Edit tour

Windows Analysis Report
http://mail.w-find.com/icloud-archivos/code2022esp.php

Overview

General Information

Sample URL:	http://mail.w-find.com/icloud-archivos/code2022esp.php
Analysis ID:	1532674
Tags:	openphish
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1372 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2228 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1804,i,18377259503311229828,17997055347371181320,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7092 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://mail.w-find.com/icloud-archivos/code2022esp.php" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

ET PHISHING Possible Phish - Saved Website Comment Observed

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-13T20:09:04.820298+0200	2018334	2	Potentially Bad Traffic	50.6.138.164	80	192.168.2.5	49709	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: http://mail.w-find.com/icloud-archivos/code2022esp.php

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49724 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.5:49835 -> 1.1.1.1:53

Source: Network traffic

Suricata IDS: 2018334 - Severity 2 - ET PHISHING Possible Phish - Saved Website Comment Observed : 50.6.138.164:80 -> 192.168.2.5:49709

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 13 Oct 2024 18:09:04 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, Keep-AliveVary: Accept-EncodingContent-Encoding: gzipAccept-Ranges: noneContent-Length: 2876Keep-Alive: timeout=5, max=75Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 52 61 73 db 36 12 fd ee 5f 81 30 9d 8c d4 0b 49 cb 72 dc c4 16 d5 49 1c e7 ea 99 e4 d2 26 ce 75 6e 6e ae 19 08 58 89 48 40 80 01 40 c9 8a eb 9f d4 4f f9 09 f9 63 b7 00 29 8a b2 9d da bd f1 64 ae 73 47 7b 44 62 b1 fb f6 ed db 37 ba f3 f4 e5 e1 c9 3f 7e 3c 22 b9 2b 24 f9 f1 cd 93 e7 c7 87 24 8a d3 f4 e7 e1 61 9a 3e 3d 79 4a 7e 38 79 f1 9c ec 26 db 03 72 62 a8 b2 c2 09 ad a8 4c d3 a3 bf 45 24 ca 9d 2b f7 d3 74 b1 58 24 8b 61 a2 cd 2c 3d 79 95 7a a8 dd 54 6a 6d 21 e1 8e 47 e3 ad d1 9d 38 26 96 ce 81 93 a9 d1 05 a9 8c cc 7a db db 0f b6 fb 1e c0 36 08 82 49 5d f1 84 e9 22 56 36 a9 6c 4a df 0c ff 3e 48 0b 3d 11 12 52 a6 39 24 65 5e 92 38 46 40 df 63 3c ca 81 f2 f1 a8 00 47 89 07 8a e1 43 25 e6 59 74 a8 95 03 e5 e2 93 65 09 11 61 f5 29 8b 1c 9c ba 40 ee 80 b0 9c 1a 0b 2e 7b 73 f2 2c 7e 88 04 09 3e e1 a7 06 53 b4 80 2c 9a 0b 58 94 da b8 0e c4 42 70 97 67 1c e6 82 41 1c 0e f7 89 50 a8 09 95 b1 65 54 42 36 b8 4f 0a 7a 2a 8a aa 58 05 1a f8 91 14 ea 3d 31 20 b3 a8 34 30 05 c7 72 62 dd 52 82 cd 01 b0 47 8e c1 2c 4a d2 29 f6 b2 09 b3 36 22 0e f9 37 b4 fd f9 12 4e b7 fc 42 2e 29 80 0b 8a 29 cc 00 a8 35 3a 2d cb e4 b6 b0 42 49 83 16 e0 ba cf d6 95 87 5a e8 51 a8 bc 34 de a8 46 c4 77 d8 eb d6 68 a2 f9 12 5f 5c cc 09 93 d4 5a a4 20 62 1f 24 f8 f6 3b a1 42 81 21 ed 57 3c 95 95 e0 11 11 3c 8b 9a 95 45 84 53 47 63 97 83 df a8 14 0e b0 0f 8a 20 21 a6 95 cb c7 41 85 70 16 3c 96 7a a6 49 81 3e cb a2 33 ff 3a 8f 9a ee 1e b0 2e 6a b2 a2 15 a1 8d 28 c9 05 47 5c b9 a0 cb 56 61 b1 ca 14 c8 88 f8 9f b7 a1 c6 8f 2b 10 3e 45 7c 94 6f 94 76 49 6c 0e 8d 3e 9b 81 eb 0c 3c a5 d8 46 28 82 9b b3 ce 08 e6 62 b4 5c bc c8 c9 ea a6 99 ba 1e 05 8a 09 f0 d5 8a da 71 ac 83 32 ea c8 ea cf a4 21 7d 29 f1 48 b6 a9 04 93 46 56 cc 14 b6 d9 a4 39 07 23 a6 cb b8 cc b5 82 96 c8 b8 ed da 81 ce 07 9d c6 eb ed 39 e1 bc 2b de 63 9d 33 28 b1 a3 13 a1 38 9c 66 51 3c 88 48 f0 46 16 4d 31 3d b6 e2 23 ec 0f 1e 96 a7 07 4c 4b 6d f6 ef ee 3e f2 7f 07 1d fe fe 39 56 33 54 08 08 48 c2 3e 7f e2 02 37 c4 01 ff ed 44 ea 0f 15 f8 93 24 5c d8 52 5b e1 c4 5c b7 04 d3 7c 30 be e4 e8 56 95 15 77 60 48 1e c7 5c 18 dc 1d 98 0b cd 47 78 5f 19 e1 96 21 89 48 50 33 97 a3 b1 fc e9 79 38 9c e3 88 cb 12 67 72 80 fa 5a 13 a4 80 53 97 45 35 71 7a 81 78 10 58 30 ca c4 e7 4f b8 62 a9 19 95 c2 02 8f 31 41 60 d5 d3 cf bf e1 1b 85 03 63 b4 89 0b b0 96 ce 10 fe f0 0b 10 44 28 a6 8d 01 e6 74 82 4b dd 1c 6d 4d 3d cc 35 12 bc b0 71 0d dc cc 4b ce 50 3a 3a 91 de f1 b2 be b2 e7 59 94 53 7b e4 bf 9f d3 89 1f eb ec 97 ba c8 4f 8a b7 e1 70 82 df 11 29 75 a9 91 4f 4c 2b a7 63 26 b5 f5 db a5 d2 82 2f ba dc 2e 0e dc c0 b7 f0 97 a1 c7 cf f5 d5 61 7d 83 75 d8 bc 61 12 53 c5 e3 a9 66 55 97 93 7d ac f8 33 1f c3 54 9b eb 45 9d fb 85
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 13 Oct 2024 18:09:04 GMTServer: ApacheLast-Modified: Sat, 26 Nov 2022 14:31:26 GMTAccept-Ranges: noneVary: Accept-EncodingContent-Encoding: gzipContent-Length: 478Keep-Alive: timeout=5, max=74Connection: Keep-AliveContent-Type: text/cssData Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 92 4f 4e 83 40 14 87 d7 f6 14 2f 6c 68 1b 69 6b e3 9f b4 6e 34 ae 5c 98 98 f6 00 66 0a 0f 3b 71 60 c8 cc ab 4a 8c 57 70 ed 51 8c c7 f1 02 5e 41 a0 b4 d1 49 83 0e e9 c2 b2 9c 07 bf 07 bf 6f be b3 50 c6 e4 85 cc 47 78 6a ed 95 87 88 8b 74 ec 5e a5 8a b3 00 a6 48 70 ad a4 7b 5a 3e d6 94 0a 1c c7 52 45 4c ac 66 0f c8 6f e7 34 1e 0e 06 d9 44 2b 7f 2c a4 cf 44 db fd 78 7d ff 7c 7b 71 3b fb b0 50 a2 ed f4 fa 51 b1 d3 d3 48 5e a2 e4 0d cd 79 dc 7b 90 61 e8 74 20 cc 37 52 db 59 1e 2b 13 44 df 03 a4 16 48 69 82 4e 27 fb 78 bf 0b 17 32 c9 32 d9 ff 40 db ef c0 c1 68 34 84 f3 40 ce 10 a6 a9 26 8c 34 5c c6 be 54 89 54 8c 30 e8 c1 b9 10 30 c9 5f d7 30 41 8d ea 3e 1f 96 dd b9 06 06 a4 58 80 11 53 77 20 c3 ca 4d dd 7e eb b9 d5 3a ab 49 94 13 13 dc df 06 51 6f b9 ca 1e ec 2a d8 0c be 90 c1 73 4b 7a 15 32 a1 a4 5d 6b f6 17 73 0e ad cd c1 47 aa 67 ce b7 60 33 cc 31 f8 c6 79 1d 61 f0 3d b2 e5 1b 61 c0 17 91 1d da 32 d3 48 aa 1b ad ad 49 b5 96 b7 3f a3 cd 60 0c 19 40 b7 24 58 a9 14 4a da b5 6e 86 3f 71 7e 55 c2 f0 e7 d8 d6 1f 8d 11 9f 49 11 d8 a9 b3 4e 35 c3 1a 83 2c 27 26 b8 bf 2d b2 de 72 5d 3d c0 ab 70 33 38 43 06 d1 2d 29 fe 22 16 4a da b5 76 86 45 71 7e 59 c2 b0 e8 c4 d6 a2 02 86 95 3a 45 a2 19 be 18 44 39 31 c1 fd 6d 10 f5 96 ab ec c1 ae 82 cd e0 0b 19 3c b7 a4 57 21 13 4a da b5 66 86 39 71 7e 51 c2 30 e7 70 6d ce e6 ee 84 8f b4 ee 6e 21 58 91 b3 32 ab 48 fc 6b a5 be 00 9b 6e d4 da 27 11 00 00 Data Ascii: ON@/lhikn4\f;q`JWpQ^AIoPGxjt^Hp{Z>RELfo4D+,Dx}\|{q;PQH^y{at 7RY+DHiN'x22@h4@&4\TT00_0A>XSw M~:IQo*sKz2]ksGg`31ya=a2HI?`@$XJn?q~UIN5,'&-r]=p38C-)"JvEq~Y:ED91m<W!Jf9q~Q0pmn!X2Hkn'
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 13 Oct 2024 18:09:05 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, Keep-AliveLast-Modified: Sat, 26 Nov 2022 14:31:26 GMTAccept-Ranges: noneVary: Accept-EncodingContent-Encoding: gzipContent-Length: 286Keep-Alive: timeout=5, max=75Content-Type: text/cssData Raw: 1f 8b 08 00 00 00 00 00 00 03 55 50 dd 6a c3 20 14 be f7 29 84 31 58 21 06 6d 92 76 d5 ab 5e 74 ef 61 a2 4d 0e b3 2a c6 92 ac 63 ef be 93 8c 6c 0c 11 3c e7 7c 3f e7 b3 b4 29 85 e4 42 0f 9e 7e 92 56 77 ef 7d 0a 77 6f 58 17 5c 48 92 3e bd 9d 2f a7 73 a5 48 0c 23 64 08 5e 52 dd 8e c1 dd b3 55 64 02 93 07 79 e4 cf 8a dc 74 42 09 e6 ec 35 4b ca aa 23 b6 da 90 8c 4d 2c 69 03 f7 51 d2 26 ce 8a fc cc 9b 3d 8e a3 36 06 7c 2f a9 b0 b7 0d 8c 45 9c 29 ca 83 a1 a9 6f f5 8b 78 6d 0a 51 9f 0a 51 f0 b2 3e ee 16 dc cc c6 41 9b 30 49 ca 11 8b aa 54 2c 8f 3d de 95 c2 8b f5 94 62 f7 bb 55 0e 51 d2 d3 e2 ff 67 ba ae b3 85 6c 78 75 a9 b8 22 d7 e0 33 9b 2c f4 03 6e 59 73 ec 64 3b 67 a6 1d f4 18 bc b3 3e db a4 c8 83 81 37 76 46 91 8d 32 c2 c3 6e 9a ce 66 44 b1 31 ea 6e 75 62 bc e4 e2 b0 64 fc a7 de f0 8d 7c d5 37 70 1f f8 af 09 b4 53 e4 8b 7e 03 1b d6 07 a2 94 01 00 00 Data Ascii: UPj )1X!mv^taM*cl<\|?)B~Vw}woX\H>/sH#d^RUdytB5K#M,iQ&=6\|/E)oxmQQ>A0IT,=bUQglxu"3,nYsd;g>7vF2nfD1nubd\|7pS~

