78 64 78 2f 63 49 2b 70 39 64 6e 74 31 6b 33 68 67 69 4a 77 44 72 2b 36 75 75 75 45 62 79 77 4e 75 68 41 78 6e 71 6e 4c 67 38 71 64 70 70 67 39 51 64 6e 39 66 4a 36 57 34 45 66 72 31 2b 38 64 7a 69 50 62 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: MaSb55EBVE6MbiAD.2Context: 22824f4df07da0c7<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAaDRQNX35kDpbM5z1Ix1kKBxE0D412GHLrc9EjzvX2xdx/cI+p9dnt1k3hgiJwDr+6uuuEbywNuhAxnqnLg8qdppg9Qdn9fJ6W4Efr1+8dziPb
2024-10-11 14:09:45 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 4d 61 53 62 35 35 45 42 56 45 36 4d 62 69 41 44 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 32 38 32 34 66 34 64 66 30 37 64 61 30 63 37 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: MaSb55EBVE6MbiAD.3Context: 22824f4df07da0c7<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-11 14:09:45 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-11 14:09:45 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 66 32 50 56 56 51 51 59 4f 55 36 31 52 56 44 44 4e 39 48 4a 47 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: f2PVVQQYOU61RVDDN9HJGg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.6	54817	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:45 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:45 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:45 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 35b61c96-e01e-0052-1103-1ad9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140945Z-1597f69684469lsz07pz1m8tt000000000yg00000000gsyu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:45 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	54816	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:45 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:45 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:45 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 408dc6e4-801e-0078-5ca3-1bbac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140945Z-r154656d9bcbnsv5vrs89mh8t400000002gg000000008cm0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:45 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	54820	13.107.253.45	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:46 UTC	429	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:46 UTC	791	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:46 GMT Content-Type: application/x-javascript Content-Length: 16326 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Aug 2024 20:17:04 GMT ETag: 0x8DCC6D537C7BF24 x-ms-request-id: 9f80432d-e01e-006b-4d28-1a331d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241011T140946Z-1597f696844dq2z42yxqsye8f400000003sg000000004gcx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:46 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 43 29 24 19 d1 04 8a 60 bf 01 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 db b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd db 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'FC)$`Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-10-11 14:09:46 UTC	733	IN	Data Raw: c0 f5 c3 79 67 55 de 72 6e 30 47 45 07 e2 e0 a1 a2 03 90 e8 a9 c6 72 0b fd 96 e1 b7 f4 fb 30 27 7d 00 6e 0b 06 59 a2 2f a7 1c 41 90 d7 5b 39 85 15 c9 af 0c df e0 d5 1a c3 7b 00 1d 0f 96 cc 31 14 f8 fd 00 92 38 f0 07 26 68 1f 8a 8f 02 83 09 f8 cc cc 8d 10 e1 e4 34 aa 0f 19 70 c2 8e cc 1c 39 82 4b ab 1f 9a f8 7d 5e 19 dd 82 51 6d 02 c8 68 0d cb 82 19 3d e0 68 3d 30 aa b2 07 f1 03 a3 85 32 be c1 a2 68 3c 24 e9 d6 00 eb 78 77 f8 c7 f3 e6 f9 e9 f9 49 d1 16 aa f8 dc e2 69 8e a0 fd 42 2a 87 f5 62 64 3c c1 2e c0 ac c9 aa 68 99 3c f0 39 1d 83 58 1d 4b 3a 00 96 ae dc 70 b4 e4 a7 ce 65 58 05 b4 fb 8e bc bf 10 3f 36 46 40 70 c5 0c 77 b9 d3 3a eb 0f b1 16 fb 6f 13 4b 51 87 90 96 0d 41 58 63 98 25 73 3f 2c 27 3c fd b0 42 76 1c 0c 01 29 d3 64 e9 c3 21 1c b1 69 b0 ed 3a Data Ascii: ygUrn0GEr0'}nY/A[9{18&h4p9K}^Qmh=h=02h<$xwIiB*bd<.h<9XK:peX?6F@pw:oKQAXc%s?,'<Bv)d!i:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	54821	13.107.246.51	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:46 UTC	649	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:46 UTC	744	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:46 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: d0118c24-201e-0006-5ede-1a8756000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241011T140946Z-17db6f7c8cfvzwz27u5rnq9kpc000000027g00000000qp18 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:46 UTC	15640	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-11 14:09:46 UTC	1534	IN	Data Raw: 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	54822	13.107.246.51	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:46 UTC	618	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:46 UTC	798	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:46 GMT Content-Type: application/x-javascript Content-Length: 116365 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:54 GMT ETag: 0x8DCBD5317046A2F x-ms-request-id: 6a39f71d-001e-0036-5e91-1b4e26000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241011T140946Z-17db6f7c8cf6qp7g7r97wxgbqc000000019000000000nupz x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:46 UTC	15586	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 30 44 46 78 48 42 7a 98 49 02 07 c8 f4 f4 10 4f 1e 61 97 b1 12 23 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b bf 38 3c bb a8 9d bc ab 5d fc e5 f8 ec 6d ed 14 ee 7e ad 7d 3c b9 38 7e 73 b4 7e 3d d8 28 fe bb 98 f8 71 6d ec 4f 79 0d 7e af bc 98 8f 6a 61 50 0b a3 9a 1f 0c c3 68 16 46 5e c2 e3 da 0d fc 8d 7c 6f 5a 1b 47 e1 4d 2d 99 f0 da 2c 0a bf f2 61 12 d7 a6 7e 9c c0 47 57 7c 1a de d5 4c a8 2e 1a d5 4e bd 28 79 a8 1d 9f 5a 2d a8 9f 43 6d fe b5 1f c0 d7 c3 70 f6 00 d7 93 a4 16 84 89 3f e4 35 2f 18 51 6d 53 b8 09 62 5e 4b 83 11 8f 6a 77 13 7f 38 a9 7d f0 87 51 18 87 e3 a4 16 f1 21 f7 6f Data Ascii: k[H(}[-c0DFxHBzIOa#ytkJ&^~_jW;8<]m~}<8~s~=(qmOy~jaPhF^\|oZGM-,a~GW\|L.N(yZ-Cmp?5/QmSb^Kjw8}Q!o
2024-10-11 14:09:46 UTC	16384	IN	Data Raw: 72 48 0c 1b 29 1f 49 83 69 74 84 3e 47 59 80 42 9b b2 59 ca d8 88 5e 36 a7 24 f7 af 17 38 0d 53 1c 3e 97 dc 17 24 8a 0d 4a a7 01 95 4d e2 5c ba e4 61 91 1d cc fc 76 23 bb 17 d9 47 55 e3 fb 1d 24 72 d5 75 be 53 62 b7 c3 d2 4d f8 e3 e1 9f 08 fe 94 d8 cb 4c b2 60 93 73 a2 08 7c dd c2 cc 73 9f 8e 83 c4 ee be 3e 32 f9 4f b1 b5 a0 9d 4a e3 1e bb 1b c2 d1 c8 77 a3 9e bf 9f 52 28 74 4a 36 90 30 df 82 5a d0 d6 7a 03 ab 1b c3 71 f0 37 c6 a2 a7 e2 09 4c c4 d8 f5 2d 06 8f 9b b6 66 12 5d 1b ff 14 d3 96 df 40 63 44 2c e6 6f b8 f8 2d c3 e6 72 5b e7 a8 e9 1d a4 c2 f9 71 c3 23 61 49 cf 47 27 27 7f 63 23 57 e2 4e 51 f5 3a 81 a7 93 7d af 37 d1 7a d7 44 92 9b fa 37 81 4e 4d 11 fd 88 ec b6 68 ac 96 e7 17 55 b3 97 4f d5 55 ce e4 46 ae d0 47 c2 99 47 5b 6a a1 db c9 ce 2d d0 71 Data Ascii: rH)Iit>GYBY^6$8S>$JM\av#GU$ruSbML`s\|s>2OJwR(tJ60Zzq7L-f]@cD,o-r[q#aIG''c#WNQ:}7zD7NMhUOUFGG[j-q
2024-10-11 14:09:46 UTC	16384	IN	Data Raw: 29 8c 92 ca 92 96 69 33 da 9c 35 38 fc d6 d6 60 90 eb 41 a0 12 7b 42 d2 a3 7c 11 42 9b 34 a2 89 fa ac 50 54 6d 90 84 ac 5a 8e c0 f6 f8 15 ad ba d6 15 90 17 54 c3 6f b0 8f f9 f7 1b 9e 4f e9 71 33 74 f5 c0 fd e6 30 a7 21 7d a1 5d 47 f8 42 c3 4d be f3 4f 41 ba 44 02 66 76 07 a0 26 a7 28 74 99 e0 3b c9 b0 c7 62 54 65 49 f7 30 01 73 38 73 93 6f be 83 38 82 66 ee ce ce 1e 6e 0d f8 b1 f5 0c 45 5a dc 2d bb 1e b9 c6 a8 1c a5 3d e7 d3 a7 01 cc 63 fd e7 fc 53 3e 06 6a 35 fc f4 09 4b f4 c5 6e dd 03 86 b1 25 2e c8 49 20 ba c1 d7 11 55 f4 05 62 8b c7 b5 5e f7 e2 9e ef 6c 35 b7 f6 9a 6d 87 5d 61 90 56 d2 75 a6 25 9c a5 be 73 39 49 2f c2 89 c3 06 e9 f4 2e 8b 2f c7 85 ef 7c bc 0d 9f ad 6c b6 da db eb 9b ad cd ed 95 17 51 82 39 5e a0 b7 cf f0 f1 eb 15 f7 97 49 1a 67 29 5a Data Ascii: )i358`A{B\|B4PTmZToOq3t0!}]GBMOADfv&(t;bTeI0s8so8fnEZ-=cS>j5Kn%.I Ub^l5m]aVu%s9I/./\|lQ9^Ig)Z
2024-10-11 14:09:46 UTC	16384	IN	Data Raw: 43 68 1e b4 61 d1 c2 e6 08 96 6a d0 1c 75 d2 c3 bc a3 a2 68 ef 40 82 32 1c 1c 7b 39 fa ab 83 34 35 ee 0e dd d2 bd c6 a3 e3 da f3 7c fa 79 15 5c ca 3e 2f 40 6c be 3a bc e8 78 20 98 f4 2e e0 1d e4 fd 56 63 77 ca ae d9 1d 3a bf 64 68 0d bf 86 7f 8c a4 17 fe f8 eb 7d 5b d4 06 df ab e2 2b 59 bc 90 fa 71 8c 6d 52 7e a4 58 f9 fa 23 e9 ab 86 4c d4 b9 ba f0 c4 a4 6a a5 37 fb c1 26 5b c5 f2 30 9b 42 1c ab 21 ec 3a 8a cc 58 07 52 57 12 27 53 82 ac c7 c9 ad f0 1a cb f1 c6 54 45 5c 89 e4 5c bd 7e 67 7a 48 3c 46 dc 1b 4a 50 ba e3 2e 79 86 a5 3e ca 8a 99 87 ca 6b 17 98 cf 6e 0f 3e 00 68 d3 f7 f1 5f 4f 3b 19 98 1a 87 7b c1 08 f8 63 17 4f 7f ce 0c e0 45 fb 8b 27 9e ee 44 80 27 ce ab 3e 29 12 46 c4 b8 b4 78 ad c9 f6 06 5c b6 37 22 bf 58 45 07 fb 68 b5 36 b5 cb 52 b6 2d b7 Data Ascii: Chajuh@2{945\|y\>/@l:x .Vcw:dh}[+YqmR~X#Lj7&[0B!:XRW'STE\\~gzH<FJP.y>kn>h_O;{cOE'D'>)Fx\7"XEh6R-
2024-10-11 14:09:46 UTC	16384	IN	Data Raw: 50 d0 d5 39 aa fa b8 ea f0 0c 5e b3 3c ed 39 82 c4 c7 f0 e9 f8 a9 11 fd ee 03 1a 02 ec ec bc 1e bd 0c cf 82 8f 18 b1 2f f9 88 f8 f5 23 27 ed f9 c8 49 92 e1 1d 56 8c 6e 6f f1 cf 94 ff 2c 77 76 ec 2f 77 7a 98 3c 16 d9 f0 ed 93 db db 13 5b d5 13 9e a8 98 80 40 5f 4f 91 e3 3d 11 94 39 fa 19 ba 7f ca ac ef 0d d6 09 1c 92 46 38 e2 5f c7 49 80 9e 8b 38 eb 6c 85 09 b4 62 9d 5b 1d 47 92 f1 80 12 5a 18 ff 2c 54 bd 88 98 d9 ee e6 6f 4b a0 df 82 eb 90 1a 8e 00 5a 51 5c b0 c2 e5 84 de 2e 50 30 f1 df 6e 0c 8b a6 ae c5 6b 1f 27 c6 89 07 4e c3 78 68 cd f9 b4 db 43 45 68 31 f4 4e bb b0 17 d0 fc 82 4d ac e3 d0 7d d5 09 af 3d bd d4 fe 19 1c c3 e9 22 e3 50 a5 b2 47 17 b0 3f bc 0a d5 2e 75 7a b8 4f b2 1e 67 34 d9 4e 63 97 9f 7b d6 02 d4 b7 02 3a c1 61 cd 3d bd 16 ca 31 da 5e Data Ascii: P9^<9/#'IVno,wv/wz<[@_O=9F8_I8lb[GZ,ToKZQ\.P0nk'NxhCEh1NM}="PG?.uzOg4Nc{:a=1^
2024-10-11 14:09:46 UTC	16384	IN	Data Raw: 74 72 fb 31 53 f0 93 bc 81 d3 83 bc d1 d3 83 6f 9c 02 6a e3 fb cf 03 ef f3 c6 93 51 af 57 f8 d0 5e 5b 41 b8 f6 c6 e1 d5 bf ff 20 b0 d5 6f 1c 43 7a 51 d7 1b c8 5f b4 24 71 d3 9b 0f a9 c9 b3 dd 0b f2 21 90 e4 43 24 09 25 4b 50 0d cf 8c 6f 62 e5 88 72 b3 63 51 46 52 e9 a5 cc 3b 9c 98 a6 0a 38 4d 85 3e df 95 f8 88 93 19 59 81 f6 42 13 0b 3c a8 2b 2c 2d 59 af b6 22 6e 07 b3 d5 11 28 e7 e0 30 d6 1d 1f c9 39 a8 6e 32 07 6f ac 59 1e 59 61 06 62 7c 2e 46 48 49 7c f6 91 70 d4 91 9b 81 f1 18 46 32 48 1c 20 d2 22 15 56 dd 08 24 98 bd d5 e8 1b 4f 8d 4c 62 15 e0 46 85 7d 25 72 e1 38 5e 7e 87 07 db e6 9f 6c e6 7d 32 ab ec c2 0d 57 35 d2 59 01 79 ee 6f 72 13 0d 85 da 8b c2 83 6c d0 0b 34 66 a5 dd 0c f0 9d ab f8 24 00 73 8c 07 b4 02 92 4b d5 b1 75 17 96 0e b3 72 50 0e 90 Data Ascii: tr1SojQW^[A oCzQ_$q!C$%KPobrcQFR;8M>YB<+,-Y"n(09n2oYYab\|.FHI\|pF2H "V$OLbF}%r8^~l}2W5Yyorl4f$sKurP
2024-10-11 14:09:46 UTC	16384	IN	Data Raw: 63 4d 91 32 d6 52 36 60 5b ac 09 30 f3 65 fb ce f6 e7 38 a2 0d 16 84 de c9 87 1f 4f 4a f8 36 33 60 db bc f3 8d 03 e9 66 d1 90 42 cf a6 8c fd 73 20 33 13 e0 aa f5 a5 40 6e 98 1e 23 65 91 c8 1f 22 65 95 88 25 a6 ed 09 b2 32 48 8d e5 00 61 76 8c 6d 19 c2 5e e8 e8 5e 3a 68 05 64 8e e3 55 ad b0 7d a3 83 90 da 2a 86 89 ff 9d c7 b5 4c 3e b3 9f 90 23 3f b5 f8 ac 9f a3 69 ac a8 c9 d7 f0 d0 a1 31 ea b0 ea 38 1e fd 81 54 43 6a 1c c9 64 bf 17 8b 88 be 28 f5 24 4f 23 ba 05 68 c1 47 42 db e7 a1 13 f6 2b fb 9b 6e 7b fe 7a ee ac 7b ca 26 59 1f ca 92 10 03 1c 99 6d 00 76 75 8c 2b c5 8d 05 8e f2 dd 2e 95 2d ec ca 58 d9 6b fb 4e 66 a6 cd 1d 6c b8 21 f1 95 ff f2 7e 8c bb ce 0d 00 36 ef 3f bd f7 5f 1e 44 1d cd 79 b1 33 af ad 20 dc 62 0c f8 da ff d2 10 b6 5d 8b f8 dd ff 09 a0 Data Ascii: cM2R6`[0e8OJ63`fBs 3@n#e"e%2Havm^^:hdU}*L>#?i18TCjd($O#hGB+n{z{&Ymvu+.-XkNfl!~6?_Dy3 b]
2024-10-11 14:09:46 UTC	2475	IN	Data Raw: de 2c 30 3f 34 26 15 78 3c 32 d3 c9 17 b6 63 68 f2 5e 3e ca 38 c7 fa da b4 a6 b7 c9 4e e7 6b eb eb 52 5a e4 a3 63 e0 52 22 d0 e9 eb e5 b4 39 64 8c cb 89 81 6f d5 ca 69 80 28 8f c7 e5 c4 31 24 e6 e5 c4 29 24 a6 e5 c4 89 0f 04 77 29 6d e6 03 81 5d 4a 1b f9 40 80 97 d2 6e 7c 20 c6 4b 69 97 3e 50 1b a5 b4 73 1f 48 9c 52 da 85 0f a4 51 29 ed cc b7 9e 94 d3 ae d0 e1 5d 29 ed da b7 be 2d a7 1d c9 68 79 e3 e3 b4 66 7d f1 b5 ed ac f7 28 1c df ed 02 dd 2b ec 9b 9f eb f4 dd eb 7d 2b 33 dc 1d af db 7d ff f8 89 03 39 df f8 eb ad c1 71 0a 93 ff b5 bd 0e 9f d7 dd 17 14 4f 10 e3 02 ae 47 0f d8 5e 7f 74 4f dd e7 ee a1 fb d6 fd d5 7d e5 be 73 0f 7e 87 46 f4 ed c2 7d 89 4a 7c 59 a6 83 dc bb ef fd 83 56 74 1e 03 cf f7 82 63 43 7f e7 bf 94 24 d3 33 bf ed be 46 3e eb 7b 14 3a Data Ascii: ,0?4&x<2ch^>8NkRZcR"9doi(1$)$w)m]J@n\| Ki>PsHRQ)])-hyf}(+}+3}9qOG^tO}s~F}J\|YVtcC$3F>{:

