Edit tour

Windows Analysis Report
https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-light.woff2

Overview

General Information

Sample URL:	https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-light.woff2
Analysis ID:	1532594
Infos:

Errors URL not reachable

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6628 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6800 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1960,i,224827854049608094,2786181922029065157,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 368 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-light.woff2" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

OpenWith.exe (PID: 5776 cmdline: C:\Windows\system32\OpenWith.exe -Embedding MD5: E4A834784FA08C17D47A1E72429C5109)

cleanup

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 3592Host: login.live.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 57084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 54391 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54333 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54356 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54413 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54379 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 54436 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 57117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 54287 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 54367 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 54309 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54322 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 54242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54332 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54380 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 54321 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54344 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54401 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54310 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54355 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54253 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54299
Source: unknown	Network traffic detected: HTTP traffic on port 54423 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54300 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54346 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57102
Source: unknown	Network traffic detected: HTTP traffic on port 54251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57103
Source: unknown	Network traffic detected: HTTP traffic on port 54297 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54378 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54368 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 57118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57109
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57105
Source: unknown	Network traffic detected: HTTP traffic on port 54312 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57114
Source: unknown	Network traffic detected: HTTP traffic on port 54252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57110
Source: unknown	Network traffic detected: HTTP traffic on port 54411 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 54285 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 54422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57117
Source: unknown	Network traffic detected: HTTP traffic on port 54334 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57118
Source: unknown	Network traffic detected: HTTP traffic on port 54274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 57097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 54244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57096
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57099
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57093
Source: unknown	Network traffic detected: HTTP traffic on port 57075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57094
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57095
Source: unknown	Network traffic detected: HTTP traffic on port 57098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57091
Source: unknown	Network traffic detected: HTTP traffic on port 54371 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54336 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54421 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54358 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54383 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54408 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57067
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57069
Source: unknown	Network traffic detected: HTTP traffic on port 54381 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57066
Source: unknown	Network traffic detected: HTTP traffic on port 54326 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54393 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54265 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57079
Source: unknown	Network traffic detected: HTTP traffic on port 54441 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57073
Source: unknown	Network traffic detected: HTTP traffic on port 57077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54348 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57089
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54299 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57085
Source: unknown	Network traffic detected: HTTP traffic on port 54359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57082
Source: unknown	Network traffic detected: HTTP traffic on port 54303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57084
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54419
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54418
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54417
Source: unknown	Network traffic detected: HTTP traffic on port 54282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54412
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54411
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54410
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54416
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54415
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54414
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54413
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54304 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54429
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54307
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54428
Source: unknown	Network traffic detected: HTTP traffic on port 54258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54423
Source: unknown	Network traffic detected: HTTP traffic on port 57089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54293 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54301
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54422
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54421
Source: unknown	Network traffic detected: HTTP traffic on port 54407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54420
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54427
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54305
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54426
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54304
Source: unknown	Network traffic detected: HTTP traffic on port 54350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54425
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54303
Source: unknown	Network traffic detected: HTTP traffic on port 54315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54424
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54430
Source: unknown	Network traffic detected: HTTP traffic on port 54385 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54418 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54319
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54318
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54439
Source: unknown	Network traffic detected: HTTP traffic on port 54406 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54431 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54397 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54313
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54434
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54312
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54433
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54311
Source: unknown	Network traffic detected: HTTP traffic on port 54374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54432
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54431
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54315
Source: unknown	Network traffic detected: HTTP traffic on port 54429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54436
Source: unknown	Network traffic detected: HTTP traffic on port 54316 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54435
Source: unknown	Network traffic detected: HTTP traffic on port 57067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54320
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54441
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54440
Source: unknown	Network traffic detected: HTTP traffic on port 57111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54361 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54329
Source: unknown	Network traffic detected: HTTP traffic on port 54281 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54324
Source: unknown	Network traffic detected: HTTP traffic on port 54338 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54323
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54331
Source: unknown	Network traffic detected: HTTP traffic on port 54270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54330
Source: unknown	Network traffic detected: HTTP traffic on port 54349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54395 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54363 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54351 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57101 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54306 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54409
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54408
Source: unknown	Network traffic detected: HTTP traffic on port 54405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54407
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54406
Source: unknown	Network traffic detected: HTTP traffic on port 54291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54401
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54400
Source: unknown	Network traffic detected: HTTP traffic on port 54373 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54405
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54404
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54403
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54402
Source: unknown	Network traffic detected: HTTP traffic on port 54416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54433 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54328 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54427 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54379
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54257
Source: unknown	Network traffic detected: HTTP traffic on port 54376 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54378
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54377
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54376
Source: unknown	Network traffic detected: HTTP traffic on port 54330 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54382
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54260
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54381
Source: unknown	Network traffic detected: HTTP traffic on port 54296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54380
Source: unknown	Network traffic detected: HTTP traffic on port 57069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54386
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54385
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54384
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54262
Source: unknown	Network traffic detected: HTTP traffic on port 54273 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54383
Source: unknown	Network traffic detected: HTTP traffic on port 54262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54388 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54269
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54268
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54389
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54388
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54387
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54393
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54271
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54392
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54391
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54390
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54397
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54396
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54395
Source: unknown	Network traffic detected: HTTP traffic on port 57070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54394
Source: unknown	Network traffic detected: HTTP traffic on port 54399 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54364 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54261 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54279
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54399
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54398
Source: unknown	Network traffic detected: HTTP traffic on port 57108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54283
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54282
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54280
Source: unknown	Network traffic detected: HTTP traffic on port 54415 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54286
Source: unknown	Network traffic detected: HTTP traffic on port 54377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54284
Source: unknown	Network traffic detected: HTTP traffic on port 54434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54329 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54426 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54289
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54288
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54293
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54292
Source: unknown	Network traffic detected: HTTP traffic on port 57093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54291
Source: unknown	Network traffic detected: HTTP traffic on port 54295 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54290
Source: unknown	Network traffic detected: HTTP traffic on port 54307 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54320 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54366 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54334
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54332

Source: unknown	HTTPS traffic detected: 40.126.31.67:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.31.73:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:57095 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:54241 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:54242 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:54349 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:54350 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:54434 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:54436 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:54435 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:54440 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:54441 version: TLS 1.2

Source: classification engine

Classification label: unknown1.win@23/10@4/4

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: C:\Windows\System32\OpenWith.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1960,i,224827854049608094,2786181922029065157,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-light.woff2"
Source: unknown	Process created: C:\Windows\System32\OpenWith.exe C:\Windows\system32\OpenWith.exe -Embedding
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1960,i,224827854049608094,2786181922029065157,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Windows\System32\OpenWith.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: wldp.dll	Jump to behavior

Source: C:\Windows\System32\OpenWith.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InProcServer32

Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 DLL Side-Loading	1 Process Injection	1 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 DLL Side-Loading	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Registry Run Keys / Startup Folder	1 DLL Side-Loading	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-light.woff2	0%	Virustotal		Browse

Source	Detection	Scanner	Label	Link
www.google.com	0%	Virustotal		Browse
static2.sharepointonline.com	0%	Virustotal		Browse

Name	IP	Active	Malicious	Antivirus Detection	Reputation
www.google.com	142.250.181.228	true	false	0%, Virustotal, Browse	unknown
static2.sharepointonline.com	unknown	unknown	false	0%, Virustotal, Browse	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved		unknown	unknown	false
142.250.181.228	www.google.com	United States		15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1532594
Start date and time:	2024-10-13 18:07:44 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 29s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-light.woff2
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	UNKNOWN
Classification:	unknown1.win@23/10@4/4
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Errors

URL not reachable

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 192.229.221.95, 87.248.205.0, 172.217.23.99, 142.250.186.78, 108.177.15.84, 34.104.35.123, 104.102.54.247, 52.165.164.15, 13.95.31.18, 20.242.39.171, 131.107.255.255, 93.184.221.240, 142.250.185.131
Excluded domains from analysis (whitelisted): client.wns.windows.com, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, slscr.update.microsoft.com, e13287.dscg.akamaiedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, dns.msftncsi.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, login.live.com, static2.sharepointonline.com.edgekey.net, glb.cws.prod.dcat.dsp.trafficmanager.net, update.googleapis.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
12:10:04	API Interceptor	1x Sleep call for process: OpenWith.exe modified

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 15:08:53 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.979728364800466
Encrypted:	false
SSDEEP:	48:8yZdkTI8TH3idAKZdA19ehwiZUklqehN5y+3:8yI/F05y
MD5:	DBFB52B441DD8481731E59E6800B7B37
SHA1:	6D37BCE9F60FE9FC815173784A490C8D75A47E6D
SHA-256:	E050A0DDBAF31DE7146F4563A6489CD29B9A29A8D0F0899AA7B78990D21FF905
SHA-512:	FF175F86BF9B6EF5C527F3F6EA228C31DF4658FFCE1FA99B18047C6C7DD01CDE30D99A90274DD9E3ABA850A12D5D6A46AFC05A3D5BFE300EF961814B3A803229
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....7.2....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IMY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VMY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VMY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VMY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........W.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 15:08:53 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.994271354105056
Encrypted:	false
SSDEEP:	48:89ZdkTI8TH3idAKZdA1weh/iZUkAQkqehk5y+2:89I/f9Q35y
MD5:	D7B26FDC5AA60371785671CE8F7F30F5
SHA1:	1569CFD86665E281DEA320C5794049432A55D144
SHA-256:	0810EA8C9F4F79B8E2FAC208D8EA33F1E0900DFB8D7CDCFDE283A2EB0E260296
SHA-512:	3CD401ED1BB936E8FBBC08F097386EC47C50A352D001873C97716DE9265B198407B829050D937AF2479D83FC29677498EF7D55B2E49B8EC1B4180D0FD4EAB602
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....D.2....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IMY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VMY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VMY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VMY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........W.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0061319444184225
Encrypted:	false
SSDEEP:	48:8xNdkTI8sH3idAKZdA14tseh7sFiZUkmgqeh7sW5y+BX:8xk/Sn45y
MD5:	885F4573CCC22F01A08014C2E5301E9C
SHA1:	3B9898E05776F20736503A5F3F546C380C4F0464
SHA-256:	31E14CD4C420CBDDDE1364455911D22D6FAACA6868EF317F4E8708B1F775DD0C
SHA-512:	99950686D196961EC9D5D4CB1FE0B9FD6DD67FF532082F3409117F0A71475DED07E46ED95120EF1E0C329067552D6D7996BA59E28CC28EADB1A0384572CE77A4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IMY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VMY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VMY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........W.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 15:08:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.995280533483949
Encrypted:	false
SSDEEP:	48:8pZdkTI8TH3idAKZdA1vehDiZUkwqehA5y+R:8pI/ce5y
MD5:	0A05A82DF50FB9CCC8739705A87E1EB3
SHA1:	3B51BDE1F14696C833D5140EB7AA848B7B4C4331
SHA-256:	7C1A35704BB6785B8D9759E71F4B3BB75AD68FECFCA6FF5682A4D556CDBE20A7
SHA-512:	889C501066831E911FA506A4E3A637F2E503193B8053443655087A71EDA0EBEEB3FF95AFA1B506D48BDC2CD438337007C1769FB790600509E2CE84EE608166FD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....Q..2....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IMY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VMY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VMY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VMY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........W.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 15:08:53 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9821756179941596
Encrypted:	false
SSDEEP:	48:8pZdkTI8TH3idAKZdA1hehBiZUk1W1qeh65y+C:8pI/s9a5y
MD5:	C637FC9D393224154D8907B999CD117B
SHA1:	E298F56AC939586F68D238D61859F6F6184DEB72
SHA-256:	22FEC008EF1C62D8EDEBB8F1404D971B6D78EF4E09270EC67BBDD1877A03B190
SHA-512:	99E559E6A70A9B6AF26CFE87D6DE54710AA8031F183148BDDFF203FC732197A9FA70A56BFE0129C5DE98EEA5C9A858FD953F7E31293D7199A7E8634EB6A3846B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......2....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IMY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VMY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VMY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VMY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........W.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 15:08:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.993226469506869
Encrypted:	false
SSDEEP:	48:85MZdkTI8TH3idAKZdA1duT+ehOuTbbiZUk5OjqehOuTb45y+yT+:8KI/CT/TbxWOvTb45y7T
MD5:	94B8D3A617B5C3DED10B6F150D2507C9
SHA1:	89D5E03C21F4DD2A05A8D7A44A0C12E37A047064
SHA-256:	265ADDB1DBA77C5E7B301C56E263BA1AD789CA554ECDB4B0272AF59B7B220378
SHA-512:	AC192334294930A786F0BE42717F06ADD6E43FBE0AA900B39278ECBB7CB38C3007F7E933817F639A278FFA6DCD8B2C81C9564A3BF22CA0DD7048B5339C763618
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....2....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IMY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VMY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VMY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VMY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........W.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\Downloads\segoeui-light.woff2 (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28740, version 0.0
Category:	dropped
Size (bytes):	28740
Entropy (8bit):	7.99094566451361
Encrypted:	true
SSDEEP:	384:+W6q2qYn+Uh/UBlruLKWN4yKTDAj8T2rrOciQHyMRLfVZSmVTQoUwSTaVDCiU7Mu:lxoy6LtN4yrwTs+mVQoUwZCiFQt2Dg
MD5:	330E17BEEEECEE428DEA32F39B679D3B
SHA1:	0287E124B90084127EBD975D9F3FC92EBAAF53E2
SHA-256:	D12E9086B74EF50E35760E4F40BD5411D1B2B657E33E4A09C5FC4861BEBF0752
SHA-512:	2D8F0D315A75527D5D198F09BD9CF685CCD2971960CB54EE4AFB56BE3CCDFB0AFA757ADC93EAD412D6C975B4786BA8D0B10912EE4F23E4977528002BDA6B4668
Malicious:	false
Reputation:	low
Preview:	wOF2......pD.........o..........................`.. ..L...........].6.$..H..T..L.. ..0. ..i.....T......F.....I?......n....../....?.....3p\.u..<Og.....R.:.:......K.......H..C....>.F.Zy..X.4.; ....2yJ.Li..1.?.....}...U?....!.s.PvU..H=._...'I....Z{.\|E..n..;@z._..-..1.Hh...vH.;.. .HB.;.1....[..UZJ....5....~...6..K.<.3.....`.:8@..S.=kk..^G.#.o...}M.....?..)...e.JY.Z5I..v..G.u.X...K..4x../z.@3\|[.Sw-...i.U].T.U.VK-..[R..kH.%..h...4.....-7....:ao.g......<O..v.....d.E..T..."F]Y..5..WE...o+.1c.kS.+.0.....g..t.5g....)..42[..Jw.....R]..3)..t....P....>.Z.T .......e....T.E u..@%.tN5%...s....W..wa/@..J.%y.P\..H.vA.fA.c.t$.D...E.........B...B.qQ.M.JEU..].....7m.f9 9.]9....h.uW../..5.gXc.Yf..JGPU..L(.PN..U..I_.c.U......"K..Q..v....Bl..3.nD...m!l...b..W"@.j.;.&.i5.Yl..v#...x..hd'.F.mX.e..jp..\.....Q:....7..$=.a(...Z.G..I.7K....w...!.D.-..@ZJG.,.d.De.,.e.R....g..L.a>a.JH.hW.PY*O..J.Q.U}.RuV.Wq.Tw.'..t..<....q.:.3...j..k.........8-...;..x......U.T.

C:\Users\user\Downloads\segoeui-light.woff2.crdownload

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28740, version 0.0
Category:	dropped
Size (bytes):	28740
Entropy (8bit):	7.99094566451361
Encrypted:	true
SSDEEP:	384:+W6q2qYn+Uh/UBlruLKWN4yKTDAj8T2rrOciQHyMRLfVZSmVTQoUwSTaVDCiU7Mu:lxoy6LtN4yrwTs+mVQoUwZCiFQt2Dg
MD5:	330E17BEEEECEE428DEA32F39B679D3B
SHA1:	0287E124B90084127EBD975D9F3FC92EBAAF53E2
SHA-256:	D12E9086B74EF50E35760E4F40BD5411D1B2B657E33E4A09C5FC4861BEBF0752
SHA-512:	2D8F0D315A75527D5D198F09BD9CF685CCD2971960CB54EE4AFB56BE3CCDFB0AFA757ADC93EAD412D6C975B4786BA8D0B10912EE4F23E4977528002BDA6B4668
Malicious:	false
Reputation:	low
Preview:	wOF2......pD.........o..........................`.. ..L...........].6.$..H..T..L.. ..0. ..i.....T......F.....I?......n....../....?.....3p\.u..<Og.....R.:.:......K.......H..C....>.F.Zy..X.4.; ....2yJ.Li..1.?.....}...U?....!.s.PvU..H=._...'I....Z{.\|E..n..;@z._..-..1.Hh...vH.;.. .HB.;.1....[..UZJ....5....~...6..K.<.3.....`.:8@..S.=kk..^G.#.o...}M.....?..)...e.JY.Z5I..v..G.u.X...K..4x../z.@3\|[.Sw-...i.U].T.U.VK-..[R..kH.%..h...4.....-7....:ao.g......<O..v.....d.E..T..."F]Y..5..WE...o+.1c.kS.+.0.....g..t.5g....)..42[..Jw.....R]..3)..t....P....>.Z.T .......e....T.E u..@%.tN5%...s....W..wa/@..J.%y.P\..H.vA.fA.c.t$.D...E.........B...B.qQ.M.JEU..].....7m.f9 9.]9....h.uW../..5.gXc.Yf..JGPU..L(.PN..U..I_.c.U......"K..Q..v....Bl..3.nD...m!l...b..W"@.j.;.&.i5.Yl..v#...x..hd'.F.mX.e..jp..\.....Q:....7..$=.a(...Z.G..I.7K....w...!.D.-..@ZJG.,.d.De.,.e.R....g..L.a>a.JH.hW.PY*O..J.Q.U}.RuV.Wq.Tw.'..t..<....q.:.3...j..k.........8-...;..x......U.T.

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28740, version 0.0
Category:	downloaded
Size (bytes):	28740
Entropy (8bit):	7.99094566451361
Encrypted:	true
SSDEEP:	384:+W6q2qYn+Uh/UBlruLKWN4yKTDAj8T2rrOciQHyMRLfVZSmVTQoUwSTaVDCiU7Mu:lxoy6LtN4yrwTs+mVQoUwZCiFQt2Dg
MD5:	330E17BEEEECEE428DEA32F39B679D3B
SHA1:	0287E124B90084127EBD975D9F3FC92EBAAF53E2
SHA-256:	D12E9086B74EF50E35760E4F40BD5411D1B2B657E33E4A09C5FC4861BEBF0752
SHA-512:	2D8F0D315A75527D5D198F09BD9CF685CCD2971960CB54EE4AFB56BE3CCDFB0AFA757ADC93EAD412D6C975B4786BA8D0B10912EE4F23E4977528002BDA6B4668
Malicious:	false
Reputation:	low
URL:	https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-light.woff2
Preview:	wOF2......pD.........o..........................`.. ..L...........].6.$..H..T..L.. ..0. ..i.....T......F.....I?......n....../....?.....3p\.u..<Og.....R.:.:......K.......H..C....>.F.Zy..X.4.; ....2yJ.Li..1.?.....}...U?....!.s.PvU..H=._...'I....Z{.\|E..n..;@z._..-..1.Hh...vH.;.. .HB.;.1....[..UZJ....5....~...6..K.<.3.....`.:8@..S.=kk..^G.#.o...}M.....?..)...e.JY.Z5I..v..G.u.X...K..4x../z.@3\|[.Sw-...i.U].T.U.VK-..[R..kH.%..h...4.....-7....:ao.g......<O..v.....d.E..T..."F]Y..5..WE...o+.1c.kS.+.0.....g..t.5g....)..42[..Jw.....R]..3)..t....P....>.Z.T .......e....T.E u..@%.tN5%...s....W..wa/@..J.%y.P\..H.vA.fA.c.t$.D...E.........B...B.qQ.M.JEU..].....7m.f9 9.]9....h.uW../..5.gXc.Yf..JGPU..L(.PN..U..I_.c.U......"K..Q..v....Bl..3.nD...m!l...b..W"@.j.;.&.i5.Yl..v#...x..hd'.F.mX.e..jp..\.....Q:....7..$=.a(...Z.G..I.7K....w...!.D.-..@ZJG.,.d.De.,.e.R....g..L.a>a.JH.hW.PY*O..J.Q.U}.RuV.Wq.Tw.'..t..<....q.:.3...j..k.........8-...;..x......U.T.