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/code2022esp.php HTTP/1.1Host: mail.w-find.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/fonts.css HTTP/1.1Host: mail.w-find.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://mail.w-find.com/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/app.css HTTP/1.1Host: mail.w-find.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://mail.w-find.com/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/style.css HTTP/1.1Host: mail.w-find.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://mail.w-find.com/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/ajax-loader.gif HTTP/1.1Host: mail.w-find.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://mail.w-find.com/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sep.png HTTP/1.1Host: mail.w-find.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://mail.w-find.com/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/myriad-set-pro_thin.woff HTTP/1.1Host: mail.w-find.comConnection: keep-aliveOrigin: http://mail.w-find.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://mail.w-find.com/icloud-archivos/fonts.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/myriad-set-pro_text.woff HTTP/1.1Host: mail.w-find.comConnection: keep-aliveOrigin: http://mail.w-find.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://mail.w-find.com/icloud-archivos/fonts.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/myriad-set-pro_text.ttf HTTP/1.1Host: mail.w-find.comConnection: keep-aliveOrigin: http://mail.w-find.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://mail.w-find.com/icloud-archivos/fonts.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/myriad-set-pro_thin.ttf HTTP/1.1Host: mail.w-find.comConnection: keep-aliveOrigin: http://mail.w-find.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://mail.w-find.com/icloud-archivos/fonts.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/ajax-loader.gif HTTP/1.1Host: mail.w-find.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sep.png HTTP/1.1Host: mail.w-find.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: mail.w-find.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://mail.w-find.com/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: mail.w-find.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: mail.w-find.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 13 Oct 2024 18:09:05 GMTServer: ApacheLast-Modified: Wed, 24 May 2023 01:50:54 GMTAccept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 4677Keep-Alive: timeout=5, max=73Connection: Keep-AliveContent-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 28 a5 1e fc 61 7b e3 38 6a 6f 8e 17 74 1e c2 45 49 2e fb b6 b1 d1 1f 36 b2 b2 ac 14 f6 71 5e 09 9d 3e 04 59 8a 5a a9 b3 ae 51 08 8e 8d e9 fc 48 ac 5d f3 72 42 69 73 5f 89 34 95 3a 1f 1e 8c 4a 61 72 a9 f9 21 63 0f fb 99 28 a5 6a 86 05 aa 29 3a 99 88 d1 9f cb 7b 7b de 64 21 35 9a fb ee ce cf 07 d5 1c 44 ed 68 34 93 a9 2b 86 bf fe f2 6b 35 df 79 03 f6 1c 55 ec f7 fd 44 24 77 b9 a1 5a a7 7d 59 8a 1c 87 b5 51 4f 9f 2c f5 86 35 1b f1 49 3e ff 69 36 f8 a3 ca 9f 3c 1b ad 5d 32 58 a1 70 43 4d dd d3 c6 e4 02 65 5e b8 e1 e1 57 68 94 32 fd 2e 1a 7c 7e 90 cb 6c 27 89 f6 a7 df 7c 83 fa 76 2c ec e5 c2 91 99 90 73 54 de 57 64 a5 93 a4 19 47 09 27 a7 38 52 98 b9 e1 d1 0b 46 c9 14 f1 00 ff fe 4f 00 e7 f3 f9 fd da e1 45 ac c7 3e 99 a3 17 ff c6 df 87 fc 38 82 2e b1 90 56 fb d5 3f 5c a4 f7 f5 09 7e 09 b5 5b 9f e2 4b d5 17 4a e6 7a 98 f0 16 9a ef 70 a0 83 83 3d 34 86 4c 42 29 de 87 e2 59 f9 0f 1c 1e 79 ae e1 75 d6 46 f9 eb c1 c1 b7 e2 4d 84 de ae e6 01 ff fb d6 eb 05 59 87 e9 a4 b9 df 1e bf 62 f7 f3 f3 05 3b eb 1a 85 43 e9 d8 83 64 b4 35 f1 5b 07 26 54 57 a4 ef 13 52 64 86 7b 2f 5f 1d 1c 6c 0e fb 79 e7 b0 6f 04 cf d1 59 27 0c 2b 02 f1 c5 11 47 87 3b 47 fc 8b fe af 8d 5c 84 e0 fd 3f 7a fe c5 4a 4c c8 39 2a 19 e5 7e 22 92 bb dc 50 ad d3 be 2c 45 8e c3 da a8 a7 4f a2 24 97 7d db d8 28 ac d9 88 4f b6 57 06 b9 cc 9e 3c 1b ad dd 32 58 21 b7 53 53 f7 b4 51 c8 a2 d5 72 78 fc ed e5 cc c4 e7 4f ab fd 85 1e 78 1e 22 0e df 23 a8 44 9a 4a 9d 0f e1 b0 4d be fd 19 41 a2 50 98 21 33 2d be 75 9a 48 12 32 a9 e4 36 ac c2 81 17 07 3f 8e a0 95 01 bf 3c 67 ec 11 94 52 f7 3b 31 3c ad 5d ea 98 1d 80 a8 1d 8d c0 e1 dc f5 39 c6 9c d7 12 06 47 f3 dd 24 a0 56 70 bf 8e a3 30 73 df 8f 42 bb 51 1e 3d fa 66
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 13 Oct 2024 18:09:05 GMTServer: ApacheLast-Modified: Wed, 24 May 2023 01:50:54 GMTAccept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 4677Keep-Alive: timeout=5, max=74Connection: Keep-AliveContent-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 28 a5 1e fc 61 7b e3 38 6a 6f 8e 17 74 1e c2 45 49 2e fb b6 b1 d1 1f 36 b2 b2 ac 14 f6 71 5e 09 9d 3e 04 59 8a 5a a9 b3 ae 51 08 8e 8d e9 fc 48 ac 5d f3 72 42 69 73 5f 89 34 95 3a 1f 1e 8c 4a 61 72 a9 f9 21 63 0f fb 99 28 a5 6a 86 05 aa 29 3a 99 88 d1 9f cb 7b 7b de 64 21 35 9a fb ee ce cf 07 d5 1c 44 ed 68 34 93 a9 2b 86 bf fe f2 6b 35 df 79 03 f6 1c 55 ec f7 fd 44 24 77 b9 a1 5a a7 7d 59 8a 1c 87 b5 51 4f 9f 2c f5 86 35 1b f1 49 3e ff 69 36 f8 a3 ca 9f 3c 1b ad 5d 32 58 a1 70 43 4d dd d3 c6 e4 02 65 5e b8 e1 e1 57 68 94 32 fd 2e 1a 7c 7e 90 cb 6c 27 89 f6 a7 df 7c 83 fa 76 2c ec e5 c2 91 99 90 73 54 de 57 64 a5 93 a4 19 47 09 27 a7 38 52 98 b9 e1 d1 0b 46 c9 14 f1 00 ff fe 4f 00 e7 f3 f9 fd da e1 45 ac c7 3e 99 a3 17 ff c6 df 87 fc 38 82 2e b1 90 56 fb d5 3f 5c a4 f7 f5 09 7e 09 b5 5b 9f e2 4b d5 17 4a e6 7a 98 f0 16 9a ef 70 a0 83 83 3d 34 86 4c 42 29 de 87 e2 59 f9 0f 1c 1e 79 ae e1 75 d6 46 f9 eb c1 c1 b7 e2 4d 84 de ae e6 01 ff fb d6 eb 05 59 87 e9 a4 b9 df 1e bf 62 f7 f3 f3 05 3b eb 1a 85 43 e9 d8 83 64 b4 35 f1 5b 07 26 54 57 a4 ef 13 52 64 86 7b 2f 5f 1d 1c 6c 0e fb 79 e7 b0 6f 04 cf d1 59 27 0c 2b 02 f1 c5 11 47 87 3b 47 fc 8b fe af 8d 5c 84 e0 fd 3f 7a fe c5 4a 4c c8 39 2a 19 e5 7e 22 92 bb dc 50 ad d3 be 2c 45 8e c3 da a8 a7 4f a2 24 97 7d db d8 28 ac d9 88 4f b6 57 06 b9 cc 9e 3c 1b ad dd 32 58 21 b7 53 53 f7 b4 51 c8 a2 d5 72 78 fc ed e5 cc c4 e7 4f ab fd 85 1e 78 1e 22 0e df 23 a8 44 9a 4a 9d 0f e1 b0 4d be fd 19 41 a2 50 98 21 33 2d be 75 9a 48 12 32 a9 e4 36 ac c2 81 17 07 3f 8e a0 95 01 bf 3c 67 ec 11 94 52 f7 3b 31 3c ad 5d ea 98 1d 80 a8 1d 8d c0 e1 dc f5 39 c6 9c d7 12 06 47 f3 dd 24 a0 56 70 bf 8e a3 30 73 df 8f 42 bb 51 1e 3d fa 66
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 13 Oct 2024 18:09:05 GMTServer: ApacheLast-Modified: Wed, 24 May 2023 01:50:54 GMTAccept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 4677Keep-Alive: timeout=5, max=72Connection: Keep-AliveContent-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 28 a5 1e fc 61 7b e3 38 6a 6f 8e 17 74 1e c2 45 49 2e fb b6 b1 d1 1f 36 b2 b2 ac 14 f6 71 5e 09 9d 3e 04 59 8a 5a a9 b3 ae 51 08 8e 8d e9 fc 48 ac 5d f3 72 42 69 73 5f 89 34 95 3a 1f 1e 8c 4a 61 72 a9 f9 21 63 0f fb 99 28 a5 6a 86 05 aa 29 3a 99 88 d1 9f cb 7b 7b de 64 21 35 9a fb ee ce cf 07 d5 1c 44 ed 68 34 93 a9 2b 86 bf fe f2 6b 35 df 79 03 f6 1c 55 ec f7 fd 44 24 77 b9 a1 5a a7 7d 59 8a 1c 87 b5 51 4f 9f 2c f5 86 35 1b f1 49 3e ff 69 36 f8 a3 ca 9f 3c 1b ad 5d 32 58 a1 70 43 4d dd d3 c6 e4 02 65 5e b8 e1 e1 57 68 94 32 fd 2e 1a 7c 7e 90 cb 6c 27 89 f6 a7 df 7c 83 fa 76 2c ec e5 c2 91 99 90 73 54 de 57 64 a5 93 a4 19 47 09 27 a7 38 52 98 b9 e1 d1 0b 46 c9 14 f1 00 ff fe 4f 00 e7 f3 f9 fd da e1 45 ac c7 3e 99 a3 17 ff c6 df 87 fc 38 82 2e b1 90 56 fb d5 3f 5c a4 f7 f5 09 7e 09 b5 5b 9f e2 4b d5 17 4a e6 7a 98 f0 16 9a ef 70 a0 83 83 3d 34 86 4c 42 29 de 87 e2 59 f9 0f 1c 1e 79 ae e1 75 d6 46 f9 eb c1 c1 b7 e2 4d 84 de ae e6 01 ff fb d6 eb 05 59 87 e9 a4 b9 df 1e bf 62 f7 f3 f3 05 3b eb 1a 85 43 e9 d8 83 64 b4 35 f1 5b 07 26 54 57 a4 ef 13 52 64 86 7b 2f 5f 1d 1c 6c 0e fb 79 e7 b0 6f 04 cf d1 59 27 0c 2b 02 f1 c5 11 47 87 3b 47 fc 8b fe af 8d 5c 84 e0 fd 3f 7a fe c5 4a 4c c8 39 2a 19 e5 7e 22 92 bb dc 50 ad d3 be 2c 45 8e c3 da a8 a7 4f a2 24 97 7d db d8 28 ac d9 88 4f b6 57 06 b9 cc 9e 3c 1b ad dd 32 58 21 b7 53 53 f7 b4 51 c8 a2 d5 72 78 fc ed e5 cc c4 e7 4f ab fd 85 1e 78 1e 22 0e df 23 a8 44 9a 4a 9d 0f e1 b0 4d be fd 19 41 a2 50 98 21 33 2d be 75 9a 48 12 32 a9 e4 36 ac c2 81 17 07 3f 8e a0 95 01 bf 3c 67 ec 11 94 52 f7 3b 31 3c ad 5d ea 98 1d 80 a8 1d 8d c0 e1 dc f5 39 c6 9c d7 12 06 47 f3 dd 24 a0 56 70 bf 8e a3 30 73 df 8f 42 bb 51 1e 3d fa 66
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 13 Oct 2024 18:09:05 GMTServer: ApacheLast-Modified: Wed, 24 May 2023 01:50:54 GMTAccept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 4677Keep-Alive: timeout=5, max=73Connection: Keep-AliveContent-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 28 a5 1e fc 61 7b e3 38 6a 6f 8e 17 74 1e c2 45 49 2e fb b6 b1 d1 1f 36 b2 b2 ac 14 f6 71 5e 09 9d 3e 04 59 8a 5a a9 b3 ae 51 08 8e 8d e9 fc 48 ac 5d f3 72 42 69 73 5f 89 34 95 3a 1f 1e 8c 4a 61 72 a9 f9 21 63 0f fb 99 28 a5 6a 86 05 aa 29 3a 99 88 d1 9f cb 7b 7b de 64 21 35 9a fb ee ce cf 07 d5 1c 44 ed 68 34 93 a9 2b 86 bf fe f2 6b 35 df 79 03 f6 1c 55 ec f7 fd 44 24 77 b9 a1 5a a7 7d 59 8a 1c 87 b5 51 4f 9f 2c f5 86 35 1b f1 49 3e ff 69 36 f8 a3 ca 9f 3c 1b ad 5d 32 58 a1 70 43 4d dd d3 c6 e4 02 65 5e b8 e1 e1 57 68 94 32 fd 2e 1a 7c 7e 90 cb 6c 27 89 f6 a7 df 7c 83 fa 76 2c ec e5 c2 91 99 90 73 54 de 57 64 a5 93 a4 19 47 09 27 a7 38 52 98 b9 e1 d1 0b 46 c9 14 f1 00 ff fe 4f 00 e7 f3 f9 fd da e1 45 ac c7 3e 99 a3 17 ff c6 df 87 fc 38 82 2e b1 90 56 fb d5 3f 5c a4 f7 f5 09 7e 09 b5 5b 9f e2 4b d5 17 4a e6 7a 98 f0 16 9a ef 70 a0 83 83 3d 34 86 4c 42 29 de 87 e2 59 f9 0f 1c 1e 79 ae e1 75 d6 46 f9 eb c1 c1 b7 e2 4d 84 de ae e6 01 ff fb d6 eb 05 59 87 e9 a4 b9 df 1e bf 62 f7 f3 f3 05 3b eb 1a 85 43 e9 d8 83 64 b4 35 f1 5b 07 26 54 57 a4 ef 13 52 64 86 7b 2f 5f 1d 1c 6c 0e fb 79 e7 b0 6f 04 cf d1 59 27 0c 2b 02 f1 c5 11 47 87 3b 47 fc 8b fe af 8d 5c 84 e0 fd 3f 7a fe c5 4a 4c c8 39 2a 19 e5 7e 22 92 bb dc 50 ad d3 be 2c 45 8e c3 da a8 a7 4f a2 24 97 7d db d8 28 ac d9 88 4f b6 57 06 b9 cc 9e 3c 1b ad dd 32 58 21 b7 53 53 f7 b4 51 c8 a2 d5 72 78 fc ed e5 cc c4 e7 4f ab fd 85 1e 78 1e 22 0e df 23 a8 44 9a 4a 9d 0f e1 b0 4d be fd 19 41 a2 50 98 21 33 2d be 75 9a 48 12 32 a9 e4 36 ac c2 81 17 07 3f 8e a0 95 01 bf 3c 67 ec 11 94 52 f7 3b 31 3c ad 5d ea 98 1d 80 a8 1d 8d c0 e1 dc f5 39 c6 9c d7 12 06 47 f3 dd 24 a0 56 70 bf 8e a3 30 73 df 8f 42 bb 51 1e 3d fa 66