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	54823	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:46 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:46 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:46 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: db78f4ca-901e-0064-2ee7-1be8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140946Z-1597f696844gnxkv9xdcpvd3zn00000003s0000000008beh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-11 14:09:46 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.6	54825	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:46 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:46 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:46 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: b287654a-001e-0017-109b-1b0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140946Z-r154656d9bcwntfgrk9d0utmv800000000h000000000s8kw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:46 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.6	54824	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:46 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:46 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:46 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: a6f3fb99-701e-0021-42dd-1b3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140946Z-r154656d9bczmjpg03n78axyks00000001700000000032aw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:46 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.6	54826	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:46 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:46 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:46 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: fe5fb923-c01e-002b-6fad-1b6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140946Z-1597f696844rxj9pg4nkdptn1w00000002p0000000002zyf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:46 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.6	54827	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:46 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:46 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:46 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 21c85c4c-c01e-000b-22e7-1be255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140946Z-r154656d9bckrjvwv99v3r8pqn00000000sg00000000kxbc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-11 14:09:46 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	54828	13.107.253.45	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:46 UTC	410	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_64Z6dmvJd_mCK0LlAXyiHg2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:46 UTC	798	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:46 GMT Content-Type: application/x-javascript Content-Length: 122196 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Sep 2024 20:27:05 GMT ETag: 0x8DCD1D6EFD1736A x-ms-request-id: b24316c7-401e-003f-763e-1a7c4a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241011T140946Z-1597f696844rmb6h7netdh4d8400000003m000000000x3h9 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:46 UTC	15586	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 7b 57 e3 48 92 38 fa ff fd 14 46 33 97 b6 1b 61 2c bf b0 45 ab 59 63 a0 8a 69 c0 0c 86 ea 9e a5 18 8e 2c a5 8d 1a 59 f2 4a 32 8f 31 de cf fe 8b 88 cc 94 52 b6 4c 55 cd ee b9 f7 dc 73 e7 41 59 99 91 af c8 c8 c8 88 c8 c8 c8 bd 9f b7 fe af d2 cf a5 dd ef ff 4f 69 78 d3 bb be 29 0d 4e 4b 37 9f cf ae 8f 4b 57 f0 f5 8f d2 e5 e0 e6 ac 7f f2 fd f5 60 a3 f8 ff 9b 47 2f 2e 8d 3d 9f 95 e0 df 91 1d 33 b7 14 06 a5 30 2a 79 81 13 46 b3 30 b2 13 16 97 a6 f0 37 f2 6c bf 34 8e c2 69 29 79 64 a5 59 14 fe c9 9c 24 2e f9 5e 9c 40 a1 11 f3 c3 97 52 19 aa 8b dc d2 95 1d 25 6f a5 b3 ab 4a 15 ea 67 50 9b 37 f1 02 28 ed 84 b3 37 f8 fd 98 94 82 30 f1 1c 56 b2 03 97 6a f3 e1 23 88 59 69 1e b8 2c 2a bd 3c 7a ce 63 e9 c2 73 a2 30 0e c7 49 29 62 0e Data Ascii: {WH8F3a,EYci,YJ21RLUsAYOix)NK7KW`G/.=30yF07l4i)ydY$.^@R%oJgP7(70Vj#Yi,<zcs0I)b
2024-10-11 14:09:46 UTC	16384	IN	Data Raw: a0 00 a4 9f 32 3f ff 4e b8 0b 43 59 2d 34 63 ec a9 cc 95 57 9c 30 b4 90 4d 67 78 3b 83 bb 97 58 45 7b 0e f0 14 00 1c 64 83 61 59 85 95 6f 98 9c 0e 32 fb 86 27 3d 71 3f 9a 36 1d 4d 00 06 9a 00 84 ca 0f d2 b7 b8 f0 9b cd 58 bc 52 0e f5 77 f4 40 01 85 e9 d8 8e 9e b2 ab f9 e8 fb 99 f3 8e 3b 42 9f 2d f2 37 c4 1b 07 ab b9 bf a3 ef 96 92 bb 56 9f 65 a3 d8 84 fe ac 74 4d e3 12 af 34 c3 1e 52 75 01 2a 4b 49 74 85 6e 61 8d 47 1b 5c f4 98 15 55 8b 5c 21 cb 95 8f fa 2d fc ce 70 1b fd 68 00 c2 11 0d c1 96 68 54 f2 aa 8e 9c e9 18 16 1d 06 8c 83 6d 5a b3 29 88 04 86 73 dc f5 70 00 dc c7 33 f4 35 7d f1 ec b1 17 b4 0d fa e6 82 af a4 2f 69 42 d1 ea f6 d6 79 26 ea 79 22 ec 05 22 26 2e bc 79 c1 55 93 00 f2 d1 e3 7a 99 5d b0 40 46 83 33 9d 90 8f 22 5a 0e 81 d6 64 7d 66 52 6e Data Ascii: 2?NCY-4cW0Mgx;XE{daYo2'=q?6MXRw@;B-7VetM4Ru*KItnaG\U\!-phhTmZ)sp35}/iBy&y""&.yUz]@F3"Zd}fRn
2024-10-11 14:09:46 UTC	16384	IN	Data Raw: 80 55 c3 c9 89 06 71 82 d6 e0 5d c8 95 e1 cd ef 89 8d 93 18 31 cd 6f 44 5a 11 c8 bc 4f de 07 ce 93 88 fd 0f 5c 39 d3 e9 57 ef c3 f1 ee c1 e1 1b 32 87 e2 7e ae ce b0 02 54 d4 63 99 97 aa ee cd a9 2a 4f 6c a2 c5 48 3f 05 4a b0 68 8d 92 1e a6 d3 33 31 37 0a ea 1e e2 6e ca 04 bc 81 c1 58 4c 46 4c 7d 22 32 e1 84 1c c6 bd 08 89 80 5b 42 69 b4 85 1f 21 9d 21 cf 1b 75 b3 8f 08 4b e9 cc 05 6f b0 18 36 03 bf 0f b0 97 f2 95 0d ae 21 b5 ee ca 06 77 e6 34 ae d2 84 8f 92 ce 5a b6 7b 5e b1 08 5a 61 42 c1 d4 a2 cc ab 7a 96 4e f4 62 1c 70 43 9f d3 bc 8a c5 45 2b 55 a0 26 32 76 de 98 d5 d5 36 0f b7 8d 61 ee a2 f7 70 a6 01 44 1e 64 1f 58 ff 9c 1a 29 af e4 bc a1 ec 68 e5 6a aa 51 5b 77 e2 2e d4 b5 b1 03 98 3e d3 39 da ee 32 5d b9 50 bd 6f b6 53 7f 7f 6b 2f 27 72 c8 4a b7 11 Data Ascii: Uq]1oDZO\9W2~Tc*OlH?Jh317nXLFL}"2[Bi!!uKo6!w4Z{^ZaBzNbpCE+U&2v6apDdX)hjQ[w.>92]PoSk/'rJ
2024-10-11 14:09:46 UTC	16384	IN	Data Raw: 84 7a 8a 1a 30 67 79 7f 74 8d dc f1 24 79 13 8e 87 8f 22 f7 94 ee ee 59 18 90 12 59 9e 0f a3 b2 2c da 93 19 6f 50 6c c2 b6 c6 89 f4 bd 8c 7e 96 14 8d fc 83 fd 84 9b 09 8f c0 d7 71 9c 6b 0d c5 df 60 9b 67 68 5b 21 be 4e 0a 70 e8 f7 64 8c a1 a6 e2 bb b8 ac 3b 47 43 70 53 77 dc b6 92 c9 5d 37 1a eb e2 5e 18 9b 8f b8 3e 85 94 45 cf fe 69 90 08 a9 15 d2 d4 ef d1 b5 04 3c 11 35 d8 72 da 81 97 3f 49 f3 78 f0 f8 f9 26 4a d8 0c 30 3b cd d3 11 94 49 3b a1 1f 63 44 9b ae 5d a3 d4 80 b1 47 5c a1 4c 32 73 c9 e8 0c b0 f5 1a 15 ae 26 79 c0 ab e8 26 fd 28 ab fc d8 60 89 04 2a b7 21 4a 15 f6 d0 f1 79 d6 00 22 b4 41 c2 ab c6 8f e8 37 e8 47 17 f0 84 5e 38 c1 a7 36 6f c4 59 03 25 b8 ca e7 3f 22 5e 6c 2b 4e ad 86 c3 46 3a 80 e9 a1 7c 55 98 93 7b a4 f8 f3 be 4b f6 a0 ef 85 d5 Data Ascii: z0gyt$y"YY,oPl~qk`gh[!Npd;GCpSw]7^>Ei<5r?Ix&J0;I;cD]G\L2s&y&(`*!Jy"A7G^86oY%?"^l+NF:\|U{K
2024-10-11 14:09:46 UTC	16384	IN	Data Raw: 01 c9 4f 59 48 56 58 39 0c 4c 0f 13 2c 26 ab 06 78 03 3f 2d f5 d6 8a ac 0b cb 37 8b 5a 9b a4 80 fc 4c 9f 67 a3 22 ce 6f 38 df 06 8f 42 ff 99 f6 43 83 5f 3c 32 21 d1 01 5f d1 07 c9 70 a5 39 7d 04 8d 1a ff 9c 5f 47 4e 4d 1a 4a 24 84 9e c6 d8 d6 0c 4b b3 1d 95 55 57 30 42 d6 5f 3a 1d 59 82 34 07 d2 38 75 36 35 7b 5e 51 7d b5 f0 0c 94 a0 79 a0 84 bf 95 db 10 88 82 9c 86 0e 3e f3 76 7b 97 34 ee 3f 89 a2 68 04 fc 0e d8 e5 20 11 33 70 73 e6 9d 34 30 0e cd 43 98 49 e0 08 6d 96 42 4a ac 30 83 0c c5 1e c2 61 54 a2 0c b3 9a 4e 71 93 11 cb 89 aa 4b 98 8c 29 a2 4d 3c 7d be 2f 65 56 33 79 b4 c1 79 5c 84 48 28 b8 b3 00 74 1b 68 ab c0 ac 53 8f 78 6d 21 df 63 e8 fa e5 d0 41 fa 0d 46 3c ae 3e d2 ed 15 20 61 b2 a0 a2 69 47 9c 6c da 26 a4 9d a7 a2 20 0c d1 61 43 8d e2 dc 97 Data Ascii: OYHVX9L,&x?-7ZLg"o8BC_<2!_p9}_GNMJ$KUW0B_:Y48u65{^Q}y>v{4?h 3ps40CImBJ0aTNqK)M<}/eV3yy\H(thSxm!cAF<> aiGl& aC
2024-10-11 14:09:46 UTC	16384	IN	Data Raw: f9 bf 73 67 29 8b 02 d7 cf e2 c8 8b a5 2d 45 92 b0 28 97 99 60 51 9c c3 c4 e2 f9 dd 2c e7 d5 6e 6a 0e 9a 32 20 1d 6c 74 e0 1b 38 55 02 3b 5a 32 9e 08 bc 81 80 c5 4c ee 07 cd bd 14 58 26 40 9a b9 c7 03 99 60 0e 1d 27 b7 65 16 b8 22 8f bd 3c f4 f6 83 7b 35 c7 4f fd 44 ba be 93 70 97 b1 58 7a 8e 2f 6d 9b 27 59 e0 04 22 b6 31 af fb 21 27 3f 75 12 b0 9b c0 f7 45 9e 44 71 10 24 98 b0 2c 89 c2 24 49 f2 80 83 4b ec a5 9b 5a 42 a5 36 48 28 77 5c 01 8a cd bd c4 f6 13 37 f0 30 9c 20 11 79 60 b3 ec 6e de a7 b5 ce d2 d8 e1 2c 72 79 e0 aa 7f 7d 8f 71 10 55 12 e7 be 0d a4 70 dc bb 39 ec 56 bb 09 0d 8f c8 22 70 ed 3c 03 57 95 76 68 83 53 c8 d8 0b 44 c8 6c 26 7c 1e ef 87 78 c3 34 e1 a1 b0 c1 45 6d 21 93 0c 1c 15 6c 28 07 6b c7 e2 85 7e 24 82 fd 74 13 19 dc 73 03 11 79 2c Data Ascii: sg)-E(`Q,nj2 lt8U;Z2LX&@`'e"<{5ODpXz/m'Y"1!'?uEDq$,$IKZB6H(w\70 y`n,ry}qUp9V"p<WvhSDl&\|x4Em!l(k~$tsy,
2024-10-11 14:09:46 UTC	16384	IN	Data Raw: ff f4 e4 41 1f b1 d5 b3 37 7f d9 b9 1d 64 0d a3 bb 9f 37 d2 5c a5 0f 41 76 e6 a9 7e b9 d1 73 30 25 bf 37 d3 5b f5 ad 7a ed 0f 9b fa ab 13 56 fe c0 68 33 7a b9 ae c6 fc ed c2 f1 89 c2 9b d6 ad 9c 9f 95 0b c3 33 d7 8c fc f5 cf 5f 8e c7 e1 f3 79 55 be 4c 5f 86 b6 97 bf 5d 12 da 26 db f8 db 4f 50 9d ce 4c ab f6 85 7a 65 f8 f2 f3 fe bd 2a 2a 0d ee f3 66 9f bd ed d9 ac 5f fe bd 99 a0 65 c1 cd 2a c9 37 8c bf d1 ea b4 92 64 6d 97 fc 52 e6 77 8a fc 6a ea cd a7 0d 91 93 ea 6f f3 c7 a5 90 cf 0b 4c 7a bd b9 b4 93 01 d2 34 f7 1b 29 3f ff a4 80 02 21 0f e9 16 b1 2f 4b ff f9 a7 9a 99 27 ab 5c 78 f9 fa 33 cb 8e cf eb 49 dd 99 a2 ef 44 49 bf be 6e af bd eb c4 15 7e 55 04 d7 d2 4b a9 f6 5f 18 5a df 49 ad 9f 55 2c 97 e9 5d b4 fb ba ea dd 95 fc 5d 95 e8 bb a9 99 45 f5 92 5d Data Ascii: A7d7\Av~s0%7[zVh3z3_yUL_]&OPLze*f_e7dmRwjoLz4)?!/K'\x3IDIn~UK_ZIU,]]E]
2024-10-11 14:09:47 UTC	8306	IN	Data Raw: 37 e5 29 58 35 42 a4 57 2c 51 d7 42 0b a5 87 50 f0 75 c4 42 ac 83 4a 05 cf 63 fa 98 4e 15 5d 56 82 4b 2d c0 c7 b8 6a ef 40 cd c1 db 98 14 e1 f9 4b 9b 64 70 3a 44 e2 9b 6b 11 99 ee ec 50 e9 eb 65 e0 45 99 29 5d 8b 49 06 38 a0 27 28 6c c7 37 5a 42 18 08 70 e1 60 4a 18 92 4a 73 f9 b3 1f 83 f4 d5 d2 c1 27 9e 78 12 45 97 73 82 4f e6 fc c9 4b db 25 0e 8c 07 9f 2d f9 b3 13 8e c2 0c 53 35 50 6f 3a 74 38 14 c9 9f c7 f0 6f ac c1 83 53 20 04 12 1f 24 49 e4 06 48 fb 00 12 58 04 06 f0 b7 d4 cc e5 63 83 c1 29 8f 84 c4 a3 65 51 b2 bd c4 37 c0 41 15 ef 18 55 5c 73 20 e0 61 32 43 32 3c 3f 64 33 3a 09 e7 37 27 21 96 3f 05 6d 04 06 e3 28 0b 23 f4 4e 42 81 5c 48 cf 4f 9e 30 b8 22 56 7d 24 e2 94 82 c7 c0 d5 3e 49 ad 9c f8 3e 1e 49 72 c2 79 4d ec 38 44 9f 00 ed 8a ae fc fb d0 Data Ascii: 7)X5BW,QBPuBJcN]VK-j@Kdp:DkPeE)]I8'(l7ZBp`JJs'xEsOK%-S5Po:t8oS $IHXc)eQ7AU\s a2C2<?d3:7'!?m(#NB\HO0"V}$>I>IryM8D

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	54831	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:47 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:47 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:47 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: dac0d9b0-601e-0097-08fb-19f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140947Z-1597f696844wqd6lfkgu19yfdc00000003qg000000004vdv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:47 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.6	54833	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:47 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:47 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:47 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: ec733f58-401e-0035-529c-1b82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140947Z-r154656d9bcpcz2wp6sxz2m5qw00000000eg00000000c2a2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:47 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	54830	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:47 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:47 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:47 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 94af9378-501e-0047-4aca-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140947Z-1597f6968448879qsksvpyxqh400000000pg00000000p4b6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:47 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	54829	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:47 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:47 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:47 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 555a530f-b01e-0070-599c-1b1cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140947Z-r154656d9bcpnqc46yk454phh800000009sg00000000vcm3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:47 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.6	54832	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:47 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:48 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:47 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: bdf1ddaa-101e-0046-0383-1b91b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140947Z-r154656d9bccl8jh8cxn9cxxcs0000000nkg00000000vp6q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:48 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	54834	13.107.246.51	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:48 UTC	620	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:48 UTC	817	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:48 GMT Content-Type: application/x-javascript Content-Length: 5529 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:54 GMT ETag: 0x8DCBD531731891C x-ms-request-id: 1b2e2992-b01e-006d-71de-1b48b0000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241011T140948Z-17db6f7c8cf96l6t7bwyfgbkhw000000011g00000000axsm x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:48 UTC	5529	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ad 5b 7d 77 9b 46 d6 ff 7f 3f 05 62 f7 28 b0 19 63 bb 69 9b 16 97 fa 38 7a 49 d4 da b1 6b c9 ed 66 93 1c 1d 24 46 12 31 02 ca 20 db aa a5 ef fe fc ee 0c 08 24 21 d9 e9 b3 3d a9 31 33 77 ee dc b9 73 df 2f 3e fc 77 ed 1f da bf b5 83 e7 ff a7 75 7b 67 d7 3d ed b2 ad f5 de 75 ae 9b da 15 de 3e 68 ef 2f 7b 9d 46 eb f9 78 68 53 fa bf 37 f1 85 36 f2 03 ae e1 39 70 05 f7 b4 28 d4 a2 44 f3 c3 61 94 c4 51 e2 a6 5c 68 53 fc 4c 7c 37 d0 46 49 34 d5 d2 09 d7 e2 24 fa c2 87 a9 d0 02 5f a4 58 34 e0 41 74 af 19 40 97 78 da 95 9b a4 73 ad 73 65 5a c0 cf 81 cd 1f fb 21 56 0f a3 78 8e df 27 a9 16 46 a9 3f e4 9a 1b 7a 12 5b 80 97 50 70 6d 16 7a 3c d1 ee 27 fe 70 a2 5d f8 c3 24 12 d1 28 d5 12 3e e4 fe 1d 36 11 33 8c af 6f c1 34 37 e1 9a e0 a9 36 Data Ascii: [}wF?b(ci8zIkf$F1 $!=13ws/>wu{g=u>h/{FxhS769p(DaQ\hSL\|7FI4$_X4At@xsseZ!Vx'F?z[Ppmz<'p]$(>63o476