Static File Info

⊘No static file info

File Icon


Icon Hash:	00b29a8e86828200

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 13, 2024 18:08:43.736699104 CEST	443	49713	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:43.736783981 CEST	443	49713	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:43.736804962 CEST	443	49713	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:43.736891985 CEST	443	49713	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:43.736910105 CEST	443	49713	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:43.736927986 CEST	443	49713	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:43.736946106 CEST	443	49713	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:43.737040043 CEST	49713	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:43.737119913 CEST	49713	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:43.737211943 CEST	443	49713	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:43.737230062 CEST	443	49713	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:43.737248898 CEST	443	49713	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:43.737267017 CEST	443	49713	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:43.737282038 CEST	443	49713	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:43.737294912 CEST	443	49713	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:43.737313032 CEST	443	49713	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:43.737314939 CEST	49713	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:43.737392902 CEST	49713	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:43.737524033 CEST	443	49713	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:43.737544060 CEST	443	49713	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:43.737561941 CEST	443	49713	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:43.737637997 CEST	49713	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:43.738230944 CEST	49713	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:43.738261938 CEST	49713	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:43.743155003 CEST	443	49713	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:43.743179083 CEST	443	49713	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:43.802138090 CEST	49714	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:43.802220106 CEST	443	49714	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:43.802352905 CEST	49714	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:43.802617073 CEST	49714	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:43.802651882 CEST	443	49714	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:44.428436041 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 13, 2024 18:08:44.428455114 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 13, 2024 18:08:44.553474903 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 13, 2024 18:08:44.609002113 CEST	443	49714	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:44.609096050 CEST	49714	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:44.628423929 CEST	49714	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:44.628463030 CEST	443	49714	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:44.628859043 CEST	443	49714	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:44.629537106 CEST	49714	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:44.629592896 CEST	49714	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:44.629653931 CEST	443	49714	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:46.007292986 CEST	443	49714	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:46.007307053 CEST	443	49714	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:46.007378101 CEST	443	49714	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:46.007411957 CEST	49714	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:46.007445097 CEST	443	49714	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:46.007461071 CEST	49714	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:46.007466078 CEST	443	49714	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:46.007523060 CEST	49714	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:47.453720093 CEST	49714	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:47.453720093 CEST	49714	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:47.453763962 CEST	443	49714	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:47.453771114 CEST	443	49714	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:48.690660954 CEST	49716	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:48.690705061 CEST	443	49716	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:48.690772057 CEST	49716	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:48.693680048 CEST	49716	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:48.693694115 CEST	443	49716	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:49.497519970 CEST	443	49716	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:49.514499903 CEST	49716	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:49.514544010 CEST	443	49716	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:49.525978088 CEST	49716	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:49.525983095 CEST	443	49716	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:49.526020050 CEST	49716	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:49.526027918 CEST	443	49716	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:49.932308912 CEST	443	49716	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:49.932341099 CEST	443	49716	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:49.932394981 CEST	443	49716	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:49.932440996 CEST	49716	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:49.932456970 CEST	443	49716	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:49.932470083 CEST	443	49716	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:49.932482958 CEST	49716	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:49.933470964 CEST	49716	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:50.124048948 CEST	49716	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:50.124048948 CEST	49716	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:50.124125004 CEST	443	49716	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:50.124155998 CEST	443	49716	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:50.206015110 CEST	49718	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:50.206058979 CEST	443	49718	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:50.206123114 CEST	49718	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:50.212290049 CEST	49718	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:50.212307930 CEST	443	49718	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:50.213773966 CEST	49719	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:50.213819027 CEST	443	49719	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:50.213880062 CEST	49719	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:50.214107990 CEST	49719	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:50.214143991 CEST	443	49719	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:50.215317011 CEST	49720	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:50.215362072 CEST	443	49720	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:50.215415001 CEST	49720	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:50.215676069 CEST	49720	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:50.215693951 CEST	443	49720	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:50.992377043 CEST	443	49718	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:51.010902882 CEST	443	49719	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:51.011008978 CEST	49719	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:51.012326956 CEST	443	49720	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:51.131575108 CEST	49718	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:51.135010004 CEST	49720	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:51.357904911 CEST	49718	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:51.357944965 CEST	443	49718	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:51.360858917 CEST	49718	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:51.360872030 CEST	443	49718	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:51.360889912 CEST	49718	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:51.360899925 CEST	443	49718	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:51.360913038 CEST	49718	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:51.360923052 CEST	443	49718	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:51.361378908 CEST	49720	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:51.361438990 CEST	443	49720	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:51.362195015 CEST	49720	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:51.362200975 CEST	443	49720	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:51.362236023 CEST	49720	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:51.362241983 CEST	443	49720	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:51.365798950 CEST	49719	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:51.365835905 CEST	443	49719	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:51.366816998 CEST	443	49719	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:51.367196083 CEST	49719	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:51.367234945 CEST	49719	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:51.367255926 CEST	443	49719	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:51.723380089 CEST	443	49719	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:51.723452091 CEST	443	49719	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:51.723630905 CEST	49719	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:51.723647118 CEST	443	49719	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:51.723701954 CEST	49719	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:51.753123999 CEST	443	49718	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:51.753159046 CEST	443	49718	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:51.753171921 CEST	443	49718	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:51.753206968 CEST	443	49718	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:51.753216028 CEST	49718	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:51.753225088 CEST	443	49718	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:51.753249884 CEST	49718	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:51.753261089 CEST	443	49718	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:51.753273964 CEST	49718	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:51.753348112 CEST	443	49718	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:51.753393888 CEST	49718	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:51.808357000 CEST	49719	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:51.808382034 CEST	443	49719	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:51.808415890 CEST	49719	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:51.808424950 CEST	443	49719	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:51.816555023 CEST	49718	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:51.816591024 CEST	443	49718	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:51.816605091 CEST	49718	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:51.816613913 CEST	443	49718	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:51.870968103 CEST	443	49720	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:51.871006966 CEST	443	49720	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:51.871016979 CEST	443	49720	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:51.871042013 CEST	443	49720	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:51.871053934 CEST	443	49720	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:51.871118069 CEST	49720	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:51.871151924 CEST	443	49720	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:51.871174097 CEST	49720	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:51.871326923 CEST	443	49720	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:51.871416092 CEST	49720	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:51.903708935 CEST	49720	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:51.903731108 CEST	443	49720	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:51.903764009 CEST	49720	443	192.168.2.5	40.126.31.67
Oct 13, 2024 18:08:51.903769970 CEST	443	49720	40.126.31.67	192.168.2.5
Oct 13, 2024 18:08:52.094686985 CEST	49721	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:52.094726086 CEST	443	49721	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:52.094810963 CEST	49721	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:52.125461102 CEST	49721	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:52.125483036 CEST	443	49721	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:52.176559925 CEST	49725	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:52.176608086 CEST	443	49725	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:52.176744938 CEST	49725	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:52.177400112 CEST	49725	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:52.177416086 CEST	443	49725	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:52.185638905 CEST	49726	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:52.185666084 CEST	443	49726	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:52.185925961 CEST	49726	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:52.186546087 CEST	49726	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:52.186562061 CEST	443	49726	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:52.922382116 CEST	443	49721	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:52.922969103 CEST	49721	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:52.923007011 CEST	443	49721	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:52.925112009 CEST	49721	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:52.925117970 CEST	443	49721	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:52.925151110 CEST	49721	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:52.925158978 CEST	443	49721	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:53.009865046 CEST	443	49725	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:53.009942055 CEST	443	49726	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:53.009953022 CEST	49725	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:53.010004997 CEST	49726	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:53.016191959 CEST	49725	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:53.016225100 CEST	443	49725	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:53.016246080 CEST	49726	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:53.016261101 CEST	443	49726	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:53.016706944 CEST	443	49725	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:53.016716003 CEST	443	49726	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:53.017914057 CEST	49725	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:53.017967939 CEST	49725	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:53.017973900 CEST	443	49725	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:53.018301964 CEST	49725	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:53.018732071 CEST	49726	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:53.018881083 CEST	49726	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:53.018887043 CEST	443	49726	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:53.019009113 CEST	49726	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:53.063410044 CEST	443	49726	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:53.063431025 CEST	443	49725	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:53.190963984 CEST	443	49725	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:53.191236973 CEST	443	49725	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:53.191308022 CEST	49725	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:53.191414118 CEST	49725	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:53.191435099 CEST	443	49725	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:53.196249008 CEST	443	49726	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:53.196384907 CEST	443	49726	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:53.196439981 CEST	49726	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:53.196512938 CEST	49726	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:53.196521044 CEST	443	49726	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:53.613746881 CEST	443	49721	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:53.613780022 CEST	443	49721	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:53.613825083 CEST	443	49721	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:53.613893986 CEST	443	49721	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:53.613914967 CEST	49721	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:53.614039898 CEST	49721	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:53.637857914 CEST	49721	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:53.637892008 CEST	443	49721	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:53.638031006 CEST	49721	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:53.638039112 CEST	443	49721	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:53.818820000 CEST	49731	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:53.818886995 CEST	443	49731	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:53.819181919 CEST	49731	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:53.819495916 CEST	49731	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:53.819514036 CEST	443	49731	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:53.894146919 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:53.894180059 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:53.894272089 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:53.894642115 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:53.894656897 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.043497086 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 13, 2024 18:08:54.043616056 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 13, 2024 18:08:54.159925938 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 13, 2024 18:08:54.549753904 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.549932003 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.565567017 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.565583944 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.565825939 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.575412035 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.601908922 CEST	443	49731	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:54.612565041 CEST	49731	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:54.612593889 CEST	443	49731	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:54.616915941 CEST	49731	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:54.616934061 CEST	443	49731	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:54.616951942 CEST	49731	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:54.616964102 CEST	443	49731	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:54.623404980 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.678456068 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.678494930 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.678510904 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.678597927 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.678613901 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.678617001 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.678657055 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.765916109 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.765954018 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.766053915 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.766053915 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.766068935 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.766323090 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.768299103 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.768323898 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.768383026 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.768390894 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.768435955 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.768435955 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.854573011 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.854604959 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.854656935 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.854669094 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.854721069 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.854722023 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.855205059 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.855226040 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.855318069 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.855318069 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.855325937 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.855437994 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.856693983 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.856719017 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.856817961 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.856817961 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.856827021 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.856981039 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.857837915 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.857861042 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.857954025 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.857954025 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.857963085 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.858050108 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.943087101 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.943111897 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.943190098 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.943190098 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.943202972 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.943295002 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.943936110 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.943955898 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.944030046 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.944030046 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.944037914 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.944097042 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.944681883 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.944703102 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.944775105 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.944775105 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.944783926 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.944986105 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.945518970 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.945538998 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.945614100 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.945614100 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.945621967 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.945733070 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.946449041 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.946469069 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.946530104 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.946541071 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.946562052 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.946592093 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.947016001 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.947036982 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.947123051 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.947123051 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.947132111 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.947199106 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.947757006 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.947844982 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.947865963 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.947946072 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.948263884 CEST	443	49731	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:54.948291063 CEST	443	49731	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:54.948333025 CEST	443	49731	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:54.948385000 CEST	49731	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:54.948385000 CEST	49731	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:54.948396921 CEST	443	49731	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:54.948410988 CEST	443	49731	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:54.948493958 CEST	49731	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:54.952033997 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.952060938 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.952150106 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:54.952157021 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:54.954618931 CEST	49731	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:54.954618931 CEST	49731	443	192.168.2.5	40.126.31.73
Oct 13, 2024 18:08:54.954624891 CEST	443	49731	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:54.954632044 CEST	443	49731	40.126.31.73	192.168.2.5
Oct 13, 2024 18:08:55.035238028 CEST	49735	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.035279036 CEST	443	49735	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.035410881 CEST	49735	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.036715031 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.036773920 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.036834002 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.037570000 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.037615061 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.037703037 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.043505907 CEST	49738	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.043521881 CEST	443	49738	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.043617010 CEST	49738	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.043785095 CEST	49738	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.043798923 CEST	443	49738	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.043862104 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.043874025 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.043951988 CEST	49735	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.043966055 CEST	443	49735	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.044317961 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.044334888 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.045502901 CEST	49739	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.045516014 CEST	443	49739	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.045669079 CEST	49739	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.045783997 CEST	49739	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.045797110 CEST	443	49739	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.508533955 CEST	49740	443	192.168.2.5	142.250.181.228
Oct 13, 2024 18:08:55.508655071 CEST	443	49740	142.250.181.228	192.168.2.5
Oct 13, 2024 18:08:55.508807898 CEST	49740	443	192.168.2.5	142.250.181.228
Oct 13, 2024 18:08:55.509036064 CEST	49740	443	192.168.2.5	142.250.181.228
Oct 13, 2024 18:08:55.509088993 CEST	443	49740	142.250.181.228	192.168.2.5
Oct 13, 2024 18:08:55.699704885 CEST	443	49738	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.700203896 CEST	49738	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.700247049 CEST	443	49738	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.700741053 CEST	49738	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.700747967 CEST	443	49738	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.706029892 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.706464052 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.706547976 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.706870079 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.706886053 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.708046913 CEST	443	49739	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.708528996 CEST	49739	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.708556890 CEST	443	49739	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.708837986 CEST	49739	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.708848953 CEST	443	49739	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.723093987 CEST	443	49735	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.723556995 CEST	49735	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.723582029 CEST	443	49735	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.724030972 CEST	49735	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.724035978 CEST	443	49735	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.733091116 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.733589888 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.733643055 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.734061003 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.734069109 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.800745964 CEST	443	49738	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.800766945 CEST	443	49738	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.800831079 CEST	443	49738	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.800832987 CEST	49738	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.800880909 CEST	49738	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.801073074 CEST	49738	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.801094055 CEST	443	49738	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.801105022 CEST	49738	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.801110983 CEST	443	49738	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.804223061 CEST	49741	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.804265976 CEST	443	49741	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.804465055 CEST	49741	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.804656982 CEST	49741	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.804672956 CEST	443	49741	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.808413029 CEST	443	49739	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.808443069 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.808499098 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.808577061 CEST	443	49739	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.808633089 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.808633089 CEST	49739	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.808825970 CEST	49739	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.808825970 CEST	49739	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.808861017 CEST	443	49739	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.808895111 CEST	443	49739	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.810364008 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.810384035 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.810408115 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.810422897 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.813546896 CEST	49742	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.813575029 CEST	443	49742	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.813747883 CEST	49742	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.815404892 CEST	49743	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.815439939 CEST	443	49743	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.815578938 CEST	49742	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.815598011 CEST	443	49742	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.815613985 CEST	49743	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.815870047 CEST	49743	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.815881014 CEST	443	49743	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.827136040 CEST	443	49735	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.827158928 CEST	443	49735	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.827250957 CEST	49735	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.827267885 CEST	443	49735	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.827334881 CEST	49735	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.827769041 CEST	49735	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.827769041 CEST	49735	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.827779055 CEST	443	49735	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.827912092 CEST	443	49735	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.827936888 CEST	443	49735	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.827986956 CEST	49735	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.831383944 CEST	49744	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.831420898 CEST	443	49744	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.831532001 CEST	49744	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.831741095 CEST	49744	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.831753969 CEST	443	49744	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.832752943 CEST	443	49711	23.1.237.91	192.168.2.5
Oct 13, 2024 18:08:55.832853079 CEST	49711	443	192.168.2.5	23.1.237.91
Oct 13, 2024 18:08:55.839447975 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.839474916 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.839554071 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.839590073 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.839634895 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.839643955 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.839660883 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.839705944 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.840065956 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.840085983 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.840095997 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.840101004 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.842590094 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.842633009 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:55.843040943 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.843630075 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:55.843641043 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.152451992 CEST	443	49740	142.250.181.228	192.168.2.5
Oct 13, 2024 18:08:56.189243078 CEST	49740	443	192.168.2.5	142.250.181.228
Oct 13, 2024 18:08:56.189317942 CEST	443	49740	142.250.181.228	192.168.2.5
Oct 13, 2024 18:08:56.190567017 CEST	443	49740	142.250.181.228	192.168.2.5
Oct 13, 2024 18:08:56.190644979 CEST	49740	443	192.168.2.5	142.250.181.228
Oct 13, 2024 18:08:56.210488081 CEST	49740	443	192.168.2.5	142.250.181.228
Oct 13, 2024 18:08:56.210658073 CEST	443	49740	142.250.181.228	192.168.2.5
Oct 13, 2024 18:08:56.264698029 CEST	49740	443	192.168.2.5	142.250.181.228
Oct 13, 2024 18:08:56.264739037 CEST	443	49740	142.250.181.228	192.168.2.5
Oct 13, 2024 18:08:56.311521053 CEST	49740	443	192.168.2.5	142.250.181.228
Oct 13, 2024 18:08:56.465553999 CEST	443	49742	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.466372967 CEST	49742	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.466407061 CEST	443	49742	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.466866970 CEST	49742	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.466873884 CEST	443	49742	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.481235981 CEST	443	49744	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.481812000 CEST	49744	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.481846094 CEST	443	49744	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.482280016 CEST	49744	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.482285976 CEST	443	49744	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.486085892 CEST	443	49741	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.486454010 CEST	49741	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.486464024 CEST	443	49741	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.486938953 CEST	49741	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.486943960 CEST	443	49741	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.491976976 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.492367983 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.492381096 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.492758036 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.492763996 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.520473003 CEST	443	49743	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.524600029 CEST	49743	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.524612904 CEST	443	49743	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.525064945 CEST	49743	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.525069952 CEST	443	49743	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.566540003 CEST	443	49742	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.566642046 CEST	443	49742	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.566745043 CEST	49742	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.568053961 CEST	49742	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.568077087 CEST	443	49742	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.568088055 CEST	49742	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.568094015 CEST	443	49742	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.580385923 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.580427885 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.580631018 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.581389904 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.581408978 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.582365036 CEST	443	49744	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.582421064 CEST	443	49744	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.582521915 CEST	49744	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.582791090 CEST	49744	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.582813978 CEST	443	49744	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.582827091 CEST	49744	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.582834005 CEST	443	49744	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.590697050 CEST	443	49741	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.590770006 CEST	443	49741	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.591029882 CEST	49741	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.595773935 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.595815897 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.596158028 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.596301079 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.596313953 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.596524954 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.596582890 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.596672058 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.596931934 CEST	49741	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.596961021 CEST	443	49741	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.596973896 CEST	49741	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.596981049 CEST	443	49741	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.600231886 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.600260973 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.600294113 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.600301027 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.603805065 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.603835106 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.604016066 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.606638908 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.606652975 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.608756065 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.608866930 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.608942032 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.609096050 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.609133005 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.634812117 CEST	443	49743	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.634900093 CEST	443	49743	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.635390043 CEST	49743	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.636435032 CEST	49743	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.636435032 CEST	49743	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.636465073 CEST	443	49743	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.636470079 CEST	443	49743	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.647794008 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.647851944 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.647913933 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.649930954 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:56.649950981 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:56.686383009 CEST	49751	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:56.686429024 CEST	443	49751	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:56.686485052 CEST	49751	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:56.687098980 CEST	49751	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:56.687115908 CEST	443	49751	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:56.696803093 CEST	49752	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:56.696841955 CEST	443	49752	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:56.697015047 CEST	49752	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:56.697623968 CEST	49752	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:56.697634935 CEST	443	49752	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:56.722110987 CEST	49753	443	192.168.2.5	184.28.90.27
Oct 13, 2024 18:08:56.722157001 CEST	443	49753	184.28.90.27	192.168.2.5
Oct 13, 2024 18:08:56.722537041 CEST	49753	443	192.168.2.5	184.28.90.27
Oct 13, 2024 18:08:56.726624966 CEST	49753	443	192.168.2.5	184.28.90.27
Oct 13, 2024 18:08:56.726644039 CEST	443	49753	184.28.90.27	192.168.2.5
Oct 13, 2024 18:08:57.229518890 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.230077028 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.230098963 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.230561972 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.230576992 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.239432096 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.239939928 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.239959002 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.240443945 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.240448952 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.276191950 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.276685953 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.276721001 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.277142048 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.277148008 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.278830051 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.279151917 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.279162884 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.279618025 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.279622078 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.300059080 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.300434113 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.300452948 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.300864935 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.300870895 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.330842972 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.330905914 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.331084967 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.331223011 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.331223011 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.331244946 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.331255913 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.334079981 CEST	49754	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.334112883 CEST	443	49754	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.334234953 CEST	49754	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.334409952 CEST	49754	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.334419012 CEST	443	49754	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.340552092 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.340610027 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.340744972 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.340915918 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.340929985 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.343694925 CEST	49755	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.343755960 CEST	443	49755	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.343841076 CEST	49755	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.344002962 CEST	49755	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.344018936 CEST	443	49755	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.377908945 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.377973080 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.378067017 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.378225088 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.378247023 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.378259897 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.378267050 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.381181002 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.381231070 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.381289005 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.381428003 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.381443977 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.381459951 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.381464958 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.381606102 CEST	49756	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.381650925 CEST	443	49756	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.381942987 CEST	49756	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.382169008 CEST	49756	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.382181883 CEST	443	49756	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.383876085 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.383920908 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.384006977 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.384169102 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.384182930 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.401302099 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.401452065 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.401619911 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.401704073 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.401710987 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.401734114 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.401738882 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.404162884 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.404176950 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.404232025 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.404359102 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.404371023 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.446078062 CEST	443	49753	184.28.90.27	192.168.2.5
Oct 13, 2024 18:08:57.446150064 CEST	49753	443	192.168.2.5	184.28.90.27
Oct 13, 2024 18:08:57.448005915 CEST	49753	443	192.168.2.5	184.28.90.27
Oct 13, 2024 18:08:57.448016882 CEST	443	49753	184.28.90.27	192.168.2.5
Oct 13, 2024 18:08:57.448265076 CEST	443	49753	184.28.90.27	192.168.2.5
Oct 13, 2024 18:08:57.476723909 CEST	443	49751	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:57.476810932 CEST	49751	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:57.479162931 CEST	49751	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:57.479175091 CEST	443	49751	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:57.479518890 CEST	443	49751	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:57.480793953 CEST	49751	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:57.480811119 CEST	49751	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:57.480818033 CEST	443	49751	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:57.480917931 CEST	49751	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:57.490540028 CEST	49753	443	192.168.2.5	184.28.90.27
Oct 13, 2024 18:08:57.523403883 CEST	443	49751	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:57.526802063 CEST	443	49752	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:57.526910067 CEST	49752	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:57.531394958 CEST	443	49753	184.28.90.27	192.168.2.5
Oct 13, 2024 18:08:57.533754110 CEST	49752	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:57.533766031 CEST	443	49752	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:57.534080982 CEST	443	49752	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:57.535864115 CEST	49752	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:57.535931110 CEST	49752	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:57.535934925 CEST	443	49752	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:57.536051035 CEST	49752	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:57.583395004 CEST	443	49752	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:57.652724028 CEST	443	49751	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:57.652834892 CEST	443	49751	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:57.652888060 CEST	49751	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:57.653038025 CEST	49751	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:57.653058052 CEST	443	49751	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:57.718168974 CEST	443	49752	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:57.718266964 CEST	443	49752	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:57.718327045 CEST	49752	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:57.718522072 CEST	49752	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:08:57.718538046 CEST	443	49752	40.113.103.199	192.168.2.5
Oct 13, 2024 18:08:57.774961948 CEST	443	49753	184.28.90.27	192.168.2.5
Oct 13, 2024 18:08:57.775019884 CEST	443	49753	184.28.90.27	192.168.2.5
Oct 13, 2024 18:08:57.775075912 CEST	49753	443	192.168.2.5	184.28.90.27
Oct 13, 2024 18:08:57.775190115 CEST	49753	443	192.168.2.5	184.28.90.27
Oct 13, 2024 18:08:57.775209904 CEST	443	49753	184.28.90.27	192.168.2.5
Oct 13, 2024 18:08:57.775221109 CEST	49753	443	192.168.2.5	184.28.90.27
Oct 13, 2024 18:08:57.775228024 CEST	443	49753	184.28.90.27	192.168.2.5
Oct 13, 2024 18:08:57.818118095 CEST	49759	443	192.168.2.5	184.28.90.27
Oct 13, 2024 18:08:57.818171024 CEST	443	49759	184.28.90.27	192.168.2.5
Oct 13, 2024 18:08:57.818341017 CEST	49759	443	192.168.2.5	184.28.90.27
Oct 13, 2024 18:08:57.818633080 CEST	49759	443	192.168.2.5	184.28.90.27
Oct 13, 2024 18:08:57.818649054 CEST	443	49759	184.28.90.27	192.168.2.5
Oct 13, 2024 18:08:57.983076096 CEST	443	49754	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.983676910 CEST	49754	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.983697891 CEST	443	49754	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:57.984076023 CEST	49754	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:57.984081030 CEST	443	49754	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.003144026 CEST	443	49755	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.003680944 CEST	49755	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.003712893 CEST	443	49755	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.004189968 CEST	49755	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.004195929 CEST	443	49755	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.031095982 CEST	443	49756	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.031559944 CEST	49756	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.031605959 CEST	443	49756	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.032066107 CEST	49756	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.032072067 CEST	443	49756	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.037934065 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.038305998 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.038338900 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.038743019 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.038750887 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.058635950 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.059222937 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.059232950 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.059700012 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.059705973 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.084960938 CEST	443	49754	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.085042953 CEST	443	49754	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.085203886 CEST	49754	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.085407972 CEST	49754	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.085407972 CEST	49754	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.085431099 CEST	443	49754	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.085438967 CEST	443	49754	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.088984966 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.089023113 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.089088917 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.089236021 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.089251041 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.106106043 CEST	443	49755	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.106170893 CEST	443	49755	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.106256962 CEST	49755	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.106405020 CEST	49755	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.106426001 CEST	443	49755	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.106437922 CEST	49755	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.106443882 CEST	443	49755	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.109323025 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.109369993 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.109467030 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.109616995 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.109630108 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.132893085 CEST	443	49756	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.132949114 CEST	443	49756	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.133074999 CEST	49756	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.133254051 CEST	49756	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.133254051 CEST	49756	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.133268118 CEST	443	49756	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.133270979 CEST	443	49756	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.136759043 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.136801004 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.136912107 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.137073040 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.137087107 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.140608072 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.140667915 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.140732050 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.140836954 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.140836954 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.140858889 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.140865088 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.143157005 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.143181086 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.143244028 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.143408060 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.143421888 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.159816027 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.159894943 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.159986019 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.160098076 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.160116911 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.160131931 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.160139084 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.162430048 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.162480116 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.162553072 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.162691116 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.162707090 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.235069036 CEST	57064	53	192.168.2.5	1.1.1.1
Oct 13, 2024 18:08:58.239917994 CEST	53	57064	1.1.1.1	192.168.2.5
Oct 13, 2024 18:08:58.239994049 CEST	57064	53	192.168.2.5	1.1.1.1
Oct 13, 2024 18:08:58.240035057 CEST	57064	53	192.168.2.5	1.1.1.1
Oct 13, 2024 18:08:58.244841099 CEST	53	57064	1.1.1.1	192.168.2.5
Oct 13, 2024 18:08:58.517401934 CEST	443	49759	184.28.90.27	192.168.2.5
Oct 13, 2024 18:08:58.517489910 CEST	49759	443	192.168.2.5	184.28.90.27
Oct 13, 2024 18:08:58.518758059 CEST	49759	443	192.168.2.5	184.28.90.27
Oct 13, 2024 18:08:58.518770933 CEST	443	49759	184.28.90.27	192.168.2.5
Oct 13, 2024 18:08:58.519247055 CEST	443	49759	184.28.90.27	192.168.2.5
Oct 13, 2024 18:08:58.520605087 CEST	49759	443	192.168.2.5	184.28.90.27
Oct 13, 2024 18:08:58.567394018 CEST	443	49759	184.28.90.27	192.168.2.5
Oct 13, 2024 18:08:58.649929047 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.692358017 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.716535091 CEST	53	57064	1.1.1.1	192.168.2.5
Oct 13, 2024 18:08:58.761199951 CEST	57064	53	192.168.2.5	1.1.1.1
Oct 13, 2024 18:08:58.798448086 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.800548077 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.811719894 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.826559067 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.826579094 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.827420950 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.827446938 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.830290079 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.830332994 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.830770969 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.835598946 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.835619926 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.836247921 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.836285114 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.838643074 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.838649988 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.840568066 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.840585947 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.841288090 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.841300011 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.841542959 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.841557026 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.841886044 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.841891050 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.842802048 CEST	57064	53	192.168.2.5	1.1.1.1
Oct 13, 2024 18:08:58.847101927 CEST	443	49759	184.28.90.27	192.168.2.5
Oct 13, 2024 18:08:58.847193956 CEST	443	49759	184.28.90.27	192.168.2.5
Oct 13, 2024 18:08:58.847270012 CEST	49759	443	192.168.2.5	184.28.90.27
Oct 13, 2024 18:08:58.848083019 CEST	53	57064	1.1.1.1	192.168.2.5
Oct 13, 2024 18:08:58.848145008 CEST	57064	53	192.168.2.5	1.1.1.1
Oct 13, 2024 18:08:58.848998070 CEST	49759	443	192.168.2.5	184.28.90.27
Oct 13, 2024 18:08:58.849030972 CEST	443	49759	184.28.90.27	192.168.2.5
Oct 13, 2024 18:08:58.849061966 CEST	49759	443	192.168.2.5	184.28.90.27
Oct 13, 2024 18:08:58.849078894 CEST	443	49759	184.28.90.27	192.168.2.5
Oct 13, 2024 18:08:58.928644896 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.928723097 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.929013014 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.929088116 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.929105997 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.929117918 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.929126024 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.932687998 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.933157921 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.933232069 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.933398008 CEST	57066	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.933439970 CEST	443	57066	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.933514118 CEST	57066	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.933631897 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.933645010 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.933656931 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.933664083 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.934878111 CEST	57066	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.934894085 CEST	443	57066	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.936539888 CEST	57067	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.936568975 CEST	443	57067	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.937114954 CEST	57067	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.937136889 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.937196970 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.937235117 CEST	57067	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.937244892 CEST	443	57067	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.937258005 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.937367916 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.937392950 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.937393904 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.937402010 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.939363956 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.939448118 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.940460920 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.940535069 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.940587997 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.940597057 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.942706108 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.942714930 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.942733049 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.942738056 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.942984104 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.943013906 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.943030119 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.943037987 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.945348024 CEST	57068	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.945368052 CEST	443	57068	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.945707083 CEST	57069	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.945736885 CEST	443	57069	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.945802927 CEST	57068	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.945844889 CEST	57069	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.946161985 CEST	57070	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.946171045 CEST	443	57070	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.946222067 CEST	57070	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.946670055 CEST	57068	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.946696043 CEST	443	57068	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.946748018 CEST	57069	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.946758986 CEST	443	57069	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:58.946832895 CEST	57070	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:58.946850061 CEST	443	57070	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.603559017 CEST	443	57069	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.604314089 CEST	57069	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.604348898 CEST	443	57069	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.605074883 CEST	57069	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.605082035 CEST	443	57069	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.608963966 CEST	443	57070	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.609292984 CEST	443	57067	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.609400034 CEST	443	57066	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.609534025 CEST	57070	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.609556913 CEST	443	57070	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.612651110 CEST	57070	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.612662077 CEST	443	57070	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.613209963 CEST	57067	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.613239050 CEST	443	57067	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.613663912 CEST	57067	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.613670111 CEST	443	57067	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.614077091 CEST	57066	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.614109993 CEST	443	57066	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.614618063 CEST	57066	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.614624977 CEST	443	57066	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.634468079 CEST	443	57068	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.635611057 CEST	57068	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.635646105 CEST	443	57068	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.636275053 CEST	57068	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.636284113 CEST	443	57068	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.704122066 CEST	443	57069	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.704190016 CEST	443	57069	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.704262018 CEST	57069	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.704493046 CEST	57069	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.704519033 CEST	443	57069	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.704530001 CEST	57069	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.704536915 CEST	443	57069	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.707474947 CEST	57071	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.707515001 CEST	443	57071	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.707643986 CEST	57071	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.707941055 CEST	57071	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.707956076 CEST	443	57071	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.710081100 CEST	443	57070	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.710238934 CEST	443	57070	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.710297108 CEST	57070	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.710340023 CEST	57070	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.710351944 CEST	443	57070	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.710365057 CEST	57070	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.710369110 CEST	443	57070	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.712611914 CEST	57072	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.712666988 CEST	443	57072	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.712738991 CEST	57072	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.712953091 CEST	57072	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.712960958 CEST	443	57067	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.712970018 CEST	443	57072	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.713051081 CEST	443	57067	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.713093996 CEST	57067	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.713210106 CEST	57067	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.713210106 CEST	57067	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.713227987 CEST	443	57067	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.713238955 CEST	443	57067	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.713824987 CEST	443	57066	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.713885069 CEST	443	57066	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.713942051 CEST	57066	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.713993073 CEST	57066	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.714014053 CEST	443	57066	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.714025974 CEST	57066	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.714034081 CEST	443	57066	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.715328932 CEST	57073	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.715358973 CEST	443	57073	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.715429068 CEST	57073	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.715564966 CEST	57073	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.715580940 CEST	443	57073	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.715905905 CEST	57074	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.715914011 CEST	443	57074	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.716092110 CEST	57074	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.716092110 CEST	57074	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.716111898 CEST	443	57074	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.741787910 CEST	443	57068	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.741847038 CEST	443	57068	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.741911888 CEST	57068	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.742666006 CEST	57068	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.742677927 CEST	443	57068	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.742702961 CEST	57068	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.742710114 CEST	443	57068	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.746364117 CEST	57075	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.746411085 CEST	443	57075	13.107.246.60	192.168.2.5