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49724 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@21/30@6/5

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1804,i,18377259503311229828,17997055347371181320,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://mail.w-find.com/icloud-archivos/code2022esp.php"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1804,i,18377259503311229828,17997055347371181320,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
mail.w-find.com	50.6.138.164	true	false	unknown
www.google.com	216.58.212.132	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
http://mail.w-find.com/sep.png	false	unknown
http://mail.w-find.com/icloud-archivos/app.css	false	unknown
http://mail.w-find.com/icloud-archivos/myriad-set-pro_text.ttf	false	unknown
http://mail.w-find.com/assets/img/ajax-loader.gif	false	unknown
http://mail.w-find.com/icloud-archivos/myriad-set-pro_thin.ttf	false	unknown
http://mail.w-find.com/icloud-archivos/fonts.css	false	unknown
http://mail.w-find.com/icloud-archivos/style.css	false	unknown
http://mail.w-find.com/icloud-archivos/myriad-set-pro_thin.woff	false	unknown
http://mail.w-find.com/icloud-archivos/code2022esp.php	false	unknown
http://mail.w-find.com/icloud-archivos/myriad-set-pro_text.woff	false	unknown
http://mail.w-find.com/favicon.ico	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
216.58.212.132	www.google.com	United States	15169	GOOGLEUS	false
50.6.138.164	mail.w-find.com	United States	46606	UNIFIEDLAYER-AS-1US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1532674
Start date and time:	2024-10-13 20:08:05 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://mail.w-find.com/icloud-archivos/code2022esp.php
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@21/30@6/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.163, 142.250.186.46, 74.125.133.84, 34.104.35.123, 172.217.16.202, 142.250.185.138, 142.250.184.234, 142.250.185.202, 142.250.186.42, 142.250.181.234, 142.250.74.202, 216.58.206.74, 142.250.185.234, 172.217.18.10, 142.250.186.138, 142.250.186.106, 142.250.185.74, 142.250.186.74, 142.250.185.170, 142.250.185.106, 4.175.87.197, 2.19.126.137, 2.19.126.163, 192.229.221.95, 52.165.164.15, 40.69.42.241, 142.250.186.67
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, a767.dspw65.akamai.net, clients2.google.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, ctldl.windowsupdate.com, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://mail.w-find.com/icloud-archivos/code2022esp.php

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 17:09:03 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9770042304525113
Encrypted:	false
SSDEEP:	48:8mdsTQEIHRidAKZdA19ehwiZUklqehsJy+3:8dveBJy
MD5:	62D6C25BD882684F4C73CE6746280A40
SHA1:	EDDA76DE47FDC2B7B3EB6A9C621B3BA5338D02B2
SHA-256:	8520CF2E64F5B73E4292157CE29EE2493F1C73039D15440DC9932D168009A7D7
SHA-512:	B2FEE7936DE9553B4C17DFFE82588F59ADDA20DF72073451E071904B126FC64E0939D14EFC71484F7C1F0CBA36CE4677384C9B6B5161FF8FC86E24B11015E119
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,............N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IMY .....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMY .....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VMY .....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VMY ............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VMY"............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............G......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 17:09:03 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9929808335056327
Encrypted:	false
SSDEEP:	48:8+dsTQEIHRidAKZdA1weh/iZUkAQkqehxJy+2:8lv89Q+Jy
MD5:	2F523834B6BA71F8F2F2339AE69A5BA5
SHA1:	B297C967BFE95304FC2DAB001B31279F81459598
SHA-256:	CDE8CCBEB7547981E10961CB73856E9484341FCC41E593202628C8B0D09E2B0A
SHA-512:	5502B8BEECCBC41D557C675B0E78BB6738B1B4B216C3B0F6DB34F44E3A718C2A461081AA7D0F7E68EDA0B73917CDB3CA8D96D05E777DBC0B860A2B314052B564
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IMY .....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMY .....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VMY .....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VMY ............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VMY"............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............G......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.003035795402441
Encrypted:	false
SSDEEP:	48:8xldsTQEsHRidAKZdA14tseh7sFiZUkmgqeh7srJy+BX:8xUvwndJy
MD5:	FE4394BBF065A01D32DC750D3C73AF67
SHA1:	06133143ED4026773E050E926557212CCA5EBF43
SHA-256:	F52F56F42633AF72B7F541913D2747E56A3D2D2123C6522E2602379730BADBB5
SHA-512:	D13984AC91FE58327680BD1210E92BE679DFAD74F448AD576881508457AE5B57B7A253407FD8EDDA854FD5AA4597AA09DA05A024942E01999DE199644AFEC970
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IMY .....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMY .....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VMY .....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VMY ............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............G......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 17:09:03 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.992706065701811
Encrypted:	false
SSDEEP:	48:8ZdsTQEIHRidAKZdA1vehDiZUkwqeh1Jy+R:8AvHjJy
MD5:	5675B2BBC88AC97035A118E6AAE3AF9C
SHA1:	FE126C3ADB03AB6B1A2D278EE94191172894C0E8
SHA-256:	7777D2FDED5FF300B36A68C95FBED7914AA315E2DD6C6A737C32A385EC64D500
SHA-512:	710AAA91F23EC1D5F7329E831ED77CB0384914C93226E21F5F507FD7F19CCC51F4142F6BA2E6C726675A6D4B5CFD02FB1266F7C533380FE07D37459CCB55F315
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IMY .....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMY .....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VMY .....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VMY ............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VMY"............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............G......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 17:09:03 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9767741261062466
Encrypted:	false
SSDEEP:	48:8jdsTQEIHRidAKZdA1hehBiZUk1W1qehnJy+C:86v39HJy
MD5:	DD6ABCB6F7F77D711623400FF42C731D
SHA1:	59A6116C37F4973AB2DD71EBA4AF5FDA3011D1E3
SHA-256:	2542B789226310253535C661A9B612656922B97A5CE43CF8C59B98FE1321C567
SHA-512:	0DD2A425D478533F576AEF87A8C7837930E2D909D20D34F74A52130378127593A862BF2CC71E0FC1049180651E6DCFB206E353D298E32C92E279AB323180034A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....-l......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IMY .....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMY .....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VMY .....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VMY ............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VMY"............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............G......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 17:09:03 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9886314241812406
Encrypted:	false
SSDEEP:	48:8LdsTQEIHRidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbdJy+yT+:8Sv/T/TbxWOvTbdJy7T
MD5:	29655831F43AD36F686E7A799862BAFE
SHA1:	BC65575D3D5BDD48FC64E322F7FAD25CB047A70E
SHA-256:	AA15A9DCFFD96A801CF384628E9F3432546A0C1FF2C53665EA64933D80452292
SHA-512:	05C464FB26BE19F94A922ED9E05B3FF63C7B27907D3B1CC3F83A676E2BE21BC6E74386529FB1CD9175DD1FB91E248FEDCC1386FDA71B077D75B955E45B28075A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....rz.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IMY .....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMY .....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VMY .....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VMY ............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VMY"............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............G......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 4391
Category:	downloaded
Size (bytes):	478
Entropy (8bit):	7.513782066941152
Encrypted:	false
SSDEEP:	12:XviJMf980VmeqMMTTaFboWdrMdMUExD6//CM14r0:XvDlrVmGMOboWOM4Ir0
MD5:	C746FC3127CFA3EB80C0B4E37C0A3809
SHA1:	C236B3E78037531CC16970D3FDD3755E629CA7E7
SHA-256:	05D139E2C2F90C5F47DCFE620F12235F292FB9BFED7CA69DF83E400C808D2EC7
SHA-512:	26CFDAFEB59886EEFA24D98740C0EC2C03945D6A63EF3C3E91E2269F8BE8DC1920FDD4B8D05972F99705C75E0B6B6B9E08135AC696E3F80408EB071EF89C02D5
Malicious:	false
Reputation:	low
URL:	http://mail.w-find.com/icloud-archivos/fonts.css
Preview:	...........ON.@...../lh.ik.n4.\....f..;q`..J.Wp.Q....^A...I.........o..P...Gxj...t.^.....Hp..{Z>....REL.f..o.4....D+.,..D..x}.\|{q;..P....Q...H^....y.{.a.t .7R.Y.+.D....Hi.N'.x...2.2..@....h4..@....&.4\.T.T.0....0._.0A..>......X..Sw ..M.~..:.I......Qo....*.....sKz.2..]k..s....G.g.`3.1..y.a.=...a.....2.H....I...?..`..@.$X..J.n.?q~U.........I...N5...,'&..-..r]=..p38C..-).".J.v.Eq~Y.......:E....D91..m............<..W!.J.f.9q~Q.0.pm.....n!X..2.H.k....n..'...