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	54837	13.107.253.45	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:48 UTC	404	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:48 UTC	738	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:48 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: 6aff6833-501e-0017-7c44-0c55f0000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241011T140948Z-r154656d9bcp2td5zh846myygg0000000y7g00000000cdyz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:48 UTC	15646	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-11 14:09:48 UTC	1528	IN	Data Raw: 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	54835	13.107.246.51	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:48 UTC	668	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:48 UTC	740	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:48 GMT Content-Type: image/gif Content-Length: 2672 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:47 GMT ETag: 0x8DB5C3F48EC4154 x-ms-request-id: 003d4ad4-501e-0007-26f5-1a9098000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241011T140948Z-17db6f7c8cfwtn5x6ye8p8q9m000000000g00000000087pf x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:48 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	54836	13.107.246.51	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:48 UTC	662	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:48 UTC	740	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:48 GMT Content-Type: image/gif Content-Length: 3620 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4904824B x-ms-request-id: 5358dffb-101e-0015-08f0-1ad4e5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241011T140948Z-17db6f7c8cfhzb2znbk0zyvf6n00000001sg000000003edc x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:48 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	54838	13.107.253.45	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:48 UTC	433	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:48 UTC	813	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:48 GMT Content-Type: application/x-javascript Content-Length: 116365 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:54 GMT ETag: 0x8DCBD5317046A2F x-ms-request-id: 18d34ba5-701e-005e-3a9c-1b28b6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241011T140948Z-1597f6968449cxlldwc92t48ds00000003kg00000000bf12 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:48 UTC	15571	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 30 44 46 78 48 42 7a 98 49 02 07 c8 f4 f4 10 4f 1e 61 97 b1 12 23 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b bf 38 3c bb a8 9d bc ab 5d fc e5 f8 ec 6d ed 14 ee 7e ad 7d 3c b9 38 7e 73 b4 7e 3d d8 28 fe bb 98 f8 71 6d ec 4f 79 0d 7e af bc 98 8f 6a 61 50 0b a3 9a 1f 0c c3 68 16 46 5e c2 e3 da 0d fc 8d 7c 6f 5a 1b 47 e1 4d 2d 99 f0 da 2c 0a bf f2 61 12 d7 a6 7e 9c c0 47 57 7c 1a de d5 4c a8 2e 1a d5 4e bd 28 79 a8 1d 9f 5a 2d a8 9f 43 6d fe b5 1f c0 d7 c3 70 f6 00 d7 93 a4 16 84 89 3f e4 35 2f 18 51 6d 53 b8 09 62 5e 4b 83 11 8f 6a 77 13 7f 38 a9 7d f0 87 51 18 87 e3 a4 16 f1 21 f7 6f Data Ascii: k[H(}[-c0DFxHBzIOa#ytkJ&^~_jW;8<]m~}<8~s~=(qmOy~jaPhF^\|oZGM-,a~GW\|L.N(yZ-Cmp?5/QmSb^Kjw8}Q!o
2024-10-11 14:09:48 UTC	16384	IN	Data Raw: c6 f1 60 48 76 39 a2 ca 7d 0a c4 6c 46 7b 28 72 48 0c 1b 29 1f 49 83 69 74 84 3e 47 59 80 42 9b b2 59 ca d8 88 5e 36 a7 24 f7 af 17 38 0d 53 1c 3e 97 dc 17 24 8a 0d 4a a7 01 95 4d e2 5c ba e4 61 91 1d cc fc 76 23 bb 17 d9 47 55 e3 fb 1d 24 72 d5 75 be 53 62 b7 c3 d2 4d f8 e3 e1 9f 08 fe 94 d8 cb 4c b2 60 93 73 a2 08 7c dd c2 cc 73 9f 8e 83 c4 ee be 3e 32 f9 4f b1 b5 a0 9d 4a e3 1e bb 1b c2 d1 c8 77 a3 9e bf 9f 52 28 74 4a 36 90 30 df 82 5a d0 d6 7a 03 ab 1b c3 71 f0 37 c6 a2 a7 e2 09 4c c4 d8 f5 2d 06 8f 9b b6 66 12 5d 1b ff 14 d3 96 df 40 63 44 2c e6 6f b8 f8 2d c3 e6 72 5b e7 a8 e9 1d a4 c2 f9 71 c3 23 61 49 cf 47 27 27 7f 63 23 57 e2 4e 51 f5 3a 81 a7 93 7d af 37 d1 7a d7 44 92 9b fa 37 81 4e 4d 11 fd 88 ec b6 68 ac 96 e7 17 55 b3 97 4f d5 55 ce e4 46 Data Ascii: `Hv9}lF{(rH)Iit>GYBY^6$8S>$JM\av#GU$ruSbML`s\|s>2OJwR(tJ60Zzq7L-f]@cD,o-r[q#aIG''c#WNQ:}7zD7NMhUOUF
2024-10-11 14:09:48 UTC	16384	IN	Data Raw: d6 d6 bf a7 c9 82 82 ed 58 a9 a7 1e 3e d1 2c 29 8c 92 ca 92 96 69 33 da 9c 35 38 fc d6 d6 60 90 eb 41 a0 12 7b 42 d2 a3 7c 11 42 9b 34 a2 89 fa ac 50 54 6d 90 84 ac 5a 8e c0 f6 f8 15 ad ba d6 15 90 17 54 c3 6f b0 8f f9 f7 1b 9e 4f e9 71 33 74 f5 c0 fd e6 30 a7 21 7d a1 5d 47 f8 42 c3 4d be f3 4f 41 ba 44 02 66 76 07 a0 26 a7 28 74 99 e0 3b c9 b0 c7 62 54 65 49 f7 30 01 73 38 73 93 6f be 83 38 82 66 ee ce ce 1e 6e 0d f8 b1 f5 0c 45 5a dc 2d bb 1e b9 c6 a8 1c a5 3d e7 d3 a7 01 cc 63 fd e7 fc 53 3e 06 6a 35 fc f4 09 4b f4 c5 6e dd 03 86 b1 25 2e c8 49 20 ba c1 d7 11 55 f4 05 62 8b c7 b5 5e f7 e2 9e ef 6c 35 b7 f6 9a 6d 87 5d 61 90 56 d2 75 a6 25 9c a5 be 73 39 49 2f c2 89 c3 06 e9 f4 2e 8b 2f c7 85 ef 7c bc 0d 9f ad 6c b6 da db eb 9b ad cd ed 95 17 51 82 39 Data Ascii: X>,)i358`A{B\|B4PTmZToOq3t0!}]GBMOADfv&(t;bTeI0s8so8fnEZ-=cS>j5Kn%.I Ub^l5m]aVu%s9I/./\|lQ9
2024-10-11 14:09:48 UTC	16384	IN	Data Raw: a4 ca a6 93 a3 67 05 69 b4 c6 7e c4 d9 e3 39 43 68 1e b4 61 d1 c2 e6 08 96 6a d0 1c 75 d2 c3 bc a3 a2 68 ef 40 82 32 1c 1c 7b 39 fa ab 83 34 35 ee 0e dd d2 bd c6 a3 e3 da f3 7c fa 79 15 5c ca 3e 2f 40 6c be 3a bc e8 78 20 98 f4 2e e0 1d e4 fd 56 63 77 ca ae d9 1d 3a bf 64 68 0d bf 86 7f 8c a4 17 fe f8 eb 7d 5b d4 06 df ab e2 2b 59 bc 90 fa 71 8c 6d 52 7e a4 58 f9 fa 23 e9 ab 86 4c d4 b9 ba f0 c4 a4 6a a5 37 fb c1 26 5b c5 f2 30 9b 42 1c ab 21 ec 3a 8a cc 58 07 52 57 12 27 53 82 ac c7 c9 ad f0 1a cb f1 c6 54 45 5c 89 e4 5c bd 7e 67 7a 48 3c 46 dc 1b 4a 50 ba e3 2e 79 86 a5 3e ca 8a 99 87 ca 6b 17 98 cf 6e 0f 3e 00 68 d3 f7 f1 5f 4f 3b 19 98 1a 87 7b c1 08 f8 63 17 4f 7f ce 0c e0 45 fb 8b 27 9e ee 44 80 27 ce ab 3e 29 12 46 c4 b8 b4 78 ad c9 f6 06 5c b6 37 Data Ascii: gi~9Chajuh@2{945\|y\>/@l:x .Vcw:dh}[+YqmR~X#Lj7&[0B!:XRW'STE\\~gzH<FJP.y>kn>h_O;{cOE'D'>)Fx\7
2024-10-11 14:09:48 UTC	16384	IN	Data Raw: 41 1f ce 63 f8 7c 38 cb 6e 62 8c 3e 56 eb 18 50 d0 d5 39 aa fa b8 ea f0 0c 5e b3 3c ed 39 82 c4 c7 f0 e9 f8 a9 11 fd ee 03 1a 02 ec ec bc 1e bd 0c cf 82 8f 18 b1 2f f9 88 f8 f5 23 27 ed f9 c8 49 92 e1 1d 56 8c 6e 6f f1 cf 94 ff 2c 77 76 ec 2f 77 7a 98 3c 16 d9 f0 ed 93 db db 13 5b d5 13 9e a8 98 80 40 5f 4f 91 e3 3d 11 94 39 fa 19 ba 7f ca ac ef 0d d6 09 1c 92 46 38 e2 5f c7 49 80 9e 8b 38 eb 6c 85 09 b4 62 9d 5b 1d 47 92 f1 80 12 5a 18 ff 2c 54 bd 88 98 d9 ee e6 6f 4b a0 df 82 eb 90 1a 8e 00 5a 51 5c b0 c2 e5 84 de 2e 50 30 f1 df 6e 0c 8b a6 ae c5 6b 1f 27 c6 89 07 4e c3 78 68 cd f9 b4 db 43 45 68 31 f4 4e bb b0 17 d0 fc 82 4d ac e3 d0 7d d5 09 af 3d bd d4 fe 19 1c c3 e9 22 e3 50 a5 b2 47 17 b0 3f bc 0a d5 2e 75 7a b8 4f b2 1e 67 34 d9 4e 63 97 9f 7b d6 Data Ascii: Ac\|8nb>VP9^<9/#'IVno,wv/wz<[@_O=9F8_I8lb[GZ,ToKZQ\.P0nk'NxhCEh1NM}="PG?.uzOg4Nc{
2024-10-11 14:09:48 UTC	16384	IN	Data Raw: 6f 8f 8c 3d a0 b1 ba b9 56 ed db 8d 94 af 1a 74 72 fb 31 53 f0 93 bc 81 d3 83 bc d1 d3 83 6f 9c 02 6a e3 fb cf 03 ef f3 c6 93 51 af 57 f8 d0 5e 5b 41 b8 f6 c6 e1 d5 bf ff 20 b0 d5 6f 1c 43 7a 51 d7 1b c8 5f b4 24 71 d3 9b 0f a9 c9 b3 dd 0b f2 21 90 e4 43 24 09 25 4b 50 0d cf 8c 6f 62 e5 88 72 b3 63 51 46 52 e9 a5 cc 3b 9c 98 a6 0a 38 4d 85 3e df 95 f8 88 93 19 59 81 f6 42 13 0b 3c a8 2b 2c 2d 59 af b6 22 6e 07 b3 d5 11 28 e7 e0 30 d6 1d 1f c9 39 a8 6e 32 07 6f ac 59 1e 59 61 06 62 7c 2e 46 48 49 7c f6 91 70 d4 91 9b 81 f1 18 46 32 48 1c 20 d2 22 15 56 dd 08 24 98 bd d5 e8 1b 4f 8d 4c 62 15 e0 46 85 7d 25 72 e1 38 5e 7e 87 07 db e6 9f 6c e6 7d 32 ab ec c2 0d 57 35 d2 59 01 79 ee 6f 72 13 0d 85 da 8b c2 83 6c d0 0b 34 66 a5 dd 0c f0 9d ab f8 24 00 73 8c 07 Data Ascii: o=Vtr1SojQW^[A oCzQ_$q!C$%KPobrcQFR;8M>YB<+,-Y"n(09n2oYYab\|.FHI\|pF2H "V$OLbF}%r8^~l}2W5Yyorl4f$s
2024-10-11 14:09:48 UTC	16384	IN	Data Raw: 28 6a 74 56 53 66 c5 fe cf 72 5c d8 9f 15 29 63 4d 91 32 d6 52 36 60 5b ac 09 30 f3 65 fb ce f6 e7 38 a2 0d 16 84 de c9 87 1f 4f 4a f8 36 33 60 db bc f3 8d 03 e9 66 d1 90 42 cf a6 8c fd 73 20 33 13 e0 aa f5 a5 40 6e 98 1e 23 65 91 c8 1f 22 65 95 88 25 a6 ed 09 b2 32 48 8d e5 00 61 76 8c 6d 19 c2 5e e8 e8 5e 3a 68 05 64 8e e3 55 ad b0 7d a3 83 90 da 2a 86 89 ff 9d c7 b5 4c 3e b3 9f 90 23 3f b5 f8 ac 9f a3 69 ac a8 c9 d7 f0 d0 a1 31 ea b0 ea 38 1e fd 81 54 43 6a 1c c9 64 bf 17 8b 88 be 28 f5 24 4f 23 ba 05 68 c1 47 42 db e7 a1 13 f6 2b fb 9b 6e 7b fe 7a ee ac 7b ca 26 59 1f ca 92 10 03 1c 99 6d 00 76 75 8c 2b c5 8d 05 8e f2 dd 2e 95 2d ec ca 58 d9 6b fb 4e 66 a6 cd 1d 6c b8 21 f1 95 ff f2 7e 8c bb ce 0d 00 36 ef 3f bd f7 5f 1e 44 1d cd 79 b1 33 af ad 20 dc Data Ascii: (jtVSfr\)cM2R6`[0e8OJ63`fBs 3@n#e"e%2Havm^^:hdU}*L>#?i18TCjd($O#hGB+n{z{&Ymvu+.-XkNfl!~6?_Dy3
2024-10-11 14:09:48 UTC	2490	IN	Data Raw: 76 68 98 bc a0 3f 40 4a 03 1c b3 42 1d 27 14 de 2c 30 3f 34 26 15 78 3c 32 d3 c9 17 b6 63 68 f2 5e 3e ca 38 c7 fa da b4 a6 b7 c9 4e e7 6b eb eb 52 5a e4 a3 63 e0 52 22 d0 e9 eb e5 b4 39 64 8c cb 89 81 6f d5 ca 69 80 28 8f c7 e5 c4 31 24 e6 e5 c4 29 24 a6 e5 c4 89 0f 04 77 29 6d e6 03 81 5d 4a 1b f9 40 80 97 d2 6e 7c 20 c6 4b 69 97 3e 50 1b a5 b4 73 1f 48 9c 52 da 85 0f a4 51 29 ed cc b7 9e 94 d3 ae d0 e1 5d 29 ed da b7 be 2d a7 1d c9 68 79 e3 e3 b4 66 7d f1 b5 ed ac f7 28 1c df ed 02 dd 2b ec 9b 9f eb f4 dd eb 7d 2b 33 dc 1d af db 7d ff f8 89 03 39 df f8 eb ad c1 71 0a 93 ff b5 bd 0e 9f d7 dd 17 14 4f 10 e3 02 ae 47 0f d8 5e 7f 74 4f dd e7 ee a1 fb d6 fd d5 7d e5 be 73 0f 7e 87 46 f4 ed c2 7d 89 4a 7c 59 a6 83 dc bb ef fd 83 56 74 1e 03 cf f7 82 63 43 7f Data Ascii: vh?@JB',0?4&x<2ch^>8NkRZcR"9doi(1$)$w)m]J@n\| Ki>PsHRQ)])-hyf}(+}+3}9qOG^tO}s~F}J\|YVtcC

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	54843	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:49 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:49 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:49 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 0019f13c-601e-0070-29de-1ba0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140949Z-r154656d9bcqc2n2s48bp5ktg800000001wg000000002k2t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:49 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	54841	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:49 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:49 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:49 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 6ec52d65-901e-0083-299c-1bbb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140949Z-1597f696844l6hhwkgu2fa0dk000000000u000000000dxzp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:49 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	54840	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:49 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:49 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:49 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 61714eeb-b01e-003e-768a-1b8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140949Z-r154656d9bcvhs4tvca1phhah40000000150000000001d5m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:49 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.6	54839	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:49 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:49 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:49 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 9e066682-101e-008d-6332-1a92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140949Z-1597f696844mk866hfzabd6qfn00000001z0000000005xyv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:49 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	54842	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:49 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:49 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:49 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 0bce223c-701e-0053-1de7-1b3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140949Z-r154656d9bcwd4kdv0wzn7nx6800000002ag00000000bg9v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-11 14:09:49 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	54846	20.190.159.75	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:49 UTC	727	OUT	GET /b7dba93e-7b6e-4933-abb6-e1739feb42e5/winauth/ssoprobe?client-request-id=86f3327a-513a-4b17-80a7-f8671ca05158&_=1728655788321 HTTP/1.1 Host: autologon.microsoftazuread-sso.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:50 UTC	1184	IN	HTTP/1.1 401 Unauthorized Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: image/png; charset=utf-8 Expires: -1 Vary: Origin X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://login.microsoftonline.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, OPTIONS P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: c9ae0631-c60e-4731-ac59-7610377a1d00 x-ms-ests-server: 2.1.19066.8 - NEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} Referrer-Policy: strict-origin-when-cross-origin X-XSS-Protection: 0 WWW-Authenticate: Negotiate Set-Cookie: fpc=Ah4iwfmkw4xLkivGXh8aCqQ; expires=Sun, 10-Nov-2024 14:09:50 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Set-Cookie: stsservicecookie=estsfd; path=/; secure; samesite=none; httponly Date: Fri, 11 Oct 2024 14:09:49 GMT Connection: close Content-Length: 12
2024-10-11 14:09:50 UTC	12	IN	Data Raw: 55 6e 61 75 74 68 6f 72 69 7a 65 64 Data Ascii: Unauthorized