Oct 13, 2024 18:08:59.746490955 CEST	57075	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.746762037 CEST	57075	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:08:59.746777058 CEST	443	57075	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.363141060 CEST	443	57074	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.363694906 CEST	57074	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.363717079 CEST	443	57074	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.364281893 CEST	57074	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.364288092 CEST	443	57074	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.369621038 CEST	443	57073	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.370198965 CEST	57073	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.370212078 CEST	443	57073	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.370642900 CEST	57073	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.370656967 CEST	443	57073	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.374229908 CEST	443	57072	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.374813080 CEST	57072	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.374833107 CEST	443	57072	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.375452995 CEST	57072	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.375458956 CEST	443	57072	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.391424894 CEST	443	57071	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.392236948 CEST	57071	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.392262936 CEST	443	57071	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.393754959 CEST	57071	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.393770933 CEST	443	57071	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.435012102 CEST	443	57075	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.447113037 CEST	57075	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.447130919 CEST	443	57075	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.447808981 CEST	57075	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.447814941 CEST	443	57075	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.464970112 CEST	443	57074	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.465045929 CEST	443	57074	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.465333939 CEST	57074	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.465604067 CEST	57074	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.465631962 CEST	443	57074	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.465780973 CEST	57074	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.465787888 CEST	443	57074	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.472938061 CEST	443	57073	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.473002911 CEST	443	57073	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.473390102 CEST	57073	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.473575115 CEST	57073	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.473581076 CEST	443	57073	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.473622084 CEST	57073	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.473627090 CEST	443	57073	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.478539944 CEST	443	57072	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.478600025 CEST	443	57072	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.478939056 CEST	57072	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.479485035 CEST	57072	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.479505062 CEST	443	57072	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.479517937 CEST	57072	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.479525089 CEST	443	57072	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.496378899 CEST	443	57071	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.496457100 CEST	443	57071	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.496546984 CEST	57071	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.497196913 CEST	57071	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.497196913 CEST	57071	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.497227907 CEST	443	57071	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.497245073 CEST	443	57071	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.524631023 CEST	57076	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.524665117 CEST	443	57076	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.524735928 CEST	57076	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.530802965 CEST	57077	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.530813932 CEST	443	57077	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.530868053 CEST	57077	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.532335997 CEST	57078	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.532349110 CEST	443	57078	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.532392979 CEST	57078	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.532717943 CEST	57076	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.532728910 CEST	443	57076	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.533802032 CEST	57077	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.533811092 CEST	443	57077	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.534140110 CEST	57078	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.534151077 CEST	443	57078	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.535661936 CEST	57079	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.535676003 CEST	443	57079	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.535945892 CEST	57079	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.536115885 CEST	57079	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.536123991 CEST	443	57079	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.550568104 CEST	443	57075	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.550627947 CEST	443	57075	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.550673008 CEST	57075	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.558543921 CEST	57075	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.558552027 CEST	443	57075	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.558567047 CEST	57075	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.558572054 CEST	443	57075	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.565758944 CEST	57080	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.565804958 CEST	443	57080	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:00.565907001 CEST	57080	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.566087961 CEST	57080	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:00.566107035 CEST	443	57080	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.402019024 CEST	443	57080	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.402986050 CEST	443	57077	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.403660059 CEST	57080	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.403693914 CEST	443	57080	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.404078960 CEST	443	57079	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.404544115 CEST	57080	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.404550076 CEST	443	57080	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.404937983 CEST	443	57078	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.405742884 CEST	57078	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.405764103 CEST	443	57078	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.406579018 CEST	57078	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.406584024 CEST	443	57078	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.407362938 CEST	57077	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.407377958 CEST	443	57077	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.408207893 CEST	57077	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.408214092 CEST	443	57077	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.408854961 CEST	57079	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.408869028 CEST	443	57079	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.409607887 CEST	57079	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.409614086 CEST	443	57079	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.410337925 CEST	443	57076	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.410631895 CEST	57076	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.410643101 CEST	443	57076	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.411478043 CEST	57076	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.411484003 CEST	443	57076	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.521821976 CEST	443	57080	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.521830082 CEST	443	57078	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.521903992 CEST	443	57078	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.521917105 CEST	443	57080	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.521979094 CEST	57078	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.522013903 CEST	443	57077	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.522017956 CEST	57080	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.522114992 CEST	443	57077	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.522164106 CEST	57077	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.522411108 CEST	57080	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.522438049 CEST	443	57080	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.522453070 CEST	57080	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.522459984 CEST	443	57080	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.523308039 CEST	443	57079	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.523480892 CEST	443	57079	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.523536921 CEST	57079	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.525494099 CEST	57079	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.525512934 CEST	443	57079	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.527035952 CEST	57078	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.527050018 CEST	443	57078	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.527605057 CEST	443	57076	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.527678967 CEST	443	57076	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.528022051 CEST	57076	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.529335022 CEST	57076	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.529352903 CEST	443	57076	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.529416084 CEST	57076	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.529423952 CEST	443	57076	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.529659033 CEST	57077	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.529681921 CEST	443	57077	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.529711008 CEST	57077	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.529720068 CEST	443	57077	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.535202026 CEST	57081	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.535237074 CEST	443	57081	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.535372019 CEST	57081	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.536288977 CEST	57081	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.536298990 CEST	443	57081	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.542462111 CEST	57082	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.542484045 CEST	443	57082	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.542671919 CEST	57082	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.543183088 CEST	57082	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.543191910 CEST	443	57082	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.543899059 CEST	57083	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.543931961 CEST	443	57083	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.544013023 CEST	57083	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.544445038 CEST	57083	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.544460058 CEST	443	57083	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.545679092 CEST	57084	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.545721054 CEST	443	57084	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.545798063 CEST	57084	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.546693087 CEST	57085	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.546756983 CEST	443	57085	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.546869040 CEST	57085	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.547208071 CEST	57084	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.547224998 CEST	443	57084	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:01.547425985 CEST	57085	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:01.547455072 CEST	443	57085	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.114978075 CEST	443	57085	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.115590096 CEST	57085	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.115617990 CEST	443	57085	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.116074085 CEST	57085	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.116079092 CEST	443	57085	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.186434031 CEST	443	57081	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.186996937 CEST	57081	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.187011957 CEST	443	57081	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.187618017 CEST	57081	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.187622070 CEST	443	57081	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.191714048 CEST	443	57082	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.192161083 CEST	57082	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.192173004 CEST	443	57082	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.192641020 CEST	57082	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.192645073 CEST	443	57082	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.212691069 CEST	443	57084	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.213182926 CEST	57084	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.213216066 CEST	443	57084	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.213620901 CEST	57084	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.213625908 CEST	443	57084	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.216877937 CEST	443	57085	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.216975927 CEST	443	57085	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.217072010 CEST	57085	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.217247963 CEST	57085	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.217294931 CEST	443	57085	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.217328072 CEST	57085	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.217344999 CEST	443	57085	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.219630957 CEST	443	57083	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.220345020 CEST	57086	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.220407009 CEST	443	57086	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.220494986 CEST	57086	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.220726967 CEST	57083	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.220757961 CEST	443	57083	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.221201897 CEST	57083	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.221206903 CEST	443	57083	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.221246004 CEST	57086	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.221281052 CEST	443	57086	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.288949013 CEST	443	57081	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.289014101 CEST	443	57081	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.289122105 CEST	57081	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.289288998 CEST	57081	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.289288998 CEST	57081	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.289305925 CEST	443	57081	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.289333105 CEST	443	57081	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.291938066 CEST	57087	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.291982889 CEST	443	57087	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.292069912 CEST	57087	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.292248964 CEST	57087	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.292262077 CEST	443	57087	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.292973042 CEST	443	57082	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.293060064 CEST	443	57082	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.293190956 CEST	57082	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.293246984 CEST	57082	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.293246984 CEST	57082	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.293262005 CEST	443	57082	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.293270111 CEST	443	57082	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.295608044 CEST	57088	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.295629025 CEST	443	57088	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.296164036 CEST	57088	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.296164036 CEST	57088	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.296185970 CEST	443	57088	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.316679955 CEST	443	57084	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.316740990 CEST	443	57084	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.316790104 CEST	57084	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.316998005 CEST	57084	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.317008972 CEST	443	57084	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.317018986 CEST	57084	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.317023993 CEST	443	57084	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.319184065 CEST	57089	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.319212914 CEST	443	57089	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.319277048 CEST	57089	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.319391966 CEST	57089	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.319401979 CEST	443	57089	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.324652910 CEST	443	57083	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.324717045 CEST	443	57083	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.324762106 CEST	57083	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.324956894 CEST	57083	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.324964046 CEST	443	57083	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.324976921 CEST	57083	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.324980974 CEST	443	57083	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.327466965 CEST	57090	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.327476978 CEST	443	57090	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.327609062 CEST	57090	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.327749968 CEST	57090	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.327761889 CEST	443	57090	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.890968084 CEST	443	57086	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.892345905 CEST	57086	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.892365932 CEST	443	57086	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.893737078 CEST	57086	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.893742085 CEST	443	57086	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.942006111 CEST	443	57087	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.943221092 CEST	57087	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.943267107 CEST	443	57087	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.944575071 CEST	57087	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.944581032 CEST	443	57087	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.956573963 CEST	443	57088	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.957233906 CEST	57088	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.957259893 CEST	443	57088	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.958297968 CEST	57088	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.958302975 CEST	443	57088	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.983812094 CEST	443	57089	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.991133928 CEST	57089	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.991173029 CEST	443	57089	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.991646051 CEST	443	57086	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.991728067 CEST	443	57086	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.991799116 CEST	57086	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.992455959 CEST	57089	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.992463112 CEST	443	57089	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.995742083 CEST	57086	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.995743036 CEST	57086	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:02.995801926 CEST	443	57086	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:02.995831966 CEST	443	57086	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.001132965 CEST	57091	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.001168966 CEST	443	57091	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.001343012 CEST	57091	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.001663923 CEST	57091	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.001677990 CEST	443	57091	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.015373945 CEST	443	57090	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.023032904 CEST	57090	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.023060083 CEST	443	57090	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.024591923 CEST	57090	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.024600029 CEST	443	57090	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.043910980 CEST	443	57087	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.043982029 CEST	443	57087	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.044188023 CEST	57087	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.051050901 CEST	57087	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.051067114 CEST	443	57087	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.051111937 CEST	57087	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.051115990 CEST	443	57087	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.059665918 CEST	443	57088	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.059727907 CEST	443	57088	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.059807062 CEST	57088	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.061785936 CEST	57092	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.061858892 CEST	443	57092	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.062016964 CEST	57088	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.062041044 CEST	443	57088	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.062067986 CEST	57092	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.062083006 CEST	57088	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.062088966 CEST	443	57088	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.063888073 CEST	57092	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.063915968 CEST	443	57092	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.066456079 CEST	57093	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.066504002 CEST	443	57093	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.067583084 CEST	57093	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.072173119 CEST	57093	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.072207928 CEST	443	57093	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.091567039 CEST	443	57089	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.091650009 CEST	443	57089	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.091948032 CEST	57089	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.092372894 CEST	57089	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.092392921 CEST	443	57089	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.092430115 CEST	57089	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.092436075 CEST	443	57089	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.099188089 CEST	57094	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.099230051 CEST	443	57094	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.099308014 CEST	57094	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.099598885 CEST	57094	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.099615097 CEST	443	57094	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.114419937 CEST	57095	443	192.168.2.5	4.175.87.197
Oct 13, 2024 18:09:03.114478111 CEST	443	57095	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:03.114640951 CEST	57095	443	192.168.2.5	4.175.87.197
Oct 13, 2024 18:09:03.117278099 CEST	57095	443	192.168.2.5	4.175.87.197
Oct 13, 2024 18:09:03.117296934 CEST	443	57095	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:03.127181053 CEST	443	57090	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.127233028 CEST	443	57090	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.127334118 CEST	57090	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.127795935 CEST	57090	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.127810955 CEST	443	57090	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.127832890 CEST	57090	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.127839088 CEST	443	57090	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.131642103 CEST	57096	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.131669044 CEST	443	57096	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.131738901 CEST	57096	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.132709026 CEST	57096	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.132725000 CEST	443	57096	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.650738001 CEST	443	57091	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.652148008 CEST	57091	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.652167082 CEST	443	57091	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.653136015 CEST	57091	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.653151989 CEST	443	57091	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.710926056 CEST	443	57092	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.711954117 CEST	57092	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.712013960 CEST	443	57092	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.712491989 CEST	57092	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.712507963 CEST	443	57092	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.719204903 CEST	443	57093	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.721744061 CEST	57093	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.721765041 CEST	443	57093	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.722194910 CEST	57093	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.722202063 CEST	443	57093	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.753380060 CEST	443	57091	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.753442049 CEST	443	57091	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.753503084 CEST	57091	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.756153107 CEST	57091	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.756153107 CEST	57091	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.756186962 CEST	443	57091	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.756200075 CEST	443	57091	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.763948917 CEST	443	57094	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.765415907 CEST	57097	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.765456915 CEST	443	57097	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.765551090 CEST	57097	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.766388893 CEST	57094	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.766416073 CEST	443	57094	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.767643929 CEST	57094	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.767649889 CEST	443	57094	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.768085957 CEST	57097	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.768106937 CEST	443	57097	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.791105986 CEST	443	57096	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.792716026 CEST	57096	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.792743921 CEST	443	57096	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.794197083 CEST	57096	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.794205904 CEST	443	57096	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.813168049 CEST	443	57092	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.813235044 CEST	443	57092	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.813316107 CEST	57092	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.813816071 CEST	57092	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.813853025 CEST	443	57092	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.813883066 CEST	57092	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.813901901 CEST	443	57092	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.819618940 CEST	57098	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.819645882 CEST	443	57098	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.819875956 CEST	57098	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.820081949 CEST	57098	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.820095062 CEST	443	57098	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.821976900 CEST	443	57093	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.822032928 CEST	443	57093	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.822112083 CEST	57093	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.822787046 CEST	57093	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.822799921 CEST	443	57093	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.826268911 CEST	57099	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.826296091 CEST	443	57099	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.826370955 CEST	57099	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.826801062 CEST	57099	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.826828957 CEST	443	57099	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.867033958 CEST	443	57094	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.867192030 CEST	443	57094	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.867255926 CEST	57094	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.867635965 CEST	57094	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.867647886 CEST	443	57094	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.867660046 CEST	57094	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.867666006 CEST	443	57094	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.874645948 CEST	57100	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.874769926 CEST	443	57100	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.874855995 CEST	57100	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.875087976 CEST	57100	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.875124931 CEST	443	57100	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.894229889 CEST	443	57096	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.894294977 CEST	443	57096	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.894422054 CEST	57096	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.894704103 CEST	57096	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.894722939 CEST	443	57096	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.898169041 CEST	57101	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.898207903 CEST	443	57101	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.898310900 CEST	57101	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.898466110 CEST	57101	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:03.898488045 CEST	443	57101	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:03.953739882 CEST	443	57095	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:03.953819036 CEST	57095	443	192.168.2.5	4.175.87.197
Oct 13, 2024 18:09:03.955507040 CEST	57095	443	192.168.2.5	4.175.87.197
Oct 13, 2024 18:09:03.955527067 CEST	443	57095	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:03.955847025 CEST	443	57095	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:04.009056091 CEST	57095	443	192.168.2.5	4.175.87.197
Oct 13, 2024 18:09:04.033090115 CEST	57095	443	192.168.2.5	4.175.87.197
Oct 13, 2024 18:09:04.079405069 CEST	443	57095	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:04.328898907 CEST	443	57095	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:04.328948975 CEST	443	57095	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:04.328986883 CEST	443	57095	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:04.329004049 CEST	443	57095	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:04.329027891 CEST	443	57095	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:04.329047918 CEST	443	57095	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:04.329041958 CEST	57095	443	192.168.2.5	4.175.87.197
Oct 13, 2024 18:09:04.329144001 CEST	443	57095	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:04.329186916 CEST	443	57095	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:04.329202890 CEST	57095	443	192.168.2.5	4.175.87.197
Oct 13, 2024 18:09:04.329202890 CEST	57095	443	192.168.2.5	4.175.87.197
Oct 13, 2024 18:09:04.329204082 CEST	57095	443	192.168.2.5	4.175.87.197
Oct 13, 2024 18:09:04.329235077 CEST	443	57095	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:04.329266071 CEST	443	57095	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:04.329289913 CEST	57095	443	192.168.2.5	4.175.87.197
Oct 13, 2024 18:09:04.329318047 CEST	57095	443	192.168.2.5	4.175.87.197
Oct 13, 2024 18:09:04.329778910 CEST	443	57095	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:04.329823971 CEST	443	57095	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:04.329878092 CEST	57095	443	192.168.2.5	4.175.87.197
Oct 13, 2024 18:09:04.365139008 CEST	57095	443	192.168.2.5	4.175.87.197
Oct 13, 2024 18:09:04.365160942 CEST	443	57095	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:04.462697983 CEST	443	57097	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.465037107 CEST	57097	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.465064049 CEST	443	57097	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.466121912 CEST	57097	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.466135979 CEST	443	57097	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.515369892 CEST	443	57099	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.526369095 CEST	443	57098	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.527694941 CEST	57099	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.527740955 CEST	443	57099	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.528206110 CEST	57099	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.528218985 CEST	443	57099	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.530323029 CEST	57098	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.530347109 CEST	443	57098	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.531245947 CEST	57098	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.531251907 CEST	443	57098	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.533123016 CEST	443	57100	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.533819914 CEST	57100	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.533858061 CEST	443	57100	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.535098076 CEST	57100	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.535106897 CEST	443	57100	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.568578959 CEST	443	57097	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.568650007 CEST	443	57097	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.568734884 CEST	57097	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.569706917 CEST	57097	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.569730043 CEST	443	57097	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.569745064 CEST	57097	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.569751978 CEST	443	57097	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.574779987 CEST	57102	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.574803114 CEST	443	57102	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.574888945 CEST	57102	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.575131893 CEST	57102	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.575145960 CEST	443	57102	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.588239908 CEST	443	57101	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.590245008 CEST	57101	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.590261936 CEST	443	57101	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.591515064 CEST	57101	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.591522932 CEST	443	57101	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.625114918 CEST	443	57099	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.625199080 CEST	443	57099	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.625284910 CEST	57099	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.625582933 CEST	57099	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.625614882 CEST	443	57099	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.626046896 CEST	57099	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.626060009 CEST	443	57099	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.631696939 CEST	57103	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.631756067 CEST	443	57103	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.631828070 CEST	57103	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.632235050 CEST	57103	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.632251978 CEST	443	57103	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.633980989 CEST	443	57100	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.634066105 CEST	443	57100	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.634133101 CEST	57100	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.635541916 CEST	57100	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.635554075 CEST	443	57100	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.635564089 CEST	57100	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.635567904 CEST	443	57100	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.641510010 CEST	57104	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.641566992 CEST	443	57104	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.641643047 CEST	57104	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.641992092 CEST	57104	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.642011881 CEST	443	57104	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.642977953 CEST	443	57098	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.643138885 CEST	443	57098	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.643196106 CEST	57098	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.643343925 CEST	57098	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.643367052 CEST	443	57098	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.643393040 CEST	57098	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.643402100 CEST	443	57098	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.648423910 CEST	57105	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.648461103 CEST	443	57105	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.648529053 CEST	57105	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.648718119 CEST	57105	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.648732901 CEST	443	57105	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.694782019 CEST	443	57101	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.694852114 CEST	443	57101	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.694900990 CEST	57101	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.695291996 CEST	57101	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.695311069 CEST	443	57101	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.695321083 CEST	57101	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.695327044 CEST	443	57101	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.702773094 CEST	57106	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.702811956 CEST	443	57106	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:04.702876091 CEST	57106	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.703648090 CEST	57106	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:04.703660965 CEST	443	57106	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.226119995 CEST	443	57102	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.227037907 CEST	57102	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.227061033 CEST	443	57102	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.228346109 CEST	57102	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.228353024 CEST	443	57102	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.279272079 CEST	443	57103	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.279762030 CEST	57103	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.279784918 CEST	443	57103	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.280354977 CEST	57103	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.280360937 CEST	443	57103	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.299139023 CEST	443	57105	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.300196886 CEST	57105	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.300221920 CEST	443	57105	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.300811052 CEST	57105	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.300817013 CEST	443	57105	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.327711105 CEST	443	57102	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.327774048 CEST	443	57102	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.327866077 CEST	57102	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.328126907 CEST	57102	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.328155994 CEST	443	57102	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.328167915 CEST	57102	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.328172922 CEST	443	57102	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.330449104 CEST	443	57104	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.333571911 CEST	57104	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.333611012 CEST	443	57104	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.334131002 CEST	57104	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.334139109 CEST	443	57104	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.336141109 CEST	57108	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.336184978 CEST	443	57108	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.336262941 CEST	57108	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.336370945 CEST	57108	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.336380959 CEST	443	57108	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.352520943 CEST	443	57106	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.363231897 CEST	57106	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.363260031 CEST	443	57106	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.364027023 CEST	57106	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.364036083 CEST	443	57106	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.383172989 CEST	443	57103	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.383264065 CEST	443	57103	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.383322001 CEST	57103	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.393197060 CEST	57103	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.393197060 CEST	57103	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.393238068 CEST	443	57103	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.393264055 CEST	443	57103	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.400723934 CEST	57109	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.400774002 CEST	443	57109	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.401051044 CEST	57109	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.409926891 CEST	443	57105	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.410001040 CEST	443	57105	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.410192966 CEST	57105	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.415030003 CEST	57105	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.415054083 CEST	443	57105	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.415067911 CEST	57105	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.415076017 CEST	443	57105	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.415297031 CEST	57109	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.415319920 CEST	443	57109	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.430742025 CEST	57110	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.430779934 CEST	443	57110	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.430888891 CEST	57110	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.431035042 CEST	57110	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.431047916 CEST	443	57110	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.444631100 CEST	443	57104	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.444694042 CEST	443	57104	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.444793940 CEST	57104	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.445209026 CEST	57104	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.445209026 CEST	57104	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.445235968 CEST	443	57104	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.445246935 CEST	443	57104	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.447539091 CEST	57111	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.447585106 CEST	443	57111	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.447726965 CEST	57111	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.447964907 CEST	57111	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.447979927 CEST	443	57111	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.469825983 CEST	443	57106	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.469903946 CEST	443	57106	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.470192909 CEST	57106	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.470828056 CEST	57106	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.470845938 CEST	443	57106	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.470856905 CEST	57106	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.470863104 CEST	443	57106	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.473754883 CEST	57112	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.473783970 CEST	443	57112	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:05.473942041 CEST	57112	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.474149942 CEST	57112	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:05.474162102 CEST	443	57112	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.094774961 CEST	49711	443	192.168.2.5	23.1.237.91
Oct 13, 2024 18:09:06.094847918 CEST	49711	443	192.168.2.5	23.1.237.91
Oct 13, 2024 18:09:06.096323967 CEST	57113	443	192.168.2.5	23.1.237.91
Oct 13, 2024 18:09:06.096363068 CEST	443	57113	23.1.237.91	192.168.2.5
Oct 13, 2024 18:09:06.096426964 CEST	57113	443	192.168.2.5	23.1.237.91
Oct 13, 2024 18:09:06.100035906 CEST	57113	443	192.168.2.5	23.1.237.91
Oct 13, 2024 18:09:06.100047112 CEST	443	57113	23.1.237.91	192.168.2.5
Oct 13, 2024 18:09:06.387990952 CEST	443	49740	142.250.181.228	192.168.2.5
Oct 13, 2024 18:09:06.388056993 CEST	443	49740	142.250.181.228	192.168.2.5
Oct 13, 2024 18:09:06.388111115 CEST	49740	443	192.168.2.5	142.250.181.228
Oct 13, 2024 18:09:06.389321089 CEST	443	49711	23.1.237.91	192.168.2.5
Oct 13, 2024 18:09:06.389334917 CEST	443	49711	23.1.237.91	192.168.2.5
Oct 13, 2024 18:09:06.389353037 CEST	443	57108	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.389981985 CEST	57108	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.390000105 CEST	443	57108	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.390503883 CEST	57108	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.390510082 CEST	443	57108	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.394248962 CEST	443	57111	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.394429922 CEST	443	57109	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.394599915 CEST	57111	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.394619942 CEST	443	57111	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.394665003 CEST	443	57110	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.395000935 CEST	57111	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.395006895 CEST	443	57111	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.395313025 CEST	57109	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.395349979 CEST	443	57109	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.395761967 CEST	57109	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.395772934 CEST	443	57109	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.395957947 CEST	57110	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.395972013 CEST	443	57110	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.396313906 CEST	57110	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.396320105 CEST	443	57110	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.398205042 CEST	443	57112	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.398586988 CEST	57112	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.398601055 CEST	443	57112	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.399005890 CEST	57112	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.399013042 CEST	443	57112	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.494107962 CEST	443	57108	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.494177103 CEST	443	57108	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.494230986 CEST	57108	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.495882988 CEST	443	57111	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.495949984 CEST	443	57111	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.495997906 CEST	57111	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.497040987 CEST	49740	443	192.168.2.5	142.250.181.228
Oct 13, 2024 18:09:06.497113943 CEST	443	49740	142.250.181.228	192.168.2.5
Oct 13, 2024 18:09:06.498289108 CEST	443	57112	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.498357058 CEST	443	57112	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.498400927 CEST	57112	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.498698950 CEST	57108	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.498709917 CEST	443	57108	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.498720884 CEST	57108	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.498725891 CEST	443	57108	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.499914885 CEST	443	57110	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.499975920 CEST	443	57110	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.500044107 CEST	57110	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.500796080 CEST	443	57109	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.500858068 CEST	443	57109	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.500910997 CEST	57109	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.502401114 CEST	57112	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.502422094 CEST	443	57112	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.502434015 CEST	57112	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.502443075 CEST	443	57112	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.502986908 CEST	57110	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.502986908 CEST	57110	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.503005981 CEST	443	57110	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.503015995 CEST	443	57110	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.503624916 CEST	57109	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.503624916 CEST	57109	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.503634930 CEST	443	57109	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.503644943 CEST	443	57109	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.507497072 CEST	57111	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.507503033 CEST	443	57111	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.507510900 CEST	57111	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.507514954 CEST	443	57111	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.519629955 CEST	57114	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.519644022 CEST	443	57114	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.519712925 CEST	57114	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.520313025 CEST	57114	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.520328999 CEST	443	57114	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.522680044 CEST	57115	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.522722006 CEST	443	57115	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.522785902 CEST	57115	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.523921967 CEST	57115	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.523940086 CEST	443	57115	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.525969982 CEST	57116	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.526019096 CEST	443	57116	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.526092052 CEST	57116	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.526199102 CEST	57116	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.526213884 CEST	443	57116	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.528434038 CEST	57117	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.528476954 CEST	443	57117	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.528676033 CEST	57117	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.530236959 CEST	57118	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.530249119 CEST	443	57118	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.530313969 CEST	57118	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.530692101 CEST	57117	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.530713081 CEST	443	57117	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:06.530884981 CEST	57118	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:06.530898094 CEST	443	57118	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.006964922 CEST	443	57113	23.1.237.91	192.168.2.5
Oct 13, 2024 18:09:07.007298946 CEST	57113	443	192.168.2.5	23.1.237.91
Oct 13, 2024 18:09:07.033494949 CEST	54240	53	192.168.2.5	1.1.1.1
Oct 13, 2024 18:09:07.039258003 CEST	53	54240	1.1.1.1	192.168.2.5
Oct 13, 2024 18:09:07.039793015 CEST	54240	53	192.168.2.5	1.1.1.1
Oct 13, 2024 18:09:07.039793015 CEST	54240	53	192.168.2.5	1.1.1.1
Oct 13, 2024 18:09:07.045568943 CEST	53	54240	1.1.1.1	192.168.2.5
Oct 13, 2024 18:09:07.107960939 CEST	54241	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:07.108000994 CEST	443	54241	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:07.108105898 CEST	54241	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:07.108752966 CEST	54241	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:07.108766079 CEST	443	54241	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:07.112781048 CEST	54242	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:07.112796068 CEST	443	54242	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:07.112858057 CEST	54242	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:07.113431931 CEST	54242	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:07.113441944 CEST	443	54242	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:07.169296026 CEST	443	57116	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.169852972 CEST	57116	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.169883966 CEST	443	57116	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.170387983 CEST	57116	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.170393944 CEST	443	57116	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.178184032 CEST	443	57117	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.178674936 CEST	57117	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.178693056 CEST	443	57117	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.178992033 CEST	57117	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.178997040 CEST	443	57117	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.180915117 CEST	443	57114	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.181304932 CEST	57114	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.181391001 CEST	443	57114	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.181715012 CEST	57114	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.181730986 CEST	443	57114	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.183048010 CEST	443	57115	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.183388948 CEST	57115	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.183402061 CEST	443	57115	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.183762074 CEST	57115	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.183769941 CEST	443	57115	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.194888115 CEST	443	57118	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.198123932 CEST	57118	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.198139906 CEST	443	57118	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.198705912 CEST	57118	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.198710918 CEST	443	57118	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.270395994 CEST	443	57116	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.270499945 CEST	443	57116	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.270704031 CEST	57116	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.270879030 CEST	57116	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.270879030 CEST	57116	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.270900965 CEST	443	57116	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.270911932 CEST	443	57116	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.273792982 CEST	54243	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.273822069 CEST	443	54243	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.274169922 CEST	54243	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.275178909 CEST	54243	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.275191069 CEST	443	54243	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.278871059 CEST	443	57117	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.278939962 CEST	443	57117	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.279036045 CEST	57117	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.279222965 CEST	57117	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.279222965 CEST	57117	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.279247046 CEST	443	57117	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.279257059 CEST	443	57117	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.281981945 CEST	54244	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.282012939 CEST	443	54244	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.282109976 CEST	54244	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.282351971 CEST	54244	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.282365084 CEST	443	54244	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.283592939 CEST	443	57114	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.283693075 CEST	443	57114	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.283763885 CEST	57114	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.283859015 CEST	57114	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.283859015 CEST	57114	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.283878088 CEST	443	57114	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.283886909 CEST	443	57114	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.286221027 CEST	54245	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.286246061 CEST	443	54245	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.286314964 CEST	54245	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.286473036 CEST	54245	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.286487103 CEST	443	54245	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.286853075 CEST	443	57115	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.286916971 CEST	443	57115	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.286988974 CEST	57115	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.287091970 CEST	57115	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.287096977 CEST	443	57115	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.287106037 CEST	57115	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.287110090 CEST	443	57115	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.289171934 CEST	54246	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.289180040 CEST	443	54246	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.289257050 CEST	54246	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.289767027 CEST	54246	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.289777994 CEST	443	54246	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.298391104 CEST	443	57118	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.298466921 CEST	443	57118	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.298655987 CEST	57118	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.298703909 CEST	57118	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.298710108 CEST	443	57118	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.298727036 CEST	57118	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.298732042 CEST	443	57118	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.301076889 CEST	54247	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.301091909 CEST	443	54247	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.301186085 CEST	54247	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.301363945 CEST	54247	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.301377058 CEST	443	54247	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.494864941 CEST	53	54240	1.1.1.1	192.168.2.5
Oct 13, 2024 18:09:07.499376059 CEST	54240	53	192.168.2.5	1.1.1.1
Oct 13, 2024 18:09:07.504537106 CEST	53	54240	1.1.1.1	192.168.2.5
Oct 13, 2024 18:09:07.504633904 CEST	54240	53	192.168.2.5	1.1.1.1