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 382 x 50, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1240
Entropy (8bit):	7.76387952763145
Encrypted:	false
SSDEEP:	24:6wss9YhvQELfVIWf1W9jKNhW0i9i3rhrk58hsUY:6wss9OFLfOWsqWbidrkaA
MD5:	AFE4BC3227B4889FC78A8181E014A931
SHA1:	E3FF6C0083FBEDED76E33ACE08BACAC04E7AD35B
SHA-256:	E39F78E3FD9428C8AD22060046D9CC07D65CF9FA784A16A3925B9ACB52F35C3D
SHA-512:	59A92FDEE85A7E47A8D2D0CF757BFFAD15187F5095F74E87CCD3074EB6FA9A18E3286ABD27919135C534A07E3BA350C6BCDDF974B77FE2D58AB5510964DAE8BB
Malicious:	false
Reputation:	low
URL:	http://mail.w-find.com/sep.png
Preview:	.PNG........IHDR...~...2........l....pHYs...........~.....PLTE....................tRNS....9.qb...^IDATh..Y..0..:.....u.._.Y#.....8.A...X.5....95.b..j.f.?...../V..?.:..'.gL.#..o.^S)%'y.....h.u....x...]].w.Qu.......V..u.7.K.U......b...W#.y.@.1. .r..\|-..Z.%.\|.....F$........k....-.......J. .h.{.....5@..5....L........\|D@...2..........(....\.......O..W.+...:...QB.4..../ ?K..(..x.....+ ..=....)...r.../...P...;....UX..-..t.&.T.....HD.[.aA.0.gz..F^...@OS.......vk,4...V~.A..c0. .;..j...o. A...(..........?:.R8...\|.Em..\|.~.......S......R.!.MBk..i..>\|.\|.@....h....=J.c..-.......?.?..9...h...:...K.19..Pm..F..$...4..%.) ....0<n....Y.....$z..2^....u....E.T;..q..d.P.j..yQ.,.U..y.......dDm.`!..n.l..T..x?.....TC[.i.$.:.MC.......m.....`.W...Qc..t.Zf....k.z%...., .2.0...:3...{.6J........X..mDXiv.?..!p.{....46u......W=..k.y..LB...._.9....{1>...F.h.q....~z4.=:..{.7.o:.1..>.1..=..}+<<......Y'......,..P.....k..$...$.J"V.#.......f..{.....[.#.....WN.I.W...t....E.p..

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 82736
Category:	downloaded
Size (bytes):	19063
Entropy (8bit):	7.980853600738599
Encrypted:	false
SSDEEP:	384:TvfIAy2mTqa+D3MxbWlu/3hCih2NmFnO6y6yhIybA0geonVx5WPrxXF:DLy2mTj+D3Bls3hC1NSWk0gR5yxXF
MD5:	A9C38D6EA5B19E01F836A181355F8EAC
SHA1:	48DB47805747E2F2D49C3B532331C2F77975929B
SHA-256:	3DF622AAD9A8AD1F0A5E5AE96E980DC14363DB3A47315D7806D46C6B0FE2D209
SHA-512:	748956F252133CCF57B04799894D1ED61433A4B9476E87BF0D9B512563248D5C150939DAB18FFC4F7522887EF1A2199C5284568BC09E349D56045A22AE1DAD21
Malicious:	false
Reputation:	low
URL:	http://mail.w-find.com/icloud-archivos/app.css
Preview:	.............-.;.).H..A...D.T.<u.?.6.s...r..J.$.)R ..#.y.}6).,.vD.9...as....{..<...w...e.d.%.4..i.X....52.`.f..a..6q...'[..d..$....$/vB.U.D....+.RN.?`...G........S\.&..\+(fR...?......d]=~(1.TIE..A......M..K.....+.a...t.......R,.1...........^.......gjuc.0g9,.`M-.D..i...pN%.....&.......N.`.P...%......9...n/.J%.......0.,.p.g{.. ...X...'..f....#....i.,......LIc .....1'.V."y.!.8..y.0..8Q.EtBD.`N./^ fOkZ...q..3.>f....}?.a..%...y.N.Vu]...+.Z...]%5....E..p.kV..FVq......m........t...........b....A....X^+...f..l.V..a>.-...........q.... \...$..]B.-.....3\2.q,.....>.>~..9j7Nj..x..DU....2...x)...q?...uk...U....cZ<....L.....f....!...T.....-L.....y...M..{.A.......\|/...AhO..3.W..0/..4T6..v.J2pHy....1.'.{R...Hm7..........e2.5bBP.....RxWaB\h.....YG]t.......;-h.........9.X6c.T..m.E]&T.....1.r.+&P/V...6..........VZL{h..1...R)....l5.y....r..]&{.M..5..I<f...^G.!.3.\|LC..{.X.L.....{2[.h..=.....4..\....V.[.\|.*.r.]V&W..l9.....1....6..!(...JS{...cMW8.g....

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 404
Category:	downloaded
Size (bytes):	286
Entropy (8bit):	7.202571665522594
Encrypted:	false
SSDEEP:	6:XtbfW388Hmx9tyIo+q/tJcOiPaaPiSSso3k2XVHM4kll:XtWM8QrOp/IO4Do3k2XVVk/
MD5:	CB5A7254A701EDBA03B1AC2B4F5E4313
SHA1:	2C08907B89A2E04EBBDCC50FC99944B55C0F8CD0
SHA-256:	839909B0ED20B10587DC1034CFDF4A78215DA3E0B5C7674AEE2FDE3F1EFB8E39
SHA-512:	5B961F8E160E814786EB55BB856C14A5546B03F5D77AB78961753A4DF6C74E9EB61B501AE83D12944E33ED5C6C9066F16792829DA7E5F8AA5AEA8B91B8C56CB1
Malicious:	false
Reputation:	low
URL:	http://mail.w-find.com/icloud-archivos/style.css
Preview:	..........UP.j. ...).1X!.m.v.^t.a.M..*..c..l..<.\|?.)..B..~.Vw.}.woX.\H.>../.s.H.#d.^R...Ud...y...tB...5K.#...M,i..Q.&...=..6.\|/.....E.)...o..xm.Q..Q.>.....A.0I....T,.=....b..U.Q....g....lxu.."..3.,..nYs.d;g......>...7vF..2..n..fD.1.nub...d.....\|.7p.....S.~.........

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 9582
Category:	downloaded
Size (bytes):	2876
Entropy (8bit):	7.927258942534974
Encrypted:	false
SSDEEP:	48:XUmcQDWwu+f3LHWw21Sf1qLohQp8X6g68ul7P7wYC0i3ANJJosIvpdc7U:1DWI/K1SootX6NXNVBQANBom7U
MD5:	68FFFDE2F5C5F5A23A790089EA17A4DA
SHA1:	FA076FAB236C3FE2A0992596318FB2D4E5343752
SHA-256:	3065955F7F491320703127A0FED2F0C13EFB3C27B701F2211BDE5F0DC5C5D8B5
SHA-512:	2EB902449AF92BB53B4D8AAEE3F59612D29D9C668073439C62416C8A44124FBB8E005C9EEDD4F79294371A06C2ABF6C5FCAE42AF9B96BD24B505F946F39CC762
Malicious:	false
Reputation:	low
URL:	http://mail.w-find.com/icloud-archivos/code2022esp.php
Preview:	...........Ras.6..._.0....I.r....I.....&.unn...X.H@..@...O...c..).....d.sG{Db.....7......?~<".+$.....$.....a.>=yJ~8y..&..rb......L..E$.+..t.X$.a..,=y.z..Tjm!.G..8&.........z.......6..I].."V6.lJ...>H.=..R.9$e^.8F@.c<....G....C%.Yt.....e..a.)....@.....{s.,~...>..S..,..X....Bp.g..A....P....eTB6.O.z*..X......=1 ..40..rb.R....G..,J.)....6"..7....N..B.)...)...5:-..BI......Z.Q..4.F.w...h..._\....Z. b.$..;.B.!.W<.....<...E.SGc........ !....A.p.<.z.I.>.3.:......j.....(..G\...Va.........+.>E\|.o.vIl..>....<..F(......b.\............q..2....!}).H....FV....9.#..............9.+.c.3(....8.fQ<.H.F.M1=..#......LKm...>......9V3T..H.>...7....D.....$\.R[..\...\|0...V..w`H..\......Gx_..!.HP3.....y8....gr..Z...S.E5qz.x.X0...O.b......1A`.......c...........D(....t.K..mM=.5...q...K.P::.....Y.S{......O...p...)u..OL+.c&..../............a}.u.a.S..fU..}..3..T..E......W._.G.....bk_.C...&.@..\|3.f...G....x.;"T..{........"........poogg/......"...].o.p..[.......