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	54845	152.199.21.175	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:49 UTC	701	OUT	GET /c1c6b6c8-obob6uz3nidzuuv1qwz2jtykzbgxef3vz5oy-e2m4f4/logintenantbranding/0/illustration?ts=636374910507629828 HTTP/1.1 Host: aadcdn.msauthimages.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:49 UTC	652	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 80026 Cache-Control: public, max-age=86400 Content-MD5: 4dgS+bJZCDtWU4nKsFRQdw== Content-Type: image/* Date: Fri, 11 Oct 2024 14:09:49 GMT Etag: 0x8D4DB9C056C1B6D Last-Modified: Sat, 05 Aug 2017 00:50:51 GMT Server: ECAcc (lhc/791A) X-Cache: HIT X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 7228fc33-301e-002e-482c-1bacf5000000 x-ms-version: 2009-09-19 Content-Length: 299116 Connection: close
2024-10-11 14:09:49 UTC	15733	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 03 03 03 03 03 03 04 04 03 05 05 04 05 05 07 06 06 06 06 07 0a 07 08 07 08 07 0a 0f 0a 0b 0a 0a 0b 0a 0f 0e 10 0d 0c 0d 10 0e 18 13 11 11 13 18 1c 18 16 18 1c 22 1e 1e 22 2b 29 2b 38 38 4b 01 03 03 03 03 03 03 03 04 04 03 05 05 04 05 05 07 06 06 06 06 07 0a 07 08 07 08 07 0a 0f 0a 0b 0a 0a 0b 0a 0f 0e 10 0d 0c 0d 10 0e 18 13 11 11 13 18 1c 18 16 18 1c 22 1e 1e 22 2b 29 2b 38 38 4b ff c2 00 11 08 05 1e 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 07 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a ff da 00 08 01 01 00 00 00 00 9b 79 b2 d0 d8 48 5b 93 e6 08 39 de 7f c8 f3 97 3b 3d 1d 8c c9 2e bd 25 d5 02 65 a4 b0 d2 42 e5 df 59 9d 7d 1e 27 8e e5 Data Ascii: JFIF""+)+88K""+)+88K"yH[9;=.%eBY}'
2024-10-11 14:09:50 UTC	16383	IN	Data Raw: a9 4b 5a b5 7f 50 7b b6 a7 9d be dc 78 95 b5 10 57 e5 7f 38 e0 be a0 58 79 ce 7f 47 e1 fe b3 f1 c7 ad 5d 9f 3f 81 e8 ba 75 37 3a e6 58 8c 27 3d 82 b5 84 a1 b4 21 b2 33 06 49 22 22 22 20 40 88 12 46 b7 e9 5e a3 21 81 e7 98 8e 6d cc 10 08 88 10 48 00 8c cc 00 40 8d 4a 0a 50 4a 49 00 94 0c 18 06 6a bd f6 6f b1 3a 5d eb e1 8c 9f 08 f1 07 59 f6 a7 46 b6 5a 5a 6d 28 89 50 56 93 e2 e7 72 59 7c 07 04 f3 df 35 a7 8e a9 93 4e 2c 68 cd a0 29 44 80 00 00 00 2c bb a7 d2 de d3 74 e3 70 33 b8 0e 2b c0 b9 06 1e 8e 24 7b 5b 87 09 67 51 1c 4d b3 55 6d 3f bf 79 d6 2b 23 69 bb 76 55 a5 9d bd c5 f5 be 27 80 70 9a f3 33 5b 8b 57 a0 be 8e 75 09 38 89 8d c7 89 51 4d 05 ef 24 ea 7c 31 eb 8f 4b 79 db d0 f8 da 4e 9b e7 bf 45 2a 75 c7 90 fd 03 a7 a6 e7 1c c3 15 85 e7 d0 56 a3 24 b6 Data Ascii: KZP{xW8XyG]?u7:X'=!3I""" @F^!mH@JPJIjo:]YFZZm(PVrY\|5N,h)D,tp3+${[gQMUm?y+#ivU'p3[Wu8QM$\|1KyNE*uV$
2024-10-11 14:09:50 UTC	16383	IN	Data Raw: cf c2 c5 66 f3 10 68 68 e3 30 b0 72 67 2c 4c 79 2b 90 8a d7 64 ad 6d c1 a7 a6 64 11 90 00 24 81 00 00 de 7d 03 ec 7d 9b 6e f0 22 22 54 35 ba 10 15 16 8f 3f 54 ca 50 02 7b aa 94 fc 7a 19 9a 2e 69 aa f2 b6 8f d3 1e 6b df 6c fc d7 ec 7a 0e 47 c9 fd a2 58 28 ba ab a6 a3 46 22 49 84 ba 73 1e 5a 8c c0 00 11 32 c3 51 e3 e2 3e 6d e4 71 38 ea cb 77 d5 3b a5 f5 0d 56 9b 1b 9e a2 d5 ed 29 26 44 7a 8f 17 03 19 80 c9 57 20 97 26 28 6d b4 02 24 a5 28 20 66 b7 ac 27 cd 40 92 eb 71 4e 34 76 23 b6 93 74 29 98 f1 d2 17 20 98 0b 90 6e cf a5 36 c0 b1 7e cb 47 70 cd 63 75 8e 97 63 d8 50 c7 cc 66 29 eb a0 47 42 10 83 5c 87 89 6a 35 4c 71 6e bf 2b 3f 0e 34 6a f4 90 00 10 04 08 00 7b 0f 50 fa c3 d4 96 c1 46 64 62 b2 be 3b d2 57 3d e0 94 a7 39 cd 79 95 7b 69 4f be 12 86 9a 64 82 Data Ascii: fhh0rg,Ly+dmd$}}n""T5?TP{z.iklzGX(F"IsZ2Q>mq8w;V)&DzW &(m$( f'@qN4v#t) n6~GpcucPf)GB\j5Lqn+?4j{PFdb;W=9y{iOd
2024-10-11 14:09:50 UTC	16383	IN	Data Raw: 9b f4 3e ce 9f 68 d0 26 44 8d 4a b2 2a c2 15 02 89 46 a3 42 87 62 46 a6 56 95 c5 2a 95 4c 8f ee ff 00 f2 c0 34 be 9e c2 61 84 59 00 b3 39 39 14 8e 52 15 e8 ef a3 c9 db ca 5c b6 56 de 7e e4 9d 9d d0 0a 94 dd ff 00 55 65 a5 96 32 17 8b 33 92 d5 fa b5 68 dd 49 9d cc 15 bc 21 e3 72 f1 4d 15 7a f8 e7 82 27 11 72 07 e1 97 55 cf 2e e6 2c 89 89 de 46 95 e7 90 a7 33 94 ed 0d 87 b7 1a f5 7a ce 36 84 ab 0d 7f 4f a9 86 54 32 b3 99 1c 92 d8 8a ed 89 a6 31 90 6c 15 c7 b8 76 39 91 4c 62 4f 23 97 73 31 73 44 a4 2e 49 f6 2d b9 e7 e8 4c 9d 46 ab a8 90 21 4d b3 26 d9 d4 8a 75 75 5b 42 ab 28 50 21 4c 99 32 64 c9 be ee 9d 3a 7d a3 41 b1 23 52 ac 8a b0 81 40 a2 51 a0 40 87 62 52 29 95 a5 6d 4c a5 53 22 fb bf fc bc 2c 1a 56 ac 42 4a 31 8d 3b c9 24 97 3e 73 4f 24 f3 cd 91 6c ac Data Ascii: >h&DJFBbFVL4aY99R\V~Ue23hI!rMz'rU.,F3z6OT21lv9LbO#s1sD.I-LF!M&uu[B(P!L2d:}A#R@Q@bR)mLS",VBJ1;$>sO$l
2024-10-11 14:09:50 UTC	16383	IN	Data Raw: c5 db 94 28 10 20 8f 09 16 63 27 a6 6a 04 93 db c5 52 cd 5f ad 6a 85 ea 99 21 c9 36 41 ef fc e2 bd 1d a0 9a a4 91 10 21 4c 9d 12 94 73 10 cc d5 4e ab b1 92 8e a1 47 9c 9a a8 3c 20 53 a7 0f 57 ae 21 18 44 63 15 5e ec 37 86 41 7f 20 e9 4f ea d2 07 83 c8 63 e6 88 fd a0 62 4c ee f2 3c ea ca 19 29 48 65 7c 6c b1 c0 f4 65 a5 f1 62 41 64 f2 16 f3 36 b5 0c ba 97 fd 2f fa 4f f4 2f a8 7f d3 49 a9 cb 50 cb 99 2c 89 1f b3 4c 96 3d e1 43 f6 35 69 8d a3 6a ce 1f 47 46 9d 16 ce 81 03 b2 74 6a 46 76 26 b2 39 58 f3 11 d9 17 4c 9b 67 4f f7 7f a5 60 84 41 89 36 c5 b9 a7 4e 8f ea 49 fe ee e9 90 b0 30 88 37 09 d0 a2 47 fb 19 46 e0 f1 90 93 bc a4 4b 4c d3 a8 10 af 21 64 67 67 66 42 99 d3 6c 0c c8 1f 4a e1 75 de a3 b7 5e 92 97 28 79 1c 4d bc b6 65 8e be 4e 0c d4 19 a6 cb 3e 64 Data Ascii: ( c'jR_j!6A!LsNG< SW!Dc^7A OcbL<)He\|lebAd6/O/IP,L=C5ijGFtjFv&9XLgO`A6NI07GFKL!dggfBlJu^(yMeN>d
2024-10-11 14:09:50 UTC	16383	IN	Data Raw: ca cd 67 e8 b5 5a ac fa 35 ff 00 30 9d 51 2b 5a 02 01 ac 71 62 11 b4 64 83 1b d3 6e 3d 27 8a 60 e2 b1 71 43 a2 e7 d1 b9 e7 20 a4 98 8d d5 6c 24 b1 32 30 dd c4 1a dd 13 5a 34 56 6b 96 f3 d5 e5 5b cd 5b ad 59 05 97 97 92 dd 72 f5 d6 f9 fa 15 f3 e0 a5 aa 90 32 26 17 1e c4 5e 63 9a bb 26 eb 83 89 54 74 91 75 34 f0 86 b4 72 0b 04 8d ca cb 13 ec 02 c2 45 93 78 ea 85 fa 07 04 6d 9f 46 ee 63 a0 ac bb 91 2b 11 c9 1e 2a e9 e4 0b 70 4e c2 b1 dd 66 b9 a0 d9 5b c9 65 70 ae b7 2e 16 3b 02 33 56 c9 61 6b c1 56 57 65 d5 9a b7 40 5e 6d 07 02 d5 a7 35 bc 50 21 16 48 0f 05 62 d7 04 1e 03 9b a8 43 ac 58 9d dc b7 ac 8b 40 70 59 fa 5c 8a cc ac fe 8d 9f 95 ba 56 67 a7 4f 43 91 5a ac cf f9 87 88 d9 75 d3 33 75 08 63 60 b2 c0 d5 75 65 74 42 bf 46 14 d4 51 e8 1d 36 f2 cc a7 44 64 Data Ascii: gZ50Q+Zqbdn='`qC l$20Z4Vk[[Yr2&^c&Ttu4rExmFc+*pNf[ep.;3VakVWe@^m5P!HbCX@pY\VgOCZu3uc`uetBFQ6Dd
2024-10-11 14:09:50 UTC	16383	IN	Data Raw: ef 6e f0 60 0e b8 bd b8 90 99 1d 11 6c 70 4c e3 24 7b c4 0c 21 97 1c 49 e2 a7 d8 9e 0f c5 4c 68 25 f1 f7 65 07 5a 41 d7 89 1f 72 ae f0 83 69 3f 6a 6d e7 c9 53 2b cd ed 21 c8 76 00 b6 55 34 6d 0d a1 81 a0 0e 0c 0b 66 75 26 30 f8 20 9b b5 a2 c7 bc 29 26 a8 96 89 9d 5c 55 4c 71 04 bc ee d8 71 0b 68 d3 ed 9f 1c 93 c2 47 47 2c 32 f9 a8 d8 ec 24 e5 d9 97 cd 6d 1d 9d b3 aa a5 da 14 95 15 0e 9e 77 ce 66 c7 8c 58 f6 7b 2a 0a ea 48 ab 62 be 09 5a 1c db e5 aa be 64 ea 83 5a a5 0e bb 33 ec 4d 9a 27 d9 da 1d 39 2b 30 e7 9a 8e b1 b6 a8 a7 c7 6b e0 7b 72 7b 7b 8a da db 56 19 62 86 0b d3 4e cc 2e 2e 3d 5d c7 6a a7 f0 4b 66 be 93 ab 22 5c 5b ef 75 af 27 6e 4a 8e 9a 02 cc 62 e5 4e ca c7 d7 41 2f 57 2b 2e e6 b9 a6 cb 69 d5 6c e3 05 5c d8 e4 1a 3b 8a 8f 69 ed 0b 48 49 37 42 Data Ascii: n`lpL${!ILh%eZAri?jmS+!vU4mfu&0 )&\ULqqhGG,2$mwfX{*HbZdZ3M'9+0k{r{{VbN..=]jKf"\[u'nJbNA/W+.il\;iHI7B
2024-10-11 14:09:50 UTC	16383	IN	Data Raw: 5b 20 68 c3 dc b6 9d 36 d6 69 86 aa 77 33 18 66 0e b5 e5 96 bf ba 4d 95 c5 fa 35 59 95 aa d5 67 f4 7c ef c5 6d ad 9a 30 32 a7 ac 8b dc 97 7c 7c 38 aa 67 10 ca da 12 c6 fb f1 1c 7f 62 d8 fb 4a 46 1a 6d a3 13 9d ee 13 85 df 22 a4 cf 2b 84 fc 36 e4 57 e9 32 40 47 9f 2b 27 e0 6f 33 9a dc 5b dd ea ec cb 81 36 5b d6 56 c7 97 15 87 3e cb 2d 51 c4 b3 ba b9 5e 6e ff 00 b3 b7 82 cd 8b 71 ab 21 e4 dc 39 64 f5 86 bf e2 bc d3 16 43 e8 00 a6 e7 92 6e f6 48 0b a0 d2 82 09 a8 1f 20 fe d3 a7 74 6f b9 ce 3c c8 ee 5f 9a 58 9d eb 97 5b 95 d4 91 54 b1 8d bd d8 f0 e2 aa 2a 1b 0c d2 b6 d7 d0 74 df a2 fd 37 28 f4 62 e1 d1 92 d3 25 7e 8d 05 96 5a 23 a5 90 19 b8 d8 2d 81 b2 4b db e3 3d 7c ed fd 5c 3b c7 e3 c9 6d 7a 92 5b 47 0c 74 b1 f3 f5 df fc 82 ab db 7b 5a 07 54 ce f9 9d 8a f7 Data Ascii: [ h6iw3fM5Yg\|m02\|\|8gbJFm"+6W2@G+'o3[6[V>-Q^nq!9dCnH to<_X[T*t7(b%~Z#-K=\|\;mz[Gt{ZT
2024-10-11 14:09:50 UTC	16383	IN	Data Raw: 5d 5b c3 96 26 64 aa 30 b8 b5 c5 4f 05 54 75 17 f3 90 c8 1e 3e 0a 9f 6e 6c ca 7a c8 7d 57 8c c7 ba 46 a0 f4 ea b5 e8 de 5a 7a 1b 82 b2 72 b3 9c ac e3 e8 6e ee 9c ba 32 e8 cb c8 cb e9 56 57 1f 43 c7 20 cb 8a b3 5b d1 d4 d1 f5 60 e6 e5 77 1f 47 88 2e c5 d8 bb 17 62 ec 5d 8b b1 76 2e c5 d8 bb 17 62 ec 5d 8a fc 17 62 fa ab ea af aa be a2 fa 8b ea a1 ee a1 ee a1 ee a1 ee a1 ee a1 c9 37 92 03 82 1c 90 e4 80 20 d9 13 b0 76 7b 79 d5 b7 ec 69 4d 8a 82 b6 a3 0d 8c b2 0f b0 74 d1 6c 6a 0a 9a da c9 c4 54 d0 b4 b9 ee 3f f5 aa ae f0 bf 68 99 5f 8a 2a 18 89 f1 6a 7f 70 7b ce fa e7 ec f2 a7 f0 aa ac 54 d5 30 b3 64 42 ef 38 ed 3a e2 3f 56 cf f9 8a 82 96 18 a0 82 26 c7 0c 6d 0c 63 18 2c 1a 06 80 0f 25 b1 b5 ce 73 80 6b 45 c9 39 00 02 77 84 32 49 b3 36 6c 96 d9 4c 3b ef 1f Data Ascii: ][&d0OTu>nlz}WFZzrn2VWC [`wG.b]v.b]b7 v{yiMtljT?h_*jp{T0dB8:?V&mc,%skE9w2I6lL;
2024-10-11 14:09:50 UTC	16383	IN	Data Raw: 95 f2 49 23 9f 23 dc 5c e7 3b 32 49 d4 95 98 4d 90 40 ef f4 61 66 10 b0 75 93 8d 33 ad c9 62 ad 93 bd 16 48 17 8c 46 cb 94 c8 22 c4 38 22 c6 98 ed 98 40 b9 fd 5c 8e 6b 89 d0 e8 a6 79 de 2a e9 e6 a9 85 8e 20 a7 b2 96 08 e5 7e 60 00 98 f6 83 74 3a 02 69 4d 77 1f 21 cd d8 f0 16 ff 00 95 c3 f7 a7 3b 66 4a 39 48 ff 00 bd 4d 59 3c 8d 75 23 a3 6b 0f ac 78 9e c5 13 2a dd 51 ab ec 43 7b 01 d7 e7 d1 92 7c e4 e1 6f 14 63 81 b9 5d d6 b5 b9 a8 9c c9 3a c6 87 75 83 7f b7 b1 0d 9a d9 03 2b 9b d5 b2 40 f6 5f d6 1d 8b c2 8f 09 b6 7c 4e d9 5d 5c 51 86 e0 95 c0 ef 17 01 9a 11 d2 b8 6d 99 1d 34 dd 61 dc 2f 38 70 ad 95 b1 1a 44 d3 30 46 c3 ea df 82 9f 6b 5e 96 81 c6 28 0e a7 8a 9e 39 29 f6 25 5b bf 33 a8 96 f1 3f f7 72 1e 1d ce 4c a3 8e 1c 3a 8c 40 aa 9f 19 64 ed 91 dd 73 1c Data Ascii: I##\;2IM@afu3bHF"8"@\ky* ~`t:iMw!;fJ9HMY<u#kx*QC{\|oc]:u+@_\|N]\Qm4a/8pD0Fk^(9)%[3?rL:@ds

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	54844	152.199.21.175	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:49 UTC	699	OUT	GET /c1c6b6c8-obob6uz3nidzuuv1qwz2jtykzbgxef3vz5oy-e2m4f4/logintenantbranding/0/bannerlogo?ts=636374909487213813 HTTP/1.1 Host: aadcdn.msauthimages.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:50 UTC	650	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 83772 Cache-Control: public, max-age=86400 Content-MD5: uxdugu0/0spmqKNJxWgrxA== Content-Type: image/* Date: Fri, 11 Oct 2024 14:09:50 GMT Etag: 0x8D4DB9BC84D642B Last-Modified: Sat, 05 Aug 2017 00:49:09 GMT Server: ECAcc (lhc/796B) X-Cache: HIT X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c718a59-401e-0047-5c24-1bf359000000 x-ms-version: 2009-09-19 Content-Length: 8999 Connection: close
2024-10-11 14:09:50 UTC	8999	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 00 5f 00 c8 03 01 22 00 02 11 01 03 11 01 ff c4 00 99 00 01 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 07 08 09 0a 06 05 0b 03 10 00 02 02 02 02 01 04 02 01 02 05 02 07 01 00 00 03 04 02 05 01 06 07 08 00 09 11 12 13 14 15 21 0a 22 16 17 23 31 41 24 61 19 34 39 42 51 53 76 b6 01 01 Data Ascii: JFIF_"!"#1A$a49BQSv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	54848	13.107.253.45	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:49 UTC	423	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:50 UTC	734	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:49 GMT Content-Type: image/gif Content-Length: 2672 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:47 GMT ETag: 0x8DB5C3F48EC4154 x-ms-request-id: 1b295cfd-c01e-001e-7776-1a5831000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241011T140949Z-1597f696844mgqk65a7x24zwr8000000016000000000esv9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:50 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	54849	13.107.253.45	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:49 UTC	435	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:50 UTC	796	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:49 GMT Content-Type: application/x-javascript Content-Length: 5529 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:54 GMT ETag: 0x8DCBD531731891C x-ms-request-id: b7c3d77d-901e-003c-8037-1b9d2e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241011T140949Z-r154656d9bc9b22p5yc1zg6euw00000002h000000000q9ea x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:50 UTC	5529	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ad 5b 7d 77 9b 46 d6 ff 7f 3f 05 62 f7 28 b0 19 63 bb 69 9b 16 97 fa 38 7a 49 d4 da b1 6b c9 ed 66 93 1c 1d 24 46 12 31 02 ca 20 db aa a5 ef fe fc ee 0c 08 24 21 d9 e9 b3 3d a9 31 33 77 ee dc b9 73 df 2f 3e fc 77 ed 1f da bf b5 83 e7 ff a7 75 7b 67 d7 3d ed b2 ad f5 de 75 ae 9b da 15 de 3e 68 ef 2f 7b 9d 46 eb f9 78 68 53 fa bf 37 f1 85 36 f2 03 ae e1 39 70 05 f7 b4 28 d4 a2 44 f3 c3 61 94 c4 51 e2 a6 5c 68 53 fc 4c 7c 37 d0 46 49 34 d5 d2 09 d7 e2 24 fa c2 87 a9 d0 02 5f a4 58 34 e0 41 74 af 19 40 97 78 da 95 9b a4 73 ad 73 65 5a c0 cf 81 cd 1f fb 21 56 0f a3 78 8e df 27 a9 16 46 a9 3f e4 9a 1b 7a 12 5b 80 97 50 70 6d 16 7a 3c d1 ee 27 fe 70 a2 5d f8 c3 24 12 d1 28 d5 12 3e e4 fe 1d 36 11 33 8c af 6f c1 34 37 e1 9a e0 a9 36 Data Ascii: [}wF?b(ci8zIkf$F1 $!=13ws/>wu{g=u>h/{FxhS769p(DaQ\hSL\|7FI4$_X4At@xsseZ!Vx'F?z[Ppmz<'p]$(>63o476