Oct 13, 2024 18:09:07.902252913 CEST	443	54241	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:07.902353048 CEST	54241	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:07.904489040 CEST	54241	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:07.904498100 CEST	443	54241	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:07.904773951 CEST	443	54241	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:07.904781103 CEST	443	54242	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:07.904863119 CEST	54242	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:07.906527996 CEST	54241	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:07.906708002 CEST	54241	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:07.906714916 CEST	443	54241	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:07.906811953 CEST	54241	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:07.907182932 CEST	54242	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:07.907187939 CEST	443	54242	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:07.907438040 CEST	443	54242	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:07.909389019 CEST	54242	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:07.909467936 CEST	54242	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:07.909472942 CEST	443	54242	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:07.909646034 CEST	54242	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:07.923336029 CEST	443	54243	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.923995972 CEST	54243	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.924045086 CEST	443	54243	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.924467087 CEST	54243	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.924479008 CEST	443	54243	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.938829899 CEST	443	54246	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.939488888 CEST	54246	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.939527035 CEST	443	54246	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.939979076 CEST	54246	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.939985037 CEST	443	54246	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.940830946 CEST	443	54245	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.941222906 CEST	54245	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.941258907 CEST	443	54245	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.941610098 CEST	54245	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.941617012 CEST	443	54245	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.942954063 CEST	443	54244	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.943403959 CEST	54244	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.943419933 CEST	443	54244	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.944020987 CEST	54244	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.944027901 CEST	443	54244	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.949227095 CEST	443	54247	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.949744940 CEST	54247	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.949758053 CEST	443	54247	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.950174093 CEST	54247	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:07.950181961 CEST	443	54247	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:07.951411009 CEST	443	54241	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:07.951420069 CEST	443	54242	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:08.024763107 CEST	443	54243	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.024790049 CEST	443	54243	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.024863005 CEST	443	54243	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.024873018 CEST	54243	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.024930954 CEST	54243	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.025789976 CEST	54243	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.025831938 CEST	443	54243	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.025861025 CEST	54243	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.025877953 CEST	443	54243	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.030738115 CEST	54248	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.030786991 CEST	443	54248	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.030852079 CEST	54248	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.035181999 CEST	54248	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.035206079 CEST	443	54248	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.039834976 CEST	443	54246	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.039880037 CEST	443	54246	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.039942026 CEST	54246	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.039968014 CEST	443	54246	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.039983988 CEST	443	54246	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.040033102 CEST	54246	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.040641069 CEST	443	54245	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.040719032 CEST	443	54245	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.040813923 CEST	54245	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.042747974 CEST	54246	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.042763948 CEST	443	54246	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.043337107 CEST	54245	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.043343067 CEST	443	54245	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.043355942 CEST	54245	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.043363094 CEST	443	54245	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.045595884 CEST	443	54244	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.045653105 CEST	443	54244	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.045727015 CEST	54244	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.046431065 CEST	54244	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.046431065 CEST	54244	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.046449900 CEST	443	54244	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.046459913 CEST	443	54244	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.047004938 CEST	54249	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.047038078 CEST	443	54249	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.047276974 CEST	54249	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.047419071 CEST	54249	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.047427893 CEST	443	54249	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.050038099 CEST	54250	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.050059080 CEST	443	54250	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.050076962 CEST	54251	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.050077915 CEST	443	54247	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.050101995 CEST	443	54247	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.050112963 CEST	443	54251	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.050149918 CEST	54250	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.050190926 CEST	54247	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.050203085 CEST	443	54247	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.050204992 CEST	54251	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.050261974 CEST	54247	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.050275087 CEST	54250	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.050286055 CEST	443	54247	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.050298929 CEST	443	54250	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.050338030 CEST	443	54247	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.050364971 CEST	54251	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.050379038 CEST	443	54251	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.050416946 CEST	54247	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.050621986 CEST	54247	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.050621986 CEST	54247	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.050632954 CEST	443	54247	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.050641060 CEST	443	54247	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.052741051 CEST	54252	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.052764893 CEST	443	54252	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.052907944 CEST	54252	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.053046942 CEST	54252	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.053060055 CEST	443	54252	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.086848021 CEST	443	54242	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:08.087409973 CEST	443	54242	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:08.087527037 CEST	54242	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:08.091839075 CEST	443	54241	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:08.091973066 CEST	443	54241	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:08.092156887 CEST	54241	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:08.104173899 CEST	54242	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:08.104192972 CEST	443	54242	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:08.104199886 CEST	54242	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:08.104332924 CEST	54241	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:08.104336977 CEST	443	54241	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:08.104365110 CEST	54241	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:08.682770967 CEST	443	54248	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.683377028 CEST	54248	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.683398008 CEST	443	54248	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.683880091 CEST	54248	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.683885098 CEST	443	54248	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.717753887 CEST	443	54251	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.718199015 CEST	54251	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.718214989 CEST	443	54251	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.718744040 CEST	54251	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.718749046 CEST	443	54251	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.720411062 CEST	443	54252	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.720815897 CEST	54252	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.720839024 CEST	443	54252	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.721362114 CEST	54252	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.721366882 CEST	443	54252	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.725246906 CEST	443	54249	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.725655079 CEST	54249	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.725678921 CEST	443	54249	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.725872040 CEST	443	54250	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.726233959 CEST	54249	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.726242065 CEST	443	54249	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.726438999 CEST	54250	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.726463079 CEST	443	54250	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.726784945 CEST	54250	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.726790905 CEST	443	54250	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.783539057 CEST	443	54248	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.783565044 CEST	443	54248	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.783628941 CEST	54248	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.783634901 CEST	443	54248	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.783701897 CEST	54248	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.783994913 CEST	54248	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.784006119 CEST	443	54248	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.784014940 CEST	54248	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.784019947 CEST	443	54248	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.787014961 CEST	54253	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.787050009 CEST	443	54253	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.787133932 CEST	54253	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.787249088 CEST	54253	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.787262917 CEST	443	54253	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.820185900 CEST	443	54251	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.820679903 CEST	443	54251	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.820792913 CEST	54251	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.820849895 CEST	54251	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.820863962 CEST	443	54251	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.820899963 CEST	54251	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.820905924 CEST	443	54251	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.821436882 CEST	443	54252	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.821614027 CEST	443	54252	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.821834087 CEST	54252	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.823451042 CEST	54252	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.823470116 CEST	443	54252	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.826117039 CEST	54254	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.826143026 CEST	443	54254	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.826442957 CEST	54255	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.826468945 CEST	443	54255	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.826514006 CEST	54254	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.826632977 CEST	54254	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.826643944 CEST	443	54254	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.826699972 CEST	54255	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.826816082 CEST	54255	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.826828957 CEST	443	54255	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.829672098 CEST	443	54249	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.829828978 CEST	443	54249	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.829904079 CEST	54249	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.829998016 CEST	54249	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.830009937 CEST	443	54249	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.830116987 CEST	54249	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.830122948 CEST	443	54249	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.830710888 CEST	443	54250	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.831038952 CEST	443	54250	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.831170082 CEST	54250	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.831218004 CEST	54250	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.831218004 CEST	54250	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.831223965 CEST	443	54250	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.831231117 CEST	443	54250	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.832551956 CEST	54256	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.832621098 CEST	443	54256	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.832705975 CEST	54256	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.832844973 CEST	54256	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.832878113 CEST	443	54256	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.833528042 CEST	54257	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.833554983 CEST	443	54257	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:08.833663940 CEST	54257	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.833842039 CEST	54257	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:08.833856106 CEST	443	54257	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.446636915 CEST	443	54253	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.447314024 CEST	54253	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.447329044 CEST	443	54253	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.447767973 CEST	54253	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.447772980 CEST	443	54253	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.478400946 CEST	443	54255	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.478898048 CEST	54255	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.478935003 CEST	443	54255	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.479346991 CEST	54255	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.479353905 CEST	443	54255	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.498083115 CEST	443	54254	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.498596907 CEST	443	54257	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.498615026 CEST	54254	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.498656034 CEST	443	54254	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.499063015 CEST	54257	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.499084949 CEST	443	54257	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.499097109 CEST	54254	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.499104977 CEST	443	54254	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.499658108 CEST	54257	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.499665022 CEST	443	54257	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.517756939 CEST	443	54256	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.518235922 CEST	54256	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.518304110 CEST	443	54256	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.518678904 CEST	54256	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.518698931 CEST	443	54256	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.549860954 CEST	443	54253	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.549937010 CEST	443	54253	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.550054073 CEST	54253	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.550376892 CEST	54253	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.550395012 CEST	443	54253	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.550405979 CEST	54253	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.550412893 CEST	443	54253	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.554147959 CEST	54258	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.554184914 CEST	443	54258	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.554369926 CEST	54258	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.554622889 CEST	54258	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.554636955 CEST	443	54258	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.617950916 CEST	443	54255	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.618005037 CEST	443	54255	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.618135929 CEST	54255	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.618472099 CEST	54255	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.618489981 CEST	443	54255	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.618500948 CEST	54255	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.618510008 CEST	443	54255	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.620134115 CEST	443	54257	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.620204926 CEST	443	54257	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.620259047 CEST	54257	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.620277882 CEST	443	54254	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.620419025 CEST	54257	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.620429993 CEST	443	54254	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.620435953 CEST	443	54257	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.620495081 CEST	54254	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.621671915 CEST	54254	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.621686935 CEST	443	54254	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.621699095 CEST	54254	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.621705055 CEST	443	54254	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.622885942 CEST	54259	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.622997046 CEST	443	54259	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.623086929 CEST	54259	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.623544931 CEST	54259	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.623581886 CEST	443	54259	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.624569893 CEST	54260	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.624593019 CEST	443	54260	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.624653101 CEST	54260	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.624835968 CEST	54260	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.624850035 CEST	443	54260	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.625871897 CEST	443	54256	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.626012087 CEST	443	54256	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.626302004 CEST	54256	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.626399994 CEST	54261	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.626420021 CEST	443	54261	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.626487017 CEST	54261	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.626600981 CEST	54256	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.626632929 CEST	443	54256	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.626662016 CEST	54256	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.626677990 CEST	443	54256	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.628520012 CEST	54261	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.628530979 CEST	443	54261	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.629039049 CEST	54262	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.629046917 CEST	443	54262	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:09.629113913 CEST	54262	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.629328966 CEST	54262	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:09.629338980 CEST	443	54262	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.278219938 CEST	443	54260	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.281096935 CEST	54260	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.281116962 CEST	443	54260	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.281414986 CEST	443	54258	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.281713009 CEST	54260	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.281718016 CEST	443	54260	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.282066107 CEST	54258	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.282077074 CEST	443	54258	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.282515049 CEST	54258	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.282524109 CEST	443	54258	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.285134077 CEST	443	54259	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.286195993 CEST	443	54261	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.293580055 CEST	443	54262	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.324549913 CEST	54259	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.324601889 CEST	443	54259	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.327328920 CEST	54259	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.327347994 CEST	443	54259	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.327455997 CEST	54261	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.327466011 CEST	443	54261	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.328087091 CEST	54261	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.328092098 CEST	443	54261	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.328586102 CEST	54262	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.328599930 CEST	443	54262	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.328957081 CEST	54262	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.328963041 CEST	443	54262	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.380563974 CEST	443	54260	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.380732059 CEST	443	54260	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.380973101 CEST	54260	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.384253979 CEST	54260	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.384253979 CEST	54260	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.384278059 CEST	443	54260	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.384288073 CEST	443	54260	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.386156082 CEST	443	54258	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.386266947 CEST	443	54258	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.386569977 CEST	54258	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.392189026 CEST	54258	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.392220020 CEST	443	54258	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.392234087 CEST	54258	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.392242908 CEST	443	54258	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.422601938 CEST	54263	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.422665119 CEST	443	54263	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.427184105 CEST	54263	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.431751013 CEST	443	54262	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.431756020 CEST	443	54261	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.431775093 CEST	443	54259	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.431842089 CEST	443	54261	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.431844950 CEST	443	54259	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.431916952 CEST	54261	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.431929111 CEST	443	54262	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.431934118 CEST	54259	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.431938887 CEST	443	54261	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.431958914 CEST	443	54259	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.431967020 CEST	443	54261	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.432005882 CEST	54262	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.432039976 CEST	54261	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.432236910 CEST	443	54259	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.432286978 CEST	54259	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.440957069 CEST	54264	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.440993071 CEST	443	54264	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.441062927 CEST	54264	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.443823099 CEST	54263	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.443847895 CEST	443	54263	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.443948984 CEST	54262	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.443964005 CEST	443	54262	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.444030046 CEST	54262	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.444042921 CEST	443	54262	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.455434084 CEST	54264	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.455456018 CEST	443	54264	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.455566883 CEST	54261	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.455588102 CEST	443	54261	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.455626965 CEST	54261	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.455640078 CEST	443	54261	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.464420080 CEST	54259	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.464443922 CEST	443	54259	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.485233068 CEST	54265	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.485269070 CEST	443	54265	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.485397100 CEST	54265	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.485857964 CEST	54265	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.485872030 CEST	443	54265	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.499420881 CEST	54266	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.499434948 CEST	443	54266	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.499520063 CEST	54266	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.499687910 CEST	54266	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.499700069 CEST	443	54266	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.503581047 CEST	54267	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.503623962 CEST	443	54267	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:10.503680944 CEST	54267	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.506213903 CEST	54267	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:10.506232977 CEST	443	54267	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.104104042 CEST	443	54263	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.104604006 CEST	54263	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.104626894 CEST	443	54263	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.105175018 CEST	54263	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.105187893 CEST	443	54263	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.142868996 CEST	443	54265	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.143357038 CEST	54265	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.143389940 CEST	443	54265	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.143831968 CEST	54265	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.143837929 CEST	443	54265	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.149542093 CEST	443	54266	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.149910927 CEST	443	54264	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.150106907 CEST	54266	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.150115967 CEST	443	54266	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.150434971 CEST	54264	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.150446892 CEST	443	54264	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.150702953 CEST	54266	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.150707960 CEST	443	54266	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.150856018 CEST	54264	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.150860071 CEST	443	54264	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.169800043 CEST	443	54267	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.170273066 CEST	54267	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.170290947 CEST	443	54267	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.170747995 CEST	54267	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.170753002 CEST	443	54267	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.206171036 CEST	443	54263	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.206285954 CEST	443	54263	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.206409931 CEST	54263	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.206516981 CEST	54263	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.206558943 CEST	443	54263	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.206598997 CEST	54263	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.206607103 CEST	443	54263	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.209371090 CEST	54268	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.209403038 CEST	443	54268	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.209635019 CEST	54268	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.209671974 CEST	54268	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.209676981 CEST	443	54268	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.243824005 CEST	443	54265	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.243911982 CEST	443	54265	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.243957996 CEST	54265	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.243973017 CEST	443	54265	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.244016886 CEST	443	54265	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.244066954 CEST	54265	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.244298935 CEST	54265	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.244298935 CEST	54265	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.244311094 CEST	443	54265	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.244318962 CEST	443	54265	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.247905016 CEST	54269	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.247945070 CEST	443	54269	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.248019934 CEST	54269	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.248270988 CEST	54269	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.248286009 CEST	443	54269	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.249789953 CEST	443	54266	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.250030041 CEST	443	54266	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.250097036 CEST	54266	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.250114918 CEST	54266	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.250122070 CEST	443	54266	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.250130892 CEST	54266	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.250135899 CEST	443	54266	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.253441095 CEST	54270	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.253456116 CEST	443	54270	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.253519058 CEST	54270	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.253638029 CEST	54270	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.253652096 CEST	443	54270	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.256413937 CEST	443	54264	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.256576061 CEST	443	54264	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.256642103 CEST	54264	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.256683111 CEST	54264	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.256701946 CEST	443	54264	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.256731987 CEST	54264	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.256737947 CEST	443	54264	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.260562897 CEST	54271	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.260596037 CEST	443	54271	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.260674000 CEST	54271	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.260802031 CEST	54271	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.260816097 CEST	443	54271	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.274151087 CEST	443	54267	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.274282932 CEST	443	54267	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.274337053 CEST	54267	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.274641991 CEST	54267	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.274652004 CEST	443	54267	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.274661064 CEST	54267	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.274667025 CEST	443	54267	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.277302027 CEST	54272	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.277344942 CEST	443	54272	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:11.277484894 CEST	54272	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.277585030 CEST	54272	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:11.277601957 CEST	443	54272	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.089163065 CEST	443	54268	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.089824915 CEST	54268	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.089848042 CEST	443	54268	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.090339899 CEST	54268	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.090343952 CEST	443	54268	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.189830065 CEST	443	54268	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.189975977 CEST	443	54268	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.190068960 CEST	54268	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.190331936 CEST	54268	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.190331936 CEST	54268	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.190351009 CEST	443	54268	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.190361023 CEST	443	54268	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.193294048 CEST	54273	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.193320990 CEST	443	54273	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.193402052 CEST	54273	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.193588972 CEST	54273	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.193598986 CEST	443	54273	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.276170015 CEST	443	54270	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.276761055 CEST	54270	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.276776075 CEST	443	54270	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.277245045 CEST	54270	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.277251005 CEST	443	54270	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.278978109 CEST	443	54271	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.279367924 CEST	54271	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.279378891 CEST	443	54271	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.280148029 CEST	54271	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.280167103 CEST	443	54271	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.280774117 CEST	443	54272	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.281219006 CEST	54272	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.281236887 CEST	443	54272	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.283129930 CEST	54272	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.283143997 CEST	443	54272	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.287759066 CEST	443	54269	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.288157940 CEST	54269	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.288167000 CEST	443	54269	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.288762093 CEST	54269	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.288769007 CEST	443	54269	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.376378059 CEST	443	54270	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.376566887 CEST	443	54270	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.376622915 CEST	54270	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.376739979 CEST	54270	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.376758099 CEST	443	54270	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.376775026 CEST	54270	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.376780033 CEST	443	54270	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.379673004 CEST	54274	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.379709005 CEST	443	54274	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.379781008 CEST	54274	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.380002022 CEST	54274	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.380013943 CEST	443	54274	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.380074024 CEST	443	54271	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.380136967 CEST	443	54271	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.380187988 CEST	443	54271	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.380232096 CEST	54271	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.380319118 CEST	54271	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.380319118 CEST	54271	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.380319118 CEST	54271	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.380337954 CEST	443	54271	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.380698919 CEST	443	54272	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.380794048 CEST	443	54272	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.380951881 CEST	54272	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.381000042 CEST	54272	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.381012917 CEST	443	54272	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.381042004 CEST	54272	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.381047964 CEST	443	54272	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.382745028 CEST	54275	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.382767916 CEST	443	54275	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.383307934 CEST	54276	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.383341074 CEST	443	54276	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.383364916 CEST	54275	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.383364916 CEST	54275	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.383394957 CEST	443	54275	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.383407116 CEST	54276	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.383610964 CEST	54276	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.383627892 CEST	443	54276	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.394668102 CEST	443	54269	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.394828081 CEST	443	54269	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.394881010 CEST	443	54269	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.394886971 CEST	54269	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.394942045 CEST	54269	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.395046949 CEST	54269	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.395066023 CEST	443	54269	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.395077944 CEST	54269	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.395083904 CEST	443	54269	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.397519112 CEST	54277	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.397552967 CEST	443	54277	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.397634029 CEST	54277	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.397780895 CEST	54277	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.397794008 CEST	443	54277	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.680778980 CEST	54271	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.680813074 CEST	443	54271	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.850637913 CEST	443	54273	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.851157904 CEST	54273	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.851178885 CEST	443	54273	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.851643085 CEST	54273	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.851648092 CEST	443	54273	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.952627897 CEST	443	54273	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.952796936 CEST	443	54273	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.952910900 CEST	54273	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.952972889 CEST	54273	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.952989101 CEST	443	54273	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.953000069 CEST	54273	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.953005075 CEST	443	54273	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.955702066 CEST	54278	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.955738068 CEST	443	54278	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:12.955811024 CEST	54278	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.956192017 CEST	54278	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:12.956203938 CEST	443	54278	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.049683094 CEST	443	54276	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.050252914 CEST	54276	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.050290108 CEST	443	54276	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.050826073 CEST	54276	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.050837040 CEST	443	54276	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.056814909 CEST	443	54274	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.057197094 CEST	54274	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.057219028 CEST	443	54274	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.057634115 CEST	54274	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.057638884 CEST	443	54274	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.058407068 CEST	443	54275	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.058811903 CEST	54275	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.058847904 CEST	443	54275	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.059421062 CEST	54275	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.059432030 CEST	443	54275	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.076976061 CEST	443	54277	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.077663898 CEST	54277	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.077687025 CEST	443	54277	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.078094006 CEST	54277	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.078099966 CEST	443	54277	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.154505968 CEST	443	54276	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.154666901 CEST	443	54276	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.154757977 CEST	54276	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.154942036 CEST	54276	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.154942036 CEST	54276	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.154987097 CEST	443	54276	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.155011892 CEST	443	54276	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.158128977 CEST	54279	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.158180952 CEST	443	54279	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.158269882 CEST	54279	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.158442974 CEST	54279	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.158477068 CEST	443	54279	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.162292957 CEST	443	54274	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.162369013 CEST	443	54274	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.162487984 CEST	54274	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.162535906 CEST	54274	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.162544966 CEST	443	54274	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.162599087 CEST	54274	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.162604094 CEST	443	54274	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.163166046 CEST	443	54275	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.163337946 CEST	443	54275	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.163393021 CEST	54275	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.163405895 CEST	443	54275	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.163470030 CEST	54275	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.163547039 CEST	54275	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.163547039 CEST	54275	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.163572073 CEST	443	54275	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.163585901 CEST	443	54275	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.165014982 CEST	54280	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.165045023 CEST	443	54280	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.165237904 CEST	54280	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.165265083 CEST	54280	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.165270090 CEST	443	54280	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.165776968 CEST	54281	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.165819883 CEST	443	54281	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.165882111 CEST	54281	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.165997982 CEST	54281	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.166012049 CEST	443	54281	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.180478096 CEST	443	54277	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.180659056 CEST	443	54277	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.180758953 CEST	54277	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.180758953 CEST	54277	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.180778980 CEST	54277	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.180795908 CEST	443	54277	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.182969093 CEST	54282	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.182982922 CEST	443	54282	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.183182001 CEST	54282	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.183324099 CEST	54282	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.183339119 CEST	443	54282	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.620615005 CEST	443	54278	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.621205091 CEST	54278	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.621229887 CEST	443	54278	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.621813059 CEST	54278	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.621818066 CEST	443	54278	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.720446110 CEST	443	54278	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.720602036 CEST	443	54278	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.720679998 CEST	54278	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.720801115 CEST	54278	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.720818043 CEST	443	54278	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.720830917 CEST	54278	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.720835924 CEST	443	54278	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.723758936 CEST	54283	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.723798037 CEST	443	54283	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.723927021 CEST	54283	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.724086046 CEST	54283	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.724100113 CEST	443	54283	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.808825970 CEST	443	54279	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.809293032 CEST	54279	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.809326887 CEST	443	54279	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.809750080 CEST	54279	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.809768915 CEST	443	54279	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.817424059 CEST	443	54280	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.817799091 CEST	54280	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.817821980 CEST	443	54280	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.818274975 CEST	54280	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.818281889 CEST	443	54280	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.831295967 CEST	443	54281	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.831665993 CEST	54281	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.831682920 CEST	443	54281	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.832140923 CEST	54281	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.832145929 CEST	443	54281	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.875526905 CEST	443	54282	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.876084089 CEST	54282	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.876095057 CEST	443	54282	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.876553059 CEST	54282	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.876558065 CEST	443	54282	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.919070005 CEST	443	54279	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.919158936 CEST	443	54279	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.919203997 CEST	443	54279	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.919229031 CEST	54279	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.919280052 CEST	54279	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.919470072 CEST	54279	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.919493914 CEST	443	54279	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.919504881 CEST	54279	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.919512987 CEST	443	54279	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.922473907 CEST	54284	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.922502995 CEST	443	54284	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.922686100 CEST	54284	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.922875881 CEST	54284	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.922888041 CEST	443	54284	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.924246073 CEST	443	54280	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.924321890 CEST	443	54280	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.924420118 CEST	54280	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.924575090 CEST	54280	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.924575090 CEST	54280	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.924587011 CEST	443	54280	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.924591064 CEST	443	54280	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.926589966 CEST	54285	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.926625013 CEST	443	54285	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.926727057 CEST	54285	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.926841021 CEST	54285	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.926855087 CEST	443	54285	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.934632063 CEST	443	54281	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.934818983 CEST	443	54281	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.934894085 CEST	54281	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.934972048 CEST	54281	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.934986115 CEST	443	54281	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.934992075 CEST	54281	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.934997082 CEST	443	54281	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.937206984 CEST	54286	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.937220097 CEST	443	54286	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.937503099 CEST	54286	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.937659025 CEST	54286	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.937664032 CEST	443	54286	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.981370926 CEST	443	54282	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.981528044 CEST	443	54282	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.981607914 CEST	54282	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.981678963 CEST	54282	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.981692076 CEST	443	54282	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.981703997 CEST	54282	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.981709003 CEST	443	54282	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.984529018 CEST	54287	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.984551907 CEST	443	54287	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:13.984735012 CEST	54287	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.984888077 CEST	54287	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:13.984898090 CEST	443	54287	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.379086018 CEST	443	54283	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.381524086 CEST	54283	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.381546974 CEST	443	54283	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.383089066 CEST	54283	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.383105040 CEST	443	54283	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.479743004 CEST	443	54283	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.479909897 CEST	443	54283	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.479994059 CEST	54283	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.480011940 CEST	443	54283	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.480041027 CEST	443	54283	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.480245113 CEST	54283	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.480580091 CEST	54283	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.480580091 CEST	54283	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.480597973 CEST	443	54283	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.480602980 CEST	443	54283	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.487670898 CEST	54288	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.487704039 CEST	443	54288	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.487833023 CEST	54288	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.488420010 CEST	54288	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.488432884 CEST	443	54288	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.599462986 CEST	443	54284	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.607027054 CEST	54284	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.607053995 CEST	443	54284	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.608163118 CEST	54284	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.608179092 CEST	443	54284	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.620142937 CEST	443	54285	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.620713949 CEST	54285	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.620742083 CEST	443	54285	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.621438980 CEST	54285	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.621449947 CEST	443	54285	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.626672983 CEST	443	54286	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.627264977 CEST	54286	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.627296925 CEST	443	54286	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.627841949 CEST	54286	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.627851009 CEST	443	54286	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.673891068 CEST	443	54287	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.674969912 CEST	54287	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.674993992 CEST	443	54287	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.675709009 CEST	54287	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.675717115 CEST	443	54287	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.708756924 CEST	443	54284	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.708861113 CEST	443	54284	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.708965063 CEST	54284	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.719567060 CEST	54284	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.719583988 CEST	443	54284	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.719595909 CEST	54284	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.719602108 CEST	443	54284	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.725049019 CEST	54289	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.725111008 CEST	443	54289	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.725224972 CEST	54289	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.725519896 CEST	54289	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.725533009 CEST	443	54289	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.726435900 CEST	443	54285	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.726609945 CEST	443	54285	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.726706982 CEST	54285	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.726941109 CEST	54285	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.726969004 CEST	443	54285	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.732264042 CEST	54290	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.732279062 CEST	443	54290	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.732382059 CEST	54290	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.732594013 CEST	54290	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.732605934 CEST	443	54290	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.734112978 CEST	443	54286	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.734181881 CEST	443	54286	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.734431982 CEST	54286	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.734647989 CEST	54286	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.734679937 CEST	443	54286	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.734689951 CEST	54286	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.734704971 CEST	443	54286	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.737715006 CEST	54291	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.737760067 CEST	443	54291	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.737853050 CEST	54291	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.738010883 CEST	54291	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.738022089 CEST	443	54291	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.780325890 CEST	443	54287	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.780364990 CEST	443	54287	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.780425072 CEST	443	54287	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.780431032 CEST	54287	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.780519009 CEST	54287	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.780607939 CEST	54287	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.780617952 CEST	443	54287	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.784429073 CEST	54292	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.784455061 CEST	443	54292	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:14.784656048 CEST	54292	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.784868956 CEST	54292	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:14.784883976 CEST	443	54292	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.167433977 CEST	443	54288	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.168592930 CEST	54288	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.168626070 CEST	443	54288	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.169748068 CEST	54288	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.169753075 CEST	443	54288	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.271858931 CEST	443	54288	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.271945000 CEST	443	54288	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.272032022 CEST	54288	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.272603989 CEST	54288	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.272603989 CEST	54288	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.272619963 CEST	443	54288	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.272628069 CEST	443	54288	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.276845932 CEST	54293	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.276892900 CEST	443	54293	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.277144909 CEST	54293	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.277407885 CEST	54293	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.277420998 CEST	443	54293	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.378760099 CEST	443	54289	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.379296064 CEST	54289	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.379365921 CEST	443	54289	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.379981041 CEST	54289	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.379987001 CEST	443	54289	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.433183908 CEST	443	54291	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.433751106 CEST	54291	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.433769941 CEST	443	54291	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.434451103 CEST	54291	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.434457064 CEST	443	54291	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.451260090 CEST	443	54292	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.451747894 CEST	54292	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.451761007 CEST	443	54292	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.452270031 CEST	54292	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.452275038 CEST	443	54292	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.454533100 CEST	443	54290	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.454876900 CEST	54290	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.454904079 CEST	443	54290	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.455425978 CEST	54290	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.455430031 CEST	443	54290	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.479948997 CEST	443	54289	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.480150938 CEST	443	54289	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.480194092 CEST	443	54289	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.480264902 CEST	54289	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.480437994 CEST	54289	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.480438948 CEST	54289	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.480494976 CEST	443	54289	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.480519056 CEST	443	54289	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.483927965 CEST	54294	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.483963013 CEST	443	54294	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.484206915 CEST	54294	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.484302044 CEST	54294	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.484311104 CEST	443	54294	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.534118891 CEST	443	54291	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.534338951 CEST	443	54291	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.534392118 CEST	443	54291	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.534401894 CEST	54291	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.534480095 CEST	54291	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.534553051 CEST	54291	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.534553051 CEST	54291	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.534579039 CEST	443	54291	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.534589052 CEST	443	54291	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.537556887 CEST	54295	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.537594080 CEST	443	54295	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.537650108 CEST	54295	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.537839890 CEST	54295	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.537851095 CEST	443	54295	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.553899050 CEST	443	54292	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.554080963 CEST	443	54292	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.554136038 CEST	54292	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.554164886 CEST	54292	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.554169893 CEST	443	54292	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.554179907 CEST	54292	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.554183006 CEST	443	54292	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.556930065 CEST	54296	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.556956053 CEST	443	54296	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.557094097 CEST	54296	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.557235956 CEST	54296	