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 32 x 32
Category:	dropped
Size (bytes):	4178
Entropy (8bit):	7.491119873175258
Encrypted:	false
SSDEEP:	48:3je4MHZKDtbvGOFkYajWVOwD2W4UYX084HY4zHdwU4zeoAF5R4JTp3uV04gBFy8g:3je4XtDlqWdWvfWJXPF5RcdU0dsmuS
MD5:	20295FD727FBC02635F3D8C947E54556
SHA1:	DE01015DB36A6330D4E0854A69555A5E3F3556C7
SHA-256:	93C99B1A62BDEF426C6029D8EEAA796AF079BD0B67C7BD67FDA444E8AFB6F562
SHA-512:	495A1766EC0560E31689C449AF356BDB88CD862784D9B4C7E2E3AD1E4345ED2EAE434FC15B3ECEAC04397E49C21AC52096B1434B465AB8D8A2DF2F0129820CF4
Malicious:	false
Reputation:	low
Preview:	GIF89a . .........................~~~................................>>>VVV```\|\|\|......JJJlll...............,,,^^^...LLL.................................................................................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,.... . ....@.pH$.8.Gq.$N..A.3(..L....V....K\|P(...:.(..r.B.._@X!/...BxBnb}E.g....o.r..E.g..^..oWD.c.....JC.g......oqm.o..........E.....{p~....r...D....}.M....d......K......r.........o....\|........].q...` 9C.f).$'.=..}.C.^.u..-.H..!.............O.K"1......5.&{j.T. .BBo..e...6..<...@.B?..1..)..G.b.K... .!.......,.... . ....@.pH$&4.Bq.$..D..b(.......V....[4.._..:.t:"r.qh@..a..)..g.Bk_.o..E.g~.....#r.JD.g.xl.oWF.C....~mg......o.D.....B.....w...K.!.......C........wE... ..d....X.............r................s'...xM.&T$$..\|M...C.... .A...Bl..d....K.d.V..?oFl-X. .L[.J*....6..!."...5\@....p..oI..m...N!Q.Xm..@..%2u:uH2.\.R.#.a..!.......,.... . ....@.pH$...Bq.$&.D...(..L....V....[$.....:4P(.r.s..._...I..g.BxB.o..E g.w^

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 11816
Category:	downloaded
Size (bytes):	4677
Entropy (8bit):	7.946065353100574
Encrypted:	false
SSDEEP:	96:bZ/NwFlux9fPOlplZDCxX44cnBn4PxuyjWe8zngjoNRc/YrdgN:bZ/CQZOLUcFleWJMUraYrdgN
MD5:	E6AAE2410885DF2F2629465B60A2691D
SHA1:	859D3D883FB8CA2AADEDF5753ABCD7ACCE922479
SHA-256:	A113D210F17827A95D9D1EEE68BF4E0AA8BD39D67DF1D9420FF5E9C0F49B1D48
SHA-512:	77CFA85A05295F3E1D239AE09D6EC80B7D038A0466276B7D5586E614035BABFAA7FAC4B965643EF18C38648ED68BACBFB510BCF06AC578BCFE2C11F7892544AD
Malicious:	false
Reputation:	low
URL:	http://mail.w-find.com/icloud-archivos/myriad-set-pro_thin.ttf
Preview:	...........Rms......sg...J&av.......$...Nm.Rm.H.I...n..M...=._c.pw...~y...........3(\.........G...(z}.......[8....32qQt.....j.E..l0;.....h.Q....o.A....q...K......./^..z..P....P.`..1P.P...%J^Vy..g::<.s.}........k9=.v.].....I.v.s8w..>....;.]........N......p..3x.y......v...G......e...).e.,...v.&FV..I...Jq....M3H.......hp8(...a{.8jo..t..EI......6.....q^..>.Y.Z...Q.....H.].rBis_.4.:...Jar..!c...(.j...):....{{.d!5........D.h4..+....k5.y...U...D$w..Z.}Y....QO.,..5..I>.i6...<..]2X.pCM.....e^...Wh.2...\|~..l'....\|..v,.....sT.Wd....G.'.8R.....F......O.......E..>.......8....V..?\....~..[..K..J.z.....p...=4.LB)..Y....y..u.F......M.........Y.....b....;...C..d.5.[.&TW...Rd.{/_..l..y.o...Y'.+....G.;G.....\...?z..JL.9..~"...P..,E....O.$.}..(..O.W...<...2X!.SS..Q..rx......O....x."..#.D.J...M...A.P.!3-.u.H.2..6....?.....<g...R.;1<.]..........9....G..$.Vp...0s.B.Q.=.f.%a..fQmB<.q..MZq..0&....V....k....I&;..A...}m.D3.q..Icy+!Ef.}.~...`.i....../~].B......&.

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel
Category:	downloaded
Size (bytes):	9062
Entropy (8bit):	3.284224550667547
Encrypted:	false
SSDEEP:	48:z87CC6NTQ8Om4F/POAVpSVyvFElSfwa89A4:ACC6NTEmAGAVcLSfwa8N
MD5:	28EC4EABA5AE210B98A11257CAF5BADE
SHA1:	6164148A39D6A27286641896FCE3B76F439AEAB1
SHA-256:	3F5086612AAE9363C9FB02949219CEF19854C18FE5AD4EDA78AA1AEFCC79CC71
SHA-512:	4EFB48689296863D6E05B3CF32F8F98AC57A2BDEAE09209735170DD7F1C70E22A9BD2FBE93FCCB7181B8C1B6DFE555AF548129EF7B8705ED50486A972815868E
Malicious:	false
Reputation:	low
URL:	http://mail.w-find.com/favicon.ico
Preview:	...... ..........F...........h....... .... .....V......... .h.......(... ...@...............................BBB.....rrr.....ZZZ.............NNN.~~~.fff.................JJJ.....zzz.bbb.VVV.....nnn.........FFF.....vvv.....^^^.............RRR.....jjj...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel
Category:	dropped
Size (bytes):	9062
Entropy (8bit):	3.284224550667547
Encrypted:	false
SSDEEP:	48:z87CC6NTQ8Om4F/POAVpSVyvFElSfwa89A4:ACC6NTEmAGAVcLSfwa8N
MD5:	28EC4EABA5AE210B98A11257CAF5BADE
SHA1:	6164148A39D6A27286641896FCE3B76F439AEAB1
SHA-256:	3F5086612AAE9363C9FB02949219CEF19854C18FE5AD4EDA78AA1AEFCC79CC71
SHA-512:	4EFB48689296863D6E05B3CF32F8F98AC57A2BDEAE09209735170DD7F1C70E22A9BD2FBE93FCCB7181B8C1B6DFE555AF548129EF7B8705ED50486A972815868E
Malicious:	false
Reputation:	low
Preview:	...... ..........F...........h....... .... .....V......... .h.......(... ...@...............................BBB.....rrr.....ZZZ.............NNN.~~~.fff.................JJJ.....zzz.bbb.VVV.....nnn.........FFF.....vvv.....^^^.............RRR.....jjj...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 382 x 50, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1240
Entropy (8bit):	7.76387952763145
Encrypted:	false
SSDEEP:	24:6wss9YhvQELfVIWf1W9jKNhW0i9i3rhrk58hsUY:6wss9OFLfOWsqWbidrkaA
MD5:	AFE4BC3227B4889FC78A8181E014A931
SHA1:	E3FF6C0083FBEDED76E33ACE08BACAC04E7AD35B
SHA-256:	E39F78E3FD9428C8AD22060046D9CC07D65CF9FA784A16A3925B9ACB52F35C3D
SHA-512:	59A92FDEE85A7E47A8D2D0CF757BFFAD15187F5095F74E87CCD3074EB6FA9A18E3286ABD27919135C534A07E3BA350C6BCDDF974B77FE2D58AB5510964DAE8BB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...~...2........l....pHYs...........~.....PLTE....................tRNS....9.qb...^IDATh..Y..0..:.....u.._.Y#.....8.A...X.5....95.b..j.f.?...../V..?.:..'.gL.#..o.^S)%'y.....h.u....x...]].w.Qu.......V..u.7.K.U......b...W#.y.@.1. .r..\|-..Z.%.\|.....F$........k....-.......J. .h.{.....5@..5....L........\|D@...2..........(....\.......O..W.+...:...QB.4..../ ?K..(..x.....+ ..=....)...r.../...P...;....UX..-..t.&.T.....HD.[.aA.0.gz..F^...@OS.......vk,4...V~.A..c0. .;..j...o. A...(..........?:.R8...\|.Em..\|.~.......S......R.!.MBk..i..>\|.\|.@....h....=J.c..-.......?.?..9...h...:...K.19..Pm..F..$...4..%.) ....0<n....Y.....$z..2^....u....E.T;..q..d.P.j..yQ.,.U..y.......dDm.`!..n.l..T..x?.....TC[.i.$.:.MC.......m.....`.W...Qc..t.Zf....k.z%...., .2.0...:3...{.6J........X..mDXiv.?..!p.{....46u......W=..k.y..LB...._.9....{1>...F.h.q....~z4.=:..{.7.o:.1..>.1..=..}+<<......Y'......,..P.....k..$...$.J"V.#.......f..{.....[.#.....WN.I.W...t....E.p..

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 32 x 32
Category:	downloaded
Size (bytes):	4178
Entropy (8bit):	7.491119873175258
Encrypted:	false
SSDEEP:	48:3je4MHZKDtbvGOFkYajWVOwD2W4UYX084HY4zHdwU4zeoAF5R4JTp3uV04gBFy8g:3je4XtDlqWdWvfWJXPF5RcdU0dsmuS
MD5:	20295FD727FBC02635F3D8C947E54556
SHA1:	DE01015DB36A6330D4E0854A69555A5E3F3556C7
SHA-256:	93C99B1A62BDEF426C6029D8EEAA796AF079BD0B67C7BD67FDA444E8AFB6F562
SHA-512:	495A1766EC0560E31689C449AF356BDB88CD862784D9B4C7E2E3AD1E4345ED2EAE434FC15B3ECEAC04397E49C21AC52096B1434B465AB8D8A2DF2F0129820CF4
Malicious:	false
Reputation:	low
URL:	http://mail.w-find.com/assets/img/ajax-loader.gif
Preview:	GIF89a . .........................~~~................................>>>VVV```\|\|\|......JJJlll...............,,,^^^...LLL.................................................................................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,.... . ....@.pH$.8.Gq.$N..A.3(..L....V....K\|P(...:.(..r.B.._@X!/...BxBnb}E.g....o.r..E.g..^..oWD.c.....JC.g......oqm.o..........E.....{p~....r...D....}.M....d......K......r.........o....\|........].q...` 9C.f).$'.=..}.C.^.u..-.H..!.............O.K"1......5.&{j.T. .BBo..e...6..<...@.B?..1..)..G.b.K... .!.......,.... . ....@.pH$&4.Bq.$..D..b(.......V....[4.._..:.t:"r.qh@..a..)..g.Bk_.o..E.g~.....#r.JD.g.xl.oWF.C....~mg......o.D.....B.....w...K.!.......C........wE... ..d....X.............r................s'...xM.&T$$..\|M...C.... .A...Bl..d....K.d.V..?oFl-X. .L[.J*....6..!."...5\@....p..oI..m...N!Q.Xm..@..%2u:uH2.\.R.#.a..!.......,.... . ....@.pH$...Bq.$&.D...(..L....V....[$.....:4P(.r.s..._...I..g.BxB.o..E g.w^