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	54847	13.107.253.45	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:49 UTC	417	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:50 UTC	734	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:49 GMT Content-Type: image/gif Content-Length: 3620 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4904824B x-ms-request-id: c2739bb0-701e-0013-80d5-1be75a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241011T140949Z-1597f696844wqd6lfkgu19yfdc00000003qg000000004vmn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:50 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.6	54850	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:50 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:50 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:50 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: c832ddd9-b01e-0084-55ca-1ad736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140950Z-1597f69684422wgj3u8kq0401g00000000yg000000011hv0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:50 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.6	54852	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:50 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:50 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:50 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 69483ed4-001e-0034-56df-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140950Z-1597f696844r6vmva1wkvnf04w000000018g00000000y8zt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:50 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.6	54851	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:50 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:50 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:50 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: dd141db6-901e-0029-7da3-1b274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140950Z-r154656d9bcw8wfsu93rvvbgpc000000017g00000000cpgy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:50 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.6	54854	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:50 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:50 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:50 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: fcff0b5c-f01e-005d-588a-1b13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140950Z-r154656d9bcghtlhf7uxqc3wnn000000024g00000000mqmx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:50 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.6	54853	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:50 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:50 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:50 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: b8f0ecbf-701e-005c-16e0-1abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140950Z-1597f696844tbmpv2gk8sfx5g000000003gg000000011cyp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:50 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.6	54855	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:51 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:51 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:51 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 93d0904a-001e-0014-0d70-1a5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140951Z-1597f696844d2h6g34xqfa1q1n00000002eg000000005z0m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:51 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.6	54856	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:51 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:51 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:51 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 9570bf10-101e-007a-52ac-1b047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140951Z-1597f69684469lsz07pz1m8tt000000001100000000037sq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:51 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.6	54858	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:51 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:51 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:51 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 9bed673a-001e-0046-278c-15da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140951Z-r154656d9bcbxn4qhpywdcmprs000000018000000000smf3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:51 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	54857	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:51 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:51 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:51 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: feb590ad-c01e-002b-07cb-1b6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140951Z-1597f69684469lsz07pz1m8tt0000000011g000000000mxa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:51 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	54860	13.107.246.51	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:51 UTC	652	OUT	GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:51 UTC	818	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:51 GMT Content-Type: application/x-javascript Content-Length: 40454 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 26 Feb 2021 06:13:13 GMT ETag: 0x8D8DA1D997CA245 x-ms-request-id: 2738a017-d01e-001a-238e-1ba289000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241011T140951Z-17db6f7c8cfwtn5x6ye8p8q9m000000000q00000000007xb x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:51 UTC	15566	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bc bd 7b 7b db c6 b5 37 fa ff 79 9e f3 1d 44 34 65 01 73 48 91 76 93 77 17 14 c2 c7 91 9d c4 6d ee 72 9a a4 14 93 07 26 87 12 62 0a 60 00 50 b2 22 72 7f f6 b3 7e 6b 2e 18 5c 28 a7 dd fb 3d 6e 23 e2 32 98 eb 9a 35 eb be 4e 9f f4 4e 7e fd 76 27 f3 fb 93 db 67 a3 0f 47 93 93 fd 89 bf 0c 4e fe 7e 71 f2 69 b6 4b 57 71 99 64 e9 49 9c ae 4e b2 f2 5a e6 27 cb 2c 2d f3 e4 cd ae cc f2 82 8a fe fa 1b 3e 1d 65 f9 d5 e9 26 59 ca b4 90 27 4f 4e ff df ff a7 b7 de a5 4b 7c e9 4b 51 06 0f de 8e 9e 17 f4 dd b2 f4 a6 5e f6 e6 57 49 17 51 54 de 6f 65 b6 3e b9 c9 56 bb 8d ec f7 8f bc 18 c9 77 db 2c 2f 8b 59 fd 36 92 a3 55 b6 dc dd c8 b4 9c 95 d4 4c 6f 1c 84 55 ab c1 43 b2 f6 7b 55 91 a0 bc ce b3 bb 93 54 de 9d bc cc f3 2c f7 3d 3d e8 5c fe b6 4b Data Ascii: {{7yD4esHvwmr&b`P"r~k.\(=n#25NN~v'gGN~qiKWqdINZ',->e&Y'ONK\|KQ^WIQToe>Vw,/Y6ULoUC{UT,==\K
2024-10-11 14:09:51 UTC	16384	IN	Data Raw: 6a 37 f6 54 a3 53 80 b3 8b 66 36 d9 40 66 71 a7 f6 7e 7d 00 14 84 9b 6a 1d b2 83 5d d2 8d da ac bb b3 f2 bd 5f 19 87 ca 1d c8 fc 82 69 71 c0 49 8d 1e 0f 1e ba 8d 49 5b bc 03 11 00 0f 32 25 34 62 ec 48 9b 76 a5 6c df c9 61 61 5c 4f 16 6d 24 85 0d 90 a4 90 0a ba 89 4a bb de d5 f4 93 8f 7e de 7e 43 e8 ad 69 d7 7a 6c 7c 9a e7 7d cf 90 ee f2 a4 34 d7 8a e3 52 19 21 e0 4f da 1d 6b 64 6e cd 83 17 33 19 e2 a0 d0 33 c9 66 73 1a 23 84 0f b0 32 47 ba a8 4f 76 6f b4 55 ae 60 10 0e 1f 98 80 ec b0 a1 44 87 91 13 40 37 b4 d5 48 aa 34 21 34 e9 20 41 05 10 f7 96 c2 e8 33 e8 8e a3 2d aa ed 01 1e 4d 20 eb b9 66 38 fe ef b4 42 4d 8c 0f 95 18 bd c3 1a d4 e0 87 7f b3 11 7d 8a da 76 f6 7b 7e 1f f3 c9 fd 46 d2 fe 96 bb 54 4d ac 8b e5 ea 3d 30 88 5a 6a 6c 07 89 41 0d 86 d8 08 b6 Data Ascii: j7TSf6@fq~}j]_iqII[2%4bHvlaa\Om$J~~Cizl\|}4R!Okdn33fs#2GOvoU`D@7H4!4 A3-M f8BM}v{~FTM=0ZjlA
2024-10-11 14:09:51 UTC	8504	IN	Data Raw: a5 da 9a ae bd 98 27 04 15 a8 2a 4f 3d 22 ae 4c 5d f9 d4 34 8c 4a 81 1e db 57 05 e0 ac a0 50 43 d2 44 ce f7 89 56 6d 0d 9b 69 97 3f aa 42 f7 b4 6e d7 ad b4 df b9 b7 e5 f3 cd ce e6 e0 e1 cd 32 29 b4 db de 85 65 06 2f 09 f8 19 f7 2b f1 a3 6b 0c cd a5 e2 67 54 0f 68 a1 69 00 12 9f c2 02 6b ee 4a 0d 61 0f d4 18 0c 16 31 06 cd 07 ba f5 30 5f 9a b7 d5 05 e0 ac d4 1c 1c 7a d5 26 bf 1c a0 ae d1 0c 13 8a 4b 75 ab f9 e8 4d 65 f5 de 34 c1 4a 05 24 f3 e2 99 3d b5 67 66 58 d2 9a bd 17 df 0d 1a cb af b2 a4 15 8e f4 5e 86 b4 1c a6 ea a8 7e a8 99 7e 15 a9 cf 73 11 a1 3a 27 dc 8d da 1f 47 73 dd 32 1d 07 fc b4 8a d2 ea 08 62 72 58 a4 e7 f4 6e 2f 87 e9 6c 9d 10 86 76 6b 7c ee 9e 0b 77 e3 a8 c0 68 83 95 3d 51 6b 2e 39 99 ee 01 3a 00 dc 2a af c4 f9 de 56 18 b3 b8 3b 3e 5f 41 Data Ascii: 'O="L]4JWPCDVmi?Bn2)e/+kgThikJa10_z&KuMe4J$=gfX^~~s:'Gs2brXn/lvk\|wh=Qk.9:V;>_A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	54861	13.107.246.60	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:51 UTC	743	OUT	GET /c1c6b6c8-obob6uz3nidzuuv1qwz2jtykzbgxef3vz5oy-e2m4f4/logintenantbranding/0/illustration?ts=636374910507629828 HTTP/1.1 Host: aadcdn.msftauthimages.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:52 UTC	772	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:52 GMT Content-Type: image/* Content-Length: 299116 Connection: close Cache-Control: public, max-age=86400 Last-Modified: Sat, 05 Aug 2017 00:50:51 GMT ETag: 0x8D4DB9C056C1B6D x-ms-request-id: 06209164-b01e-0032-52e7-1b5bdb000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241011T140951Z-17db6f7c8cffjrz2m4352snqkw00000002a000000000naca x-fd-int-roxy-purgeid: 50755578 X-Cache: TCP_MISS X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-10-11 14:09:52 UTC	15612	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 03 03 03 03 03 03 04 04 03 05 05 04 05 05 07 06 06 06 06 07 0a 07 08 07 08 07 0a 0f 0a 0b 0a 0a 0b 0a 0f 0e 10 0d 0c 0d 10 0e 18 13 11 11 13 18 1c 18 16 18 1c 22 1e 1e 22 2b 29 2b 38 38 4b 01 03 03 03 03 03 03 03 04 04 03 05 05 04 05 05 07 06 06 06 06 07 0a 07 08 07 08 07 0a 0f 0a 0b 0a 0a 0b 0a 0f 0e 10 0d 0c 0d 10 0e 18 13 11 11 13 18 1c 18 16 18 1c 22 1e 1e 22 2b 29 2b 38 38 4b ff c2 00 11 08 05 1e 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 07 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a ff da 00 08 01 01 00 00 00 00 9b 79 b2 d0 d8 48 5b 93 e6 08 39 de 7f c8 f3 97 3b 3d 1d 8c c9 2e bd 25 d5 02 65 a4 b0 d2 42 e5 df 59 9d 7d 1e 27 8e e5 Data Ascii: JFIF""+)+88K""+)+88K"yH[9;=.%eBY}'
2024-10-11 14:09:52 UTC	16384	IN	Data Raw: 00 00 33 00 02 06 14 66 a0 92 41 11 98 06 0c 1a 8e d3 d8 1e d1 ea 37 f2 0e 2e 37 cf 3e 23 f4 07 b2 7a 0d a2 89 a6 d2 98 95 45 6b 32 2e 5f 1b 95 e6 fc 13 80 73 da d8 ee 4d 98 71 22 c6 6d 21 4a 4a 40 00 cc cc d5 2f aa 7b 4f b2 ce ad 87 53 8f c5 f3 6e 6b 93 a2 ae 60 ac ac 92 ea d9 81 11 e9 76 f2 62 52 fd 20 89 99 c7 65 29 9d 7e 7c 8b 39 d7 17 76 77 6a e2 7e 75 c4 a9 4b 5a b5 7f 50 7b b6 a7 9d be dc 78 95 b5 10 57 e5 7f 38 e0 be a0 58 79 ce 7f 47 e1 fe b3 f1 c7 ad 5d 9f 3f 81 e8 ba 75 37 3a e6 58 8c 27 3d 82 b5 84 a1 b4 21 b2 33 06 49 22 22 22 20 40 88 12 46 b7 e9 5e a3 21 81 e7 98 8e 6d cc 10 08 88 10 48 00 8c cc 00 40 8d 4a 0a 50 4a 49 00 94 0c 18 06 6a bd f6 6f b1 3a 5d eb e1 8c 9f 08 f1 07 59 f6 a7 46 b6 5a 5a 6d 28 89 50 56 93 e2 e7 72 59 7c 07 04 f3 df Data Ascii: 3fA7.7>#zEk2._sMq"m!JJ@/{OSnk`vbR e)~\|9vwj~uKZP{xW8XyG]?u7:X'=!3I""" @F^!mH@JPJIjo:]YFZZm(PVrY\|
2024-10-11 14:09:52 UTC	16384	IN	Data Raw: 53 da 79 bb da db 56 22 a1 a4 00 95 1c 97 d6 b2 00 00 02 52 db 6d b6 d3 2d 34 d3 46 48 2e 0b f2 40 9b 91 28 d5 3b a1 7a af ce 19 e8 7b 4e 9c fb d3 27 cd 83 94 cf 22 c2 9b 9b f3 fc a4 22 9f 61 40 94 21 04 09 20 12 08 89 db 0d 1d 94 46 1b 90 b4 b2 db 11 a2 b2 da 43 8b 11 d8 65 21 c9 b6 b1 23 45 27 b5 f6 d8 aa 95 25 32 2c 75 5b ad 8e 23 3b 9a a8 b0 f5 87 54 a8 cf c2 c5 66 f3 10 68 68 e3 30 b0 72 67 2c 4c 79 2b 90 8a d7 64 ad 6d c1 a7 a6 64 11 90 00 24 81 00 00 de 7d 03 ec 7d 9b 6e f0 22 22 54 35 ba 10 15 16 8f 3f 54 ca 50 02 7b aa 94 fc 7a 19 9a 2e 69 aa f2 b6 8f d3 1e 6b df 6c fc d7 ec 7a 0e 47 c9 fd a2 58 28 ba ab a6 a3 46 22 49 84 ba 73 1e 5a 8c c0 00 11 32 c3 51 e3 e2 3e 6d e4 71 38 ea cb 77 d5 3b a5 f5 0d 56 9b 1b 9e a2 d5 ed 29 26 44 7a 8f 17 03 19 80 Data Ascii: SyV"Rm-4FH.@(;z{N'""a@! FCe!#E'%2,u[#;Tfhh0rg,Ly+dmd$}}n""T5?TP{z.iklzGX(F"IsZ2Q>mq8w;V)&Dz
2024-10-11 14:09:52 UTC	16384	IN	Data Raw: 91 c7 f9 32 be 6b 2b 3e 46 d6 3b 23 8e b5 0d c9 6e be 4e ad 70 a8 15 f8 36 16 38 00 19 f8 ea 69 8c f6 74 52 34 d2 a2 4e 76 04 24 95 1b 58 95 ac bd 9b 04 0c 33 75 e7 bc 33 13 f1 13 91 48 c1 61 e4 39 a4 bf f2 41 e7 79 5a 42 09 ed 39 d8 67 34 46 52 1b f3 c9 b1 89 8a 77 74 e9 8b 6e 1d 38 ed c2 8d 57 50 a0 42 9b 66 4d b3 a9 14 ea ea b4 85 56 50 20 43 b3 26 4c 9b f4 3e ce 9f 68 d0 26 44 8d 4a b2 2a c2 15 02 89 46 a3 42 87 62 46 a6 56 95 c5 2a 95 4c 8f ee ff 00 f2 c0 34 be 9e c2 61 84 59 00 b3 39 39 14 8e 52 15 e8 ef a3 c9 db ca 5c b6 56 de 7e e4 9d 9d d0 0a 94 dd ff 00 55 65 a5 96 32 17 8b 33 92 d5 fa b5 68 dd 49 9d cc 15 bc 21 e3 72 f1 4d 15 7a f8 e7 82 27 11 72 07 e1 97 55 cf 2e e6 2c 89 89 de 46 95 e7 90 a7 33 94 ed 0d 87 b7 1a f5 7a ce 36 84 ab 0d 7f 4f a9 Data Ascii: 2k+>F;#nNp68itR4Nv$X3u3Ha9AyZB9g4FRwtn8WPBfMVP C&L>h&DJFBbFVL4aY99R\V~Ue23hI!rMz'rU.,F3z6O
2024-10-11 14:09:52 UTC	16384	IN	Data Raw: b2 25 a3 96 15 6a 09 b5 21 c6 78 82 80 f3 72 67 e6 b4 a2 6a 4d 49 ab 29 9e eb 90 fa e4 aa d5 f4 c9 50 78 50 fd a4 57 04 9a 25 59 c3 77 4e 89 3a 3d c1 06 ce a4 52 33 b1 0d a0 cb c5 96 8e 66 4c 9b 67 4f f7 74 fb c4 d5 82 36 34 cc 5b 49 b1 6c e8 d3 fd 09 3f dd dd dd 0b 0b 03 46 c8 51 26 44 9f f6 0a 8d 02 8d 0a 75 22 91 69 aa 98 e8 ab 0e b9 c8 5c 74 2e 04 c5 db 94 28 10 20 8f 09 16 63 27 a6 6a 04 93 db c5 52 cd 5f ad 6a 85 ea 99 21 c9 36 41 ef fc e2 bd 1d a0 9a a4 91 10 21 4c 9d 12 94 73 10 cc d5 4e ab b1 92 8e a1 47 9c 9a a8 3c 20 53 a7 0f 57 ae 21 18 44 63 15 5e ec 37 86 41 7f 20 e9 4f ea d2 07 83 c8 63 e6 88 fd a0 62 4c ee f2 3c ea ca 19 29 48 65 7c 6c b1 c0 f4 65 a5 f1 62 41 64 f2 16 f3 36 b5 0c ba 97 fd 2f fa 4f f4 2f a8 7f d3 49 a9 cb 50 cb 99 2c 89 1f Data Ascii: %j!xrgjMI)PxPW%YwN:=R3fLgOt64[Il?FQ&Du"i\t.( c'jR_j!6A!LsNG< SW!Dc^7A OcbL<)He\|lebAd6/O/IP,
2024-10-11 14:09:52 UTC	16384	IN	Data Raw: cb 91 5f ff c4 00 5d 10 00 01 03 02 03 04 04 0a 05 08 04 0b 07 03 02 07 01 00 02 03 04 11 12 21 31 05 22 41 51 10 13 61 71 06 14 20 23 30 32 42 52 81 91 40 62 a1 b1 c1 15 24 33 43 50 53 72 d1 44 82 92 e1 25 34 54 60 63 73 83 a2 b2 c2 f0 07 16 45 55 93 d2 f1 26 64 a3 35 74 c3 e2 36 b3 84 94 d3 ff da 00 08 01 01 00 03 3f 01 f4 b9 15 99 59 fd 33 74 ac ca cd 67 e8 b5 5a ac fa 35 ff 00 30 9d 51 2b 5a 02 01 ac 71 62 11 b4 64 83 1b d3 6e 3d 27 8a 60 e2 b1 71 43 a2 e7 d1 b9 e7 20 a4 98 8d d5 6c 24 b1 32 30 dd c4 1a dd 13 5a 34 56 6b 96 f3 d5 e5 5b cd 5b ad 59 05 97 97 92 dd 72 f5 d6 f9 fa 15 f3 e0 a5 aa 90 32 26 17 1e c4 5e 63 9a bb 26 eb 83 89 54 74 91 75 34 f0 86 b4 72 0b 04 8d ca cb 13 ec 02 c2 45 93 78 ea 85 fa 07 04 6d 9f 46 ee 63 a0 ac bb 91 2b 11 c9 1e 2a Data Ascii: _]!1"AQaq #02BR@b$3CPSrD%4T`csEU&d5t6?Y3tgZ50Q+Zqbdn='`qC l$20Z4Vk[[Yr2&^c&Ttu4rExmFc+*
2024-10-11 14:09:52 UTC	16384	IN	Data Raw: 53 8a 72 ec 5d 88 9e 86 84 d0 9b c9 37 92 03 a2 fd 17 59 ab 79 59 fa 20 47 48 43 0f 45 8f 45 d6 ef 90 0f 4d d0 b7 45 8a 05 02 3c 8e c5 d8 87 24 de 5d 1d 88 a7 02 9e d4 fb 66 a4 71 29 f9 a7 c8 42 eb 3d 95 f5 51 6f 05 23 54 8d 52 64 9e 38 27 b5 3d 38 5b 24 75 4e 44 22 48 1d 16 57 e8 07 a0 79 2c 86 06 db 88 cd 54 ec ea aa 5d 93 4b 4a 27 a8 86 a3 14 ef 6e f0 60 0e b8 bd b8 90 99 1d 11 6c 70 4c e3 24 7b c4 0c 21 97 1c 49 e2 a7 d8 9e 0f c5 4c 68 25 f1 f7 65 07 5a 41 d7 89 1f 72 ae f0 83 69 3f 6a 6d e7 c9 53 2b cd ed 21 c8 76 00 b6 55 34 6d 0d a1 81 a0 0e 0c 0b 66 75 26 30 f8 20 9b b5 a2 c7 bc 29 26 a8 96 89 9d 5c 55 4c 71 04 bc ee d8 71 0b 68 d3 ed 9f 1c 93 c2 47 47 2c 32 f9 a8 d8 ec 24 e5 d9 97 cd 6d 1d 9d b3 aa a5 da 14 95 15 0e 9e 77 ce 66 c7 8c 58 f6 7b 2a Data Ascii: Sr]7YyY GHCEEME<$]fq)B=Qo#TRd8'=8[$uND"HWy,T]KJ'n`lpL${!ILh%eZAri?jmS+!vU4mfu&0 )&\ULqqhGG,2$mwfX{*
2024-10-11 14:09:52 UTC	16384	IN	Data Raw: b8 58 00 86 d1 d8 3b 3b 66 52 53 1c 54 ae d7 46 bb bb b5 49 b0 b6 75 2c 31 d3 62 a8 6c 6d 65 cf aa d3 da 99 26 c7 a3 9e 47 f5 93 cd 1b 09 e1 77 71 cb 92 a8 da bd 46 1a 2c 21 99 19 78 7f f2 a1 8b 67 32 9e 4a 76 1c 0f 3e b3 6e 4d d4 1b 17 63 8a 78 69 e3 eb ea 85 85 9a 32 5e 27 b2 61 2e 6e fc 9b c5 16 da c6 dd ca ad 80 0e b6 e3 b4 5d 19 f6 1d 77 5b 20 68 c3 dc b6 9d 36 d6 69 86 aa 77 33 18 66 0e b5 e5 96 bf ba 4d 95 c5 fa 35 59 95 aa d5 67 f4 7c ef c5 6d ad 9a 30 32 a7 ac 8b dc 97 7c 7c 38 aa 67 10 ca da 12 c6 fb f1 1c 7f 62 d8 fb 4a 46 1a 6d a3 13 9d ee 13 85 df 22 a4 cf 2b 84 fc 36 e4 57 e9 32 40 47 9f 2b 27 e0 6f 33 9a dc 5b dd ea ec cb 81 36 5b d6 56 c7 97 15 87 3e cb 2d 51 c4 b3 ba b9 5e 6e ff 00 b3 b7 82 cd 8b 71 ab 21 e4 dc 39 64 f5 86 bf e2 bc d3 16 Data Ascii: X;;fRSTFIu,1blme&GwqF,!xg2Jv>nMcxi2^'a.n]w[ h6iw3fM5Yg\|m02\|\|8gbJFm"+6W2@G+'o3[6[V>-Q^nq!9d
2024-10-11 14:09:52 UTC	16384	IN	Data Raw: 15 b0 a6 78 11 bd ec b9 f6 da 83 9a 30 10 41 06 c4 2b af 36 02 c2 03 80 50 54 c0 1b 86 ca 56 90 5a eb d8 a9 99 87 74 8c 26 fa 29 25 a5 7d 14 f2 de d9 b3 86 bc 16 26 3f 2e 08 61 2d ba bf 59 63 c1 75 74 15 2d b6 7d 5d 97 e7 d3 76 45 2f dc 02 dd 6a cb d0 f5 94 52 6b bb 9e 4a 85 cd 02 28 ec 4f 33 75 2d 26 d1 89 e7 d5 ba 6d 55 1b 45 f3 66 ef f2 5d 5b c3 96 26 64 aa 30 b8 b5 c5 4f 05 54 75 17 f3 90 c8 1e 3e 0a 9f 6e 6c ca 7a c8 7d 57 8c c7 ba 46 a0 f4 ea b5 e8 de 5a 7a 1b 82 b2 72 b3 9c ac e3 e8 6e ee 9c ba 32 e8 cb c8 cb e9 56 57 1f 43 c7 20 cb 8a b3 5b d1 d4 d1 f5 60 e6 e5 77 1f 47 88 2e c5 d8 bb 17 62 ec 5d 8b b1 76 2e c5 d8 bb 17 62 ec 5d 8a fc 17 62 fa ab ea af aa be a2 fa 8b ea a1 ee a1 ee a1 ee a1 ee a1 ee a1 c9 37 92 03 82 1c 90 e4 80 20 d9 13 b0 76 7b Data Ascii: x0A+6PTVZt&)%}&?.a-Ycut-}]vE/jRkJ(O3u-&mUEf][&d0OTu>nlz}WFZzrn2VWC [`wG.b]v.b]b7 v{
2024-10-11 14:09:52 UTC	16384	IN	Data Raw: 2b a0 78 2c 20 b9 a1 58 f9 1a 2d 3f 6b ee ac 55 2f 1c a3 53 56 96 41 13 6e f7 3e ca 9f 63 51 b6 18 86 f1 cd ee f7 8f 95 e2 0c 9b 62 ec 99 ff 00 3b 70 c3 53 3b 3f 52 0f b0 df ae 7c aa 8a da 88 29 e9 e1 74 b3 ca f0 c6 31 b9 97 13 c1 53 f8 27 43 8e 40 d7 ed 29 c0 eb e4 f7 7e a3 7b 07 93 17 82 db 3b 0c 4f 07 68 d4 02 20 67 bb cd e7 b0 29 27 95 f2 49 23 9f 23 dc 5c e7 3b 32 49 d4 95 98 4d 90 40 ef f4 61 66 10 b0 75 93 8d 33 ad c9 62 ad 93 bd 16 48 17 8c 46 cb 94 c8 22 c4 38 22 c6 98 ed 98 40 b9 fd 5c 8e 6b 89 d0 e8 a6 79 de 2a e9 e6 a9 85 8e 20 a7 b2 96 08 e5 7e 60 00 98 f6 83 74 3a 02 69 4d 77 1f 21 cd d8 f0 16 ff 00 95 c3 f7 a7 3b 66 4a 39 48 ff 00 bd 4d 59 3c 8d 75 23 a3 6b 0f ac 78 9e c5 13 2a dd 51 ab ec 43 7b 01 d7 e7 d1 92 7c e4 e1 6f 14 63 81 b9 5d d6 Data Ascii: +x, X-?kU/SVAn>cQb;pS;?R\|)t1S'C@)~{;Oh g)'I##\;2IM@afu3bHF"8"@\ky* ~`t:iMw!;fJ9HMY<u#kx*QC{\|oc]