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.557251930 CEST	443	54296	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.562347889 CEST	443	54290	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.562410116 CEST	443	54290	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.562469959 CEST	54290	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.562602043 CEST	54290	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.562608957 CEST	443	54290	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.562619925 CEST	54290	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.562623978 CEST	443	54290	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.565152884 CEST	54297	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.565192938 CEST	443	54297	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.565268993 CEST	54297	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.565406084 CEST	54297	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.565422058 CEST	443	54297	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.938551903 CEST	443	54293	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.939404964 CEST	54293	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.939429045 CEST	443	54293	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:15.940526009 CEST	54293	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:15.940540075 CEST	443	54293	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.040615082 CEST	443	54293	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.040699959 CEST	443	54293	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.040752888 CEST	443	54293	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.040812016 CEST	54293	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.043747902 CEST	54293	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.043771029 CEST	443	54293	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.050527096 CEST	54298	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.050566912 CEST	443	54298	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.050653934 CEST	54298	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.051076889 CEST	54298	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.051090002 CEST	443	54298	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.135889053 CEST	443	54294	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.137034893 CEST	54294	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.137049913 CEST	443	54294	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.138731956 CEST	54294	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.138740063 CEST	443	54294	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.214353085 CEST	443	54295	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.214835882 CEST	54295	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.214854002 CEST	443	54295	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.215704918 CEST	54295	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.215711117 CEST	443	54295	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.217801094 CEST	443	54296	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.218485117 CEST	54296	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.218517065 CEST	443	54296	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.219310999 CEST	54296	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.219326973 CEST	443	54296	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.236753941 CEST	443	54294	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.236828089 CEST	443	54294	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.236946106 CEST	54294	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.237355947 CEST	54294	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.237379074 CEST	443	54294	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.242511988 CEST	54299	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.242558002 CEST	443	54299	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.242861986 CEST	54299	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.243272066 CEST	54299	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.243287086 CEST	443	54299	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.252466917 CEST	443	54297	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.253099918 CEST	54297	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.253125906 CEST	443	54297	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.254312992 CEST	54297	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.254318953 CEST	443	54297	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.319438934 CEST	443	54295	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.319474936 CEST	443	54295	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.319530010 CEST	443	54295	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.319580078 CEST	54295	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.319852114 CEST	54295	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.319866896 CEST	443	54295	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.319881916 CEST	54295	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.319891930 CEST	443	54295	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.320322037 CEST	443	54296	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.320493937 CEST	443	54296	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.320553064 CEST	54296	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.322387934 CEST	54296	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.322406054 CEST	443	54296	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.328938007 CEST	54300	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.328979015 CEST	443	54300	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.329052925 CEST	54300	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.331083059 CEST	54301	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.331111908 CEST	443	54301	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.331239939 CEST	54301	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.331324100 CEST	54300	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.331347942 CEST	443	54300	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.331522942 CEST	54301	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.331535101 CEST	443	54301	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.358270884 CEST	443	54297	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.358361959 CEST	443	54297	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.358428955 CEST	54297	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.359142065 CEST	54297	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.359158039 CEST	443	54297	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.359173059 CEST	54297	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.359179020 CEST	443	54297	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.364042044 CEST	54302	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.364069939 CEST	443	54302	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.364207029 CEST	54302	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.364525080 CEST	54302	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.364531994 CEST	443	54302	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.707500935 CEST	443	54298	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.709427118 CEST	54298	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.709459066 CEST	443	54298	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.710273027 CEST	54298	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.710284948 CEST	443	54298	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.808438063 CEST	443	54298	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.808527946 CEST	443	54298	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.808635950 CEST	54298	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.810296059 CEST	54298	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.810323954 CEST	443	54298	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.810336113 CEST	54298	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.810343981 CEST	443	54298	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.821886063 CEST	54303	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.821940899 CEST	443	54303	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.822006941 CEST	54303	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.823261976 CEST	54303	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.823277950 CEST	443	54303	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.890283108 CEST	443	54299	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.891459942 CEST	54299	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.891500950 CEST	443	54299	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.892718077 CEST	54299	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.892725945 CEST	443	54299	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.979011059 CEST	443	54301	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.979716063 CEST	54301	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.979742050 CEST	443	54301	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.980410099 CEST	54301	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.980417013 CEST	443	54301	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.990010977 CEST	443	54300	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.990456104 CEST	54300	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.990489960 CEST	443	54300	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.990905046 CEST	54300	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.990912914 CEST	443	54300	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.992222071 CEST	443	54299	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.992254019 CEST	443	54299	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.992296934 CEST	443	54299	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.992311954 CEST	54299	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.992341042 CEST	54299	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.992571115 CEST	54299	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.992571115 CEST	54299	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.992594004 CEST	443	54299	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.992604017 CEST	443	54299	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.995542049 CEST	54304	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.995574951 CEST	443	54304	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:16.995666981 CEST	54304	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.995825052 CEST	54304	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:16.995839119 CEST	443	54304	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.026354074 CEST	443	54302	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.026994944 CEST	54302	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.027019024 CEST	443	54302	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.027574062 CEST	54302	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.027581930 CEST	443	54302	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.080646038 CEST	443	54301	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.080773115 CEST	443	54301	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.081017971 CEST	54301	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.081196070 CEST	54301	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.081196070 CEST	54301	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.081214905 CEST	443	54301	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.081219912 CEST	443	54301	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.083971024 CEST	54305	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.083997965 CEST	443	54305	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.084074974 CEST	54305	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.084289074 CEST	54305	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.084300995 CEST	443	54305	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.093672991 CEST	443	54300	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.093869925 CEST	443	54300	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.093911886 CEST	54300	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.093921900 CEST	443	54300	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.093974113 CEST	54300	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.094371080 CEST	54300	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.094387054 CEST	443	54300	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.094410896 CEST	54300	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.094415903 CEST	443	54300	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.111401081 CEST	54306	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.111428976 CEST	443	54306	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.111572027 CEST	54306	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.111725092 CEST	54306	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.111733913 CEST	443	54306	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.128849030 CEST	443	54302	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.129034042 CEST	443	54302	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.129089117 CEST	54302	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.129287958 CEST	54302	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.129287958 CEST	54302	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.129304886 CEST	443	54302	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.129313946 CEST	443	54302	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.131972075 CEST	54307	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.132004976 CEST	443	54307	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.132252932 CEST	54307	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.132462025 CEST	54307	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.132478952 CEST	443	54307	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.485620022 CEST	443	54303	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.486298084 CEST	54303	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.486315966 CEST	443	54303	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.487442017 CEST	54303	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.487447977 CEST	443	54303	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.588135958 CEST	443	54303	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.588208914 CEST	443	54303	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.588329077 CEST	54303	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.588499069 CEST	54303	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.588519096 CEST	443	54303	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.588527918 CEST	54303	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.588532925 CEST	443	54303	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.592622042 CEST	54308	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.592679977 CEST	443	54308	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.592757940 CEST	54308	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.592993021 CEST	54308	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.593009949 CEST	443	54308	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.644854069 CEST	443	54304	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.645972967 CEST	54304	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.645992041 CEST	443	54304	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.647428036 CEST	54304	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.647433996 CEST	443	54304	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.733279943 CEST	443	54305	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.734293938 CEST	54305	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.734313011 CEST	443	54305	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.735346079 CEST	54305	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.735352039 CEST	443	54305	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.749651909 CEST	443	54304	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.749880075 CEST	443	54304	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.749937057 CEST	54304	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.750351906 CEST	54304	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.750366926 CEST	443	54304	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.755836964 CEST	54309	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.755884886 CEST	443	54309	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.756233931 CEST	54309	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.756505966 CEST	54309	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.756531954 CEST	443	54309	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.760093927 CEST	443	54306	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.762161016 CEST	54306	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.762186050 CEST	443	54306	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.763287067 CEST	54306	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.763290882 CEST	443	54306	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.819859982 CEST	443	54307	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.820800066 CEST	54307	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.820813894 CEST	443	54307	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.821784019 CEST	54307	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.821789026 CEST	443	54307	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.834256887 CEST	443	54305	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.835293055 CEST	443	54305	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.835351944 CEST	443	54305	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.835405111 CEST	54305	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.835405111 CEST	54305	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.835614920 CEST	54305	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.835614920 CEST	54305	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.835630894 CEST	443	54305	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.835639000 CEST	443	54305	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.838821888 CEST	54310	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.838861942 CEST	443	54310	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.838967085 CEST	54310	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.839190960 CEST	54310	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.839210987 CEST	443	54310	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.860498905 CEST	443	54306	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.860574961 CEST	443	54306	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.860629082 CEST	54306	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.861046076 CEST	54306	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.861046076 CEST	54306	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.861057997 CEST	443	54306	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.861068010 CEST	443	54306	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.865946054 CEST	54311	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.865974903 CEST	443	54311	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.866054058 CEST	54311	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.866445065 CEST	54311	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.866461039 CEST	443	54311	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.926270008 CEST	443	54307	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.926326036 CEST	443	54307	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.926367044 CEST	443	54307	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.926386118 CEST	54307	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.926434040 CEST	54307	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.927314043 CEST	54307	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.927330971 CEST	443	54307	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.927341938 CEST	54307	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.927347898 CEST	443	54307	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.931618929 CEST	54312	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.931652069 CEST	443	54312	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:17.931866884 CEST	54312	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.932122946 CEST	54312	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:17.932132959 CEST	443	54312	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.241400957 CEST	443	54308	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.242599010 CEST	54308	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.242631912 CEST	443	54308	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.244343042 CEST	54308	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.244363070 CEST	443	54308	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.342499971 CEST	443	54308	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.342695951 CEST	443	54308	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.342760086 CEST	54308	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.342813015 CEST	54308	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.342813015 CEST	54308	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.342839956 CEST	443	54308	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.342849970 CEST	443	54308	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.349636078 CEST	54313	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.349677086 CEST	443	54313	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.349760056 CEST	54313	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.350275993 CEST	54313	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.350291967 CEST	443	54313	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.410137892 CEST	443	54309	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.411247969 CEST	54309	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.411276102 CEST	443	54309	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.412348032 CEST	54309	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.412353992 CEST	443	54309	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.488209963 CEST	443	54310	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.488770008 CEST	54310	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.488790989 CEST	443	54310	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.489247084 CEST	54310	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.489252090 CEST	443	54310	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.518948078 CEST	443	54309	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.519058943 CEST	443	54309	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.519121885 CEST	54309	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.519300938 CEST	54309	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.519316912 CEST	443	54309	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.519329071 CEST	54309	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.519334078 CEST	443	54309	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.522386074 CEST	54314	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.522423983 CEST	443	54314	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.522535086 CEST	54314	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.522816896 CEST	54314	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.522828102 CEST	443	54314	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.527370930 CEST	443	54311	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.527776957 CEST	54311	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.527801991 CEST	443	54311	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.528193951 CEST	54311	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.528198957 CEST	443	54311	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.588787079 CEST	443	54310	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.588895082 CEST	443	54310	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.588954926 CEST	54310	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.589165926 CEST	54310	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.589180946 CEST	443	54310	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.589193106 CEST	54310	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.589200020 CEST	443	54310	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.592065096 CEST	54315	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.592101097 CEST	443	54315	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.592175961 CEST	54315	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.592379093 CEST	54315	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.592392921 CEST	443	54315	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.616220951 CEST	443	54312	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.616642952 CEST	54312	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.616652012 CEST	443	54312	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.617131948 CEST	54312	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.617135048 CEST	443	54312	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.629966021 CEST	443	54311	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.630168915 CEST	443	54311	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.630218983 CEST	54311	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.630239010 CEST	54311	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.630248070 CEST	443	54311	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.632842064 CEST	54316	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.632872105 CEST	443	54316	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.632935047 CEST	54316	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.633080006 CEST	54316	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.633099079 CEST	443	54316	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.720374107 CEST	443	54312	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.720510006 CEST	443	54312	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.720566034 CEST	54312	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.720659971 CEST	54312	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.720674038 CEST	443	54312	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.720685959 CEST	54312	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.720691919 CEST	443	54312	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.723485947 CEST	54317	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.723509073 CEST	443	54317	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.723582029 CEST	54317	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.723720074 CEST	54317	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.723730087 CEST	443	54317	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.994064093 CEST	443	54313	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.995091915 CEST	54313	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.995114088 CEST	443	54313	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:18.995949984 CEST	54313	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:18.995955944 CEST	443	54313	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.094897032 CEST	443	54313	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.094965935 CEST	443	54313	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.095108032 CEST	54313	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.095323086 CEST	54313	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.095323086 CEST	54313	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.095341921 CEST	443	54313	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.095351934 CEST	443	54313	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.098046064 CEST	54318	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.098099947 CEST	443	54318	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.098167896 CEST	54318	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.098315954 CEST	54318	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.098336935 CEST	443	54318	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.170830965 CEST	443	54314	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.172584057 CEST	54314	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.172604084 CEST	443	54314	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.173317909 CEST	54314	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.173326969 CEST	443	54314	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.246108055 CEST	443	54315	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.246716976 CEST	54315	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.246747017 CEST	443	54315	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.247179031 CEST	54315	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.247184038 CEST	443	54315	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.271437883 CEST	443	54314	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.272484064 CEST	443	54314	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.272614956 CEST	54314	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.272689104 CEST	54314	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.272689104 CEST	54314	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.272711039 CEST	443	54314	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.272716045 CEST	443	54314	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.275377035 CEST	54319	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.275439978 CEST	443	54319	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.275614977 CEST	54319	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.275794983 CEST	54319	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.275813103 CEST	443	54319	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.313110113 CEST	443	54316	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.313560009 CEST	54316	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.313580990 CEST	443	54316	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.314013004 CEST	54316	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.314028978 CEST	443	54316	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.347718954 CEST	443	54315	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.347877026 CEST	443	54315	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.347923994 CEST	443	54315	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.347991943 CEST	54315	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.348259926 CEST	54315	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.348259926 CEST	54315	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.348275900 CEST	443	54315	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.348284960 CEST	443	54315	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.351246119 CEST	54320	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.351295948 CEST	443	54320	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.351367950 CEST	54320	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.351593971 CEST	54320	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.351608992 CEST	443	54320	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.385265112 CEST	443	54317	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.385796070 CEST	54317	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.385812998 CEST	443	54317	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.386255026 CEST	54317	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.386261940 CEST	443	54317	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.428946018 CEST	443	54316	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.429018021 CEST	443	54316	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.429155111 CEST	54316	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.429301023 CEST	54316	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.429316044 CEST	443	54316	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.429336071 CEST	54316	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.429342985 CEST	443	54316	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.432629108 CEST	54321	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.432673931 CEST	443	54321	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.432744980 CEST	54321	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.432924986 CEST	54321	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.432943106 CEST	443	54321	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.488816977 CEST	443	54317	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.488938093 CEST	443	54317	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.489111900 CEST	54317	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.489192009 CEST	54317	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.489200115 CEST	443	54317	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.489211082 CEST	54317	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.489217043 CEST	443	54317	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.492110014 CEST	54322	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.492155075 CEST	443	54322	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.492244959 CEST	54322	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.492377996 CEST	54322	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.492393970 CEST	443	54322	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.786251068 CEST	443	54318	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.786875010 CEST	54318	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.786911964 CEST	443	54318	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.787370920 CEST	54318	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.787393093 CEST	443	54318	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.894043922 CEST	443	54318	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.894232035 CEST	443	54318	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.894309044 CEST	54318	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.894599915 CEST	54318	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.894618988 CEST	443	54318	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.894634962 CEST	54318	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.894640923 CEST	443	54318	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.898499966 CEST	54323	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.898538113 CEST	443	54323	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.898617983 CEST	54323	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.898745060 CEST	54323	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.898756027 CEST	443	54323	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.926182032 CEST	443	54319	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.926934004 CEST	54319	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.926953077 CEST	443	54319	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:19.927572966 CEST	54319	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:19.927580118 CEST	443	54319	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.012680054 CEST	443	54320	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.013225079 CEST	54320	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.013243914 CEST	443	54320	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.013812065 CEST	54320	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.013818979 CEST	443	54320	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.027679920 CEST	443	54319	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.027710915 CEST	443	54319	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.027764082 CEST	54319	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.027780056 CEST	443	54319	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.027875900 CEST	443	54319	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.028040886 CEST	54319	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.028063059 CEST	443	54319	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.028074026 CEST	54319	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.028080940 CEST	443	54319	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.028094053 CEST	54319	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.028098106 CEST	443	54319	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.031259060 CEST	54324	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.031300068 CEST	443	54324	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.031815052 CEST	54324	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.031815052 CEST	54324	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.031843901 CEST	443	54324	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.092291117 CEST	443	54321	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.092878103 CEST	54321	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.092921019 CEST	443	54321	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.093319893 CEST	54321	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.093333960 CEST	443	54321	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.115473032 CEST	443	54320	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.115572929 CEST	443	54320	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.115638018 CEST	54320	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.115654945 CEST	443	54320	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.115679979 CEST	443	54320	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.115847111 CEST	54320	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.115868092 CEST	54320	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.115883112 CEST	443	54320	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.115890980 CEST	54320	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.115896940 CEST	443	54320	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.119034052 CEST	54325	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.119085073 CEST	443	54325	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.119164944 CEST	54325	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.119349957 CEST	54325	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.119362116 CEST	443	54325	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.167593002 CEST	443	54322	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.168205976 CEST	54322	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.168245077 CEST	443	54322	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.168669939 CEST	54322	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.168677092 CEST	443	54322	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.195240974 CEST	443	54321	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.195303917 CEST	443	54321	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.195355892 CEST	443	54321	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.195398092 CEST	54321	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.195444107 CEST	54321	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.195679903 CEST	54321	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.195703030 CEST	443	54321	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.195717096 CEST	54321	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.195723057 CEST	443	54321	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.206013918 CEST	54326	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.206065893 CEST	443	54326	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.206152916 CEST	54326	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.206291914 CEST	54326	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.206309080 CEST	443	54326	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.272521019 CEST	443	54322	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.272598028 CEST	443	54322	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.272669077 CEST	54322	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.272855997 CEST	54322	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.272876024 CEST	443	54322	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.272888899 CEST	54322	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.272896051 CEST	443	54322	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.275719881 CEST	54327	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.275763035 CEST	443	54327	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.275969982 CEST	54327	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.276109934 CEST	54327	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.276124001 CEST	443	54327	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.560257912 CEST	443	54323	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.563231945 CEST	54323	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.563249111 CEST	443	54323	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.563942909 CEST	54323	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.563952923 CEST	443	54323	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.663045883 CEST	443	54323	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.663424015 CEST	443	54323	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.663485050 CEST	54323	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.663499117 CEST	443	54323	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.663608074 CEST	54323	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.663713932 CEST	54323	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.663713932 CEST	54323	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.663731098 CEST	443	54323	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.663738966 CEST	443	54323	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.666996956 CEST	54328	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.667045116 CEST	443	54328	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.667108059 CEST	54328	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.667267084 CEST	54328	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.667284012 CEST	443	54328	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.722335100 CEST	443	54324	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.723345995 CEST	54324	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.723377943 CEST	443	54324	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.723407984 CEST	54324	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.723412037 CEST	443	54324	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.783783913 CEST	443	54325	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.784441948 CEST	54325	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.784490108 CEST	443	54325	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.784868002 CEST	54325	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.784874916 CEST	443	54325	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.829320908 CEST	443	54324	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.829438925 CEST	443	54324	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.829641104 CEST	54324	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.829922915 CEST	54324	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.829922915 CEST	54324	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.829941988 CEST	443	54324	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.829946995 CEST	443	54324	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.832743883 CEST	54329	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.832786083 CEST	443	54329	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.832988024 CEST	54329	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.833134890 CEST	54329	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.833148956 CEST	443	54329	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.854547024 CEST	443	54326	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.855356932 CEST	54326	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.855392933 CEST	443	54326	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.855931044 CEST	54326	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.855938911 CEST	443	54326	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.888910055 CEST	443	54325	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.888937950 CEST	443	54325	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.889002085 CEST	443	54325	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.889030933 CEST	54325	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.889067888 CEST	54325	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.889478922 CEST	54325	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.889492989 CEST	443	54325	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.889504910 CEST	54325	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.889509916 CEST	443	54325	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.893450022 CEST	54330	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.893490076 CEST	443	54330	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.893661976 CEST	54330	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.893878937 CEST	54330	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.893892050 CEST	443	54330	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.951235056 CEST	443	54327	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.951792955 CEST	54327	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.951814890 CEST	443	54327	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.952269077 CEST	54327	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.952272892 CEST	443	54327	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.955427885 CEST	443	54326	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.955861092 CEST	443	54326	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.955916882 CEST	443	54326	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.955919981 CEST	54326	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.955971956 CEST	54326	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.956032991 CEST	54326	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.956058025 CEST	443	54326	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.956078053 CEST	54326	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.956084013 CEST	443	54326	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.958915949 CEST	54331	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.958960056 CEST	443	54331	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:20.959064960 CEST	54331	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.959209919 CEST	54331	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:20.959225893 CEST	443	54331	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.056107044 CEST	443	54327	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.056135893 CEST	443	54327	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.056185007 CEST	443	54327	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.056252956 CEST	54327	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.056252956 CEST	54327	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.056552887 CEST	54327	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.056552887 CEST	54327	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.056569099 CEST	443	54327	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.056577921 CEST	443	54327	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.059247017 CEST	54332	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.059299946 CEST	443	54332	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.059379101 CEST	54332	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.059530973 CEST	54332	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.059557915 CEST	443	54332	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.313095093 CEST	443	54328	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.313653946 CEST	54328	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.313677073 CEST	443	54328	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.314114094 CEST	54328	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.314119101 CEST	443	54328	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.413208961 CEST	443	54328	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.413476944 CEST	443	54328	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.413544893 CEST	54328	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.413573980 CEST	54328	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.413588047 CEST	443	54328	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.413599014 CEST	54328	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.413604021 CEST	443	54328	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.416712999 CEST	54333	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.416762114 CEST	443	54333	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.416829109 CEST	54333	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.417000055 CEST	54333	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.417012930 CEST	443	54333	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.481040001 CEST	443	54329	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.481550932 CEST	54329	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.481571913 CEST	443	54329	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.482018948 CEST	54329	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.482023001 CEST	443	54329	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.541241884 CEST	443	54330	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.541893005 CEST	54330	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.541915894 CEST	443	54330	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.542376995 CEST	54330	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.542382956 CEST	443	54330	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.582879066 CEST	443	54329	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.582947969 CEST	443	54329	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.583012104 CEST	54329	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.583209991 CEST	54329	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.583223104 CEST	443	54329	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.583271027 CEST	54329	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.583276987 CEST	443	54329	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.586038113 CEST	54334	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.586075068 CEST	443	54334	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.586183071 CEST	54334	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.586348057 CEST	54334	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.586357117 CEST	443	54334	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.617763042 CEST	443	54331	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.618257046 CEST	54331	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.618290901 CEST	443	54331	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.618699074 CEST	54331	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.618705034 CEST	443	54331	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.642137051 CEST	443	54330	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.642309904 CEST	443	54330	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.642370939 CEST	54330	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.642437935 CEST	54330	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.642443895 CEST	443	54330	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.642457962 CEST	54330	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.642462015 CEST	443	54330	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.645318031 CEST	54335	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.645351887 CEST	443	54335	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.645412922 CEST	54335	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.645615101 CEST	54335	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.645627022 CEST	443	54335	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.720082045 CEST	443	54331	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.720386028 CEST	443	54331	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.720432997 CEST	54331	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.720438957 CEST	443	54331	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.720493078 CEST	54331	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.720560074 CEST	54331	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.720573902 CEST	443	54331	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.720580101 CEST	54331	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.720585108 CEST	443	54331	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.723306894 CEST	54336	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.723328114 CEST	443	54336	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.723400116 CEST	54336	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.723546982 CEST	54336	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.723556995 CEST	443	54336	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.733903885 CEST	443	54332	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.734359980 CEST	54332	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.734373093 CEST	443	54332	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.734798908 CEST	54332	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.734805107 CEST	443	54332	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.838556051 CEST	443	54332	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.838795900 CEST	443	54332	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.838893890 CEST	54332	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.838939905 CEST	54332	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.838953018 CEST	443	54332	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.838962078 CEST	54332	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.838967085 CEST	443	54332	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.841586113 CEST	54337	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.841613054 CEST	443	54337	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:21.841681957 CEST	54337	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.841814041 CEST	54337	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:21.841825962 CEST	443	54337	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.096635103 CEST	443	54333	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.097138882 CEST	54333	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.097182035 CEST	443	54333	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.097629070 CEST	54333	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.097640038 CEST	443	54333	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.405591011 CEST	443	54333	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.405626059 CEST	443	54333	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.405678034 CEST	443	54333	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.405694962 CEST	54333	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.405745029 CEST	54333	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.406230927 CEST	54333	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.406250000 CEST	443	54333	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.406264067 CEST	54333	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.406270027 CEST	443	54333	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.407782078 CEST	443	54334	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.407905102 CEST	443	54335	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.409621000 CEST	54334	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.409637928 CEST	443	54334	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.410243988 CEST	54334	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.410252094 CEST	443	54334	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.410803080 CEST	54335	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.410825014 CEST	443	54335	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.411403894 CEST	54335	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.411412001 CEST	443	54335	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.413877964 CEST	54338	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.413914919 CEST	443	54338	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.413999081 CEST	54338	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.414212942 CEST	54338	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.414225101 CEST	443	54338	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.521766901 CEST	443	54335	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.522428989 CEST	443	54335	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.522484064 CEST	443	54335	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.522505045 CEST	54335	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.522574902 CEST	54335	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.522712946 CEST	54335	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.522712946 CEST	54335	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.522732973 CEST	443	54335	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.522742033 CEST	443	54335	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.527097940 CEST	443	54334	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.527164936 CEST	443	54334	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.527232885 CEST	54334	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.527620077 CEST	54339	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.527681112 CEST	443	54339	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.527741909 CEST	54339	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.527945042 CEST	54334	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.527960062 CEST	443	54334	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.527996063 CEST	54334	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.528001070 CEST	443	54334	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.529823065 CEST	54339	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.529843092 CEST	443	54339	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.531783104 CEST	54340	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.531806946 CEST	443	54340	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.531872988 CEST	54340	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.532179117 CEST	54340	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.532192945 CEST	443	54340	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.593208075 CEST	443	54337	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.593744993 CEST	54337	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.593754053 CEST	443	54337	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.594492912 CEST	54337	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.594497919 CEST	443	54337	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.603773117 CEST	443	54336	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.626190901 CEST	54336	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.626220942 CEST	443	54336	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.627285004 CEST	54336	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.627290010 CEST	443	54336	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.694616079 CEST	443	54337	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.694706917 CEST	443	54337	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.694947004 CEST	54337	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.695295095 CEST	54337	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.695302963 CEST	443	54337	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.699168921 CEST	54341	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.699203014 CEST	443	54341	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.699338913 CEST	54341	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.699500084 CEST	54341	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.699512005 CEST	443	54341	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.729703903 CEST	443	54336	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.729803085 CEST	443	54336	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.729852915 CEST	54336	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.730113983 CEST	54336	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.730135918 CEST	443	54336	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.730150938 CEST	54336	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.730155945 CEST	443	54336	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.733884096 CEST	54342	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.733926058 CEST	443	54342	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:22.734035969 CEST	54342	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.734206915 CEST	54342	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:22.734219074 CEST	443	54342	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.066185951 CEST	443	54338	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.066721916 CEST	54338	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.066741943 CEST	443	54338	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.067183018 CEST	54338	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.067189932 CEST	443	54338	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.167157888 CEST	443	54338	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.167243004 CEST	443	54338	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.167299986 CEST	54338	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.167499065 CEST	54338	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.167519093 CEST	443	54338	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.167536974 CEST	54338	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.167545080 CEST	443	54338	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.170546055 CEST	54343	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.170599937 CEST	443	54343	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.170805931 CEST	54343	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.170805931 CEST	54343	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.170840025 CEST	443	54343	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.180644989 CEST	443	54340	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.181509972 CEST	54340	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.181509972 CEST	54340	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.181520939 CEST	443	54340	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.181535959 CEST	443	54340	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.207020044 CEST	443	54339	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.207537889 CEST	54339	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.207566977 CEST	443	54339	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.208023071 CEST	54339	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.208028078 CEST	443	54339	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.282567978 CEST	443	54340	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.282799959 CEST	443	54340	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.282928944 CEST	54340	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.282959938 CEST	54340	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.282959938 CEST	54340	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.282984018 CEST	443	54340	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.282994032 CEST	443	54340	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.286041021 CEST	54344	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.286093950 CEST	443	54344	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.286231041 CEST	54344	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.286416054 CEST	54344	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.286429882 CEST	443	54344	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.311920881 CEST	443	54339	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.312289953 CEST	443	54339	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.312361956 CEST	54339	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.313271046 CEST	54339	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.313302040 CEST	443	54339	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.313316107 CEST	54339	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.313323021 CEST	443	54339	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.316247940 CEST	54345	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.316301107 CEST	443	54345	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.316379070 CEST	54345	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.316613913 CEST	54345	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.316632986 CEST	443	54345	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.373455048 CEST	443	54341	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.374001026 CEST	54341	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.374030113 CEST	443	54341	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.374480009 CEST	54341	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.374488115 CEST	443	54341	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.439820051 CEST	443	54342	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.440291882 CEST	54342	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.440319061 CEST	443	54342	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.440749884 CEST	54342	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.440757990 CEST	443	54342	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.478323936 CEST	443	54341	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.478408098 CEST	443	54341	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.478454113 CEST	54341	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.478470087 CEST	443	54341	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.478513002 CEST	54341	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.478877068 CEST	54341	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.478893995 CEST	443	54341	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.478929043 CEST	54341	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.478935957 CEST	443	54341	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.487946033 CEST	54346	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.487992048 CEST	443	54346	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.488063097 CEST	54346	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.488488913 CEST	54346	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.488507986 CEST	443	54346	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.546427965 CEST	443	54342	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.546508074 CEST	443	54342	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.546633959 CEST	54342	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.546794891 CEST	54342	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.546812057 CEST	443	54342	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.546823978 CEST	54342	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.546829939 CEST	443	54342	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.553056955 CEST	54347	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.553096056 CEST	443	54347	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.553158045 CEST	54347	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.553540945 CEST	54347	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.553555012 CEST	