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	4.332758651241789
Encrypted:	false
SSDEEP:	3:O2PRk5xCunnVKekY:OEkLCokY
MD5:	4C73EF2C5836B2524CF0DCF05C5A5E1E
SHA1:	A3C11721A416039DDF8328DBC0C24C270F75C3AB
SHA-256:	462CCC2B7B8048DBE77886E203959F49B02EDA47C9AF39F22BFD649D219A44F1
SHA-512:	DF21A0EA934263545DDF076D2BB84A76FA6906BAD1EC5A8D2DD268E62E2A69827107FF0B7F09CF96879B5FE8A23502F53934B7FF72228537BB4EBCCFC835241D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISJQlt0mC1-T3VNRIFDYJGpz8SBQ0Dp5DTEgUNaenAthIFDUGn_58=?alt=proto
Preview:	CiQKBw2CRqc/GgAKBw0Dp5DTGgAKBw1p6cC2GgAKBw1Bp/+fGgA=

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Static File Info

⊘No static file info

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-13T20:09:04.820298+0200	2018334	ET PHISHING Possible Phish - Saved Website Comment Observed	2	50.6.138.164	80	192.168.2.5	49709	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 13, 2024 20:08:54.860053062 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 13, 2024 20:08:54.860054016 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 13, 2024 20:08:54.969428062 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 13, 2024 20:09:04.239435911 CEST	49709	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:04.239886999 CEST	49710	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:04.244517088 CEST	80	49709	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:04.244666100 CEST	49709	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:04.244875908 CEST	49709	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:04.244932890 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:04.245031118 CEST	49710	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:04.250056982 CEST	80	49709	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:04.464818954 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 13, 2024 20:09:04.465039015 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 13, 2024 20:09:04.573476076 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 13, 2024 20:09:04.742151976 CEST	80	49709	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:04.742167950 CEST	80	49709	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:04.742178917 CEST	80	49709	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:04.742307901 CEST	49709	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:04.814971924 CEST	49711	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:04.815062046 CEST	49709	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:04.815123081 CEST	49710	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:04.820028067 CEST	80	49711	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:04.820297956 CEST	80	49709	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:04.820405006 CEST	49711	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:04.820631027 CEST	49711	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:04.820791960 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:04.825623989 CEST	80	49711	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:04.934498072 CEST	80	49709	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:04.940010071 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:04.940040112 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:04.940053940 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:04.940066099 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:04.940078974 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:04.940092087 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:04.940104008 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:04.940113068 CEST	49710	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:04.940121889 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:04.940136909 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:04.940143108 CEST	49710	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:04.940148115 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:04.940192938 CEST	49710	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:04.945122957 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:04.945224047 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:04.945277929 CEST	49710	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:04.959294081 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:04.959342957 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:04.959433079 CEST	49710	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:04.978230953 CEST	49709	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:05.029562950 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.029581070 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.029591084 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.029601097 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.029612064 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.029628992 CEST	49710	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:05.029671907 CEST	49710	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:05.049174070 CEST	49713	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:05.054084063 CEST	80	49713	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.054137945 CEST	49713	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:05.166872025 CEST	49709	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:05.171695948 CEST	80	49709	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.172727108 CEST	49710	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:05.177551031 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.285353899 CEST	80	49709	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.285370111 CEST	80	49709	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.285382032 CEST	80	49709	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.285433054 CEST	80	49709	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.285434008 CEST	49709	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:05.285486937 CEST	49709	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:05.285510063 CEST	80	49709	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.292789936 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.293127060 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.293169975 CEST	49710	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:05.329293966 CEST	49709	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:05.349024057 CEST	80	49711	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.382294893 CEST	49711	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:05.382371902 CEST	49710	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:05.388199091 CEST	80	49711	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.388556957 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.504482031 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.504498005 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.504559994 CEST	49710	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:05.505125999 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.505304098 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.505316973 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.505350113 CEST	49710	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:05.510809898 CEST	49710	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:05.512866974 CEST	80	49711	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.512878895 CEST	80	49711	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.512891054 CEST	80	49711	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.512901068 CEST	80	49711	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.512906075 CEST	80	49711	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.513067961 CEST	49711	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:05.513067961 CEST	49711	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:05.515842915 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.516115904 CEST	49711	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:05.521317005 CEST	80	49711	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.525525093 CEST	49716	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:05.525661945 CEST	49717	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:05.530533075 CEST	80	49716	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.530571938 CEST	80	49717	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.530635118 CEST	49717	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:05.530740976 CEST	49716	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:05.530915976 CEST	49717	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:05.531059027 CEST	49716	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:05.536494017 CEST	80	49717	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.536607981 CEST	80	49716	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.637207985 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.637229919 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.637242079 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.637289047 CEST	49710	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:05.637304068 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.637315035 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.637358904 CEST	49710	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:05.643513918 CEST	80	49711	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.643526077 CEST	80	49711	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.643537998 CEST	80	49711	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.643589020 CEST	49711	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:05.643881083 CEST	80	49711	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.643892050 CEST	80	49711	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:05.643923998 CEST	49711	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:06.042453051 CEST	80	49717	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:06.042490959 CEST	80	49717	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:06.042546988 CEST	80	49717	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:06.042551041 CEST	49717	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:06.042584896 CEST	80	49717	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:06.042618036 CEST	80	49717	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:06.042649031 CEST	49717	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:06.044064999 CEST	80	49716	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:06.044173956 CEST	80	49716	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:06.044267893 CEST	49716	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:06.086005926 CEST	49717	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:06.230120897 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 13, 2024 20:09:06.232065916 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 13, 2024 20:09:06.351428032 CEST	49711	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:06.356513023 CEST	80	49711	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:06.475799084 CEST	80	49711	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:06.475831985 CEST	80	49711	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:06.475920916 CEST	80	49711	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:06.475933075 CEST	80	49711	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:06.475933075 CEST	49711	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:06.475946903 CEST	80	49711	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:06.475960016 CEST	80	49711	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:06.475982904 CEST	49711	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:06.475991964 CEST	80	49711	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:06.476001978 CEST	49711	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:06.476828098 CEST	80	49711	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:06.476881027 CEST	49711	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:06.523695946 CEST	49721	443	192.168.2.5	216.58.212.132
Oct 13, 2024 20:09:06.523736000 CEST	443	49721	216.58.212.132	192.168.2.5
Oct 13, 2024 20:09:06.523809910 CEST	49721	443	192.168.2.5	216.58.212.132
Oct 13, 2024 20:09:06.524049044 CEST	49721	443	192.168.2.5	216.58.212.132
Oct 13, 2024 20:09:06.524060965 CEST	443	49721	216.58.212.132	192.168.2.5
Oct 13, 2024 20:09:06.570662975 CEST	80	49711	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:06.616535902 CEST	49711	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:06.618201971 CEST	49716	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:06.623074055 CEST	80	49716	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:06.744329929 CEST	80	49716	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:06.744366884 CEST	80	49716	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:06.744379044 CEST	80	49716	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:06.744390965 CEST	80	49716	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:06.744402885 CEST	80	49716	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:06.744415998 CEST	80	49716	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:06.744421959 CEST	80	49716	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:06.744426966 CEST	49716	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:06.744435072 CEST	80	49716	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:06.744463921 CEST	49716	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:06.744473934 CEST	49716	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:06.834626913 CEST	80	49716	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:06.880453110 CEST	49716	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:07.206954002 CEST	443	49721	216.58.212.132	192.168.2.5
Oct 13, 2024 20:09:07.207292080 CEST	49721	443	192.168.2.5	216.58.212.132
Oct 13, 2024 20:09:07.207320929 CEST	443	49721	216.58.212.132	192.168.2.5
Oct 13, 2024 20:09:07.208400965 CEST	443	49721	216.58.212.132	192.168.2.5
Oct 13, 2024 20:09:07.208458900 CEST	49721	443	192.168.2.5	216.58.212.132
Oct 13, 2024 20:09:07.210129976 CEST	49721	443	192.168.2.5	216.58.212.132
Oct 13, 2024 20:09:07.210221052 CEST	443	49721	216.58.212.132	192.168.2.5
Oct 13, 2024 20:09:07.258393049 CEST	49721	443	192.168.2.5	216.58.212.132
Oct 13, 2024 20:09:07.258421898 CEST	443	49721	216.58.212.132	192.168.2.5
Oct 13, 2024 20:09:07.302834988 CEST	49721	443	192.168.2.5	216.58.212.132
Oct 13, 2024 20:09:07.934142113 CEST	49722	443	192.168.2.5	184.28.90.27
Oct 13, 2024 20:09:07.934187889 CEST	443	49722	184.28.90.27	192.168.2.5
Oct 13, 2024 20:09:07.934251070 CEST	49722	443	192.168.2.5	184.28.90.27
Oct 13, 2024 20:09:07.936381102 CEST	49722	443	192.168.2.5	184.28.90.27
Oct 13, 2024 20:09:07.936398983 CEST	443	49722	184.28.90.27	192.168.2.5
Oct 13, 2024 20:09:08.639173031 CEST	443	49722	184.28.90.27	192.168.2.5
Oct 13, 2024 20:09:08.639247894 CEST	49722	443	192.168.2.5	184.28.90.27
Oct 13, 2024 20:09:08.642667055 CEST	49722	443	192.168.2.5	184.28.90.27
Oct 13, 2024 20:09:08.642678022 CEST	443	49722	184.28.90.27	192.168.2.5
Oct 13, 2024 20:09:08.643066883 CEST	443	49722	184.28.90.27	192.168.2.5
Oct 13, 2024 20:09:08.681154013 CEST	49722	443	192.168.2.5	184.28.90.27
Oct 13, 2024 20:09:08.723406076 CEST	443	49722	184.28.90.27	192.168.2.5
Oct 13, 2024 20:09:08.974541903 CEST	443	49722	184.28.90.27	192.168.2.5
Oct 13, 2024 20:09:08.974607944 CEST	443	49722	184.28.90.27	192.168.2.5
Oct 13, 2024 20:09:08.974678993 CEST	49722	443	192.168.2.5	184.28.90.27
Oct 13, 2024 20:09:08.974831104 CEST	49722	443	192.168.2.5	184.28.90.27
Oct 13, 2024 20:09:08.974831104 CEST	49722	443	192.168.2.5	184.28.90.27
Oct 13, 2024 20:09:08.974853039 CEST	443	49722	184.28.90.27	192.168.2.5
Oct 13, 2024 20:09:08.974858046 CEST	443	49722	184.28.90.27	192.168.2.5
Oct 13, 2024 20:09:09.009782076 CEST	49723	443	192.168.2.5	184.28.90.27
Oct 13, 2024 20:09:09.009898901 CEST	443	49723	184.28.90.27	192.168.2.5
Oct 13, 2024 20:09:09.010255098 CEST	49723	443	192.168.2.5	184.28.90.27
Oct 13, 2024 20:09:09.010255098 CEST	49723	443	192.168.2.5	184.28.90.27
Oct 13, 2024 20:09:09.010341883 CEST	443	49723	184.28.90.27	192.168.2.5
Oct 13, 2024 20:09:09.730921984 CEST	443	49723	184.28.90.27	192.168.2.5
Oct 13, 2024 20:09:09.731125116 CEST	49723	443	192.168.2.5	184.28.90.27
Oct 13, 2024 20:09:09.732316017 CEST	49723	443	192.168.2.5	184.28.90.27
Oct 13, 2024 20:09:09.732326031 CEST	443	49723	184.28.90.27	192.168.2.5
Oct 13, 2024 20:09:09.732634068 CEST	443	49723	184.28.90.27	192.168.2.5
Oct 13, 2024 20:09:09.733807087 CEST	49723	443	192.168.2.5	184.28.90.27
Oct 13, 2024 20:09:09.779397011 CEST	443	49723	184.28.90.27	192.168.2.5
Oct 13, 2024 20:09:10.065187931 CEST	443	49723	184.28.90.27	192.168.2.5
Oct 13, 2024 20:09:10.065242052 CEST	443	49723	184.28.90.27	192.168.2.5
Oct 13, 2024 20:09:10.065304995 CEST	49723	443	192.168.2.5	184.28.90.27
Oct 13, 2024 20:09:10.066206932 CEST	49723	443	192.168.2.5	184.28.90.27
Oct 13, 2024 20:09:10.066215038 CEST	443	49723	184.28.90.27	192.168.2.5
Oct 13, 2024 20:09:10.066225052 CEST	49723	443	192.168.2.5	184.28.90.27
Oct 13, 2024 20:09:10.066229105 CEST	443	49723	184.28.90.27	192.168.2.5
Oct 13, 2024 20:09:10.286431074 CEST	80	49709	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:10.286623001 CEST	49709	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:10.637581110 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:10.637686968 CEST	49710	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:10.827176094 CEST	49709	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:10.827231884 CEST	49710	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:10.832129002 CEST	80	49709	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:10.832242012 CEST	80	49710	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:11.042898893 CEST	80	49717	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:11.042968035 CEST	49717	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:11.476697922 CEST	80	49711	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:11.476772070 CEST	49711	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:11.745630980 CEST	80	49716	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:11.745707035 CEST	49716	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:12.827295065 CEST	49716	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:12.827307940 CEST	49717	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:12.828305960 CEST	49711	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:12.836479902 CEST	80	49716	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:12.836493969 CEST	80	49717	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:12.836772919 CEST	80	49711	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:14.127614975 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:14.127651930 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:14.127752066 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:14.129478931 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:14.129492044 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:14.804569960 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:14.804640055 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:14.807471991 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:14.807480097 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:14.807702065 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:14.817845106 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:14.859405041 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:14.949420929 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:14.949454069 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:14.949470997 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:14.949508905 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:14.949523926 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:14.949543953 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:14.949565887 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.033977032 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.033998013 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.034061909 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.034080029 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.034113884 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.038109064 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.038124084 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.038213015 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.038223982 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.038464069 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.118901968 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.118926048 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.118979931 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.118993044 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.119028091 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.119060040 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.121057987 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.121084929 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.121120930 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.121128082 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.121174097 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.122276068 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.122294903 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.122360945 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.122366905 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.122420073 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.127485991 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.127502918 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.127563000 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.127572060 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.127599955 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.207881927 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.207909107 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.207967997 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.207982063 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.208230019 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.208877087 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.208894968 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.208951950 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.208961964 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.209039927 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.209691048 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.209712029 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.209764004 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.209772110 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.209845066 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.210511923 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.210534096 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.210572958 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.210582972 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.210601091 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.210617065 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.211414099 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.211431026 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.211479902 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.211488962 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.211672068 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.212373018 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.212388039 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.212431908 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.212441921 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.212510109 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.213143110 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.213200092 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.213207006 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.213218927 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.213259935 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.213304996 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.213323116 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.213332891 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.213337898 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.262696028 CEST	49726	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.262737036 CEST	443	49726	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.262797117 CEST	49726	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.265208006 CEST	49727	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.265254021 CEST	443	49727	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.265367031 CEST	49727	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.265609026 CEST	49726	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.265621901 