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.6	54862	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:51 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:51 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:51 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 1853d52b-701e-0021-22a3-1b3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140951Z-1597f696844rmb6h7netdh4d8400000003q000000000gg3e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:51 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	54865	13.107.246.51	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:51 UTC	663	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:51 UTC	805	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:51 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49ED96E0 x-ms-request-id: 43660d94-a01e-003f-3e91-1b0bf5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241011T140951Z-17db6f7c8cfgqlr45m385mnngs00000000n0000000005qbb x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:51 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	54864	13.107.246.51	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:51 UTC	624	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:51 UTC	812	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:51 GMT Content-Type: application/x-javascript Content-Length: 35168 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:55 GMT ETag: 0x8DCBD5317AEB807 x-ms-request-id: 62887053-e01e-0070-0f8e-1b450c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241011T140951Z-17db6f7c8cf88vf5xverd8dar400000001d000000000nyx5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:51 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-10-11 14:09:52 UTC	16384	IN	Data Raw: 19 bb cd 17 f0 ef de f3 f6 f9 b2 b5 d7 7c 4e 0e b1 1f 36 e9 cf 0b fc b7 7d 4c 89 36 e5 f4 9a 94 e0 c7 fe 7a 3d 4e 40 b1 17 cf 5f e0 bf 2f 5e f4 37 e9 cf 0f 17 f7 e7 cb 53 30 14 ce e0 cf c9 0f a7 f8 ef c9 29 03 db 2f 08 78 8c 4d c1 9f 0e 43 3b 54 f4 74 b7 b3 49 7f 8e 09 fa 43 b7 49 65 9b 2d fc b7 cd 35 76 5f 5c 6c d3 a8 db 5f 23 2a cd c3 eb 78 7e f9 3a 18 46 09 d3 b1 83 c4 33 19 a7 51 5e c4 73 7a b4 81 b3 bb 4e f6 87 b8 48 22 ce d8 61 4a 77 7e bf 61 60 fd 83 c6 70 c7 3d 2a 24 65 3c ff 29 b8 05 65 8f 7e 92 28 a6 5f 03 b4 d0 e7 83 d6 01 a5 0e c3 03 62 c3 7e 07 64 3f 28 18 c0 de 59 28 e5 2a 95 c2 ad 0c bd 87 9b 9b 73 ef 0b 6e ef 4a 82 41 c5 98 db 07 16 9f 8d 40 26 e0 7b 08 5b f9 65 bc f8 90 5e 46 b8 dc fc 3e ee 76 a9 47 45 07 5c 78 b3 e5 cd 1b 0d e3 f9 ca 0c Data Ascii: \|N6}L6z=N@_/^7S0)/xMC;TtICIe-5v_\l_#x~:F3Q^szNH"aJw~a`p=$e<)e~(_b~d?(Y(*snJA@&{[e^F>vGE\x
2024-10-11 14:09:52 UTC	3212	IN	Data Raw: 38 5d 1d 96 55 52 b0 ee 65 51 a5 80 82 a6 5f a3 d8 a6 8c a4 8c 2d e9 61 bf de 76 31 e7 b5 b7 35 ec ae ac a0 fd 7a 5a e0 51 85 64 9c 71 86 da 05 75 05 e2 2f c1 e3 1b 2e e0 ac 2b f3 db b5 61 3f 28 3c f2 32 68 91 01 35 d9 bf 91 79 ee 76 ca 31 5d 87 e6 ce b3 68 e5 9d 9d 2e 03 be 71 96 2f 47 c1 de 90 b1 6d de b2 47 e1 bd a3 cd 0e 87 4e c4 50 4c ad 76 42 79 13 eb d1 84 ba 89 a8 ec 51 f8 46 ef 45 5e 59 6d ae 8d 02 82 52 f5 51 9c a3 01 35 fe 52 6d 5e eb b5 46 a5 5a 61 3a 08 21 bc 5e 6d 35 58 78 bd 56 2c 36 30 9c 5e 86 cf 75 f6 7b 81 77 02 f8 55 8d 84 b0 cc 45 ca d8 44 7f 89 74 f2 8a 88 52 95 62 2a a5 20 69 a9 dc a0 a0 52 ad a5 a2 81 21 b3 5b 2a a1 61 96 92 ca fe c5 54 63 90 d5 37 2a 4e bc 5d 53 05 b2 91 97 6a d4 5c e7 b2 d7 69 fe 72 6e 06 bd 93 76 bf 82 ed 7e 78 Data Ascii: 8]UReQ_-av15zZQdqu/.+a?(<2h5yv1]h.q/GmGNPLvByQFE^YmRQ5Rm^FZa:!^m5XxV,60^u{wUEDtRb* iR![aTc7N]Sj\irnv~x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	54863	152.199.21.175	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:51 UTC	454	OUT	GET /c1c6b6c8-obob6uz3nidzuuv1qwz2jtykzbgxef3vz5oy-e2m4f4/logintenantbranding/0/bannerlogo?ts=636374909487213813 HTTP/1.1 Host: aadcdn.msauthimages.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:52 UTC	650	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 83774 Cache-Control: public, max-age=86400 Content-MD5: uxdugu0/0spmqKNJxWgrxA== Content-Type: image/* Date: Fri, 11 Oct 2024 14:09:52 GMT Etag: 0x8D4DB9BC84D642B Last-Modified: Sat, 05 Aug 2017 00:49:09 GMT Server: ECAcc (lhc/796B) X-Cache: HIT X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c718a59-401e-0047-5c24-1bf359000000 x-ms-version: 2009-09-19 Content-Length: 8999 Connection: close
2024-10-11 14:09:52 UTC	8999	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 00 5f 00 c8 03 01 22 00 02 11 01 03 11 01 ff c4 00 99 00 01 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 07 08 09 0a 06 05 0b 03 10 00 02 02 02 02 01 04 02 01 02 05 02 07 01 00 00 03 04 02 05 01 06 07 08 00 09 11 12 13 14 15 21 0a 22 16 17 23 31 41 24 61 19 34 39 42 51 53 76 b6 01 01 Data Ascii: JFIF_"!"#1A$a49BQSv

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.6	54868	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:52 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:52 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:52 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c5dbf9be-001e-0017-2cf1-160c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140952Z-r154656d9bcp74cth8ay97rud4000000014g00000000087y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:52 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.6	54870	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:52 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:52 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:52 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 7ff7f554-601e-0001-0de7-1bfaeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140952Z-1597f6968445mkrl9xam3u5yc000000003hg00000000hr7m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-11 14:09:52 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.6	54869	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:52 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:52 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:52 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: ba19d68d-701e-0032-3e7e-18a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140952Z-r154656d9bckpfgl7fe14swubc0000000nsg000000005c16 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:52 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.6	54867	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:52 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:52 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:52 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 4a48b82a-601e-003d-45a3-1b6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140952Z-r154656d9bc94jg685tuhe75qw0000000nh000000000yaa0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:52 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.6	54871	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:52 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:52 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:52 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 29a213d0-e01e-0033-71a3-1b4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140952Z-r154656d9bc25bv85eq198756g00000001hg00000000xp3r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:52 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.6	54872	13.107.246.51	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:52 UTC	641	OUT	GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:52 UTC	796	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:52 GMT Content-Type: application/x-javascript Content-Length: 4880 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 22 Oct 2020 20:43:21 GMT ETag: 0x8D876CB1D67B929 x-ms-request-id: cdb191f2-801e-000f-1026-1bc285000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241011T140952Z-17db6f7c8cfspvtq2pgqb2w5k000000001y00000000069f4 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:52 UTC	4880	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 5a 7b 73 db b6 96 ff 5f 9f 02 46 73 1d 32 a2 28 39 af b6 52 58 ad 1b 3b 5b df 6d e3 ac ed 4c 6f 57 52 32 b4 04 4a 4c 29 52 05 c1 d8 1e 4b df 7d 7f 07 00 45 52 56 da dc ee 6c 66 62 e1 79 70 de 0f 80 dd 27 07 ac f3 f5 ff d8 e5 d5 f1 c5 15 3b 7f c3 ae 7e 3a bb 38 61 ef d0 fb 8d bd 3d bf 3a 7b 7d fa f5 70 5a ad ab 45 9c b3 28 4e 04 c3 ef 75 98 8b 19 cb 52 96 49 16 a7 d3 4c ae 32 19 2a 91 b3 25 fe ca 38 4c 58 24 b3 25 53 0b c1 56 32 fb 24 a6 2a 67 49 9c 2b 6c ba 16 49 76 c3 1c 80 93 33 f6 2e 94 ea 8e 9d bd 73 7d 76 85 b5 99 8c e7 71 8a dd d3 6c 75 87 f6 42 b1 34 53 f1 54 b0 30 9d 69 68 09 3a 69 2e 58 91 ce 84 64 37 8b 78 ba 60 bf c4 53 99 e5 59 a4 98 14 53 11 7f c6 21 79 81 f1 e6 11 1e 0b a5 60 b9 50 2c ca a4 5a 18 3c 7c 76 49 Data Ascii: Z{s_Fs2(9RX;[mLoWR2JL)RK}ERVlfbyp';~:8a=:{}pZE(NuRIL2%8LX$%SV2$gI+lIv3.s}vqluB4ST0ih:i.Xd7x`SYS!y`P,Z<\|vI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	54873	13.107.253.45	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:52 UTC	427	OUT	GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:52 UTC	818	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:52 GMT Content-Type: application/x-javascript Content-Length: 40454 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 26 Feb 2021 06:13:13 GMT ETag: 0x8D8DA1D997CA245 x-ms-request-id: acaf92ed-d01e-0060-22f3-15c876000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241011T140952Z-r154656d9bckrjvwv99v3r8pqn00000000ng00000000zxaz x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:52 UTC	15566	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bc bd 7b 7b db c6 b5 37 fa ff 79 9e f3 1d 44 34 65 01 73 48 91 76 93 77 17 14 c2 c7 91 9d c4 6d ee 72 9a a4 14 93 07 26 87 12 62 0a 60 00 50 b2 22 72 7f f6 b3 7e 6b 2e 18 5c 28 a7 dd fb 3d 6e 23 e2 32 98 eb 9a 35 eb be 4e 9f f4 4e 7e fd 76 27 f3 fb 93 db 67 a3 0f 47 93 93 fd 89 bf 0c 4e fe 7e 71 f2 69 b6 4b 57 71 99 64 e9 49 9c ae 4e b2 f2 5a e6 27 cb 2c 2d f3 e4 cd ae cc f2 82 8a fe fa 1b 3e 1d 65 f9 d5 e9 26 59 ca b4 90 27 4f 4e ff df ff a7 b7 de a5 4b 7c e9 4b 51 06 0f de 8e 9e 17 f4 dd b2 f4 a6 5e f6 e6 57 49 17 51 54 de 6f 65 b6 3e b9 c9 56 bb 8d ec f7 8f bc 18 c9 77 db 2c 2f 8b 59 fd 36 92 a3 55 b6 dc dd c8 b4 9c 95 d4 4c 6f 1c 84 55 ab c1 43 b2 f6 7b 55 91 a0 bc ce b3 bb 93 54 de 9d bc cc f3 2c f7 3d 3d e8 5c fe b6 4b Data Ascii: {{7yD4esHvwmr&b`P"r~k.\(=n#25NN~v'gGN~qiKWqdINZ',->e&Y'ONK\|KQ^WIQToe>Vw,/Y6ULoUC{UT,==\K
2024-10-11 14:09:52 UTC	16384	IN	Data Raw: 6a 37 f6 54 a3 53 80 b3 8b 66 36 d9 40 66 71 a7 f6 7e 7d 00 14 84 9b 6a 1d b2 83 5d d2 8d da ac bb b3 f2 bd 5f 19 87 ca 1d c8 fc 82 69 71 c0 49 8d 1e 0f 1e ba 8d 49 5b bc 03 11 00 0f 32 25 34 62 ec 48 9b 76 a5 6c df c9 61 61 5c 4f 16 6d 24 85 0d 90 a4 90 0a ba 89 4a bb de d5 f4 93 8f 7e de 7e 43 e8 ad 69 d7 7a 6c 7c 9a e7 7d cf 90 ee f2 a4 34 d7 8a e3 52 19 21 e0 4f da 1d 6b 64 6e cd 83 17 33 19 e2 a0 d0 33 c9 66 73 1a 23 84 0f b0 32 47 ba a8 4f 76 6f b4 55 ae 60 10 0e 1f 98 80 ec b0 a1 44 87 91 13 40 37 b4 d5 48 aa 34 21 34 e9 20 41 05 10 f7 96 c2 e8 33 e8 8e a3 2d aa ed 01 1e 4d 20 eb b9 66 38 fe ef b4 42 4d 8c 0f 95 18 bd c3 1a d4 e0 87 7f b3 11 7d 8a da 76 f6 7b 7e 1f f3 c9 fd 46 d2 fe 96 bb 54 4d ac 8b e5 ea 3d 30 88 5a 6a 6c 07 89 41 0d 86 d8 08 b6 Data Ascii: j7TSf6@fq~}j]_iqII[2%4bHvlaa\Om$J~~Cizl\|}4R!Okdn33fs#2GOvoU`D@7H4!4 A3-M f8BM}v{~FTM=0ZjlA
2024-10-11 14:09:52 UTC	8504	IN	Data Raw: a5 da 9a ae bd 98 27 04 15 a8 2a 4f 3d 22 ae 4c 5d f9 d4 34 8c 4a 81 1e db 57 05 e0 ac a0 50 43 d2 44 ce f7 89 56 6d 0d 9b 69 97 3f aa 42 f7 b4 6e d7 ad b4 df b9 b7 e5 f3 cd ce e6 e0 e1 cd 32 29 b4 db de 85 65 06 2f 09 f8 19 f7 2b f1 a3 6b 0c cd a5 e2 67 54 0f 68 a1 69 00 12 9f c2 02 6b ee 4a 0d 61 0f d4 18 0c 16 31 06 cd 07 ba f5 30 5f 9a b7 d5 05 e0 ac d4 1c 1c 7a d5 26 bf 1c a0 ae d1 0c 13 8a 4b 75 ab f9 e8 4d 65 f5 de 34 c1 4a 05 24 f3 e2 99 3d b5 67 66 58 d2 9a bd 17 df 0d 1a cb af b2 a4 15 8e f4 5e 86 b4 1c a6 ea a8 7e a8 99 7e 15 a9 cf 73 11 a1 3a 27 dc 8d da 1f 47 73 dd 32 1d 07 fc b4 8a d2 ea 08 62 72 58 a4 e7 f4 6e 2f 87 e9 6c 9d 10 86 76 6b 7c ee 9e 0b 77 e3 a8 c0 68 83 95 3d 51 6b 2e 39 99 ee 01 3a 00 dc 2a af c4 f9 de 56 18 b3 b8 3b 3e 5f 41 Data Ascii: 'O="L]4JWPCDVmi?Bn2)e/+kgThikJa10_z&KuMe4J$=gfX^~~s:'Gs2brXn/lvk\|wh=Qk.9:V;>_A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	54874	13.107.253.45	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:52 UTC	418	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:52 UTC	778	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:52 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49ED96E0 x-ms-request-id: 43660d94-a01e-003f-3e91-1b0bf5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241011T140952Z-r154656d9bc25bv85eq198756g00000001qg00000000ebef x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:52 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	54876	13.107.253.45	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:52 UTC	439	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:53 UTC	797	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:52 GMT Content-Type: application/x-javascript Content-Length: 35168 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:55 GMT ETag: 0x8DCBD5317AEB807 x-ms-request-id: cb24d505-101e-000d-5096-157c3d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241011T140952Z-r154656d9bc5qmxtyvgyzcay0c0000000nn000000000muv9 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:53 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-10-11 14:09:53 UTC	16384	IN	Data Raw: 0e b1 1f 36 e9 cf 0b fc b7 7d 4c 89 36 e5 f4 9a 94 e0 c7 fe 7a 3d 4e 40 b1 17 cf 5f e0 bf 2f 5e f4 37 e9 cf 0f 17 f7 e7 cb 53 30 14 ce e0 cf c9 0f a7 f8 ef c9 29 03 db 2f 08 78 8c 4d c1 9f 0e 43 3b 54 f4 74 b7 b3 49 7f 8e 09 fa 43 b7 49 65 9b 2d fc b7 cd 35 76 5f 5c 6c d3 a8 db 5f 23 2a cd c3 eb 78 7e f9 3a 18 46 09 d3 b1 83 c4 33 19 a7 51 5e c4 73 7a b4 81 b3 bb 4e f6 87 b8 48 22 ce d8 61 4a 77 7e bf 61 60 fd 83 c6 70 c7 3d 2a 24 65 3c ff 29 b8 05 65 8f 7e 92 28 a6 5f 03 b4 d0 e7 83 d6 01 a5 0e c3 03 62 c3 7e 07 64 3f 28 18 c0 de 59 28 e5 2a 95 c2 ad 0c bd 87 9b 9b 73 ef 0b 6e ef 4a 82 41 c5 98 db 07 16 9f 8d 40 26 e0 7b 08 5b f9 65 bc f8 90 5e 46 b8 dc fc 3e ee 76 a9 47 45 07 5c 78 b3 e5 cd 1b 0d e3 f9 ca 0c cb 13 7e 4b 7f b3 f5 a0 bd 18 b0 9c 02 ae 84 Data Ascii: 6}L6z=N@_/^7S0)/xMC;TtICIe-5v_\l_#x~:F3Q^szNH"aJw~a`p=$e<)e~(_b~d?(Y(*snJA@&{[e^F>vGE\x~K
2024-10-11 14:09:53 UTC	3197	IN	Data Raw: a3 d8 a6 8c a4 8c 2d e9 61 bf de 76 31 e7 b5 b7 35 ec ae ac a0 fd 7a 5a e0 51 85 64 9c 71 86 da 05 75 05 e2 2f c1 e3 1b 2e e0 ac 2b f3 db b5 61 3f 28 3c f2 32 68 91 01 35 d9 bf 91 79 ee 76 ca 31 5d 87 e6 ce b3 68 e5 9d 9d 2e 03 be 71 96 2f 47 c1 de 90 b1 6d de b2 47 e1 bd a3 cd 0e 87 4e c4 50 4c ad 76 42 79 13 eb d1 84 ba 89 a8 ec 51 f8 46 ef 45 5e 59 6d ae 8d 02 82 52 f5 51 9c a3 01 35 fe 52 6d 5e eb b5 46 a5 5a 61 3a 08 21 bc 5e 6d 35 58 78 bd 56 2c 36 30 9c 5e 86 cf 75 f6 7b 81 77 02 f8 55 8d 84 b0 cc 45 ca d8 44 7f 89 74 f2 8a 88 52 95 62 2a a5 20 69 a9 dc a0 a0 52 ad a5 a2 81 21 b3 5b 2a a1 61 96 92 ca fe c5 54 63 90 d5 37 2a 4e bc 5d 53 05 b2 91 97 6a d4 5c e7 b2 d7 69 fe 72 6e 06 bd 93 76 bf 82 ed 7e 78 23 de 14 2a 36 0a d3 69 66 72 2e 59 04 99 e6 Data Ascii: -av15zZQdqu/.+a?(<2h5yv1]h.q/GmGNPLvByQFE^YmRQ5Rm^FZa:!^m5XxV,60^u{wUEDtRb* iR![aTc7N]Sj\irnv~x#*6ifr.Y