443	54347	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.818934917 CEST	443	54343	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.820135117 CEST	54343	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.820158958 CEST	443	54343	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.821746111 CEST	54343	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.821754932 CEST	443	54343	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.919584990 CEST	443	54343	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.919620991 CEST	443	54343	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.919671059 CEST	443	54343	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.919734955 CEST	54343	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.919734955 CEST	54343	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.919878960 CEST	54343	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.919903994 CEST	443	54343	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.919917107 CEST	54343	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.919924974 CEST	443	54343	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.925021887 CEST	54348	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.925077915 CEST	443	54348	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.925230026 CEST	54348	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.925424099 CEST	54348	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.925436020 CEST	443	54348	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.973391056 CEST	443	54344	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.976378918 CEST	443	54345	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.993133068 CEST	54344	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.993179083 CEST	443	54344	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.994734049 CEST	54344	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.994760990 CEST	443	54344	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.995397091 CEST	54345	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.995441914 CEST	443	54345	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.996367931 CEST	54345	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:23.996381998 CEST	443	54345	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:23.998862028 CEST	54349	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:23.998914003 CEST	443	54349	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:23.998991966 CEST	54349	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:23.999932051 CEST	54349	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:23.999953985 CEST	443	54349	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:24.001765013 CEST	54350	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:24.001791000 CEST	443	54350	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:24.001841068 CEST	54350	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:24.003537893 CEST	54350	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:24.003554106 CEST	443	54350	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:24.093420982 CEST	443	54345	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.093489885 CEST	443	54345	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.093542099 CEST	443	54345	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.093585014 CEST	54345	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.093628883 CEST	54345	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.093857050 CEST	54345	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.093884945 CEST	443	54345	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.093923092 CEST	54345	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.093929052 CEST	443	54345	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.097507000 CEST	443	54344	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.097810984 CEST	443	54344	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.097888947 CEST	54344	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.098886967 CEST	54351	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.098929882 CEST	443	54351	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.099031925 CEST	54351	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.099172115 CEST	54344	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.099172115 CEST	54344	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.099189043 CEST	443	54344	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.099229097 CEST	443	54344	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.100806952 CEST	54351	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.100830078 CEST	443	54351	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.102679014 CEST	54352	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.102704048 CEST	443	54352	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.102787018 CEST	54352	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.102914095 CEST	54352	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.102926016 CEST	443	54352	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.135246038 CEST	443	54346	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.135940075 CEST	54346	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.135977030 CEST	443	54346	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.136784077 CEST	54346	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.136790037 CEST	443	54346	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.215325117 CEST	443	54347	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.215892076 CEST	54347	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.215917110 CEST	443	54347	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.216866970 CEST	54347	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.216875076 CEST	443	54347	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.237641096 CEST	443	54346	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.238038063 CEST	443	54346	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.238136053 CEST	54346	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.238204002 CEST	54346	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.238221884 CEST	443	54346	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.238234043 CEST	54346	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.238239050 CEST	443	54346	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.241437912 CEST	54353	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.241468906 CEST	443	54353	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.241622925 CEST	54353	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.241890907 CEST	54353	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.241921902 CEST	443	54353	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.318068981 CEST	443	54347	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.318233013 CEST	443	54347	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.318279028 CEST	443	54347	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.318311930 CEST	54347	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.318348885 CEST	54347	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.320008039 CEST	54347	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.320020914 CEST	443	54347	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.320034981 CEST	54347	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.320040941 CEST	443	54347	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.388187885 CEST	54354	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.388247967 CEST	443	54354	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.388314962 CEST	54354	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.392066956 CEST	54354	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.392085075 CEST	443	54354	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.581803083 CEST	443	54348	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.582391024 CEST	54348	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.582406998 CEST	443	54348	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.582786083 CEST	54348	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.582792044 CEST	443	54348	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.684056044 CEST	443	54348	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.688462973 CEST	443	54348	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.688594103 CEST	54348	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.688594103 CEST	54348	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.688594103 CEST	54348	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.691373110 CEST	54355	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.691425085 CEST	443	54355	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.691503048 CEST	54355	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.691660881 CEST	54355	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.691674948 CEST	443	54355	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.751501083 CEST	443	54351	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.751502037 CEST	443	54352	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.751959085 CEST	54352	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.751986027 CEST	443	54352	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.752461910 CEST	54352	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.752468109 CEST	443	54352	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.752475977 CEST	54351	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.752496004 CEST	443	54351	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.752850056 CEST	54351	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.752856970 CEST	443	54351	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.792956114 CEST	443	54349	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:24.793040991 CEST	54349	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:24.795037031 CEST	54349	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:24.795047045 CEST	443	54349	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:24.795088053 CEST	443	54350	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:24.795156002 CEST	54350	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:24.795293093 CEST	443	54349	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:24.796736002 CEST	54350	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:24.796742916 CEST	443	54350	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:24.796860933 CEST	54349	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:24.796991110 CEST	54349	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:24.796998024 CEST	443	54349	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:24.797041893 CEST	443	54350	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:24.797384977 CEST	54349	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:24.798505068 CEST	54350	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:24.798551083 CEST	54350	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:24.798556089 CEST	443	54350	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:24.798652887 CEST	54350	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:24.839411974 CEST	443	54350	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:24.839411974 CEST	443	54349	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:24.852655888 CEST	443	54351	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.852675915 CEST	443	54351	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.852761984 CEST	54351	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.852777958 CEST	443	54351	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.853027105 CEST	443	54351	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.853050947 CEST	443	54352	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.853085995 CEST	443	54352	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.853111982 CEST	54351	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.853137016 CEST	54352	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.853158951 CEST	443	54352	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.853351116 CEST	54351	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.853367090 CEST	443	54351	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.853384972 CEST	54351	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.853390932 CEST	443	54351	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.853835106 CEST	443	54352	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.853893995 CEST	54352	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.855309010 CEST	54352	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.855319977 CEST	443	54352	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.855339050 CEST	54352	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.855345011 CEST	443	54352	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.857646942 CEST	54356	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.857681990 CEST	443	54356	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.857832909 CEST	54357	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.857861996 CEST	443	54357	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.857873917 CEST	54356	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.857911110 CEST	54357	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.858017921 CEST	54356	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.858031988 CEST	443	54356	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.858052969 CEST	54357	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.858071089 CEST	443	54357	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.895817995 CEST	443	54353	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.896337032 CEST	54353	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.896351099 CEST	443	54353	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.896981955 CEST	54353	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.896989107 CEST	443	54353	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.971487045 CEST	443	54350	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:24.971577883 CEST	443	54350	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:24.971988916 CEST	54350	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:24.972065926 CEST	54350	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:24.972085953 CEST	443	54350	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:24.972135067 CEST	54350	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:24.973361015 CEST	443	54349	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:24.973524094 CEST	443	54349	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:24.973572969 CEST	54349	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:24.973787069 CEST	54349	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:24.973797083 CEST	443	54349	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:24.992670059 CEST	54348	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.992691040 CEST	443	54348	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.996987104 CEST	443	54353	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.997067928 CEST	443	54353	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.997124910 CEST	443	54353	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.997191906 CEST	54353	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.997729063 CEST	54353	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.997729063 CEST	54353	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:24.997752905 CEST	443	54353	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:24.997762918 CEST	443	54353	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.020457029 CEST	54358	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.020520926 CEST	443	54358	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.020818949 CEST	54358	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.020977974 CEST	54358	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.020998955 CEST	443	54358	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.053917885 CEST	443	54354	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.054502010 CEST	54354	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.054519892 CEST	443	54354	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.055740118 CEST	54354	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.055747032 CEST	443	54354	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.156795979 CEST	443	54354	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.157052040 CEST	443	54354	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.157196999 CEST	54354	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.158435106 CEST	54354	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.158435106 CEST	54354	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.158477068 CEST	443	54354	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.158488035 CEST	443	54354	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.163942099 CEST	54359	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.163969994 CEST	443	54359	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.164042950 CEST	54359	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.165112019 CEST	54359	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.165132046 CEST	443	54359	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.366978884 CEST	443	54355	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.368390083 CEST	54355	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.368416071 CEST	443	54355	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.369338036 CEST	54355	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.369344950 CEST	443	54355	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.472045898 CEST	443	54355	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.472440004 CEST	443	54355	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.472487926 CEST	443	54355	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.472512007 CEST	54355	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.472599030 CEST	54355	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.472894907 CEST	54355	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.472942114 CEST	443	54355	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.472973108 CEST	54355	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.472990036 CEST	443	54355	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.477860928 CEST	54360	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.477910042 CEST	443	54360	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.477993965 CEST	54360	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.478760958 CEST	54360	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.478779078 CEST	443	54360	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.519153118 CEST	443	54357	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.522356033 CEST	54357	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.522449970 CEST	443	54357	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.523070097 CEST	54357	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.523087978 CEST	443	54357	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.531281948 CEST	443	54356	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.532604933 CEST	54356	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.532627106 CEST	443	54356	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.534617901 CEST	54356	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.534622908 CEST	443	54356	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.627650023 CEST	443	54357	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.627847910 CEST	443	54357	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.627897024 CEST	443	54357	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.628036976 CEST	54357	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.628036976 CEST	54357	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.628139019 CEST	54357	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.628139019 CEST	54357	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.628184080 CEST	443	54357	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.628217936 CEST	443	54357	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.633483887 CEST	54361	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.633512020 CEST	443	54361	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.633724928 CEST	54361	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.634074926 CEST	54361	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.634094954 CEST	443	54361	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.638227940 CEST	443	54356	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.638358116 CEST	443	54356	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.638735056 CEST	54356	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.638844013 CEST	54356	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.638844013 CEST	54356	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.638861895 CEST	443	54356	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.638866901 CEST	443	54356	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.643172979 CEST	54362	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.643208027 CEST	443	54362	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.643342972 CEST	54362	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.643740892 CEST	54362	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.643763065 CEST	443	54362	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.670568943 CEST	443	54358	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.675170898 CEST	54358	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.675203085 CEST	443	54358	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.675780058 CEST	54358	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.675787926 CEST	443	54358	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.772629023 CEST	443	54358	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.772718906 CEST	443	54358	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.772819996 CEST	54358	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.773156881 CEST	54358	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.773186922 CEST	443	54358	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.773216009 CEST	54358	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.773230076 CEST	443	54358	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.777482033 CEST	54363	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.777528048 CEST	443	54363	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.777636051 CEST	54363	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.777867079 CEST	54363	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.777884960 CEST	443	54363	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.813040018 CEST	443	54359	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.814043045 CEST	54359	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.814058065 CEST	443	54359	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.815409899 CEST	54359	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.815413952 CEST	443	54359	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.912662983 CEST	443	54359	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.912761927 CEST	443	54359	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.912813902 CEST	443	54359	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.912885904 CEST	54359	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.913223982 CEST	54359	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.913223982 CEST	54359	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.913238049 CEST	443	54359	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.913245916 CEST	443	54359	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.917819977 CEST	54364	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.917867899 CEST	443	54364	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:25.917932034 CEST	54364	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.918174982 CEST	54364	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:25.918190002 CEST	443	54364	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.165518045 CEST	443	57113	23.1.237.91	192.168.2.5
Oct 13, 2024 18:09:26.165623903 CEST	57113	443	192.168.2.5	23.1.237.91
Oct 13, 2024 18:09:26.166568995 CEST	443	54360	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.167114973 CEST	54360	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.167145967 CEST	443	54360	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.167603016 CEST	54360	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.167613983 CEST	443	54360	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.277472019 CEST	443	54360	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.277694941 CEST	443	54360	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.277781010 CEST	54360	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.277826071 CEST	54360	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.277826071 CEST	54360	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.277848959 CEST	443	54360	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.277859926 CEST	443	54360	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.280873060 CEST	54365	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.280913115 CEST	443	54365	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.280989885 CEST	54365	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.281161070 CEST	54365	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.281172037 CEST	443	54365	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.282877922 CEST	443	54361	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.283281088 CEST	54361	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.283298016 CEST	443	54361	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.284077883 CEST	54361	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.284085035 CEST	443	54361	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.319675922 CEST	443	54362	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.320189953 CEST	54362	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.320202112 CEST	443	54362	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.320806980 CEST	54362	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.320811033 CEST	443	54362	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.386058092 CEST	443	54361	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.386152029 CEST	443	54361	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.386209011 CEST	443	54361	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.386208057 CEST	54361	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.386286974 CEST	54361	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.386476040 CEST	54361	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.386476040 CEST	54361	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.386492968 CEST	443	54361	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.386502028 CEST	443	54361	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.393752098 CEST	54366	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.393791914 CEST	443	54366	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.393868923 CEST	54366	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.394004107 CEST	54366	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.394020081 CEST	443	54366	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.428613901 CEST	443	54362	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.428678036 CEST	443	54362	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.428834915 CEST	54362	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.428961039 CEST	54362	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.428961039 CEST	54362	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.428981066 CEST	443	54362	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.428992033 CEST	443	54362	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.431718111 CEST	443	54363	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.432168007 CEST	54363	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.432194948 CEST	443	54363	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.432626009 CEST	54363	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.432631969 CEST	443	54363	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.432672024 CEST	54367	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.432713985 CEST	443	54367	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.432785034 CEST	54367	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.432907104 CEST	54367	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.432920933 CEST	443	54367	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.533149004 CEST	443	54363	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.533312082 CEST	443	54363	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.533364058 CEST	54363	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.533858061 CEST	54363	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.533881903 CEST	443	54363	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.533895016 CEST	54363	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.533904076 CEST	443	54363	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.538727999 CEST	54368	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.538772106 CEST	443	54368	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.538851023 CEST	54368	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.539043903 CEST	54368	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.539057970 CEST	443	54368	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.564985037 CEST	443	54364	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.565700054 CEST	54364	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.565722942 CEST	443	54364	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.566237926 CEST	54364	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.566242933 CEST	443	54364	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.666147947 CEST	443	54364	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.666225910 CEST	443	54364	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.666269064 CEST	54364	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.666287899 CEST	443	54364	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.666302919 CEST	443	54364	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.666357994 CEST	54364	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.666539907 CEST	54364	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.666553974 CEST	443	54364	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.666589022 CEST	54364	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.666594982 CEST	443	54364	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.669593096 CEST	54369	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.669604063 CEST	443	54369	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.669665098 CEST	54369	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.669846058 CEST	54369	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.669851065 CEST	443	54369	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.944255114 CEST	443	54365	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.944745064 CEST	54365	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.944771051 CEST	443	54365	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:26.945249081 CEST	54365	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:26.945255041 CEST	443	54365	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.048716068 CEST	443	54365	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.048777103 CEST	443	54365	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.049022913 CEST	54365	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.049060106 CEST	54365	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.049078941 CEST	443	54365	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.049091101 CEST	54365	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.049097061 CEST	443	54365	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.052038908 CEST	54370	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.052084923 CEST	443	54370	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.052189112 CEST	54370	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.052345037 CEST	54370	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.052359104 CEST	443	54370	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.082444906 CEST	443	54366	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.082942963 CEST	54366	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.082971096 CEST	443	54366	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.083410978 CEST	54366	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.083415985 CEST	443	54366	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.085078955 CEST	443	54367	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.085387945 CEST	54367	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.085433006 CEST	443	54367	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.085808039 CEST	54367	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.085813999 CEST	443	54367	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.187361956 CEST	443	54367	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.187410116 CEST	443	54367	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.187463999 CEST	443	54367	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.187510967 CEST	54367	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.187558889 CEST	54367	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.187705994 CEST	54367	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.187728882 CEST	443	54367	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.187735081 CEST	54367	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.187741041 CEST	443	54367	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.190335035 CEST	443	54366	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.190457106 CEST	443	54366	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.190525055 CEST	54366	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.190632105 CEST	54366	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.190655947 CEST	443	54366	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.190897942 CEST	54371	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.190927029 CEST	443	54371	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.191062927 CEST	54371	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.191203117 CEST	54371	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.191219091 CEST	443	54371	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.193038940 CEST	54372	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.193140030 CEST	443	54372	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.193217039 CEST	54372	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.193355083 CEST	54372	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.193372965 CEST	443	54372	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.227018118 CEST	443	54368	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.230534077 CEST	54368	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.230546951 CEST	443	54368	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.230964899 CEST	54368	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.230971098 CEST	443	54368	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.329447031 CEST	443	54369	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.329966068 CEST	54369	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.329993010 CEST	443	54369	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.330429077 CEST	54369	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.330435038 CEST	443	54369	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.334064960 CEST	443	54368	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.334177017 CEST	443	54368	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.334481001 CEST	54368	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.334522009 CEST	54368	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.334542990 CEST	443	54368	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.334549904 CEST	54368	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.334556103 CEST	443	54368	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.341558933 CEST	54373	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.341600895 CEST	443	54373	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.341819048 CEST	54373	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.341819048 CEST	54373	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.341851950 CEST	443	54373	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.431862116 CEST	443	54369	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.431914091 CEST	443	54369	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.431957960 CEST	443	54369	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.432015896 CEST	54369	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.438569069 CEST	54369	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.438580990 CEST	443	54369	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.438610077 CEST	54369	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.438615084 CEST	443	54369	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.441962957 CEST	54374	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.441992998 CEST	443	54374	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.442095041 CEST	54374	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.442220926 CEST	54374	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.442234039 CEST	443	54374	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.726197958 CEST	443	54370	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.726766109 CEST	54370	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.726793051 CEST	443	54370	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.727334976 CEST	54370	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.727339983 CEST	443	54370	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.830780029 CEST	443	54370	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.830847025 CEST	443	54370	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.830938101 CEST	54370	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.831193924 CEST	54370	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.831208944 CEST	443	54370	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.834240913 CEST	54375	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.834290028 CEST	443	54375	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.834399939 CEST	54375	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.834608078 CEST	54375	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.834623098 CEST	443	54375	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.838041067 CEST	443	54371	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.838697910 CEST	54371	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.838726997 CEST	443	54371	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.839135885 CEST	54371	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.839142084 CEST	443	54371	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.841049910 CEST	443	54372	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.841418028 CEST	54372	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.841433048 CEST	443	54372	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.841784954 CEST	54372	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.841789007 CEST	443	54372	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.938890934 CEST	443	54371	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.939018965 CEST	443	54371	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.939198017 CEST	54371	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.939316988 CEST	54371	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.939335108 CEST	443	54371	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.939346075 CEST	54371	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.939351082 CEST	443	54371	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.941826105 CEST	443	54372	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.942038059 CEST	443	54372	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.942084074 CEST	443	54372	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.942100048 CEST	54372	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.942145109 CEST	54372	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.942281008 CEST	54376	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.942318916 CEST	54372	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.942318916 CEST	54372	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.942327976 CEST	443	54376	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.942341089 CEST	443	54372	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.942342043 CEST	443	54372	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.942414045 CEST	54376	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.942832947 CEST	54376	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.942850113 CEST	443	54376	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.944509029 CEST	54377	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.944540977 CEST	443	54377	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:27.944871902 CEST	54377	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.945019960 CEST	54377	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:27.945039988 CEST	443	54377	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.015674114 CEST	443	54373	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.016205072 CEST	54373	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.016228914 CEST	443	54373	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.016648054 CEST	54373	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.016659975 CEST	443	54373	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.087892056 CEST	443	54374	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.088407040 CEST	54374	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.088418961 CEST	443	54374	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.088908911 CEST	54374	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.088913918 CEST	443	54374	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.120162010 CEST	443	54373	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.120222092 CEST	443	54373	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.120301008 CEST	54373	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.120512009 CEST	54373	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.120527029 CEST	443	54373	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.120768070 CEST	54373	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.120774984 CEST	443	54373	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.123734951 CEST	54378	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.123820066 CEST	443	54378	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.123950005 CEST	54378	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.124166012 CEST	54378	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.124203920 CEST	443	54378	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.209943056 CEST	443	54374	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.210021973 CEST	443	54374	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.210093021 CEST	54374	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.210216999 CEST	54374	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.210216999 CEST	54374	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.210233927 CEST	443	54374	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.210242987 CEST	443	54374	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.213114977 CEST	54379	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.213157892 CEST	443	54379	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.213228941 CEST	54379	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.213392973 CEST	54379	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.213409901 CEST	443	54379	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.523161888 CEST	443	54375	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.523747921 CEST	54375	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.523777008 CEST	443	54375	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.524147034 CEST	54375	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.524163008 CEST	443	54375	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.623630047 CEST	443	54377	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.624160051 CEST	54377	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.624232054 CEST	443	54377	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.624288082 CEST	443	54376	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.624596119 CEST	54377	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.624612093 CEST	443	54377	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.624716997 CEST	54376	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.624731064 CEST	443	54376	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.625176907 CEST	54376	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.625181913 CEST	443	54376	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.628140926 CEST	443	54375	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.628211021 CEST	443	54375	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.628295898 CEST	54375	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.628309965 CEST	443	54375	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.628370047 CEST	54375	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.628451109 CEST	54375	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.628470898 CEST	443	54375	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.628485918 CEST	54375	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.628490925 CEST	443	54375	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.631052017 CEST	54380	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.631122112 CEST	443	54380	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.631227970 CEST	54380	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.631370068 CEST	54380	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.631412983 CEST	443	54380	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.725802898 CEST	443	54377	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.725892067 CEST	443	54377	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.725991964 CEST	54377	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.726028919 CEST	443	54377	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.726090908 CEST	54377	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.726150036 CEST	54377	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.726200104 CEST	443	54377	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.726232052 CEST	54377	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.726248980 CEST	443	54377	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.728984118 CEST	54381	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.729024887 CEST	443	54381	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.729094028 CEST	443	54376	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.729114056 CEST	54381	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.729299068 CEST	54381	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.729314089 CEST	443	54381	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.729459047 CEST	443	54376	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.729525089 CEST	54376	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.729548931 CEST	54376	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.729574919 CEST	54376	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.729576111 CEST	443	54376	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.729583025 CEST	443	54376	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.731800079 CEST	54382	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.731811047 CEST	443	54382	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.731916904 CEST	54382	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.731987953 CEST	54382	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.732001066 CEST	443	54382	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.774456024 CEST	443	54378	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.774976969 CEST	54378	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.774993896 CEST	443	54378	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.775496960 CEST	54378	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.775501966 CEST	443	54378	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.861548901 CEST	443	54379	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.862060070 CEST	54379	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.862076998 CEST	443	54379	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.862654924 CEST	54379	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.862662077 CEST	443	54379	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.877346992 CEST	443	54378	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.877650976 CEST	443	54378	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.877717972 CEST	54378	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.877754927 CEST	54378	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.877754927 CEST	54378	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.877774954 CEST	443	54378	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.877779961 CEST	443	54378	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.880417109 CEST	54383	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.880497932 CEST	443	54383	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.880624056 CEST	54383	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.880779982 CEST	54383	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.880826950 CEST	443	54383	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.962282896 CEST	443	54379	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.962372065 CEST	443	54379	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.962498903 CEST	54379	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.962850094 CEST	54379	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.962881088 CEST	443	54379	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.962898016 CEST	54379	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.962917089 CEST	443	54379	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.966463089 CEST	54384	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.966494083 CEST	443	54384	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:28.966581106 CEST	54384	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.966917992 CEST	54384	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:28.966933012 CEST	443	54384	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.294806004 CEST	443	54380	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.295443058 CEST	54380	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.295470953 CEST	443	54380	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.295876980 CEST	54380	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.295892000 CEST	443	54380	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.380414009 CEST	443	54382	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.381015062 CEST	54382	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.381031990 CEST	443	54382	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.381407976 CEST	54382	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.381414890 CEST	443	54382	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.390721083 CEST	443	54381	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.391089916 CEST	54381	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.391110897 CEST	443	54381	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.391515017 CEST	54381	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.391530991 CEST	443	54381	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.397891998 CEST	443	54380	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.398116112 CEST	443	54380	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.398190022 CEST	54380	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.398236990 CEST	54380	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.398255110 CEST	443	54380	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.398264885 CEST	54380	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.398271084 CEST	443	54380	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.401283026 CEST	54385	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.401329994 CEST	443	54385	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.401401043 CEST	54385	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.401684046 CEST	54385	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.401699066 CEST	443	54385	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.481040001 CEST	443	54382	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.481239080 CEST	443	54382	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.481340885 CEST	54382	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.481558084 CEST	54382	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.481558084 CEST	54382	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.481570959 CEST	443	54382	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.481579065 CEST	443	54382	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.484472036 CEST	54386	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.484503984 CEST	443	54386	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.484802961 CEST	54386	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.485007048 CEST	54386	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.485022068 CEST	443	54386	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.494050980 CEST	443	54381	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.494083881 CEST	443	54381	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.494127035 CEST	443	54381	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.494144917 CEST	54381	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.494242907 CEST	54381	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.494965076 CEST	54381	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.494965076 CEST	54381	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.494987011 CEST	443	54381	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.494998932 CEST	443	54381	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.500976086 CEST	54387	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.501005888 CEST	443	54387	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.501161098 CEST	54387	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.501255989 CEST	54387	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.501269102 CEST	443	54387	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.530515909 CEST	443	54383	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.530915976 CEST	54383	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.530944109 CEST	443	54383	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.531344891 CEST	54383	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.531353951 CEST	443	54383	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.622534037 CEST	443	54384	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.623085022 CEST	54384	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.623100042 CEST	443	54384	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.623604059 CEST	54384	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.623609066 CEST	443	54384	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.631783009 CEST	443	54383	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.631928921 CEST	443	54383	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.631975889 CEST	443	54383	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.632041931 CEST	54383	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.632157087 CEST	54383	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.632174969 CEST	443	54383	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.632189989 CEST	54383	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.632195950 CEST	443	54383	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.636715889 CEST	54388	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.636759996 CEST	443	54388	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.636833906 CEST	54388	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.636991978 CEST	54388	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.637003899 CEST	443	54388	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.751632929 CEST	443	54384	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.751739979 CEST	443	54384	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.751817942 CEST	54384	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.752156973 CEST	54384	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.752162933 CEST	443	54384	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.757010937 CEST	54389	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.757033110 CEST	443	54389	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:29.757288933 CEST	54389	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.757496119 CEST	54389	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:29.757510900 CEST	443	54389	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.079286098 CEST	443	54385	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.083585978 CEST	54385	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.083616018 CEST	443	54385	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.084233046 CEST	54385	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.084238052 CEST	443	54385	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.147485018 CEST	443	54386	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.147891045 CEST	54386	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.147908926 CEST	443	54386	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.171186924 CEST	54386	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.171204090 CEST	443	54386	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.177664042 CEST	443	54387	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.178550005 CEST	54387	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.178560019 CEST	443	54387	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.178849936 CEST	54387	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.178853989 CEST	443	54387	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.185633898 CEST	443	54385	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.185671091 CEST	443	54385	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.185728073 CEST	443	54385	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.185779095 CEST	54385	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.186080933 CEST	54385	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.186103106 CEST	443	54385	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.186110020 CEST	54385	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.186115026 CEST	443	54385	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.191040039 CEST	54390	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.191090107 CEST	443	54390	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.191531897 CEST	54390	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.191776037 CEST	54390	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.191793919 CEST	443	54390	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.269860029 CEST	443	54386	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.269932985 CEST	443	54386	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.269993067 CEST	54386	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.270492077 CEST	54386	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.270514011 CEST	443	54386	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.270526886 CEST	54386	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.270533085 CEST	443	54386	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.276195049 CEST	54391	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.276249886 CEST	443	54391	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.276335955 CEST	54391	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.276612043 CEST	54391	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.276628971 CEST	443	54391	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.283340931 CEST	443	54387	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.283432961 CEST	443	54387	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.283528090 CEST	54387	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.283914089 CEST	54387	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.283914089 CEST	54387	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.283929110 CEST	443	54387	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.283938885 CEST	443	54387	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.286288023 CEST	443	54388	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.287606955 CEST	54392	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.287646055 CEST	443	54392	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.287795067 CEST	54392	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.288150072 CEST	54388	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.288158894 CEST	443	54388	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.289448023 CEST	54388	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.289452076 CEST	443	54388	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.289694071 CEST	54392	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.289711952 CEST	443	54392	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.387583971 CEST	443	54388	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.387837887 CEST	443	54388	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.387912035 CEST	54388	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.388410091 CEST	54388	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.388426065 CEST	443	54388	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.388461113 CEST	54388	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.388467073 CEST	443	54388	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.392153978 CEST	54393	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.392190933 CEST	443	54393	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.392278910 CEST	54393	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.392519951 CEST	54393	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.392530918 CEST	443	54393	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.405807018 CEST	443	54389	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.406616926 CEST	54389	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.406667948 CEST	443	54389	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.407685041 CEST	54389	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.407691002 CEST	443	54389	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.507333040 CEST	443	54389	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.507421017 CEST	443	54389	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.507474899 CEST	54389	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.507478952 CEST	443	54389	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.507652998 CEST	54389	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.530556917 CEST	54389	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.530569077 CEST	443	54389	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.535397053 CEST	54394	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.535433054 CEST	443	54394	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.535512924 CEST	54394	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.535721064 CEST	54394	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.535733938 CEST	443	54394	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.846582890 CEST	443	54390	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.847301006 CEST	54390	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.847332954 CEST	443	54390	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:30.847868919 CEST	54390	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:30.847875118 CEST	443	54390	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.200541973 CEST	443	54390	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.200603008 CEST	443	54390	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.200720072 CEST	54390	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.203008890 CEST	443	54391	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.203593969 CEST	443	54392	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.219465017 CEST	54390	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.219497919 CEST	443	54390	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.223058939 CEST	54391	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.223076105 CEST	443	54391	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.223637104 CEST	54391	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.223643064 CEST	443	54391	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.224088907 CEST	54392	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.224109888 CEST	443	54392	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.225171089 CEST	54392	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.225183964 CEST	443	54392	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.227579117 CEST	54395	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.227612019 CEST	443	54395	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.227708101 CEST	54395	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.228406906 CEST	54395	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.228419065 CEST	443	54395	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.322082043 CEST	443	54392	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.322206974 CEST	443	54392	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.322273970 CEST	54392	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.323843956 CEST	443	54391	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.323940039 CEST	443	54391	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.323982000 CEST	54391	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.344294071 CEST	54392	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.344294071 CEST	54392	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.344324112 CEST	443	54392	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.344333887 CEST	443	54392	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.344638109 CEST	54391	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.344652891 CEST	443	54391	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.344690084 CEST	54391	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.344696045 CEST	443	54391	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.349802971 CEST	54396	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.349839926 CEST	443	54396	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.349983931 CEST	54396	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.352135897 CEST	54396	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.352150917 CEST	443	54396	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.354159117 CEST	54397	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.354202986 CEST	443	54397	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.354269981 CEST	54397	