CEST	443	49726	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.266964912 CEST	49728	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.267029047 CEST	443	49728	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.267082930 CEST	49728	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.267296076 CEST	49728	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.267308950 CEST	443	49728	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.267987967 CEST	49729	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.268026114 CEST	443	49729	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.268098116 CEST	49729	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.269129992 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.269138098 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.269192934 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.269396067 CEST	49727	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.269411087 CEST	443	49727	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.269494057 CEST	49729	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.269506931 CEST	443	49729	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.269778013 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.269783974 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.951356888 CEST	443	49728	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.951898098 CEST	49728	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.951919079 CEST	443	49728	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.952406883 CEST	49728	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.952411890 CEST	443	49728	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.954170942 CEST	443	49729	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.954447031 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.954555988 CEST	49729	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.954623938 CEST	443	49729	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.954812050 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.954842091 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.954993010 CEST	49729	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.955003977 CEST	443	49729	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.955310106 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.955318928 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.964939117 CEST	443	49726	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.965487957 CEST	49726	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.965507984 CEST	443	49726	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.965816021 CEST	443	49727	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.966089010 CEST	49726	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.966109037 CEST	443	49726	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.966692924 CEST	49727	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.966692924 CEST	49727	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:15.966715097 CEST	443	49727	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:15.966728926 CEST	443	49727	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.052284002 CEST	443	49728	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.052306890 CEST	443	49728	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.052371025 CEST	49728	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.052381992 CEST	443	49728	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.053381920 CEST	49728	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.053576946 CEST	49728	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.053596020 CEST	443	49728	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.053606987 CEST	49728	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.053612947 CEST	443	49728	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.055488110 CEST	443	49729	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.055516958 CEST	443	49729	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.055583954 CEST	49729	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.055649042 CEST	443	49729	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.055877924 CEST	443	49729	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.055941105 CEST	49729	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.057029963 CEST	49733	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.057061911 CEST	443	49733	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.057194948 CEST	49729	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.057230949 CEST	443	49729	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.057233095 CEST	49733	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.057257891 CEST	49729	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.057272911 CEST	443	49729	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.057497978 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.057555914 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.057619095 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.058195114 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.058208942 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.061321974 CEST	49733	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.061336040 CEST	443	49733	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.063060999 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.063071966 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.063198090 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.063348055 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.063354015 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.064826965 CEST	49735	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.064873934 CEST	443	49735	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.065053940 CEST	49735	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.065172911 CEST	49735	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.065192938 CEST	443	49735	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.069796085 CEST	443	49726	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.069818020 CEST	443	49726	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.069869041 CEST	443	49726	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.069888115 CEST	49726	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.069921970 CEST	49726	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.070204973 CEST	49726	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.070215940 CEST	443	49726	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.070228100 CEST	49726	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.070234060 CEST	443	49726	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.071450949 CEST	443	49727	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.071502924 CEST	443	49727	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.071619987 CEST	49727	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.072498083 CEST	49727	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.072498083 CEST	49727	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.072515965 CEST	443	49727	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.072525024 CEST	443	49727	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.074573040 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.074604034 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.074852943 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.075267076 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.075279951 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.085083008 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.085119963 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.085484028 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.085484028 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.085513115 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.651302099 CEST	443	49733	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.651798964 CEST	49733	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.651813984 CEST	443	49733	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.652250051 CEST	49733	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.652256012 CEST	443	49733	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.713299990 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.713793039 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.713809967 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.714297056 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.714306116 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.748799086 CEST	443	49735	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.753544092 CEST	49735	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.753566980 CEST	443	49735	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.754337072 CEST	49735	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.754349947 CEST	443	49733	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.754355907 CEST	443	49735	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.754414082 CEST	443	49733	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.754472017 CEST	49733	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.754638910 CEST	49733	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.754659891 CEST	443	49733	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.754671097 CEST	49733	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.754677057 CEST	443	49733	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.757443905 CEST	49740	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.757477045 CEST	443	49740	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.757649899 CEST	49740	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.757775068 CEST	49740	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.757787943 CEST	443	49740	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.763253927 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.763866901 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.763880968 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.764163017 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.764170885 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.805725098 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.806128979 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.806140900 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.806559086 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.806564093 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.818562984 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.818634987 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.818681002 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.818852901 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.818869114 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.818880081 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.818885088 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.821537971 CEST	49741	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.821625948 CEST	443	49741	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.821723938 CEST	49741	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.821912050 CEST	49741	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.821940899 CEST	443	49741	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.853552103 CEST	443	49735	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.853693008 CEST	443	49735	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.853756905 CEST	49735	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.853849888 CEST	49735	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.853879929 CEST	443	49735	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.853893042 CEST	49735	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.853900909 CEST	443	49735	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.856827974 CEST	49742	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.856867075 CEST	443	49742	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.856945038 CEST	49742	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.857095957 CEST	49742	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.857124090 CEST	443	49742	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.867212057 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.867288113 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.867383957 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.867443085 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.867460012 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.867476940 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.867481947 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.869822979 CEST	49743	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.869864941 CEST	443	49743	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.870069027 CEST	49743	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.870069027 CEST	49743	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.870098114 CEST	443	49743	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.910614014 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.910675049 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.910856009 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.910882950 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.910882950 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.910904884 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.910912991 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.913278103 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.913324118 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:16.913433075 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.913599014 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:16.913620949 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.106447935 CEST	443	49721	216.58.212.132	192.168.2.5
Oct 13, 2024 20:09:17.106503963 CEST	443	49721	216.58.212.132	192.168.2.5
Oct 13, 2024 20:09:17.106653929 CEST	49721	443	192.168.2.5	216.58.212.132
Oct 13, 2024 20:09:17.665607929 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.665779114 CEST	443	49741	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.666822910 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.666840076 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.668433905 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.668442965 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.669702053 CEST	49741	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.669718027 CEST	443	49741	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.670047045 CEST	443	49742	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.670397043 CEST	49741	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.670403004 CEST	443	49741	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.670701981 CEST	49742	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.670716047 CEST	443	49742	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.671288967 CEST	49742	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.671293020 CEST	443	49742	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.673938036 CEST	443	49743	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.674542904 CEST	49743	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.674560070 CEST	443	49743	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.675014973 CEST	49743	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.675019979 CEST	443	49743	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.676551104 CEST	443	49740	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.677042007 CEST	49740	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.677052021 CEST	443	49740	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.677969933 CEST	49740	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.677977085 CEST	443	49740	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.769148111 CEST	443	49741	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.769236088 CEST	443	49741	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.769314051 CEST	49741	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.772361040 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.772420883 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.773432016 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.773621082 CEST	443	49742	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.773683071 CEST	443	49742	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.777909994 CEST	49742	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.779931068 CEST	443	49743	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.779994965 CEST	443	49743	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.780042887 CEST	49743	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.782809973 CEST	443	49740	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.782869101 CEST	443	49740	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.782917023 CEST	49740	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.787445068 CEST	49741	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.787476063 CEST	443	49741	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.787511110 CEST	49741	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.787527084 CEST	443	49741	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.789307117 CEST	49743	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.789325953 CEST	443	49743	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.789340019 CEST	49743	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.789345026 CEST	443	49743	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.789426088 CEST	49740	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.789431095 CEST	443	49740	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.789441109 CEST	49740	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.789446115 CEST	443	49740	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.790673018 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.790699005 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.790710926 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.790716887 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.791544914 CEST	49742	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.791560888 CEST	443	49742	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.796215057 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.796238899 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.796297073 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.797566891 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.797627926 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.797712088 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.799343109 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.799377918 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.799431086 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.800457001 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.800497055 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.800542116 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.800791025 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.800806046 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.801059961 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.801073074 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.801192999 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.801217079 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.802639008 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.802649021 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.802701950 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.802882910 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.802894115 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:17.802972078 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:17.802985907 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.723318100 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.723855972 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.723880053 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.723898888 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.723932981 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.724812031 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.725251913 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.725279093 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.725670099 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.726259947 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.726284981 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.726286888 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.726294041 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.726591110 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.726597071 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.727025032 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.727030039 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.727096081 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.727108955 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.727143049 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.727169037 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.727546930 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.727554083 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.727561951 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.727567911 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.824795008 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.824867010 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.824958086 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.825191021 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.825208902 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.825229883 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.825237036 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.825388908 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.825463057 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.825611115 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.825706005 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.825723886 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.825742960 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.825748920 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.827617884 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.827709913 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.827938080 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.828161955 CEST	49752	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.828221083 CEST	443	49752	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.828248978 CEST	49753	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.828279972 CEST	49752	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.828290939 CEST	443	49753	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.828383923 CEST	49753	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.828408957 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.828427076 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.828437090 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.828444004 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.828506947 CEST	49752	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.828522921 CEST	443	49752	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.828628063 CEST	49753	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.828640938 CEST	443	49753	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.830091000 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.830123901 CEST	49721	443	192.168.2.5	216.58.212.132
Oct 13, 2024 20:09:18.830130100 CEST	443	49721	216.58.212.132	192.168.2.5