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.6	54880	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:52 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:53 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:53 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 24993946-c01e-008e-55d7-1a7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140953Z-r154656d9bcghtlhf7uxqc3wnn000000023g00000000sutk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:53 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.6	54879	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:52 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:53 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:53 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: fd486831-f01e-005d-3fa3-1b13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140953Z-1597f696844rmb6h7netdh4d8400000003q000000000gg7q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:53 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.6	54878	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:52 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:53 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:53 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: fd486821-f01e-005d-2fa3-1b13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140953Z-1597f696844tbmpv2gk8sfx5g000000003h000000000pg8d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:53 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.6	54881	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:53 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:53 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:53 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c276760a-301e-0051-159c-1538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140953Z-r154656d9bcpx9trrv16tqwhac00000001vg00000000yavc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:53 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	54882	13.107.246.60	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:53 UTC	458	OUT	GET /c1c6b6c8-obob6uz3nidzuuv1qwz2jtykzbgxef3vz5oy-e2m4f4/logintenantbranding/0/illustration?ts=636374910507629828 HTTP/1.1 Host: aadcdn.msftauthimages.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:53 UTC	792	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:53 GMT Content-Type: image/* Content-Length: 299116 Connection: close Cache-Control: public, max-age=86400 Last-Modified: Sat, 05 Aug 2017 00:50:51 GMT ETag: 0x8D4DB9C056C1B6D x-ms-request-id: 06209164-b01e-0032-52e7-1b5bdb000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241011T140953Z-17db6f7c8cf9t48t10xeshst8c00000001x000000000g9r8 x-fd-int-roxy-purgeid: 50755578 X-Cache: TCP_HIT X-Cache-Info: L1_T2 X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-10-11 14:09:53 UTC	15592	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 03 03 03 03 03 03 04 04 03 05 05 04 05 05 07 06 06 06 06 07 0a 07 08 07 08 07 0a 0f 0a 0b 0a 0a 0b 0a 0f 0e 10 0d 0c 0d 10 0e 18 13 11 11 13 18 1c 18 16 18 1c 22 1e 1e 22 2b 29 2b 38 38 4b 01 03 03 03 03 03 03 03 04 04 03 05 05 04 05 05 07 06 06 06 06 07 0a 07 08 07 08 07 0a 0f 0a 0b 0a 0a 0b 0a 0f 0e 10 0d 0c 0d 10 0e 18 13 11 11 13 18 1c 18 16 18 1c 22 1e 1e 22 2b 29 2b 38 38 4b ff c2 00 11 08 05 1e 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 07 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a ff da 00 08 01 01 00 00 00 00 9b 79 b2 d0 d8 48 5b 93 e6 08 39 de 7f c8 f3 97 3b 3d 1d 8c c9 2e bd 25 d5 02 65 a4 b0 d2 42 e5 df 59 9d 7d 1e 27 8e e5 Data Ascii: JFIF""+)+88K""+)+88K"yH[9;=.%eBY}'
2024-10-11 14:09:53 UTC	16384	IN	Data Raw: 22 00 81 01 d2 7d 27 67 9d 85 55 9c cd 54 f3 ea d0 08 88 24 00 00 33 00 02 06 14 66 a0 92 41 11 98 06 0c 1a 8e d3 d8 1e d1 ea 37 f2 0e 2e 37 cf 3e 23 f4 07 b2 7a 0d a2 89 a6 d2 98 95 45 6b 32 2e 5f 1b 95 e6 fc 13 80 73 da d8 ee 4d 98 71 22 c6 6d 21 4a 4a 40 00 cc cc d5 2f aa 7b 4f b2 ce ad 87 53 8f c5 f3 6e 6b 93 a2 ae 60 ac ac 92 ea d9 81 11 e9 76 f2 62 52 fd 20 89 99 c7 65 29 9d 7e 7c 8b 39 d7 17 76 77 6a e2 7e 75 c4 a9 4b 5a b5 7f 50 7b b6 a7 9d be dc 78 95 b5 10 57 e5 7f 38 e0 be a0 58 79 ce 7f 47 e1 fe b3 f1 c7 ad 5d 9f 3f 81 e8 ba 75 37 3a e6 58 8c 27 3d 82 b5 84 a1 b4 21 b2 33 06 49 22 22 22 20 40 88 12 46 b7 e9 5e a3 21 81 e7 98 8e 6d cc 10 08 88 10 48 00 8c cc 00 40 8d 4a 0a 50 4a 49 00 94 0c 18 06 6a bd f6 6f b1 3a 5d eb e1 8c 9f 08 f1 07 59 f6 Data Ascii: "}'gUT$3fA7.7>#zEk2._sMq"m!JJ@/{OSnk`vbR e)~\|9vwj~uKZP{xW8XyG]?u7:X'=!3I""" @F^!mH@JPJIjo:]Y
2024-10-11 14:09:53 UTC	16384	IN	Data Raw: 24 81 27 a7 79 7b ae 74 4a 7f 26 75 de 8d 7d e7 8e 27 ee de 53 da 79 bb da db 56 22 a1 a4 00 95 1c 97 d6 b2 00 00 02 52 db 6d b6 d3 2d 34 d3 46 48 2e 0b f2 40 9b 91 28 d5 3b a1 7a af ce 19 e8 7b 4e 9c fb d3 27 cd 83 94 cf 22 c2 9b 9b f3 fc a4 22 9f 61 40 94 21 04 09 20 12 08 89 db 0d 1d 94 46 1b 90 b4 b2 db 11 a2 b2 da 43 8b 11 d8 65 21 c9 b6 b1 23 45 27 b5 f6 d8 aa 95 25 32 2c 75 5b ad 8e 23 3b 9a a8 b0 f5 87 54 a8 cf c2 c5 66 f3 10 68 68 e3 30 b0 72 67 2c 4c 79 2b 90 8a d7 64 ad 6d c1 a7 a6 64 11 90 00 24 81 00 00 de 7d 03 ec 7d 9b 6e f0 22 22 54 35 ba 10 15 16 8f 3f 54 ca 50 02 7b aa 94 fc 7a 19 9a 2e 69 aa f2 b6 8f d3 1e 6b df 6c fc d7 ec 7a 0e 47 c9 fd a2 58 28 ba ab a6 a3 46 22 49 84 ba 73 1e 5a 8c c0 00 11 32 c3 51 e3 e2 3e 6d e4 71 38 ea cb 77 d5 Data Ascii: $'y{tJ&u}'SyV"Rm-4FH.@(;z{N'""a@! FCe!#E'%2,u[#;Tfhh0rg,Ly+dmd$}}n""T5?TP{z.iklzGX(F"IsZ2Q>mq8w
2024-10-11 14:09:53 UTC	16384	IN	Data Raw: cc ba b0 ba 66 11 27 92 47 7f d3 55 69 77 c6 28 54 d9 4d 41 91 c7 f9 32 be 6b 2b 3e 46 d6 3b 23 8e b5 0d c9 6e be 4e ad 70 a8 15 f8 36 16 38 00 19 f8 ea 69 8c f6 74 52 34 d2 a2 4e 76 04 24 95 1b 58 95 ac bd 9b 04 0c 33 75 e7 bc 33 13 f1 13 91 48 c1 61 e4 39 a4 bf f2 41 e7 79 5a 42 09 ed 39 d8 67 34 46 52 1b f3 c9 b1 89 8a 77 74 e9 8b 6e 1d 38 ed c2 8d 57 50 a0 42 9b 66 4d b3 a9 14 ea ea b4 85 56 50 20 43 b3 26 4c 9b f4 3e ce 9f 68 d0 26 44 8d 4a b2 2a c2 15 02 89 46 a3 42 87 62 46 a6 56 95 c5 2a 95 4c 8f ee ff 00 f2 c0 34 be 9e c2 61 84 59 00 b3 39 39 14 8e 52 15 e8 ef a3 c9 db ca 5c b6 56 de 7e e4 9d 9d d0 0a 94 dd ff 00 55 65 a5 96 32 17 8b 33 92 d5 fa b5 68 dd 49 9d cc 15 bc 21 e3 72 f1 4d 15 7a f8 e7 82 27 11 72 07 e1 97 55 cf 2e e6 2c 89 89 de 46 95 Data Ascii: f'GUiw(TMA2k+>F;#nNp68itR4Nv$X3u3Ha9AyZB9g4FRwtn8WPBfMVP C&L>h&DJFBbFVL4aY99R\V~Ue23hI!rMz'rU.,F
2024-10-11 14:09:53 UTC	16384	IN	Data Raw: 4c 89 84 1c 0a 29 23 b7 16 56 3c fb 18 e9 a0 d3 a3 70 7c 80 b2 25 a3 96 15 6a 09 b5 21 c6 78 82 80 f3 72 67 e6 b4 a2 6a 4d 49 ab 29 9e eb 90 fa e4 aa d5 f4 c9 50 78 50 fd a4 57 04 9a 25 59 c3 77 4e 89 3a 3d c1 06 ce a4 52 33 b1 0d a0 cb c5 96 8e 66 4c 9b 67 4f f7 74 fb c4 d5 82 36 34 cc 5b 49 b1 6c e8 d3 fd 09 3f dd dd dd 0b 0b 03 46 c8 51 26 44 9f f6 0a 8d 02 8d 0a 75 22 91 69 aa 98 e8 ab 0e b9 c8 5c 74 2e 04 c5 db 94 28 10 20 8f 09 16 63 27 a6 6a 04 93 db c5 52 cd 5f ad 6a 85 ea 99 21 c9 36 41 ef fc e2 bd 1d a0 9a a4 91 10 21 4c 9d 12 94 73 10 cc d5 4e ab b1 92 8e a1 47 9c 9a a8 3c 20 53 a7 0f 57 ae 21 18 44 63 15 5e ec 37 86 41 7f 20 e9 4f ea d2 07 83 c8 63 e6 88 fd a0 62 4c ee f2 3c ea ca 19 29 48 65 7c 6c b1 c0 f4 65 a5 f1 62 41 64 f2 16 f3 36 b5 0c Data Ascii: L)#V<p\|%j!xrgjMI)PxPW%YwN:=R3fLgOt64[Il?FQ&Du"i\t.( c'jR_j!6A!LsNG< SW!Dc^7A OcbL<)He\|lebAd6
2024-10-11 14:09:53 UTC	16384	IN	Data Raw: da cd 50 c7 d4 c4 59 39 a6 c7 30 a2 72 23 39 08 c8 c8 cc 8d cb 91 5f ff c4 00 5d 10 00 01 03 02 03 04 04 0a 05 08 04 0b 07 03 02 07 01 00 02 03 04 11 12 21 31 05 22 41 51 10 13 61 71 06 14 20 23 30 32 42 52 81 91 40 62 a1 b1 c1 15 24 33 43 50 53 72 d1 44 82 92 e1 25 34 54 60 63 73 83 a2 b2 c2 f0 07 16 45 55 93 d2 f1 26 64 a3 35 74 c3 e2 36 b3 84 94 d3 ff da 00 08 01 01 00 03 3f 01 f4 b9 15 99 59 fd 33 74 ac ca cd 67 e8 b5 5a ac fa 35 ff 00 30 9d 51 2b 5a 02 01 ac 71 62 11 b4 64 83 1b d3 6e 3d 27 8a 60 e2 b1 71 43 a2 e7 d1 b9 e7 20 a4 98 8d d5 6c 24 b1 32 30 dd c4 1a dd 13 5a 34 56 6b 96 f3 d5 e5 5b cd 5b ad 59 05 97 97 92 dd 72 f5 d6 f9 fa 15 f3 e0 a5 aa 90 32 26 17 1e c4 5e 63 9a bb 26 eb 83 89 54 74 91 75 34 f0 86 b4 72 0b 04 8d ca cb 13 ec 02 c2 45 93 Data Ascii: PY90r#9_]!1"AQaq #02BR@b$3CPSrD%4T`csEU&d5t6?Y3tgZ50Q+Zqbdn='`qC l$20Z4Vk[[Yr2&^c&Ttu4rE
2024-10-11 14:09:53 UTC	16384	IN	Data Raw: 1f 62 6e bf 24 e2 0d 9d 64 d6 03 60 bd 65 9b 96 67 a4 f4 14 53 8a 72 ec 5d 88 9e 86 84 d0 9b c9 37 92 03 a2 fd 17 59 ab 79 59 fa 20 47 48 43 0f 45 8f 45 d6 ef 90 0f 4d d0 b7 45 8a 05 02 3c 8e c5 d8 87 24 de 5d 1d 88 a7 02 9e d4 fb 66 a4 71 29 f9 a7 c8 42 eb 3d 95 f5 51 6f 05 23 54 8d 52 64 9e 38 27 b5 3d 38 5b 24 75 4e 44 22 48 1d 16 57 e8 07 a0 79 2c 86 06 db 88 cd 54 ec ea aa 5d 93 4b 4a 27 a8 86 a3 14 ef 6e f0 60 0e b8 bd b8 90 99 1d 11 6c 70 4c e3 24 7b c4 0c 21 97 1c 49 e2 a7 d8 9e 0f c5 4c 68 25 f1 f7 65 07 5a 41 d7 89 1f 72 ae f0 83 69 3f 6a 6d e7 c9 53 2b cd ed 21 c8 76 00 b6 55 34 6d 0d a1 81 a0 0e 0c 0b 66 75 26 30 f8 20 9b b5 a2 c7 bc 29 26 a8 96 89 9d 5c 55 4c 71 04 bc ee d8 71 0b 68 d3 ed 9f 1c 93 c2 47 47 2c 32 f9 a8 d8 ec 24 e5 d9 97 cd 6d Data Ascii: bn$d`egSr]7YyY GHCEEME<$]fq)B=Qo#TRd8'=8[$uND"HWy,T]KJ'n`lpL${!ILh%eZAri?jmS+!vU4mfu&0 )&\ULqqhGG,2$m
2024-10-11 14:09:53 UTC	16384	IN	Data Raw: fc 3d 52 9b 6f 53 ec 51 bb 87 d8 9f b4 1e 43 00 63 5a 2e e7 b8 58 00 86 d1 d8 3b 3b 66 52 53 1c 54 ae d7 46 bb bb b5 49 b0 b6 75 2c 31 d3 62 a8 6c 6d 65 cf aa d3 da 99 26 c7 a3 9e 47 f5 93 cd 1b 09 e1 77 71 cb 92 a8 da bd 46 1a 2c 21 99 19 78 7f f2 a1 8b 67 32 9e 4a 76 1c 0f 3e b3 6e 4d d4 1b 17 63 8a 78 69 e3 eb ea 85 85 9a 32 5e 27 b2 61 2e 6e fc 9b c5 16 da c6 dd ca ad 80 0e b6 e3 b4 5d 19 f6 1d 77 5b 20 68 c3 dc b6 9d 36 d6 69 86 aa 77 33 18 66 0e b5 e5 96 bf ba 4d 95 c5 fa 35 59 95 aa d5 67 f4 7c ef c5 6d ad 9a 30 32 a7 ac 8b dc 97 7c 7c 38 aa 67 10 ca da 12 c6 fb f1 1c 7f 62 d8 fb 4a 46 1a 6d a3 13 9d ee 13 85 df 22 a4 cf 2b 84 fc 36 e4 57 e9 32 40 47 9f 2b 27 e0 6f 33 9a dc 5b dd ea ec cb 81 36 5b d6 56 c7 97 15 87 3e cb 2d 51 c4 b3 ba b9 5e 6e ff Data Ascii: =RoSQCcZ.X;;fRSTFIu,1blme&GwqF,!xg2Jv>nMcxi2^'a.n]w[ h6iw3fM5Yg\|m02\|\|8gbJFm"+6W2@G+'o3[6[V>-Q^n
2024-10-11 14:09:53 UTC	16384	IN	Data Raw: 53 08 27 2e fd 15 3e ca ad f1 49 e5 35 54 b8 32 7d ee f6 f6 15 b0 a6 78 11 bd ec b9 f6 da 83 9a 30 10 41 06 c4 2b af 36 02 c2 03 80 50 54 c0 1b 86 ca 56 90 5a eb d8 a9 99 87 74 8c 26 fa 29 25 a5 7d 14 f2 de d9 b3 86 bc 16 26 3f 2e 08 61 2d ba bf 59 63 c1 75 74 15 2d b6 7d 5d 97 e7 d3 76 45 2f dc 02 dd 6a cb d0 f5 94 52 6b bb 9e 4a 85 cd 02 28 ec 4f 33 75 2d 26 d1 89 e7 d5 ba 6d 55 1b 45 f3 66 ef f2 5d 5b c3 96 26 64 aa 30 b8 b5 c5 4f 05 54 75 17 f3 90 c8 1e 3e 0a 9f 6e 6c ca 7a c8 7d 57 8c c7 ba 46 a0 f4 ea b5 e8 de 5a 7a 1b 82 b2 72 b3 9c ac e3 e8 6e ee 9c ba 32 e8 cb c8 cb e9 56 57 1f 43 c7 20 cb 8a b3 5b d1 d4 d1 f5 60 e6 e5 77 1f 47 88 2e c5 d8 bb 17 62 ec 5d 8b b1 76 2e c5 d8 bb 17 62 ec 5d 8a fc 17 62 fa ab ea af aa be a2 fa 8b ea a1 ee a1 ee a1 ee Data Ascii: S'.>I5T2}x0A+6PTVZt&)%}&?.a-Ycut-}]vE/jRkJ(O3u-&mUEf][&d0OTu>nlz}WFZzrn2VWC [`wG.b]v.b]b
2024-10-11 14:09:53 UTC	16384	IN	Data Raw: 49 51 b2 e0 2e 75 ed 92 cb e8 77 69 59 3d 79 c7 79 58 8d 96 2b a0 78 2c 20 b9 a1 58 f9 1a 2d 3f 6b ee ac 55 2f 1c a3 53 56 96 41 13 6e f7 3e ca 9f 63 51 b6 18 86 f1 cd ee f7 8f 95 e2 0c 9b 62 ec 99 ff 00 3b 70 c3 53 3b 3f 52 0f b0 df ae 7c aa 8a da 88 29 e9 e1 74 b3 ca f0 c6 31 b9 97 13 c1 53 f8 27 43 8e 40 d7 ed 29 c0 eb e4 f7 7e a3 7b 07 93 17 82 db 3b 0c 4f 07 68 d4 02 20 67 bb cd e7 b0 29 27 95 f2 49 23 9f 23 dc 5c e7 3b 32 49 d4 95 98 4d 90 40 ef f4 61 66 10 b0 75 93 8d 33 ad c9 62 ad 93 bd 16 48 17 8c 46 cb 94 c8 22 c4 38 22 c6 98 ed 98 40 b9 fd 5c 8e 6b 89 d0 e8 a6 79 de 2a e9 e6 a9 85 8e 20 a7 b2 96 08 e5 7e 60 00 98 f6 83 74 3a 02 69 4d 77 1f 21 cd d8 f0 16 ff 00 95 c3 f7 a7 3b 66 4a 39 48 ff 00 bd 4d 59 3c 8d 75 23 a3 6b 0f ac 78 9e c5 13 2a dd Data Ascii: IQ.uwiY=yyX+x, X-?kU/SVAn>cQb;pS;?R\|)t1S'C@)~{;Oh g)'I##\;2IM@afu3bHF"8"@\ky* ~`t:iMw!;fJ9HMY<u#kx*

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.6	54884	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:53 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:53 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:53 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: f20d1edd-301e-003f-7acb-1b266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140953Z-1597f696844l6hhwkgu2fa0dk000000000p0000000010e1u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:53 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	54885	13.107.246.51	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:53 UTC	631	OUT	GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:53 UTC	790	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:53 GMT Content-Type: application/x-javascript Content-Length: 3921 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 28 Jun 2022 20:27:38 GMT ETag: 0x8DA5944A4FF258E x-ms-request-id: b0a38f5b-e01e-002e-78a1-1a9141000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241011T140953Z-17db6f7c8cfvzwz27u5rnq9kpc000000029g00000000grg0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:53 UTC	3921	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ad 5a 6b 73 e3 36 b2 fd 3e bf 82 46 b9 64 32 82 39 f2 66 93 dd 95 86 a3 f5 2b 3b ce f5 2b e3 c9 ce 56 c9 2a 17 45 42 12 c7 14 a0 80 a4 6d 5d 4b ff 7d 4f 03 24 45 c9 9e ca 24 f7 a6 32 36 89 47 a3 d1 38 7d ba d1 f4 ce b8 90 51 9e 28 e9 7a cf d5 a3 23 f0 a2 45 5e 68 e9 3e f9 a9 8a 42 6a f5 e7 5a e5 2a 52 e9 72 c9 98 e7 47 4a a2 dd 65 6f df 32 de 18 34 55 59 2e c3 99 58 2e b7 1a bd 55 2d 5e bb c2 7b 4e c6 f4 33 d7 8b e7 87 50 3b 3a 78 5b 77 bb fe f3 01 5f 79 b7 ee 5b 2e 03 ed 8b 27 11 b9 82 d6 cb 72 5d 44 b9 d2 7e ae 6e 72 9d c8 89 eb 79 3d ab a7 23 5b 2d e9 a7 42 4e f2 e9 fb 83 be 1c 1c 0c bb 8c ad b0 7e 34 a5 75 56 2b 3b 0e 6d f5 3a d2 15 5c 73 69 55 69 b5 b4 f7 2c 97 4b 57 04 02 f2 cf d5 a3 d0 c7 61 26 68 89 b1 d2 2e 29 99 07 Data Ascii: Zks6>Fd29f+;+VEBm]K}O$E$26G8}Q(z#E^h>BjZRrGJeo24UY.X.U-^{N3P;:x[w_y[.'r]D~nry=#[-BN~4uV+;m:\siUi,KWa&h.)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	54886	13.107.253.45	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:53 UTC	416	OUT	GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:53 UTC	817	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:53 GMT Content-Type: application/x-javascript Content-Length: 4880 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 22 Oct 2020 20:43:21 GMT ETag: 0x8D876CB1D67B929 x-ms-request-id: 5b6c8169-e01e-0044-65dc-1b3ed6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241011T140953Z-r154656d9bc6kzfwvnn9vvz3c40000000br000000000vp1u x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:53 UTC	4880	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 5a 7b 73 db b6 96 ff 5f 9f 02 46 73 1d 32 a2 28 39 af b6 52 58 ad 1b 3b 5b df 6d e3 ac ed 4c 6f 57 52 32 b4 04 4a 4c 29 52 05 c1 d8 1e 4b df 7d 7f 07 00 45 52 56 da dc ee 6c 66 62 e1 79 70 de 0f 80 dd 27 07 ac f3 f5 ff d8 e5 d5 f1 c5 15 3b 7f c3 ae 7e 3a bb 38 61 ef d0 fb 8d bd 3d bf 3a 7b 7d fa f5 70 5a ad ab 45 9c b3 28 4e 04 c3 ef 75 98 8b 19 cb 52 96 49 16 a7 d3 4c ae 32 19 2a 91 b3 25 fe ca 38 4c 58 24 b3 25 53 0b c1 56 32 fb 24 a6 2a 67 49 9c 2b 6c ba 16 49 76 c3 1c 80 93 33 f6 2e 94 ea 8e 9d bd 73 7d 76 85 b5 99 8c e7 71 8a dd d3 6c 75 87 f6 42 b1 34 53 f1 54 b0 30 9d 69 68 09 3a 69 2e 58 91 ce 84 64 37 8b 78 ba 60 bf c4 53 99 e5 59 a4 98 14 53 11 7f c6 21 79 81 f1 e6 11 1e 0b a5 60 b9 50 2c ca a4 5a 18 3c 7c 76 49 Data Ascii: Z{s_Fs2(9RX;[mLoWR2JL)RK}ERVlfbyp';~:8a=:{}pZE(NuRIL2%8LX$%SV2$gI+lIv3.s}vqluB4ST0ih:i.Xd7x`SYS!y`P,Z<\|vI