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.354928017 CEST	54397	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.354939938 CEST	443	54397	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.388044119 CEST	443	54394	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.390916109 CEST	443	54393	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.399791956 CEST	54394	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.399810076 CEST	443	54394	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.400983095 CEST	54394	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.400988102 CEST	443	54394	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.401659012 CEST	54393	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.401664972 CEST	443	54393	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.402445078 CEST	54393	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.402451038 CEST	443	54393	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.497699976 CEST	443	54394	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.497932911 CEST	443	54394	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.498012066 CEST	54394	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.498430014 CEST	54394	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.498461008 CEST	443	54394	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.498493910 CEST	54394	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.498509884 CEST	443	54394	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.501189947 CEST	443	54393	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.501251936 CEST	443	54393	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.501316071 CEST	54393	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.502006054 CEST	54398	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.502017975 CEST	443	54398	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.502126932 CEST	54398	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.502263069 CEST	54393	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.502278090 CEST	443	54393	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.502305984 CEST	54393	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.502319098 CEST	443	54393	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.505058050 CEST	54399	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.505084038 CEST	443	54399	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.505230904 CEST	54399	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.505496979 CEST	54398	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.505507946 CEST	443	54398	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.505852938 CEST	54399	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.505881071 CEST	443	54399	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.889360905 CEST	443	54395	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.906410933 CEST	54395	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.906431913 CEST	443	54395	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:31.907365084 CEST	54395	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:31.907371044 CEST	443	54395	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.004430056 CEST	443	54395	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.004586935 CEST	443	54395	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.004710913 CEST	54395	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.004745007 CEST	54395	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.004766941 CEST	443	54395	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.004801035 CEST	54395	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.004807949 CEST	443	54395	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.005773067 CEST	443	54396	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.006283045 CEST	54396	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.006350994 CEST	443	54396	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.006772041 CEST	54396	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.006788015 CEST	443	54396	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.007611036 CEST	54400	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.007652998 CEST	443	54400	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.007786989 CEST	54400	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.007986069 CEST	54400	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.008004904 CEST	443	54400	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.035979986 CEST	443	54397	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.036443949 CEST	54397	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.036459923 CEST	443	54397	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.036922932 CEST	54397	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.036928892 CEST	443	54397	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.107292891 CEST	443	54396	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.107707024 CEST	443	54396	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.107777119 CEST	54396	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.107871056 CEST	54396	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.107871056 CEST	54396	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.107919931 CEST	443	54396	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.107949018 CEST	443	54396	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.110804081 CEST	54401	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.110816002 CEST	443	54401	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.110877991 CEST	54401	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.111047029 CEST	54401	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.111057043 CEST	443	54401	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.140842915 CEST	443	54397	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.140872955 CEST	443	54397	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.140918016 CEST	443	54397	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.140918970 CEST	54397	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.140961885 CEST	54397	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.141097069 CEST	54397	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.141112089 CEST	443	54397	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.141123056 CEST	54397	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.141129017 CEST	443	54397	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.143682957 CEST	54402	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.143696070 CEST	443	54402	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.143770933 CEST	54402	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.143951893 CEST	54402	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.143959045 CEST	443	54402	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.152702093 CEST	443	54398	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.153099060 CEST	54398	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.153099060 CEST	443	54399	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.153110981 CEST	443	54398	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.153368950 CEST	54399	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.153387070 CEST	443	54399	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.153774977 CEST	54399	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.153786898 CEST	443	54399	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.153866053 CEST	54398	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.153872967 CEST	443	54398	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.256170988 CEST	443	54398	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.256223917 CEST	443	54398	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.256305933 CEST	54398	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.256478071 CEST	54398	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.256493092 CEST	443	54398	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.256501913 CEST	54398	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.256509066 CEST	443	54398	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.259738922 CEST	54403	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.259768009 CEST	443	54403	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.259843111 CEST	54403	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.260004997 CEST	54403	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.260021925 CEST	443	54403	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.261627913 CEST	443	54399	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.263078928 CEST	443	54399	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.263132095 CEST	443	54399	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.263159990 CEST	54399	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.263196945 CEST	54399	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.263237953 CEST	54399	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.263256073 CEST	443	54399	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.263288021 CEST	54399	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.263300896 CEST	443	54399	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.265661001 CEST	54404	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.265698910 CEST	443	54404	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.265764952 CEST	54404	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.265896082 CEST	54404	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.265904903 CEST	443	54404	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.656193972 CEST	443	54400	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.657417059 CEST	54400	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.657437086 CEST	443	54400	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.658989906 CEST	54400	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.658997059 CEST	443	54400	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.758783102 CEST	443	54400	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.759020090 CEST	443	54400	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.759077072 CEST	54400	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.759332895 CEST	54400	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.759346962 CEST	443	54400	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.759906054 CEST	443	54401	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.761563063 CEST	54401	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.761578083 CEST	443	54401	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.762509108 CEST	54401	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.762514114 CEST	443	54401	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.765439034 CEST	54405	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.765471935 CEST	443	54405	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.765858889 CEST	54405	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.765958071 CEST	54405	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.765969992 CEST	443	54405	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.832011938 CEST	443	54402	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.833120108 CEST	54402	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.833131075 CEST	443	54402	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.834664106 CEST	54402	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.834669113 CEST	443	54402	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.869582891 CEST	443	54401	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.869606018 CEST	443	54401	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.869647980 CEST	443	54401	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.869657040 CEST	54401	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.869708061 CEST	54401	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.869858980 CEST	54401	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.869870901 CEST	443	54401	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.869882107 CEST	54401	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.869887114 CEST	443	54401	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.875204086 CEST	54406	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.875228882 CEST	443	54406	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.875407934 CEST	54406	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.875641108 CEST	54406	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.875648975 CEST	443	54406	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.908438921 CEST	443	54403	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.908967018 CEST	54403	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.908987999 CEST	443	54403	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.909657955 CEST	54403	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.909663916 CEST	443	54403	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.913583040 CEST	443	54404	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.936708927 CEST	54404	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.936765909 CEST	443	54404	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.937724113 CEST	54404	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.937753916 CEST	443	54404	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.938132048 CEST	443	54402	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.938241005 CEST	443	54402	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.938293934 CEST	54402	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.938504934 CEST	54402	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.938513994 CEST	443	54402	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.938524961 CEST	54402	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.938529968 CEST	443	54402	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.943850040 CEST	54407	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.943897963 CEST	443	54407	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:32.943988085 CEST	54407	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.944190979 CEST	54407	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:32.944205046 CEST	443	54407	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.010435104 CEST	443	54403	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.010514021 CEST	443	54403	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.010605097 CEST	54403	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.010977030 CEST	54403	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.010993958 CEST	443	54403	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.011007071 CEST	54403	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.011015892 CEST	443	54403	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.015662909 CEST	54408	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.015706062 CEST	443	54408	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.015768051 CEST	54408	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.015894890 CEST	54408	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.015912056 CEST	443	54408	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.034610033 CEST	443	54404	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.034856081 CEST	443	54404	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.034919024 CEST	54404	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.035000086 CEST	54404	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.035008907 CEST	443	54404	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.035017967 CEST	54404	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.035022974 CEST	443	54404	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.038013935 CEST	54409	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.038058996 CEST	443	54409	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.038156986 CEST	54409	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.038301945 CEST	54409	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.038320065 CEST	443	54409	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.432950020 CEST	443	54405	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.433368921 CEST	54405	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.433382988 CEST	443	54405	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.433867931 CEST	54405	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.433875084 CEST	443	54405	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.536614895 CEST	443	54405	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.537065029 CEST	443	54405	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.537102938 CEST	443	54405	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.537158966 CEST	54405	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.537180901 CEST	54405	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.537236929 CEST	54405	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.537236929 CEST	54405	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.537256956 CEST	443	54405	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.537266970 CEST	443	54405	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.540296078 CEST	54410	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.540338993 CEST	443	54410	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.540407896 CEST	54410	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.540610075 CEST	54410	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.540627003 CEST	443	54410	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.554312944 CEST	443	54406	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.554722071 CEST	54406	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.554730892 CEST	443	54406	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.555067062 CEST	54406	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.555071115 CEST	443	54406	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.635040998 CEST	443	54407	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.635464907 CEST	54407	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.635487080 CEST	443	54407	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.635926008 CEST	54407	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.635931015 CEST	443	54407	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.659497976 CEST	443	54406	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.662235975 CEST	443	54406	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.662302971 CEST	54406	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.662358046 CEST	54406	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.662358046 CEST	54406	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.662367105 CEST	443	54406	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.662374973 CEST	443	54406	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.664885998 CEST	54411	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.664935112 CEST	443	54411	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.665052891 CEST	54411	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.665153027 CEST	54411	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.665169954 CEST	443	54411	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.676412106 CEST	443	54408	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.676731110 CEST	54408	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.676768064 CEST	443	54408	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.677113056 CEST	54408	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.677126884 CEST	443	54408	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.694144964 CEST	443	54409	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.694443941 CEST	54409	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.694454908 CEST	443	54409	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.694854975 CEST	54409	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.694860935 CEST	443	54409	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.742292881 CEST	443	54407	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.742363930 CEST	443	54407	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.742413998 CEST	54407	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.742645979 CEST	54407	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.742651939 CEST	443	54407	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.742660999 CEST	54407	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.742665052 CEST	443	54407	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.744759083 CEST	54412	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.744807959 CEST	443	54412	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.744875908 CEST	54412	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.745029926 CEST	54412	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.745045900 CEST	443	54412	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.788317919 CEST	443	54408	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.788341045 CEST	443	54408	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.788392067 CEST	54408	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.788404942 CEST	443	54408	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.788569927 CEST	54408	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.788569927 CEST	54408	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.788583040 CEST	443	54408	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.788737059 CEST	443	54408	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.788767099 CEST	443	54408	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.789064884 CEST	54408	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.790793896 CEST	54413	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.790815115 CEST	443	54413	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.790887117 CEST	54413	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.791014910 CEST	54413	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.791029930 CEST	443	54413	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.796681881 CEST	443	54409	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.796736002 CEST	443	54409	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.796852112 CEST	54409	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.796878099 CEST	54409	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.796890974 CEST	443	54409	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.796900988 CEST	54409	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.796907902 CEST	443	54409	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.798769951 CEST	54414	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.798779011 CEST	443	54414	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:33.799014091 CEST	54414	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.799124002 CEST	54414	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:33.799137115 CEST	443	54414	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.206423998 CEST	443	54410	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.206907034 CEST	54410	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.206937075 CEST	443	54410	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.207393885 CEST	54410	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.207398891 CEST	443	54410	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.309655905 CEST	443	54410	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.309678078 CEST	443	54410	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.309730053 CEST	54410	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.309741974 CEST	443	54410	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.309786081 CEST	443	54410	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.309838057 CEST	54410	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.309925079 CEST	54410	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.309935093 CEST	443	54410	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.309959888 CEST	54410	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.309964895 CEST	443	54410	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.312606096 CEST	54415	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.312650919 CEST	443	54415	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.312725067 CEST	54415	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.312880993 CEST	54415	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.312894106 CEST	443	54415	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.314630985 CEST	443	54411	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.315035105 CEST	54411	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.315052032 CEST	443	54411	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.315402031 CEST	54411	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.315407991 CEST	443	54411	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.398258924 CEST	443	54412	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.398613930 CEST	54412	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.398623943 CEST	443	54412	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.399024963 CEST	54412	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.399030924 CEST	443	54412	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.415544033 CEST	443	54411	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.415565014 CEST	443	54411	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.415611982 CEST	54411	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.415621996 CEST	443	54411	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.415699005 CEST	443	54411	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.415744066 CEST	54411	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.415873051 CEST	54411	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.415889978 CEST	443	54411	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.415894985 CEST	54411	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.415900946 CEST	443	54411	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.418242931 CEST	54416	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.418272972 CEST	443	54416	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.418518066 CEST	54416	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.418628931 CEST	54416	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.418637991 CEST	443	54416	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.481874943 CEST	443	54413	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.482218981 CEST	54413	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.482228041 CEST	443	54413	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.482587099 CEST	54413	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.482593060 CEST	443	54413	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.496045113 CEST	443	54414	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.496417046 CEST	54414	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.496426105 CEST	443	54414	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.496834040 CEST	54414	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.496840000 CEST	443	54414	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.500736952 CEST	443	54412	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.500755072 CEST	443	54412	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.500822067 CEST	54412	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.500838995 CEST	443	54412	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.500978947 CEST	54412	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.500997066 CEST	443	54412	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.501028061 CEST	54412	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.501185894 CEST	443	54412	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.501219988 CEST	443	54412	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.501295090 CEST	54412	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.503040075 CEST	54417	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.503076077 CEST	443	54417	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.503161907 CEST	54417	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.503288031 CEST	54417	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.503302097 CEST	443	54417	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.584291935 CEST	443	54413	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.584333897 CEST	443	54413	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.584398985 CEST	54413	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.584408045 CEST	443	54413	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.584640980 CEST	54413	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.584640980 CEST	54413	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.584651947 CEST	443	54413	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.584832907 CEST	443	54413	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.584861040 CEST	443	54413	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.584955931 CEST	54413	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.587198019 CEST	54418	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.587209940 CEST	443	54418	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.587452888 CEST	54418	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.587604046 CEST	54418	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.587615967 CEST	443	54418	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.603102922 CEST	443	54414	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.603157043 CEST	443	54414	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.603231907 CEST	54414	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.603367090 CEST	54414	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.603367090 CEST	54414	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.603374004 CEST	443	54414	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.603382111 CEST	443	54414	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.606164932 CEST	54419	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.606178999 CEST	443	54419	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.606306076 CEST	54419	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.606487036 CEST	54419	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.606498003 CEST	443	54419	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.959856033 CEST	443	54415	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.960321903 CEST	54415	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.960386992 CEST	443	54415	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:34.960755110 CEST	54415	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:34.960771084 CEST	443	54415	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.063215971 CEST	443	54415	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.063626051 CEST	443	54415	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.063730001 CEST	54415	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.063781977 CEST	54415	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.063782930 CEST	54415	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.063817024 CEST	443	54415	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.063839912 CEST	443	54415	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.066317081 CEST	54420	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.066353083 CEST	443	54420	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.066425085 CEST	54420	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.066564083 CEST	54420	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.066571951 CEST	443	54420	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.097601891 CEST	443	54416	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.098505974 CEST	54416	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.098519087 CEST	443	54416	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.098558903 CEST	54416	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.098563910 CEST	443	54416	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.178061008 CEST	443	54417	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.178458929 CEST	54417	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.178478003 CEST	443	54417	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.178880930 CEST	54417	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.178889036 CEST	443	54417	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.202967882 CEST	443	54416	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.203022957 CEST	443	54416	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.203222990 CEST	54416	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.203344107 CEST	54416	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.203344107 CEST	54416	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.203356981 CEST	443	54416	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.203366041 CEST	443	54416	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.205822945 CEST	54421	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.205857038 CEST	443	54421	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.206114054 CEST	54421	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.206180096 CEST	54421	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.206188917 CEST	443	54421	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.235430002 CEST	443	54418	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.235888004 CEST	54418	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.235908985 CEST	443	54418	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.236365080 CEST	54418	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.236371040 CEST	443	54418	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.259243011 CEST	443	54419	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.259618044 CEST	54419	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.259634972 CEST	443	54419	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.260071039 CEST	54419	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.260077953 CEST	443	54419	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.283200026 CEST	443	54417	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.283265114 CEST	443	54417	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.283338070 CEST	54417	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.283637047 CEST	54417	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.283637047 CEST	54417	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.283655882 CEST	443	54417	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.283667088 CEST	443	54417	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.286780119 CEST	54422	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.286819935 CEST	443	54422	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.286895037 CEST	54422	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.287046909 CEST	54422	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.287062883 CEST	443	54422	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.336689949 CEST	443	54418	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.336709976 CEST	443	54418	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.336772919 CEST	54418	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.336788893 CEST	443	54418	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.336829901 CEST	54418	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.336888075 CEST	443	54418	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.336931944 CEST	443	54418	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.336976051 CEST	54418	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.337860107 CEST	54418	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.337868929 CEST	443	54418	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.337924004 CEST	54418	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.337929010 CEST	443	54418	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.344635010 CEST	54423	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.344655991 CEST	443	54423	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.344842911 CEST	54423	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.345015049 CEST	54423	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.345030069 CEST	443	54423	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.361710072 CEST	443	54419	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.361732006 CEST	443	54419	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.361783981 CEST	443	54419	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.361807108 CEST	54419	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.361850977 CEST	54419	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.362063885 CEST	54419	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.362063885 CEST	54419	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.362083912 CEST	443	54419	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.362087965 CEST	443	54419	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.364589930 CEST	54424	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.364625931 CEST	443	54424	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.364717007 CEST	54424	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.364854097 CEST	54424	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.364881039 CEST	443	54424	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.916167021 CEST	443	54420	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.916671038 CEST	54420	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.916681051 CEST	443	54420	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.917155981 CEST	54420	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.917160988 CEST	443	54420	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.917978048 CEST	443	54421	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.918289900 CEST	54421	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.918312073 CEST	443	54421	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.918677092 CEST	54421	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.918684959 CEST	443	54421	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.976360083 CEST	443	54422	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.977199078 CEST	54422	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.977215052 CEST	443	54422	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.977833986 CEST	54422	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.977840900 CEST	443	54422	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.989568949 CEST	443	54423	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.989938021 CEST	54423	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.989945889 CEST	443	54423	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:35.990355015 CEST	54423	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:35.990359068 CEST	443	54423	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.023222923 CEST	443	54420	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.023242950 CEST	443	54420	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.023262024 CEST	443	54420	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.023314953 CEST	54420	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.023322105 CEST	443	54420	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.023359060 CEST	54420	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.023377895 CEST	54420	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.024821043 CEST	443	54421	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.024836063 CEST	443	54421	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.024880886 CEST	443	54421	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.024894953 CEST	54421	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.024920940 CEST	54421	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.025110960 CEST	54421	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.025110960 CEST	54421	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.025126934 CEST	443	54421	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.025135994 CEST	443	54421	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.027885914 CEST	54425	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.027925968 CEST	443	54425	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.028018951 CEST	54425	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.028198957 CEST	54425	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.028229952 CEST	443	54425	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.085280895 CEST	443	54422	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.085300922 CEST	443	54422	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.085319996 CEST	443	54422	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.085366964 CEST	54422	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.085388899 CEST	443	54422	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.085421085 CEST	54422	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.085443974 CEST	54422	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.090955973 CEST	443	54423	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.090986013 CEST	443	54423	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.091053963 CEST	443	54423	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.091056108 CEST	54423	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.091094971 CEST	54423	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.091332912 CEST	54423	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.091342926 CEST	443	54423	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.091351032 CEST	54423	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.091356993 CEST	443	54423	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.093960047 CEST	54426	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.094000101 CEST	443	54426	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.094070911 CEST	54426	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.094213963 CEST	54426	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.094227076 CEST	443	54426	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.112277985 CEST	443	54420	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.112345934 CEST	54420	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.112349987 CEST	443	54420	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.112396955 CEST	54420	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.112457037 CEST	54420	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.112464905 CEST	443	54420	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.112474918 CEST	54420	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.112479925 CEST	443	54420	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.114767075 CEST	54427	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.114795923 CEST	443	54427	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.114875078 CEST	54427	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.115011930 CEST	54427	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.115036011 CEST	443	54427	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.178651094 CEST	443	54422	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.178695917 CEST	443	54422	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.178730965 CEST	54422	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.178745031 CEST	443	54422	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.178781986 CEST	54422	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.178807020 CEST	54422	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.178997993 CEST	54422	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.179009914 CEST	443	54422	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.179035902 CEST	54422	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.179040909 CEST	443	54422	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.181860924 CEST	54428	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.181932926 CEST	443	54428	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.182040930 CEST	54428	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.182250977 CEST	54428	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.182282925 CEST	443	54428	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.391735077 CEST	443	54424	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.392235041 CEST	54424	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.392245054 CEST	443	54424	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.392728090 CEST	54424	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.392734051 CEST	443	54424	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.496835947 CEST	443	54424	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.496848106 CEST	443	54424	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.496915102 CEST	54424	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.496925116 CEST	443	54424	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.497117996 CEST	443	54424	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.497174025 CEST	54424	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.497191906 CEST	443	54424	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.497205019 CEST	54424	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.497205019 CEST	54424	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.497224092 CEST	443	54424	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.497231007 CEST	443	54424	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.499965906 CEST	54429	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.500010014 CEST	443	54429	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.500176907 CEST	54429	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.500324965 CEST	54429	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.500338078 CEST	443	54429	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.691220999 CEST	443	54425	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.691684961 CEST	54425	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.691700935 CEST	443	54425	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.692147017 CEST	54425	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.692151070 CEST	443	54425	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.757379055 CEST	443	54426	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.757842064 CEST	54426	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.757858038 CEST	443	54426	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.758358002 CEST	54426	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.758363962 CEST	443	54426	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.767225027 CEST	443	54427	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.767591000 CEST	54427	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.767608881 CEST	443	54427	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.768093109 CEST	54427	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.768100023 CEST	443	54427	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.796802998 CEST	443	54425	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.796912909 CEST	443	54425	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.796988010 CEST	54425	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.797096968 CEST	54425	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.797113895 CEST	443	54425	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.797125101 CEST	54425	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.797131062 CEST	443	54425	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.799787045 CEST	54430	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.799823046 CEST	443	54430	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.799890041 CEST	54430	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.800002098 CEST	54430	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.800017118 CEST	443	54430	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.830312014 CEST	443	54428	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.830802917 CEST	54428	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.830826998 CEST	443	54428	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.831358910 CEST	54428	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.831365108 CEST	443	54428	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.862102032 CEST	443	54426	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.862190962 CEST	443	54426	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.862330914 CEST	54426	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.862359047 CEST	54426	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.862370014 CEST	443	54426	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.862380028 CEST	54426	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.862385035 CEST	443	54426	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.864944935 CEST	54431	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.864979029 CEST	443	54431	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.865051031 CEST	54431	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.865222931 CEST	54431	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.865240097 CEST	443	54431	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.869883060 CEST	443	54427	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.869947910 CEST	443	54427	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.869996071 CEST	54427	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.870136023 CEST	54427	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.870136023 CEST	54427	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.870157003 CEST	443	54427	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.870167017 CEST	443	54427	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.872374058 CEST	54432	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.872385025 CEST	443	54432	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.872659922 CEST	54432	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.872659922 CEST	54432	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.872680902 CEST	443	54432	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.931499958 CEST	443	54428	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.931577921 CEST	443	54428	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.931693077 CEST	54428	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.931724072 CEST	54428	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.931729078 CEST	443	54428	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.931739092 CEST	54428	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.931742907 CEST	443	54428	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.933867931 CEST	54433	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.933902025 CEST	443	54433	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:36.934072018 CEST	54433	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.934209108 CEST	54433	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:36.934220076 CEST	443	54433	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.165405035 CEST	443	54429	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.166007996 CEST	54429	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:37.166050911 CEST	443	54429	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.166555882 CEST	54429	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:37.166562080 CEST	443	54429	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.270276070 CEST	443	54429	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.270343065 CEST	443	54429	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.270390987 CEST	443	54429	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.270437956 CEST	54429	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:37.270437956 CEST	54429	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:37.270667076 CEST	54429	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:37.270667076 CEST	54429	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:37.270684958 CEST	443	54429	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.270693064 CEST	443	54429	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.488459110 CEST	443	54430	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.490463972 CEST	54430	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:37.490488052 CEST	443	54430	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.491401911 CEST	54430	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:37.491410971 CEST	443	54430	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.521101952 CEST	443	54431	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.533236980 CEST	443	54432	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.540205002 CEST	54431	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:37.540226936 CEST	443	54431	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.541400909 CEST	54431	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:37.541405916 CEST	443	54431	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.542047024 CEST	54432	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:37.542056084 CEST	443	54432	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.546017885 CEST	54432	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:37.546024084 CEST	443	54432	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.594798088 CEST	443	54430	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.594959974 CEST	443	54430	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.595087051 CEST	54430	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:37.618916035 CEST	54430	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:37.618916035 CEST	54430	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:37.618930101 CEST	443	54430	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.618937969 CEST	443	54430	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.621877909 CEST	443	54433	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.636600018 CEST	54433	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:37.636615038 CEST	443	54433	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.637505054 CEST	54433	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:37.637510061 CEST	443	54433	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.637509108 CEST	443	54431	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.637567043 CEST	443	54431	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.637849092 CEST	54431	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:37.638250113 CEST	54431	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:37.638277054 CEST	443	54431	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.638288975 CEST	54431	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:37.638293982 CEST	443	54431	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.645319939 CEST	443	54432	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.645550013 CEST	443	54432	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.645636082 CEST	54432	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:37.661833048 CEST	54432	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:37.661849976 CEST	443	54432	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.661856890 CEST	54432	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:37.661860943 CEST	443	54432	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.736768007 CEST	443	54433	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.736818075 CEST	443	54433	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:37.736887932 CEST	54433	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:37.789721012 CEST	54433	443	192.168.2.5	13.107.246.60
Oct 13, 2024 18:09:37.789746046 CEST	443	54433	13.107.246.60	192.168.2.5
Oct 13, 2024 18:09:43.717755079 CEST	54434	443	192.168.2.5	4.175.87.197
Oct 13, 2024 18:09:43.717814922 CEST	443	54434	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:43.718019962 CEST	54434	443	192.168.2.5	4.175.87.197
Oct 13, 2024 18:09:43.718373060 CEST	54434	443	192.168.2.5	4.175.87.197
Oct 13, 2024 18:09:43.718385935 CEST	443	54434	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:44.044625998 CEST	54435	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:44.044683933 CEST	443	54435	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:44.044821024 CEST	54435	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:44.045804024 CEST	54435	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:44.045833111 CEST	443	54435	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:44.049398899 CEST	54436	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:44.049417973 CEST	443	54436	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:44.049479008 CEST	54436	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:44.050210953 CEST	54436	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:44.050224066 CEST	443	54436	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:44.531814098 CEST	443	54434	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:44.531877995 CEST	54434	443	192.168.2.5	4.175.87.197
Oct 13, 2024 18:09:44.533735991 CEST	54434	443	192.168.2.5	4.175.87.197
Oct 13, 2024 18:09:44.533746958 CEST	443	54434	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:44.533983946 CEST	443	54434	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:44.536089897 CEST	54434	443	192.168.2.5	4.175.87.197
Oct 13, 2024 18:09:44.583400011 CEST	443	54434	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:44.843671083 CEST	443	54436	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:44.843744993 CEST	54436	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:44.847768068 CEST	54436	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:44.847778082 CEST	443	54436	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:44.848011971 CEST	443	54436	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:44.850048065 CEST	54436	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:44.850347996 CEST	54436	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:44.850353956 CEST	443	54436	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:44.850601912 CEST	54436	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:44.875369072 CEST	443	54434	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:44.875421047 CEST	443	54434	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:44.875436068 CEST	443	54434	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:44.875466108 CEST	54434	443	192.168.2.5	4.175.87.197
Oct 13, 2024 18:09:44.875488043 CEST	443	54434	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:44.875514984 CEST	54434	443	192.168.2.5	4.175.87.197
Oct 13, 2024 18:09:44.875534058 CEST	54434	443	192.168.2.5	4.175.87.197
Oct 13, 2024 18:09:44.876524925 CEST	443	54434	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:44.876604080 CEST	443	54434	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:44.876611948 CEST	54434	443	192.168.2.5	4.175.87.197
Oct 13, 2024 18:09:44.876646042 CEST	443	54434	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:44.876679897 CEST	54434	443	192.168.2.5	4.175.87.197
Oct 13, 2024 18:09:44.877017975 CEST	443	54434	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:44.877068996 CEST	54434	443	192.168.2.5	4.175.87.197
Oct 13, 2024 18:09:44.880110979 CEST	54434	443	192.168.2.5	4.175.87.197
Oct 13, 2024 18:09:44.880132914 CEST	443	54434	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:44.880202055 CEST	54434	443	192.168.2.5	4.175.87.197
Oct 13, 2024 18:09:44.880208969 CEST	443	54434	4.175.87.197	192.168.2.5
Oct 13, 2024 18:09:44.895396948 CEST	443	54436	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:44.937899113 CEST	443	54435	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:44.938072920 CEST	54435	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:44.941171885 CEST	54435	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:44.941178083 CEST	443	54435	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:44.941406012 CEST	443	54435	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:44.944089890 CEST	54435	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:44.944200993 CEST	54435	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:44.944214106 CEST	443	54435	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:44.957792044 CEST	54435	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:44.999417067 CEST	443	54435	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:45.026799917 CEST	443	54436	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:45.027035952 CEST	443	54436	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:45.027278900 CEST	54436	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:45.027667999 CEST	54436	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:45.027687073 CEST	443	54436	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:45.131143093 CEST	443	54435	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:45.131601095 CEST	54435	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:45.131613016 CEST	443	54435	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:45.131625891 CEST	54435	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:45.131669998 CEST	443	54435	40.113.103.199	192.168.2.5
Oct 13, 2024 18:09:45.131761074 CEST	54435	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:09:55.550739050 CEST	54439	443	192.168.2.5	142.250.181.228
Oct 13, 2024 18:09:55.550777912 CEST	443	54439	142.250.181.228	192.168.2.5
Oct 13, 2024 18:09:55.550853968 CEST	54439	443	192.168.2.5	142.250.181.228
Oct 13, 2024 18:09:55.551122904 CEST	54439	443	192.168.2.5	142.250.181.228
Oct 13, 2024 18:09:55.551136971 CEST	443	54439	142.250.181.228	192.168.2.5
Oct 13, 2024 18:09:56.212064981 CEST	443	54439	142.250.181.228	192.168.2.5
Oct 13, 2024 18:09:56.212384939 CEST	54439	443	192.168.2.5	142.250.181.228
Oct 13, 2024 18:09:56.212410927 CEST	443	54439	142.250.181.228	192.168.2.5
Oct 13, 2024 18:09:56.212759972 CEST	443	54439	142.250.181.228	192.168.2.5
Oct 13, 2024 18:09:56.213264942 CEST	54439	443	192.168.2.5	142.250.181.228
Oct 13, 2024 18:09:56.213330984 CEST	443	54439	142.250.181.228	192.168.2.5
Oct 13, 2024 18:09:56.258194923 CEST	54439	443	192.168.2.5	142.250.181.228
Oct 13, 2024 18:10:06.107100964 CEST	443	54439	142.250.181.228	192.168.2.5
Oct 13, 2024 18:10:06.107172966 CEST	443	54439	142.250.181.228	192.168.2.5
Oct 13, 2024 18:10:06.107234001 CEST	54439	443	192.168.2.5	142.250.181.228
Oct 13, 2024 18:10:06.687299013 CEST	54439	443	192.168.2.5	142.250.181.228
Oct 13, 2024 18:10:06.687325954 CEST	443	54439	142.250.181.228	192.168.2.5
Oct 13, 2024 18:10:07.488935947 CEST	54440	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:10:07.488977909 CEST	443	54440	40.113.103.199	192.168.2.5
Oct 13, 2024 18:10:07.489068031 CEST	54440	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:10:07.490031958 CEST	54440	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:10:07.490046024 CEST	443	54440	40.113.103.199	192.168.2.5
Oct 13, 2024 18:10:07.492796898 CEST	54441	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:10:07.492837906 CEST	443	54441	40.113.103.199	192.168.2.5
Oct 13, 2024 18:10:07.492940903 CEST	54441	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:10:07.493583918 CEST	54441	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:10:07.493598938 CEST	443	54441	40.113.103.199	192.168.2.5
Oct 13, 2024 18:10:08.283159018 CEST	443	54440	40.113.103.199	192.168.2.5
Oct 13, 2024 18:10:08.283222914 CEST	54440	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:10:08.287303925 CEST	54440	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:10:08.287317038 CEST	443	54440	40.113.103.199	192.168.2.5
Oct 13, 2024 18:10:08.287579060 CEST	443	54440	40.113.103.199	192.168.2.5
Oct 13, 2024 18:10:08.288866997 CEST	54440	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:10:08.288933992 CEST	54440	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:10:08.288942099 CEST	443	54440	40.113.103.199	192.168.2.5
Oct 13, 2024 18:10:08.289217949 CEST	54440	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:10:08.306916952 CEST	443	54441	40.113.103.199	192.168.2.5
Oct 13, 2024 18:10:08.307020903 CEST	54441	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:10:08.309503078 CEST	54441	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:10:08.309516907 CEST	443	54441	40.113.103.199	192.168.2.5
Oct 13, 2024 18:10:08.309746027 CEST	443	54441	40.113.103.199	192.168.2.5
Oct 13, 2024 18:10:08.312455893 CEST	54441	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:10:08.312726021 CEST	54441	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:10:08.312735081 CEST	443	54441	40.113.103.199	192.168.2.5
Oct 13, 2024 18:10:08.312935114 CEST	54441	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:10:08.335405111 CEST	443	54440	40.113.103.199	192.168.2.5
Oct 13, 2024 18:10:08.359415054 CEST	443	54441	40.113.103.199	192.168.2.5
Oct 13, 2024 18:10:08.461338043 CEST	443	54440	40.113.103.199	192.168.2.5
Oct 13, 2024 18:10:08.461417913 CEST	443	54440	40.113.103.199	192.168.2.5
Oct 13, 2024 18:10:08.461944103 CEST	54440	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:10:08.461971045 CEST	443	54440	40.113.103.199	192.168.2.5
Oct 13, 2024 18:10:08.462198019 CEST	54440	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:10:08.462207079 CEST	443	54440	40.113.103.199	192.168.2.5
Oct 13, 2024 18:10:08.462256908 CEST	54440	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:10:08.493033886 CEST	443	54441	40.113.103.199	192.168.2.5
Oct 13, 2024 18:10:08.493326902 CEST	443	54441	40.113.103.199	192.168.2.5
Oct 13, 2024 18:10:08.493415117 CEST	54441	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:10:08.494164944 CEST	54441	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:10:08.494164944 CEST	54441	443	192.168.2.5	40.113.103.199
Oct 13, 2024 18:10:08.494189978 CEST	443	54441	40.113.103.199	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 13, 2024 18:08:52.145114899 CEST	53	50388	1.1.1.1	192.168.2.5
Oct 13, 2024 18:08:52.148195982 CEST	53	49356	1.1.1.1	192.168.2.5
Oct 13, 2024 18:08:53.186470985 CEST	53	61344	1.1.1.1	192.168.2.5
Oct 13, 2024 18:08:53.440462112 CEST	57830	53	192.168.2.5	1.1.1.1
Oct 13, 2024 18:08:53.440720081 CEST	56695	53	192.168.2.5	1.1.1.1
Oct 13, 2024 18:08:55.500075102 CEST	62830	53	192.168.2.5	1.1.1.1
Oct 13, 2024 18:08:55.500075102 CEST	49672	53	192.168.2.5	1.1.1.1
Oct 13, 2024 18:08:55.507026911 CEST	53	62830	1.1.1.1	192.168.2.5
Oct 13, 2024 18:08:55.507584095 CEST	53	49672	1.1.1.1	192.168.2.5
Oct 13, 2024 18:08:58.234653950 CEST	53	58002	1.1.1.1	192.168.2.5
Oct 13, 2024 18:09:07.033065081 CEST	53	58257	1.1.1.1	192.168.2.5
Oct 13, 2024 18:09:51.612380981 CEST	53	50779	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 13, 2024 18:08:53.440462112 CEST	192.168.2.5	1.1.1.1	0xe70	Standard query (0)	static2.sharepointonline.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:08:53.440720081 CEST	192.168.2.5	1.1.1.1	0x6c37	Standard query (0)	static2.sharepointonline.com	65	IN (0x0001)	false
Oct 13, 2024 18:08:55.500075102 CEST	192.168.2.5	1.1.1.1	0x8a48	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:08:55.500075102 CEST	192.168.2.5	1.1.1.1	0x22c4	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 13, 2024 18:08:53.448770046 CEST	1.1.1.1	192.168.2.5	0xe70	No error (0)	static2.sharepointonline.com	static2.sharepointonline.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 18:08:53.449771881 CEST	1.1.1.1	192.168.2.5	0x6c37	No error (0)	static2.sharepointonline.com	static2.sharepointonline.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 18:08:55.507026911 CEST	1.1.1.1	192.168.2.5	0x8a48	No error (0)	www.google.com		142.250.181.228	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:08:55.507584095 CEST	1.1.1.1	192.168.2.5	0x22c4	No error (0)	www.google.com			65	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

fs.microsoft.com

slscr.update.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.5	49714	40.126.31.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:44 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-10-13 16:08:44 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-13 16:08:46 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Sun, 13 Oct 2024 16:07:45 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C515_BAY x-ms-request-id: 162cd511-fe4b-43b5-90e0-a4cac913e8ae PPServer: PPV: 30 H: PH1PEPF00011ED2 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Sun, 13 Oct 2024 16:08:45 GMT Connection: close Content-Length: 11389
2024-10-13 16:08:46 UTC	11389	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.5	49716	40.126.31.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:49 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-10-13 16:08:49 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-13 16:08:49 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Sun, 13 Oct 2024 16:07:49 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C515_BAY x-ms-request-id: c79f7cf3-9300-4c22-ad68-41d5f3efe8e5 PPServer: PPV: 30 H: PH1PEPF0001200D V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Sun, 13 Oct 2024 16:08:49 GMT Connection: close Content-Length: 11389
2024-10-13 16:08:49 UTC	11389	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.5	49718	40.126.31.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:51 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4694 Host: login.live.com
2024-10-13 16:08:51 UTC	4694	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-13 16:08:51 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Sun, 13 Oct 2024 16:07:51 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C515_BAY x-ms-request-id: cd1833b4-fcf2-4b4c-b281-266e8e4b28f3 PPServer: PPV: 30 H: PH1PEPF0001B7F3 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Sun, 13 Oct 2024 16:08:51 GMT Connection: close Content-Length: 10901
2024-10-13 16:08:51 UTC	10901	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.5	49720	40.126.31.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:51 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4694 Host: login.live.com
2024-10-13 16:08:51 UTC	4694	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-13 16:08:51 UTC	656	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Sun, 13 Oct 2024 16:07:51 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" FdrTelemetry: &481=21&59=5&213=280810&215=0&315=1&215=0&315=1&214=30&288=16.0.30389.5 Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C515_BAY x-ms-request-id: 8eae36d3-9852-4e5a-ae0c-9b30838007fa PPServer: PPV: 30 H: PH1PEPF0001B7F6 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Sun, 13 Oct 2024 16:08:51 GMT Connection: close Content-Length: 10901
2024-10-13 16:08:51 UTC	10901	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.5	49719	40.126.31.73	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:51 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-10-13 16:08:51 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-13 16:08:51 UTC	568	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Sun, 13 Oct 2024 16:07:51 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C555_SN1 x-ms-request-id: b739a3d7-9597-4f52-8b05-0e9f2fcc91d1 PPServer: PPV: 30 H: SN1PEPF0002F046 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Sun, 13 Oct 2024 16:08:51 GMT Connection: close Content-Length: 1918
2024-10-13 16:08:51 UTC	1918	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.5	49721	40.126.31.73	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:52 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-10-13 16:08:52 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-13 16:08:53 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Sun, 13 Oct 2024 16:07:53 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C515_BL2 x-ms-request-id: 97dcff15-ca85-44a8-956a-d412b3598d36 PPServer: PPV: 30 H: BL02EPF000276BE V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Sun, 13 Oct 2024 16:08:52 GMT Connection: close Content-Length: 11409
2024-10-13 16:08:53 UTC	11409	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.5	49725	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:53 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 58 57 6f 69 71 65 6e 4c 4f 6b 79 36 30 39 2f 68 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 61 38 39 62 66 61 66 33 62 33 66 62 31 64 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: XWoiqenLOky609/h.1Context: 6a89bfaf3b3fb1d0
2024-10-13 16:08:53 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-13 16:08:53 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 58 57 6f 69 71 65 6e 4c 4f 6b 79 36 30 39 2f 68 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 61 38 39 62 66 61 66 33 62 33 66 62 31 64 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 65 2f 61 39 32 75 71 49 7a 77 78 45 34 33 6e 34 4f 6e 4b 6c 35 31 44 43 44 2b 6b 51 54 52 45 7a 42 31 4d 31 47 4e 42 41 55 4f 4b 49 63 73 4c 45 58 47 6b 55 39 71 65 6b 34 78 50 35 34 58 5a 6a 56 30 77 63 6b 55 6c 2f 75 78 33 79 43 70 4c 77 48 47 4b 2f 77 51 35 55 35 6e 75 50 58 57 4c 47 56 59 56 57 38 52 55 71 68 41 31 33 38 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: XWoiqenLOky609/h.2Context: 6a89bfaf3b3fb1d0<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAe/a92uqIzwxE43n4OnKl51DCD+kQTREzB1M1GNBAUOKIcsLEXGkU9qek4xP54XZjV0wckUl/ux3yCpLwHGK/wQ5U5nuPXWLGVYVW8RUqhA138
2024-10-13 16:08:53 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 58 57 6f 69 71 65 6e 4c 4f 6b 79 36 30 39 2f 68 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 61 38 39 62 66 61 66 33 62 33 66 62 31 64 30 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: XWoiqenLOky609/h.3Context: 6a89bfaf3b3fb1d0
2024-10-13 16:08:53 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-13 16:08:53 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 47 66 6c 61 31 68 52 68 61 45 75 65 76 4d 6a 35 75 37 72 59 74 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: Gfla1hRhaEuevMj5u7rYtA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49726	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:53 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 54 65 61 45 31 34 6d 65 55 30 36 5a 49 6f 56 76 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 65 38 32 39 35 66 31 34 31 61 65 34 65 38 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: TeaE14meU06ZIoVv.1Context: 5e8295f141ae4e8f
2024-10-13 16:08:53 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-13 16:08:53 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 54 65 61 45 31 34 6d 65 55 30 36 5a 49 6f 56 76 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 65 38 32 39 35 66 31 34 31 61 65 34 65 38 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 6b 32 56 31 66 75 62 6e 48 71 70 30 31 75 46 56 41 51 56 4a 55 48 79 76 49 52 48 6a 69 46 6c 63 53 70 65 70 4b 44 68 69 57 4b 33 6b 76 61 55 30 67 4b 49 2b 37 58 36 79 44 37 32 4a 38 2b 50 35 44 6e 75 73 46 54 34 30 68 7a 4e 4b 43 31 54 6c 33 78 66 70 33 42 67 6b 6b 75 32 2f 34 46 56 5a 67 6f 59 41 46 50 6c 6a 37 76 31 6b Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: TeaE14meU06ZIoVv.2Context: 5e8295f141ae4e8f<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWk2V1fubnHqp01uFVAQVJUHyvIRHjiFlcSpepKDhiWK3kvaU0gKI+7X6yD72J8+P5DnusFT40hzNKC1Tl3xfp3Bgkku2/4FVZgoYAFPlj7v1k
2024-10-13 16:08:53 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 54 65 61 45 31 34 6d 65 55 30 36 5a 49 6f 56 76 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 65 38 32 39 35 66 31 34 31 61 65 34 65 38 66 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: TeaE14meU06ZIoVv.3Context: 5e8295f141ae4e8f<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-13 16:08:53 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-13 16:08:53 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 46 72 42 76 61 53 59 6c 6f 30 36 43 48 77 50 4e 6d 44 79 4c 7a 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: FrBvaSYlo06CHwPNmDyLzg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.5	49732	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:54 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:54 UTC	561	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:54 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Sun, 13 Oct 2024 10:59:53 GMT ETag: "0x8DCEB762AD2C54E" x-ms-request-id: 88bd8b3f-d01e-0049-5d65-1de7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160854Z-17db6f7c8cfgqlr45m385mnngs00000003mg00000000cze8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:54 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-13 16:08:54 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-13 16:08:54 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-13 16:08:54 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-13 16:08:54 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-13 16:08:54 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-13 16:08:54 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-13 16:08:54 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-13 16:08:54 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-13 16:08:54 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49731	40.126.31.73	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:54 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-10-13 16:08:54 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-13 16:08:54 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Sun, 13 Oct 2024 16:07:54 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C515_BL2 x-ms-request-id: 0dc76aa9-880c-4107-97aa-c0d436bd282f PPServer: PPV: 30 H: BL02EPF0001D845 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Sun, 13 Oct 2024 16:08:54 GMT Connection: close Content-Length: 11409
2024-10-13 16:08:54 UTC	11409	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49738	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:55 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:55 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:55 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: e1b47659-601e-00ab-14a3-1b66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160855Z-17db6f7c8cfwtn5x6ye8p8q9m000000003n000000000dpvg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:55 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49736	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:55 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:55 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 1c7a9c3a-e01e-001f-4b80-1b1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160855Z-17db6f7c8cfhrxld7punfw920n00000003w0000000007sqs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:55 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49739	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:55 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:55 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 695c64e8-001e-0034-5de7-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160855Z-17db6f7c8cfhzb2znbk0zyvf6n00000004qg00000000fe06 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:55 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49735	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:55 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:55 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:55 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 971a1148-a01e-000d-48cd-1ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160855Z-17db6f7c8cfqkqk8bn4ck6f720000000050000000000043y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:55 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49737	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:55 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:55 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:55 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: a7c7bcc3-d01e-005a-1c62-1c7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160855Z-17db6f7c8cffhvbz3mt0ydz7x4000000036000000000gxe2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:55 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49742	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:56 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:56 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 66411a6b-c01e-00a1-1eca-1a7e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160856Z-17db6f7c8cfhrxld7punfw920n00000003yg0000000022q6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:56 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49744	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:56 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:56 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 9308204b-401e-0016-0d18-1c53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160856Z-17db6f7c8cfvq8pt2ak3arkg6n000000035g0000000048kf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:56 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49741	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:56 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:56 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: b1e48aa2-701e-0053-2fa3-1b3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160856Z-17db6f7c8cfhrxld7punfw920n00000003u000000000bb9y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:56 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49745	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:56 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:56 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: d15fcd22-801e-0047-391c-1c7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160856Z-17db6f7c8cfvtw4hh2496wp8p800000003kg000000006v4p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:56 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49743	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:56 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:56 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: a417ae39-101e-008e-1f1c-1bcf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160856Z-17db6f7c8cf6qp7g7r97wxgbqc00000004c000000000d4ba x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:56 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49746	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:57 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:57 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 0f9ac3ff-201e-0003-4016-1cf85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160857Z-17db6f7c8cf6f7vv3recfp4a6w000000024g00000000b21v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:57 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49747	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:57 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:57 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: b3ad5e0b-501e-000a-1fe3-1a0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160857Z-17db6f7c8cfspvtq2pgqb2w5k000000004w000000000gcc0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:57 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49749	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:57 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:57 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: cbdfa3b4-e01e-0051-2293-1c84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160857Z-17db6f7c8cf6f7vv3recfp4a6w0000000250000000008ykp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:57 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49748	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:57 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:57 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 458f517b-301e-000c-2fe6-1a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160857Z-17db6f7c8cfhrxld7punfw920n00000003u000000000bbau x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:57 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49750	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:57 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:57 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: e456ac6c-b01e-0097-6bbf-1a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160857Z-17db6f7c8cfqxt4wrzg7st2fm8000000054g00000000dp02 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:57 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49751	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:57 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6f 48 59 32 54 49 64 72 41 55 36 5a 46 39 4a 44 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 32 65 38 35 65 30 34 65 38 36 31 35 37 63 35 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: oHY2TIdrAU6ZF9JD.1Context: d2e85e04e86157c5
2024-10-13 16:08:57 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-13 16:08:57 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 6f 48 59 32 54 49 64 72 41 55 36 5a 46 39 4a 44 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 32 65 38 35 65 30 34 65 38 36 31 35 37 63 35 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 65 2f 61 39 32 75 71 49 7a 77 78 45 34 33 6e 34 4f 6e 4b 6c 35 31 44 43 44 2b 6b 51 54 52 45 7a 42 31 4d 31 47 4e 42 41 55 4f 4b 49 63 73 4c 45 58 47 6b 55 39 71 65 6b 34 78 50 35 34 58 5a 6a 56 30 77 63 6b 55 6c 2f 75 78 33 79 43 70 4c 77 48 47 4b 2f 77 51 35 55 35 6e 75 50 58 57 4c 47 56 59 56 57 38 52 55 71 68 41 31 33 38 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: oHY2TIdrAU6ZF9JD.2Context: d2e85e04e86157c5<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAe/a92uqIzwxE43n4OnKl51DCD+kQTREzB1M1GNBAUOKIcsLEXGkU9qek4xP54XZjV0wckUl/ux3yCpLwHGK/wQ5U5nuPXWLGVYVW8RUqhA138
2024-10-13 16:08:57 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 6f 48 59 32 54 49 64 72 41 55 36 5a 46 39 4a 44 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 32 65 38 35 65 30 34 65 38 36 31 35 37 63 35 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: oHY2TIdrAU6ZF9JD.3Context: d2e85e04e86157c5
2024-10-13 16:08:57 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-13 16:08:57 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 76 48 4a 4f 61 52 39 2f 78 6b 75 6a 47 52 47 51 33 6c 58 34 36 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: vHJOaR9/xkujGRGQ3lX46g.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49753	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:57 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-13 16:08:57 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=174998 Date: Sun, 13 Oct 2024 16:08:57 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49752	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:57 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 52 39 54 37 76 2b 59 7a 68 45 43 41 67 2f 6e 49 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 66 30 64 35 31 65 63 30 38 65 30 61 34 63 37 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: R9T7v+YzhECAg/nI.1Context: ef0d51ec08e0a4c7
2024-10-13 16:08:57 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-13 16:08:57 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 52 39 54 37 76 2b 59 7a 68 45 43 41 67 2f 6e 49 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 66 30 64 35 31 65 63 30 38 65 30 61 34 63 37 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 6b 32 56 31 66 75 62 6e 48 71 70 30 31 75 46 56 41 51 56 4a 55 48 79 76 49 52 48 6a 69 46 6c 63 53 70 65 70 4b 44 68 69 57 4b 33 6b 76 61 55 30 67 4b 49 2b 37 58 36 79 44 37 32 4a 38 2b 50 35 44 6e 75 73 46 54 34 30 68 7a 4e 4b 43 31 54 6c 33 78 66 70 33 42 67 6b 6b 75 32 2f 34 46 56 5a 67 6f 59 41 46 50 6c 6a 37 76 31 6b Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: R9T7v+YzhECAg/nI.2Context: ef0d51ec08e0a4c7<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWk2V1fubnHqp01uFVAQVJUHyvIRHjiFlcSpepKDhiWK3kvaU0gKI+7X6yD72J8+P5DnusFT40hzNKC1Tl3xfp3Bgkku2/4FVZgoYAFPlj7v1k
2024-10-13 16:08:57 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 52 39 54 37 76 2b 59 7a 68 45 43 41 67 2f 6e 49 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 66 30 64 35 31 65 63 30 38 65 30 61 34 63 37 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: R9T7v+YzhECAg/nI.3Context: ef0d51ec08e0a4c7<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-13 16:08:57 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-13 16:08:57 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 55 69 77 54 45 4f 51 71 51 6b 75 4e 49 45 61 77 4d 54 33 41 70 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: UiwTEOQqQkuNIEawMT3ApA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49754	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:57 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:57 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 23cc8f65-401e-0048-2a25-1c0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160857Z-17db6f7c8cfcl4jvqfdxaxz9w800000002gg0000000085d4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:58 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49755	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:58 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:58 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b85ce019-d01e-0028-4fe2-1a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160858Z-17db6f7c8cfspvtq2pgqb2w5k00000000510000000006ckp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:58 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49756	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:58 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:58 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: e5c54f26-c01e-00a1-35de-1a7e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160858Z-17db6f7c8cf5mtxmr1c51513n0000000056000000000gprh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:58 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49757	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:58 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:58 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5355bdce-701e-0021-10ea-1a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160858Z-17db6f7c8cfgqlr45m385mnngs00000003s0000000002wd5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:58 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49758	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:58 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:58 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 77080ea6-601e-003e-13e1-1a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160858Z-17db6f7c8cfgqlr45m385mnngs00000003qg000000005xvk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:58 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49759	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:58 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-13 16:08:58 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=174938 Date: Sun, 13 Oct 2024 16:08:58 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-13 16:08:58 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49761	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:58 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:58 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: a5b27f46-b01e-003d-5a47-1cd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160858Z-17db6f7c8cfcl4jvqfdxaxz9w800000002dg00000000cr06 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:58 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49760	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:58 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:58 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 94af9378-501e-0047-4aca-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160858Z-17db6f7c8cfvzwz27u5rnq9kpc00000005eg000000006v5a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:58 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49764	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:58 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:58 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: ec733f58-401e-0035-529c-1b82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160858Z-17db6f7c8cf6f7vv3recfp4a6w0000000250000000008ymz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:58 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49763	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:58 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:58 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: b59689ad-601e-005c-3fe1-1af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160858Z-17db6f7c8cfvzwz27u5rnq9kpc00000005c000000000axfb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:58 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49762	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:58 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:58 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 6fc17292-101e-0034-6b4a-1c96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160858Z-17db6f7c8cf9c22xp43k2gbqvn00000002vg000000000u41 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:58 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	57069	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:59 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:59 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: d4fa587e-101e-008e-331f-1ccf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160859Z-17db6f7c8cffhvbz3mt0ydz7x4000000037g00000000d9b5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:59 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	57070	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:59 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:59 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 1507c9f1-d01e-007a-72eb-1af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160859Z-17db6f7c8cf6qp7g7r97wxgbqc00000004dg00000000av0n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:59 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	57067	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:59 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:59 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: b93fa8e6-a01e-0002-462b-1c5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160859Z-17db6f7c8cfvq8pt2ak3arkg6n000000031000000000e6q2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:59 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	57066	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:59 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:59 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 483006ab-801e-0035-465b-1c752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160859Z-17db6f7c8cfmhggkx889x958tc000000026000000000fsme x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:59 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	57068	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:59 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:59 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 9dc98f41-601e-0097-4647-1cf33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160859Z-17db6f7c8cf9wwz8ehu7c5p33g00000002d0000000007rk8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:59 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	57074	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:00 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:00 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: b8f0ecbf-701e-005c-16e0-1abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160900Z-17db6f7c8cf6qp7g7r97wxgbqc00000004d000000000b7mg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:00 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	57073	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:00 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:00 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 0a475807-001e-00a2-0116-1cd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160900Z-17db6f7c8cfvq8pt2ak3arkg6n000000030g00000000eu78 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:00 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	57072	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:00 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:00 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 30f6abec-501e-005b-072b-1ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160900Z-17db6f7c8cfbd7pgux3k6qfa600000000430000000002t4w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:00 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	57071	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:00 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:00 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: c832ddd9-b01e-0084-55ca-1ad736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160900Z-17db6f7c8cfhzb2znbk0zyvf6n00000004wg0000000022xe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:00 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	57075	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:00 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:00 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: fcff0b5c-f01e-005d-588a-1b13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160900Z-17db6f7c8cfhrxld7punfw920n00000003u000000000bbew x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:00 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	57080	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:01 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:01 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: eba22146-701e-0021-1f31-1c3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160901Z-17db6f7c8cfhrxld7punfw920n00000003vg000000009ba7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:01 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	57078	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:01 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:01 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: e237e346-101e-0079-251d-1c5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160901Z-17db6f7c8cfvq8pt2ak3arkg6n000000033g0000000086t3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:01 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	57077	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:01 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:01 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 13e99002-401e-0067-75aa-1c09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160901Z-17db6f7c8cfjxfnba42c5rukwg00000002400000000067wc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:01 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	57079	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:01 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:01 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 7c051060-401e-008c-630d-1c86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160901Z-17db6f7c8cfbd7pgux3k6qfa6000000003zg000000009vzh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:01 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	57076	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:01 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:01 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: e8d3a0af-c01e-0014-0c1c-1ca6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160901Z-17db6f7c8cfvq8pt2ak3arkg6n000000032g00000000amzm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:01 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	57085	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:02 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:02 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 355a979e-401e-0064-3e4a-1c54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160902Z-17db6f7c8cf6f7vv3recfp4a6w000000023g00000000d8p3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:02 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	57081	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:02 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:02 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 72dafb48-001e-0079-44ea-1a12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160902Z-17db6f7c8cfbr2wt66emzt78g400000004m000000000az7b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:02 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	57082	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:02 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:02 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: aa7a1e39-401e-0067-20a3-1b09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160902Z-17db6f7c8cf96l6t7bwyfgbkhw000000041000000000e58z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:02 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	57084	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:02 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:02 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 9ba87e07-d01e-008e-2ae9-1a387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160902Z-17db6f7c8cfgqlr45m385mnngs00000003k000000000erwt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:02 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	57083	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:02 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:02 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 06589d36-d01e-0065-18bf-1ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160902Z-17db6f7c8cf96l6t7bwyfgbkhw0000000470000000003688 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:02 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	57086	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:02 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:02 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: cb11dd2f-401e-0029-235b-1c9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160902Z-17db6f7c8cf6f7vv3recfp4a6w000000024000000000bnz7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:02 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	57087	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:02 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:02 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 77f86656-001e-000b-08e7-1a15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160902Z-17db6f7c8cfbd7pgux3k6qfa600000000420000000005k0c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:03 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	57088	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:02 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:02 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 24993946-c01e-008e-55d7-1a7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160902Z-17db6f7c8cf4g2pjavqhm24vp4000000059g000000009w7z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:03 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	57089	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:02 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:03 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 61c06469-601e-0001-0ce6-1cfaeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160903Z-17db6f7c8cfcl4jvqfdxaxz9w800000002gg0000000085gm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:03 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	57090	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:03 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:03 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 1a8c6729-d01e-0014-7547-1ced58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160903Z-17db6f7c8cf6f7vv3recfp4a6w000000022g00000000ft94 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:03 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	57091	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:03 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:03 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: c0284108-301e-005d-6416-1ce448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160903Z-17db6f7c8cfvtw4hh2496wp8p800000003eg00000000g8re x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:03 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	57092	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:03 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:03 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 7a29fcb1-e01e-0003-091e-1c0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160903Z-17db6f7c8cfvtw4hh2496wp8p800000003m0000000005kzk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:03 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	57093	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:03 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:03 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: b0fa5ee8-501e-0047-295e-1cce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160903Z-17db6f7c8cfmhggkx889x958tc000000028g00000000bfgg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:03 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	57094	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:03 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:03 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 90f8132d-901e-002a-0d47-1c7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160903Z-17db6f7c8cf6f7vv3recfp4a6w000000024g00000000b27e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:03 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	57096	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:03 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:03 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: fed7985d-c01e-0034-3cd8-1a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160903Z-17db6f7c8cfspvtq2pgqb2w5k000000004y000000000dytv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:03 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	57095	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:04 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=scrxm7heELsScCn&MD=rzzd4Nl6 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-13 16:09:04 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: ae955d79-370c-4900-ac36-a8432dbe68ff MS-RequestId: 818598ba-f0a0-4de6-9c54-ef28cbc69491 MS-CV: 5tTBkd9+NUWXWH8q.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sun, 13 Oct 2024 16:09:03 GMT Connection: close Content-Length: 24490
2024-10-13 16:09:04 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-13 16:09:04 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	57097	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:04 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:04 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 7a709d5d-301e-0099-436d-1c6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160904Z-17db6f7c8cf9c22xp43k2gbqvn00000002sg000000008rx7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:04 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	57099	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:04 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:04 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 9a6afd11-d01e-0049-3e83-1be7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160904Z-17db6f7c8cfbd7pgux3k6qfa600000000430000000002t9x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:04 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	57098	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:04 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:04 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: b3584e95-501e-0029-5500-1bd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160904Z-17db6f7c8cf4g2pjavqhm24vp4000000057000000000fw4b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:04 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	57100	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:04 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:04 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 640ec2fa-901e-0083-59e1-1abb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160904Z-17db6f7c8cfhzb2znbk0zyvf6n00000004u0000000007sy7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:04 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	57101	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:04 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:04 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 23e49b38-a01e-001e-1147-1c49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160904Z-17db6f7c8cffhvbz3mt0ydz7x400000003c00000000046vu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:04 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	57102	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:05 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:05 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 94508d5b-e01e-0052-6824-1ad9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160905Z-17db6f7c8cfgqlr45m385mnngs00000003k000000000es21 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:05 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	57103	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:05 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:05 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 90b8fb57-901e-002a-182e-1c7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160905Z-17db6f7c8cf6f7vv3recfp4a6w000000028000000000394m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:05 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	57105	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:05 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:05 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: cda1fd3a-301e-0096-2fde-1ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160905Z-17db6f7c8cfspvtq2pgqb2w5k000000004y000000000dyvf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:05 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	57104	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:05 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:05 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: fe1a2dd9-a01e-0053-57d8-1a8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160905Z-17db6f7c8cfqxt4wrzg7st2fm800000005b00000000003eb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:05 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	57106	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:05 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:05 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 9542a535-401e-0064-601f-1b54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160905Z-17db6f7c8cfqkqk8bn4ck6f72000000004tg00000000eyvb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:05 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	57108	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:06 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:06 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: fdc7e0a4-c01e-0034-181f-1b2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160906Z-17db6f7c8cfhzb2znbk0zyvf6n00000004ug0000000066w6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:06 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	57111	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:06 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:06 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 1fee090d-701e-003e-60e9-1b79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160906Z-17db6f7c8cfgqlr45m385mnngs00000003t0000000000y7t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:06 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	57109	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:06 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:06 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: a0500a35-c01e-002b-5eef-1a6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160906Z-17db6f7c8cfspvtq2pgqb2w5k000000004z0000000009zhn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:06 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	57110	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:06 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:06 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 5c2b82db-e01e-0071-3c2b-1c08e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160906Z-17db6f7c8cffhvbz3mt0ydz7x4000000036g00000000gubz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:06 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	57112	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:06 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:06 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: eb876971-601e-0001-084f-1cfaeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160906Z-17db6f7c8cf6f7vv3recfp4a6w000000022000000000fa5v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:06 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	57116	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:07 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:07 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 67a092be-301e-0099-76e2-1a6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160907Z-17db6f7c8cf5mtxmr1c51513n000000005a0000000008cr0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:07 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	57117	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:07 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:07 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 38d12744-701e-0050-7297-1b6767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160907Z-17db6f7c8cffhvbz3mt0ydz7x400000003dg000000000a0s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:07 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	57114	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:07 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:07 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 959f4817-801e-0078-5157-1cbac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160907Z-17db6f7c8cfmhggkx889x958tc000000027000000000deq7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:07 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	57115	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:07 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:07 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 284a1447-301e-0000-211b-1ceecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160907Z-17db6f7c8cfvq8pt2ak3arkg6n000000033g00000000871b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:07 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	57118	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:07 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:07 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 9ad66ff1-501e-00a0-38ec-1a9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160907Z-17db6f7c8cf6qp7g7r97wxgbqc00000004bg00000000chf8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:07 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	54241	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:07 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6b 46 64 76 34 50 73 55 58 30 75 67 38 62 5a 41 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 36 38 37 64 65 34 65 36 33 36 63 66 30 32 62 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: kFdv4PsUX0ug8bZA.1Context: 6687de4e636cf02b
2024-10-13 16:09:07 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-13 16:09:07 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 6b 46 64 76 34 50 73 55 58 30 75 67 38 62 5a 41 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 36 38 37 64 65 34 65 36 33 36 63 66 30 32 62 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 65 2f 61 39 32 75 71 49 7a 77 78 45 34 33 6e 34 4f 6e 4b 6c 35 31 44 43 44 2b 6b 51 54 52 45 7a 42 31 4d 31 47 4e 42 41 55 4f 4b 49 63 73 4c 45 58 47 6b 55 39 71 65 6b 34 78 50 35 34 58 5a 6a 56 30 77 63 6b 55 6c 2f 75 78 33 79 43 70 4c 77 48 47 4b 2f 77 51 35 55 35 6e 75 50 58 57 4c 47 56 59 56 57 38 52 55 71 68 41 31 33 38 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: kFdv4PsUX0ug8bZA.2Context: 6687de4e636cf02b<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAe/a92uqIzwxE43n4OnKl51DCD+kQTREzB1M1GNBAUOKIcsLEXGkU9qek4xP54XZjV0wckUl/ux3yCpLwHGK/wQ5U5nuPXWLGVYVW8RUqhA138
2024-10-13 16:09:07 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 6b 46 64 76 34 50 73 55 58 30 75 67 38 62 5a 41 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 36 38 37 64 65 34 65 36 33 36 63 66 30 32 62 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: kFdv4PsUX0ug8bZA.3Context: 6687de4e636cf02b
2024-10-13 16:09:08 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-13 16:09:08 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 49 55 6b 68 35 6d 37 72 42 55 4b 46 30 41 36 4b 57 4c 31 4f 38 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: IUkh5m7rBUKF0A6KWL1O8w.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	54242	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:07 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 38 33 59 4a 71 38 2f 61 62 6b 75 71 78 4f 4a 49 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 65 62 31 38 36 39 32 34 35 38 61 36 35 32 34 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 83YJq8/abkuqxOJI.1Context: beb18692458a6524
2024-10-13 16:09:07 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-13 16:09:07 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 38 33 59 4a 71 38 2f 61 62 6b 75 71 78 4f 4a 49 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 65 62 31 38 36 39 32 34 35 38 61 36 35 32 34 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 6b 32 56 31 66 75 62 6e 48 71 70 30 31 75 46 56 41 51 56 4a 55 48 79 76 49 52 48 6a 69 46 6c 63 53 70 65 70 4b 44 68 69 57 4b 33 6b 76 61 55 30 67 4b 49 2b 37 58 36 79 44 37 32 4a 38 2b 50 35 44 6e 75 73 46 54 34 30 68 7a 4e 4b 43 31 54 6c 33 78 66 70 33 42 67 6b 6b 75 32 2f 34 46 56 5a 67 6f 59 41 46 50 6c 6a 37 76 31 6b Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 83YJq8/abkuqxOJI.2Context: beb18692458a6524<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWk2V1fubnHqp01uFVAQVJUHyvIRHjiFlcSpepKDhiWK3kvaU0gKI+7X6yD72J8+P5DnusFT40hzNKC1Tl3xfp3Bgkku2/4FVZgoYAFPlj7v1k
2024-10-13 16:09:07 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 38 33 59 4a 71 38 2f 61 62 6b 75 71 78 4f 4a 49 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 65 62 31 38 36 39 32 34 35 38 61 36 35 32 34 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 83YJq8/abkuqxOJI.3Context: beb18692458a6524<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-13 16:09:08 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-13 16:09:08 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 42 6c 4e 30 71 45 44 67 4b 55 53 67 61 6e 36 2b 4e 5a 43 79 68 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: BlN0qEDgKUSgan6+NZCyhA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	54243	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:07 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:08 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:07 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 739bd3f0-001e-0034-450f-1cdd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160907Z-17db6f7c8cf8rgvlb86c9c0098000000034g00000000e1xv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:08 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	54246	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:07 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:08 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:07 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 4988e983-001e-0082-750c-1c5880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160907Z-17db6f7c8cfvtw4hh2496wp8p800000003ng000000001x5y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:08 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	54245	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:07 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:07 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 35556aea-401e-0064-3048-1c54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160907Z-17db6f7c8cfwtn5x6ye8p8q9m000000003n000000000dqc2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:08 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	54244	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:07 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:07 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 7dbe029a-c01e-007a-2397-1bb877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160907Z-17db6f7c8cfgqlr45m385mnngs00000003rg0000000042k8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:08 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	54247	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:07 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:08 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:07 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 2eee43c6-d01e-0066-0203-1bea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160907Z-17db6f7c8cfqkqk8bn4ck6f72000000004wg000000007yc5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:08 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	54248	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:08 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:08 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:08 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 0cb7a61f-501e-0064-6562-1c1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160908Z-17db6f7c8cfjxfnba42c5rukwg0000000230000000007g0d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:08 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	54251	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:08 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:08 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:08 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: a671d058-901e-00a0-5ad6-1a6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160908Z-17db6f7c8cfvzwz27u5rnq9kpc00000005cg00000000bkru x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:08 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	54252	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:08 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:08 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:08 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 7d81a33d-101e-00a2-42e1-1a9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160908Z-17db6f7c8cf5mtxmr1c51513n0000000056g00000000fakt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:08 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	54249	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:08 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:08 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:08 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 46e4659a-701e-000d-2947-1c6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160908Z-17db6f7c8cf9c22xp43k2gbqvn00000002u000000000443w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:08 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	54250	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:08 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:08 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:08 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 8d7a56b6-b01e-0098-472e-1ccead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160908Z-17db6f7c8cfcrfgzd01a8emnyg00000002mg000000009a0w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:08 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	54253	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:09 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:09 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:09 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 07ebf894-801e-008c-19d8-1a7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160909Z-17db6f7c8cfbr2wt66emzt78g400000004ng0000000099rh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:09 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	54255	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:09 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:09 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:09 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: d1236033-501e-008f-33ea-1a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160909Z-17db6f7c8cfp6mfve0htepzbps00000004hg00000000728m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:09 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	54254	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:09 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:09 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:09 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 07f85e87-a01e-003d-78df-1a98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160909Z-17db6f7c8cfspvtq2pgqb2w5k000000004zg0000000098u1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:09 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	54257	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:09 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:09 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:09 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: de2b4a30-201e-0071-54e2-1aff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160909Z-17db6f7c8cfhzb2znbk0zyvf6n00000004u0000000007t5f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:09 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	54256	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:09 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:09 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:09 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 2ae1a5cc-001e-0046-231b-1cda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160909Z-17db6f7c8cfvtw4hh2496wp8p800000003f000000000dgxy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:09 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	54260	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:10 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:10 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:10 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: a2b1ec5b-001e-002b-54a3-1b99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160910Z-17db6f7c8cfbd7pgux3k6qfa6000000003zg000000009w7y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:10 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	54258	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:10 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:10 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:10 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 36ec684a-f01e-0052-24da-1a9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160910Z-17db6f7c8cf5mtxmr1c51513n0000000057g00000000dkzt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:10 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	54259	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:10 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:10 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:10 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 745fe90a-101e-005a-7f69-1c882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160910Z-17db6f7c8cf5mtxmr1c51513n000000005bg000000005mq2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:10 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	54261	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:10 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:10 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:10 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 37770a76-901e-0048-046f-1cb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160910Z-17db6f7c8cf9wwz8ehu7c5p33g00000002b000000000bygn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:10 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	54262	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:10 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:10 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:10 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 8d6d9129-701e-0001-43c0-1ab110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160910Z-17db6f7c8cfspvtq2pgqb2w5k000000004wg00000000g32b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:10 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	54263	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:11 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:11 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:11 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: e8fbd797-601e-005c-7ee6-1af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160911Z-17db6f7c8cfbr2wt66emzt78g400000004r00000000047fd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:11 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	54265	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:11 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:11 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:11 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: e2d37e80-101e-0079-6257-1c5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160911Z-17db6f7c8cffhvbz3mt0ydz7x4000000036000000000gxxu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:11 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	54266	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:11 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:11 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:11 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 35289574-d01e-00ad-2923-1be942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160911Z-17db6f7c8cf96l6t7bwyfgbkhw0000000440000000009ms1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:11 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	54264	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:11 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:11 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:11 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: fe1a38a0-a01e-0053-6ad8-1a8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160911Z-17db6f7c8cfp6mfve0htepzbps00000004k0000000006spk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:11 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	54267	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:11 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:11 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:11 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 6d1bd684-201e-00aa-7f91-1c3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160911Z-17db6f7c8cf9c22xp43k2gbqvn00000002vg000000000uwd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:11 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	54268	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:12 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:12 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:12 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: fa68fd7e-e01e-0099-0ae2-1ada8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160912Z-17db6f7c8cfqxt4wrzg7st2fm8000000057000000000970b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:12 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	54270	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:12 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:12 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:12 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: cec5e4df-e01e-001f-1c47-1c1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160912Z-17db6f7c8cfcrfgzd01a8emnyg00000002ng000000007u2f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:12 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	54271	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:12 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:12 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:12 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: d113afee-501e-008f-14e4-1a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160912Z-17db6f7c8cfhrxld7punfw920n00000003zg0000000003tv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:12 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	54272	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:12 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:12 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:12 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 2d3659d2-d01e-0066-1cca-1aea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160912Z-17db6f7c8cfspvtq2pgqb2w5k0000000051g000000005628 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:12 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	54269	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:12 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:12 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:12 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 4ec19421-301e-006e-0147-1cf018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160912Z-17db6f7c8cfcl4jvqfdxaxz9w800000002h0000000006seu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:12 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	54273	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:12 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:12 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:12 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 05046913-601e-000d-6fd8-1a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160912Z-17db6f7c8cfbd7pgux3k6qfa6000000003y000000000c1za x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:12 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	54276	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:13 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:13 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:13 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: ecaa5255-c01e-008d-52bf-1a2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160913Z-17db6f7c8cfbr2wt66emzt78g400000004n000000000ar46 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:13 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	54274	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:13 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:13 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:13 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 7536bc90-101e-005a-6b87-1c882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160913Z-17db6f7c8cfjxfnba42c5rukwg00000001zg00000000fgnv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:13 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	54275	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:13 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:13 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:13 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 609b4fe7-801e-007b-3997-1be7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160913Z-17db6f7c8cf96l6t7bwyfgbkhw000000043000000000b95d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:13 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	54277	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:13 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:13 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:13 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 7ee78019-a01e-0002-6d9c-1b5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160913Z-17db6f7c8cfq2j6f03aq9y8dns00000004a0000000008dts x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:13 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	54278	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:13 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:13 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:13 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 1c06004d-d01e-005a-0ee5-1a7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160913Z-17db6f7c8cfspvtq2pgqb2w5k0000000053g0000000009gk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:13 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	54279	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:13 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:13 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:13 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 6411c5a0-901e-0083-0ae3-1abb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160913Z-17db6f7c8cf5mtxmr1c51513n000000005d0000000001pah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:13 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	54280	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:13 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:13 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:13 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 3711f2de-901e-0048-5247-1cb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160913Z-17db6f7c8cfpm9w8b1ybgtytds00000002zg00000000ddvq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:13 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	54281	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:13 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:13 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:13 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 51572f68-f01e-003c-100e-1c8cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160913Z-17db6f7c8cf8rgvlb86c9c009800000003800000000064km x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:13 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	54282	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:13 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:13 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:13 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 86098fa0-701e-005c-652a-1cbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160913Z-17db6f7c8cfvtw4hh2496wp8p800000003f000000000dh1d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:13 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	54283	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:14 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:14 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:14 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 0506fa48-b01e-001e-4cc1-1a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160914Z-17db6f7c8cfbr2wt66emzt78g400000004sg000000000qxb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:14 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	54284	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:14 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:14 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:14 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 3f82ef55-601e-005c-0a97-1bf06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160914Z-17db6f7c8cfp6mfve0htepzbps00000004h0000000007qwm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:14 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	54285	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:14 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:14 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:14 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: f0362bac-601e-005c-101b-1cf06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160914Z-17db6f7c8cfvq8pt2ak3arkg6n00000003400000000076d9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:14 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	54286	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:14 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:14 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:14 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 583c5f3b-101e-007a-5257-1c047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160914Z-17db6f7c8cfpm9w8b1ybgtytds000000031g000000008nz5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:14 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	54287	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:14 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:14 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:14 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 1000688e-201e-0051-7e07-1c7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160914Z-17db6f7c8cffhvbz3mt0ydz7x400000003a00000000087ex x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:14 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	54288	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:15 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:15 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:15 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: e2476cc5-001e-00ad-1ecd-1a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160915Z-17db6f7c8cf4g2pjavqhm24vp400000005d00000000030px x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:15 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	54289	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:15 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:15 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:15 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: ecb94678-501e-0035-51d8-1ac923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160915Z-17db6f7c8cf96l6t7bwyfgbkhw000000047g0000000019f3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:15 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	54291	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:15 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:15 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:15 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: bb1c3872-701e-0050-4447-1c6767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160915Z-17db6f7c8cfjxfnba42c5rukwg000000024g0000000054rm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:15 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	54292	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:15 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:15 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:15 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 6eea93bb-701e-0097-0521-1bb8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160915Z-17db6f7c8cf6qp7g7r97wxgbqc00000004eg000000006y17 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:15 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	54290	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:15 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:15 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:15 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 1d2d3277-301e-0033-5697-1bfa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160915Z-17db6f7c8cfgqlr45m385mnngs00000003s0000000002x2y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:15 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	54293	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:15 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:16 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:15 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 7ec36ae7-901e-0064-7562-1ce8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160915Z-17db6f7c8cfjxfnba42c5rukwg00000002400000000068hd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:16 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	54294	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:16 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:16 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:16 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: b0bf752c-501e-0047-5047-1cce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160916Z-17db6f7c8cf4g2pjavqhm24vp400000005d00000000030rh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:16 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	54295	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:16 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:16 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:16 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 4b0aa4a4-f01e-0071-60aa-1c431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160916Z-17db6f7c8cf6f7vv3recfp4a6w000000026g00000000718u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:16 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	54296	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:16 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:16 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:16 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 50d71c48-e01e-0033-6fe7-1b4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160916Z-17db6f7c8cfwtn5x6ye8p8q9m000000003tg000000001afu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:16 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	54297	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:16 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:16 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:16 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 63590950-201e-0085-2bd8-1a34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160916Z-17db6f7c8cfp6mfve0htepzbps00000004dg00000000e95c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:16 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	54298	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:16 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:16 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:16 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 4eeac0e9-d01e-0066-085b-1cea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160916Z-17db6f7c8cfcl4jvqfdxaxz9w800000002dg00000000crnx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:16 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	54299	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:16 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:16 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:16 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 103cb033-201e-003f-56aa-1c6d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160916Z-17db6f7c8cfcl4jvqfdxaxz9w800000002dg00000000crp5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:16 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	54301	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:09:16 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:09:17 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:09:17 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 2ae22a5c-001e-0046-6b1b-1cda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160917Z-17db6f7c8cfvtw4hh2496wp8p800000003m0000000005n0g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:09:17 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Target ID:	0
Start time:	12:08:44
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	12:08:49
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1960,i,224827854049608094,2786181922029065157,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	12:08:52
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-light.woff2"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	12:10:04
Start date:	13/10/2024
Path:	C:\Windows\System32\OpenWith.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\OpenWith.exe -Embedding
Imagebase:	0x7ff61c760000
File size:	123'984 bytes
MD5 hash:	E4A834784FA08C17D47A1E72429C5109
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: global traffic	TCP traffic: 192.168.2.5:57064 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.5:54240 -> 1.1.1.1:53

Source: global traffic	DNS traffic detected: DNS query: static2.sharepointonline.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.73
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.73
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.73
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.73
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-light.woff2

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Private

General Information

Errors

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

C:\Users\user\Downloads\segoeui-light.woff2 (copy)

C:\Users\user\Downloads\segoeui-light.woff2.crdownload

Chrome Cache Entry: 123

Static File Info

File Icon

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 6628, Parent PID: 4144

General

Chronological Activities

Analysis Process: chrome.exePID: 6800, Parent PID: 6628

General

Chronological Activities

Windows Analysis Report
https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-light.woff2