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.6	54883	173.222.162.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:53 UTC	2208	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900C4F3 X-BM-CBT: 1696488253 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: 1D6F504B5A5A465DBDB84F31C63A581D X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900C4F3 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshldspcl40,msbdsborgv2co,msbwdsbi920cf,optfsth3,premsbdsbchtupcf,wsbfixcachec,wsbqfasmsall_c,wsbqfminiserp_c,wsbref-c X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 516 Connection: Keep-Alive Cache-Control: no-cache Cookie: SRCHUID=V=2&GUID=CE2BE0509FF742BD822F50D98AD10391&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231005; SRCHHPGUSR=SRCHLANG=en&HV=1696488191&IPMH=5767d621&IPMID=1696488252989&LUT=1696487541024; MUID=81C61E09498D41CC97CDBBA354824ED1; _SS=SID=1D9FAF807E686D422B86BC217FC66C71&CPID=1696488253968&AC=1&CPH=071f2185; _EDGE_S=SID=1D9FAF807E686D422B86BC217FC66C71; MUIDB=81C61E09498D41CC97CDBBA354824ED1
2024-10-11 14:09:53 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-10-11 14:09:53 UTC	515	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 38 31 43 36 31 45 30 39 34 39 38 44 34 31 43 43 39 37 43 44 42 42 41 33 35 34 38 32 34 45 44 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 33 35 31 41 41 38 32 41 45 39 30 43 34 36 36 39 39 46 35 42 31 46 45 33 34 32 42 45 37 45 31 30 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>81C61E09498D41CC97CDBBA354824ED1</CID><Events><E><T>Event.ClientInst</T><IG>351AA82AE90C46699F5B1FE342BE7E10</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-10-11 14:09:54 UTC	480	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 0CA046B7D7B240CEA52FDABA4DE0975A Ref B: LAX311000109035 Ref C: 2024-10-11T14:09:53Z Date: Fri, 11 Oct 2024 14:09:53 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.3ca6dc17.1728655793.13ab240b

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.6	54889	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:54 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:54 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:54 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 705c08cd-101e-0046-2538-1a91b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140954Z-1597f696844tbmpv2gk8sfx5g000000003m000000000b8wh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:54 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.6	54887	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:54 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:54 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:54 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: b9724e67-901e-00ac-7bd7-1ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140954Z-r154656d9bcp2td5zh846myygg0000000y7g00000000cef5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:54 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.6	54890	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:54 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:54 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:54 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: fe6b1adb-c01e-002b-1ab1-1b6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140954Z-r154656d9bc94jg685tuhe75qw0000000npg00000000esh5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:54 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.6	54888	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:54 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:54 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:54 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 75281d68-101e-000b-5148-1a5e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140954Z-1597f6968447j5lf3znmew1ya000000001yg00000001108n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:54 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.6	54891	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:54 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:54 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:54 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: fed7985d-c01e-0034-3cd8-1a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140954Z-r154656d9bcc4snr2sy7ntt13c0000000hp0000000006v3w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:54 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	54894	13.107.253.45	443	4916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:54 UTC	406	OUT	GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 14:09:54 UTC	817	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:54 GMT Content-Type: application/x-javascript Content-Length: 3921 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 28 Jun 2022 20:27:38 GMT ETag: 0x8DA5944A4FF258E x-ms-request-id: d5bfad56-901e-0079-3312-1b3f72000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241011T140954Z-r154656d9bcqc2n2s48bp5ktg800000001wg000000002kh4 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:54 UTC	3921	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ad 5a 6b 73 e3 36 b2 fd 3e bf 82 46 b9 64 32 82 39 f2 66 93 dd 95 86 a3 f5 2b 3b ce f5 2b e3 c9 ce 56 c9 2a 17 45 42 12 c7 14 a0 80 a4 6d 5d 4b ff 7d 4f 03 24 45 c9 9e ca 24 f7 a6 32 36 89 47 a3 d1 38 7d ba d1 f4 ce b8 90 51 9e 28 e9 7a cf d5 a3 23 f0 a2 45 5e 68 e9 3e f9 a9 8a 42 6a f5 e7 5a e5 2a 52 e9 72 c9 98 e7 47 4a a2 dd 65 6f df 32 de 18 34 55 59 2e c3 99 58 2e b7 1a bd 55 2d 5e bb c2 7b 4e c6 f4 33 d7 8b e7 87 50 3b 3a 78 5b 77 bb fe f3 01 5f 79 b7 ee 5b 2e 03 ed 8b 27 11 b9 82 d6 cb 72 5d 44 b9 d2 7e ae 6e 72 9d c8 89 eb 79 3d ab a7 23 5b 2d e9 a7 42 4e f2 e9 fb 83 be 1c 1c 0c bb 8c ad b0 7e 34 a5 75 56 2b 3b 0e 6d f5 3a d2 15 5c 73 69 55 69 b5 b4 f7 2c 97 4b 57 04 02 f2 cf d5 a3 d0 c7 61 26 68 89 b1 d2 2e 29 99 07 Data Ascii: Zks6>Fd29f+;+VEBm]K}O$E$26G8}Q(z#E^h>BjZRrGJeo24UY.X.U-^{N3P;:x[w_y[.'r]D~nry=#[-BN~4uV+;m:\siUi,KWa&h.)

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.6	54900	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:55 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:55 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:55 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 0e999b2a-201e-003f-411c-1a6d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140955Z-1597f696844q8c67yszg3hsx0000000003kg00000000bskk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:55 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.6	54898	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:55 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:55 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:55 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 9a6afd11-d01e-0049-3e83-1be7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140955Z-1597f696844dq2z42yxqsye8f400000003pg00000000nkq6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:55 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.6	54896	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:55 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:55 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:55 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: bef1da19-c01e-0034-1da3-1b2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140955Z-1597f696844qt6drz6tdp68z0s00000000rg000000010qh3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:55 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.6	54899	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:55 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:55 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:55 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: be018b82-401e-0035-0c8c-1582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140955Z-r154656d9bc94jg685tuhe75qw0000000nq000000000bxkp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:55 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.6	54897	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:55 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:55 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:55 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 805247ec-201e-000c-7bb2-1b79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140955Z-r154656d9bcwntfgrk9d0utmv800000000n000000000s915 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:55 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.6	54903	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:55 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:55 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:55 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 0b82b7a4-c01e-008e-1ebf-1b7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140955Z-r154656d9bcghtlhf7uxqc3wnn000000022g00000000u6th x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:55 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.6	54904	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:55 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:55 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:55 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: cda1fd3a-301e-0096-2fde-1ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140955Z-1597f696844rmb6h7netdh4d8400000003hg000000011dnz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:55 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.6	54901	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:55 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:55 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:55 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 53370353-c01e-0079-57de-1be51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140955Z-r154656d9bc2w2dvheyq24wgc400000001vg00000000ht6y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:55 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.6	54902	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:55 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:55 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:55 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: a84dc0aa-d01e-002b-1b83-1b25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140955Z-r154656d9bcwd4kdv0wzn7nx68000000028000000000pyc2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:55 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.6	54905	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:55 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:56 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:55 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 24b55255-001e-0049-07ac-1b5bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140955Z-1597f6968449cxlldwc92t48ds00000003cg0000000110kx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:56 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.6	54908	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:56 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:56 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:56 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 1871f2a9-701e-0021-15ac-1b3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140956Z-r154656d9bc25bv85eq198756g00000001s0000000006q38 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:56 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.6	54909	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:56 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:56 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:56 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 2c65b6c1-101e-0079-26fb-195913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140956Z-1597f696844r6vmva1wkvnf04w00000001ag00000000t089 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:56 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.6	54910	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:56 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:56 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:56 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 69457385-001e-0034-42de-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140956Z-r154656d9bcp2td5zh846myygg0000000y8g000000006t6h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:56 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.6	54911	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:56 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:56 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:56 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: ae768298-401e-005b-2b04-1a9c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140956Z-1597f696844bcn2fz2c83qgev8000000036g00000000qr56 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:56 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.6	54912	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:56 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:56 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:56 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: fd486e14-f01e-005d-3fa3-1b13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140956Z-r154656d9bcwntfgrk9d0utmv800000000s0000000005sm8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:56 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.6	54916	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:57 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:57 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:57 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: ecf9055d-301e-0020-4ea3-1b6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140957Z-r154656d9bcwd5vj3zknz7qfhc0000000da000000000rm5g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:57 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.6	54914	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:57 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:57 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:57 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 1996b7fc-c01e-00a2-57a3-1b2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140957Z-r154656d9bcp2td5zh846myygg0000000y4g00000000utp7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:57 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.6	54913	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:57 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:57 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:57 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: ef53c767-f01e-0071-1df9-19431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140957Z-1597f696844l6hhwkgu2fa0dk000000000pg00000000y6t4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:57 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.6	54917	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:57 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:57 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:57 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 4a48c519-601e-003d-1aa3-1b6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140957Z-1597f696844lt47xuv87mwabmw00000003hg000000011pz8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:57 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.6	54915	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:57 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:57 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:57 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: ea18a89c-b01e-001e-2d22-160214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140957Z-r154656d9bcbxn4qhpywdcmprs000000019000000000p4ez x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:57 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.6	54918	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:58 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:58 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:58 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 780d43bf-501e-007b-11a3-1b5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140958Z-1597f696844gnxkv9xdcpvd3zn00000003r000000000dg6x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:58 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.6	54920	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:58 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:58 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:58 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 8a28721d-501e-008f-3e9c-159054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140958Z-r154656d9bcwd5vj3zknz7qfhc0000000d7g00000000z5tr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:58 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.6	54919	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:58 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:58 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:58 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 3056715e-c01e-007a-0131-1ab877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140958Z-1597f69684422wgj3u8kq0401g00000000zg00000000xyes x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:58 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.6	54921	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:58 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:58 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:58 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: e5b5a791-201e-0071-25a3-1bff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140958Z-r154656d9bcp74cth8ay97rud4000000010000000000rbqs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:58 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.6	54922	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:58 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:58 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:58 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 8920142e-901e-0048-1130-1ab800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140958Z-1597f69684469lsz07pz1m8tt000000000z000000000ewdq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:58 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.6	54923	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:59 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:59 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:59 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: fd6ec8f2-f01e-005d-19ad-1b13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140959Z-r154656d9bc2w2dvheyq24wgc400000001s000000000w732 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:09:59 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.6	54924	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:59 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:59 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:59 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 383fd452-a01e-0021-4f05-1a814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140959Z-1597f696844c8tlv61bxv37s7000000001wg000000011mrf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:59 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.6	54925	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:59 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:59 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:59 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: fafdf676-a01e-006f-62a3-1b13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140959Z-r154656d9bckrjvwv99v3r8pqn00000000s000000000qbp4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:59 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.6	54926	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:59 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:59 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:59 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: e0a8bc36-801e-00ac-722f-1afd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140959Z-1597f69684422wgj3u8kq0401g000000015g000000000c6g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:09:59 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.6	54927	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:09:59 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:09:59 UTC	564	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:09:59 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 5e701b13-101e-008e-09e7-1bcf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T140959Z-1597f696844q8c67yszg3hsx0000000003kg00000000bt4h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-11 14:09:59 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.6	54928	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:10:00 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:10:00 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:10:00 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 0bfd010e-c01e-00a2-72de-1b2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T141000Z-1597f6968448879qsksvpyxqh400000000rg00000000av4k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:10:00 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.6	54929	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:10:00 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:10:00 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:10:00 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 07f85e87-a01e-003d-78df-1a98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T141000Z-r154656d9bczmvnbrzm0xmzrs40000000ns0000000008ytr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:10:00 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.6	54930	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:10:00 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:10:00 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:10:00 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 5de3abe8-501e-00a0-4033-1a9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T141000Z-1597f696844gnxkv9xdcpvd3zn00000003qg00000000htm5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:10:00 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.6	54931	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:10:00 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:10:00 UTC	564	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:10:00 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 16703353-d01e-0028-59e7-1b7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T141000Z-1597f69684469lsz07pz1m8tt0000000011g000000000nts x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-11 14:10:00 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.6	54932	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:10:00 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:10:01 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:10:00 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 7afec1f8-601e-000d-328c-152618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T141000Z-r154656d9bcwntfgrk9d0utmv800000000q000000000fsxx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:10:01 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.6	54934	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:10:01 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:10:01 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:10:01 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: b764448c-501e-008c-4097-1bcd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T141001Z-r154656d9bc6kzfwvnn9vvz3c40000000bs000000000s7yb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:10:01 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.6	54933	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:10:01 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:10:01 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:10:01 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: eb4d8ac2-801e-008f-2a87-1b2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T141001Z-r154656d9bc8ljwwac0k5w3kn800000004q000000000z5ey x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:10:01 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.6	54936	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:10:01 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:10:01 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:10:01 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: c024300a-701e-001e-3836-1af5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T141001Z-1597f696844r6vmva1wkvnf04w00000001bg00000000pbnh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:10:01 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.6	54935	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:10:01 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:10:01 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:10:01 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 6ab73692-101e-000b-4504-1a5e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T141001Z-1597f696844lt47xuv87mwabmw00000003kg00000000zs13 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:10:01 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.6	54937	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:10:02 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:10:02 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:10:02 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 234b0266-801e-0035-5da3-1b752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T141002Z-1597f696844bcn2fz2c83qgev8000000033g00000000z8u4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:10:02 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.6	54938	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:10:02 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 72 46 65 70 47 72 52 65 32 55 61 42 6e 42 4b 62 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 61 35 66 30 37 39 34 38 61 63 32 38 64 33 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: rFepGrRe2UaBnBKb.1Context: 5a5f07948ac28d3d
2024-10-11 14:10:02 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-11 14:10:02 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 72 46 65 70 47 72 52 65 32 55 61 42 6e 42 4b 62 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 61 35 66 30 37 39 34 38 61 63 32 38 64 33 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 61 44 52 51 4e 58 33 35 6b 44 70 62 4d 35 7a 31 49 78 31 6b 4b 42 78 45 30 44 34 31 32 47 48 4c 72 63 39 45 6a 7a 76 58 32 78 64 78 2f 63 49 2b 70 39 64 6e 74 31 6b 33 68 67 69 4a 77 44 72 2b 36 75 75 75 45 62 79 77 4e 75 68 41 78 6e 71 6e 4c 67 38 71 64 70 70 67 39 51 64 6e 39 66 4a 36 57 34 45 66 72 31 2b 38 64 7a 69 50 62 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: rFepGrRe2UaBnBKb.2Context: 5a5f07948ac28d3d<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAaDRQNX35kDpbM5z1Ix1kKBxE0D412GHLrc9EjzvX2xdx/cI+p9dnt1k3hgiJwDr+6uuuEbywNuhAxnqnLg8qdppg9Qdn9fJ6W4Efr1+8dziPb
2024-10-11 14:10:02 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 72 46 65 70 47 72 52 65 32 55 61 42 6e 42 4b 62 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 61 35 66 30 37 39 34 38 61 63 32 38 64 33 64 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: rFepGrRe2UaBnBKb.3Context: 5a5f07948ac28d3d<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-11 14:10:03 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-11 14:10:03 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 53 5a 2b 38 37 6b 4d 41 66 45 53 57 50 74 63 38 6b 2b 4a 6b 46 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: SZ+87kMAfESWPtc8k+JkFA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.6	54940	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:10:03 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:10:03 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:10:03 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: de1d1d81-401e-0064-31fa-1954af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T141003Z-1597f696844tbmpv2gk8sfx5g000000003f000000000x38z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:10:03 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.6	54939	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:10:03 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:10:03 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:10:03 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: c89f133c-401e-00a3-496d-1a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T141003Z-1597f696844dq2z42yxqsye8f400000003s0000000006za5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:10:03 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.6	54941	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:10:03 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:10:03 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:10:03 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: fe1a38a0-a01e-0053-6ad8-1a8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T141003Z-r154656d9bckrjvwv99v3r8pqn00000000t000000000gh17 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:10:03 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.6	54942	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:10:03 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:10:03 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:10:03 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 408dd0a1-801e-0078-11a3-1bbac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T141003Z-r154656d9bcwd4kdv0wzn7nx68000000028000000000pz8t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:10:03 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.6	54943	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:10:03 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:10:03 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:10:03 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 5e44e277-701e-006f-7cd7-1aafc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T141003Z-1597f696844vxsn8mvt69yd90000000003q0000000006a83 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:10:03 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.6	54947	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:10:04 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:10:04 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:10:04 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 03826138-301e-0033-0528-1afa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T141004Z-1597f69684469lsz07pz1m8tt000000000zg00000000bbtu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:10:04 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.6	54946	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:10:04 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:10:04 UTC	564	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:10:04 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: bfaaa79a-701e-0098-13e7-1b395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T141004Z-r154656d9bcc2bdtn1pd2qfd4c0000000y4g00000000nqyf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-11 14:10:04 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.6	54945	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:10:04 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:10:04 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:10:04 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: a267c0c0-701e-000d-3aa3-1b6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T141004Z-r154656d9bc2w2dvheyq24wgc400000001sg00000000w2xt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:10:04 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.6	54944	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:10:04 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:10:04 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:10:04 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: f4958516-001e-00a2-15de-1ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T141004Z-1597f696844r6vmva1wkvnf04w00000001g0000000000g1m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:10:04 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.6	54948	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:10:04 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:10:04 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:10:04 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 6e5eb744-701e-0098-3aa3-1b395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T141004Z-r154656d9bcghtlhf7uxqc3wnn000000024000000000qfr0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:10:04 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.6	54950	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:10:05 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:10:05 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:10:05 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 52a2c53c-c01e-0079-64ac-1be51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T141005Z-1597f696844l6hhwkgu2fa0dk000000000tg00000000hh2z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:10:05 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.6	54949	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:10:05 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:10:05 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:10:05 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 15931ea1-d01e-0028-1da3-1b7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T141005Z-r154656d9bckrjvwv99v3r8pqn00000000qg00000000ur4q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:10:05 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.6	54951	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:10:05 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:10:05 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:10:05 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: c11e9d40-601e-003d-3236-1a6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T141005Z-1597f696844qt6drz6tdp68z0s00000000w000000000k6f2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 14:10:05 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.6	54953	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 14:10:05 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 14:10:05 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 14:10:05 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 7ee78019-a01e-0002-6d9c-1b5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T141005Z-r154656d9bcxgrn9bkxmc6s93s00000000v000000000t939 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 14:10:05 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Target ID:	0
Start time:	10:09:34
Start date:	11/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	10:09:37
Start date:	11/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1656 --field-trial-handle=1936,i,5408255694739210393,11818520442255201119,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	10:09:39
Start date:	11/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://eu.knowbe4.com/auth/saml/c33d8069242e"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://eu.knowbe4.com/auth/saml/c33d8069242e

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Windows Analysis Report
https://eu.knowbe4.com/auth/saml/c33d8069242e