Oct 13, 2024 20:09:18.830154896 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.830212116 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.830518007 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.830532074 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.830547094 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.830552101 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.830883980 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.830964088 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.831101894 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.831542015 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.831546068 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.831569910 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.831573963 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.833404064 CEST	49754	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.833414078 CEST	443	49754	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.833745956 CEST	49754	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.834275007 CEST	49754	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.834275007 CEST	49755	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.834284067 CEST	443	49754	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.834320068 CEST	443	49755	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.834450006 CEST	49755	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.834594965 CEST	49755	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.834609985 CEST	443	49755	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.835520029 CEST	49756	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.835542917 CEST	443	49756	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:18.835861921 CEST	49756	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.836015940 CEST	49756	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:18.836030006 CEST	443	49756	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.480619907 CEST	443	49752	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.481175900 CEST	49752	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.481223106 CEST	443	49752	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.482821941 CEST	49752	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.482845068 CEST	443	49752	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.486650944 CEST	443	49754	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.487082958 CEST	49754	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.487112045 CEST	443	49754	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.487554073 CEST	49754	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.487560034 CEST	443	49754	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.488341093 CEST	443	49753	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.488775015 CEST	49753	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.488781929 CEST	443	49753	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.489238024 CEST	49753	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.489242077 CEST	443	49753	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.524945021 CEST	443	49756	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.525120020 CEST	443	49755	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.525424004 CEST	49756	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.525458097 CEST	443	49756	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.525548935 CEST	49755	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.525583982 CEST	443	49755	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.526072025 CEST	49756	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.526082039 CEST	443	49756	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.526156902 CEST	49755	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.526184082 CEST	443	49755	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.583120108 CEST	443	49752	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.583195925 CEST	443	49752	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.583261013 CEST	49752	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.583458900 CEST	49752	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.583489895 CEST	443	49752	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.583503008 CEST	49752	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.583511114 CEST	443	49752	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.586405039 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.586445093 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.586651087 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.586776018 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.586786985 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.591129065 CEST	443	49754	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.591203928 CEST	443	49754	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.591336966 CEST	49754	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.591512918 CEST	49754	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.591526985 CEST	443	49754	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.594075918 CEST	443	49753	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.594142914 CEST	443	49753	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.594193935 CEST	49753	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.594218016 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.594228029 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.594322920 CEST	49753	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.594322920 CEST	49753	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.594329119 CEST	443	49753	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.594336987 CEST	443	49753	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.594362974 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.594602108 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.594611883 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.596400023 CEST	49759	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.596448898 CEST	443	49759	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.596649885 CEST	49759	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.596759081 CEST	49759	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.596772909 CEST	443	49759	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.633667946 CEST	443	49756	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.633740902 CEST	443	49756	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.633840084 CEST	49756	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.634140968 CEST	49756	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.634140968 CEST	49756	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.634169102 CEST	443	49756	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.634181023 CEST	443	49756	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.634749889 CEST	443	49755	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.634829998 CEST	443	49755	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.634987116 CEST	49755	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.635355949 CEST	49755	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.635395050 CEST	443	49755	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.635418892 CEST	49755	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.635427952 CEST	443	49755	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.637855053 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.637903929 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.638070107 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.638448954 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.638462067 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.638546944 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.638571978 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:19.638942957 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.638942957 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:19.638967991 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.245570898 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.246234894 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.246248960 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.246788979 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.246793985 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.252258062 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.252612114 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.252620935 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.253077030 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.253081083 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.275473118 CEST	443	49759	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.275877953 CEST	49759	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.275903940 CEST	443	49759	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.276369095 CEST	49759	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.276376009 CEST	443	49759	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.621534109 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.621606112 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.621656895 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.621689081 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.621757030 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.621906996 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.622452974 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.622467041 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.622484922 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.622490883 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.624030113 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.624033928 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.624054909 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.624058962 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.624701023 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.624717951 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.627213955 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.627237082 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.628472090 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.628479004 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.629070044 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.629081964 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.629980087 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.629983902 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.633775949 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.633795977 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.633857965 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.635196924 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.635205984 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.637284040 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.637324095 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.637388945 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.637619972 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.637634039 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.718847990 CEST	443	49759	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.718925953 CEST	443	49759	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.719008923 CEST	49759	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.719353914 CEST	49759	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.719371080 CEST	443	49759	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.722794056 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.722834110 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.722973108 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.723324060 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.723337889 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.725342035 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.725408077 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.725548983 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.725724936 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.725738049 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.725750923 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.725755930 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.727947950 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.728019953 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.728064060 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.728709936 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.728724957 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.730334997 CEST	49765	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.730344057 CEST	443	49765	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.730424881 CEST	49765	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.730627060 CEST	49765	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.730639935 CEST	443	49765	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.733185053 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.733194113 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:20.733267069 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.733568907 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:20.733578920 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.303276062 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.303862095 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.303883076 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.304429054 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.304434061 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.307573080 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.307976007 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.307992935 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.308497906 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.308504105 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.391691923 CEST	443	49765	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.391872883 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.392406940 CEST	49765	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.392440081 CEST	443	49765	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.392709017 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.392743111 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.392879963 CEST	49765	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.392885923 CEST	443	49765	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.392980099 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.392988920 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.405880928 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.405936956 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.406012058 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.406254053 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.406254053 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.406271935 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.406280994 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.407875061 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.408056021 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.408107996 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.408163071 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.408184052 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.408199072 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.408205986 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.409445047 CEST	49767	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.409523964 CEST	443	49767	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.409674883 CEST	49767	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.409841061 CEST	49767	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.409864902 CEST	443	49767	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.410769939 CEST	49768	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.410815001 CEST	443	49768	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.410995960 CEST	49768	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.411041021 CEST	49768	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.411053896 CEST	443	49768	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.412065029 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.412434101 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.412441969 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.412877083 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.412883043 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.493029118 CEST	443	49765	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.493105888 CEST	443	49765	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.493161917 CEST	49765	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.493290901 CEST	49765	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.493295908 CEST	443	49765	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.493544102 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.493599892 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.493665934 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.493716002 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.493737936 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.493752003 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.493760109 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.496185064 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.496229887 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.496289968 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.496433973 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.496443987 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.496455908 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.496470928 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.496490002 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.496649027 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.496660948 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.517472029 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.517558098 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.517612934 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.517724037 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.517735004 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.517744064 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.517750025 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.520459890 CEST	49771	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.520503998 CEST	443	49771	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:21.520657063 CEST	49771	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.520792961 CEST	49771	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:21.520803928 CEST	443	49771	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.123343945 CEST	443	49767	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.123421907 CEST	443	49768	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.123797894 CEST	49767	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.123816967 CEST	443	49767	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.124955893 CEST	49767	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.124964952 CEST	443	49767	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.125727892 CEST	49768	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.125766993 CEST	443	49768	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.126564980 CEST	49768	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.126571894 CEST	443	49768	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.369488001 CEST	443	49767	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.369502068 CEST	443	49768	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.369579077 CEST	443	49768	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.369594097 CEST	443	49767	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.369664907 CEST	49768	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.369709015 CEST	49767	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.372960091 CEST	443	49771	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.372973919 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.376650095 CEST	49767	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.376681089 CEST	443	49767	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.376727104 CEST	49767	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.376734018 CEST	443	49767	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.380219936 CEST	49768	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.380242109 CEST	443	49768	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.380254984 CEST	49768	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.380260944 CEST	443	49768	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.383536100 CEST	49771	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.383546114 CEST	443	49771	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.384908915 CEST	49771	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.384913921 CEST	443	49771	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.385410070 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.385447979 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.386290073 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.386303902 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.390759945 CEST	49772	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.390805960 CEST	443	49772	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.390857935 CEST	49772	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.392118931 CEST	49773	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.392165899 CEST	443	49773	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.392220020 CEST	49773	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.392538071 CEST	49772	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.392556906 CEST	443	49772	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.393054008 CEST	49773	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.393073082 CEST	443	49773	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.483772993 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.483835936 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.483920097 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.484234095 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.484255075 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.490865946 CEST	443	49771	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.490940094 CEST	443	49771	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.491184950 CEST	49771	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.492006063 CEST	49771	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.492053986 CEST	443	49771	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.492084026 CEST	49771	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.492100954 CEST	443	49771	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.497617006 CEST	49774	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.497652054 CEST	443	49774	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.497879982 CEST	49774	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.498893023 CEST	49774	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.498908997 CEST	443	49774	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.502710104 CEST	49775	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.502754927 CEST	443	49775	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:22.502813101 CEST	49775	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.503810883 CEST	49775	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:22.503828049 CEST	443	49775	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.071650982 CEST	443	49773	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.072315931 CEST	49773	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.072334051 CEST	443	49773	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.072838068 CEST	49773	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.072844028 CEST	443	49773	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.087138891 CEST	443	49772	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.087620974 CEST	49772	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.087647915 CEST	443	49772	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.088068962 CEST	49772	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.088078022 CEST	443	49772	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.148371935 CEST	443	49774	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.148955107 CEST	49774	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.148967981 CEST	443	49774	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.149458885 CEST	49774	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.149463892 CEST	443	49774	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.173113108 CEST	443	49773	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.173192024 CEST	443	49773	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.173274040 CEST	49773	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.173517942 CEST	49773	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.173517942 CEST	49773	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.173535109 CEST	443	49773	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.173544884 CEST	443	49773	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.176374912 CEST	49776	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.176413059 CEST	443	49776	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.176497936 CEST	49776	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.176662922 CEST	49776	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.176668882 CEST	443	49776	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.181544065 CEST	443	49775	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.181974888 CEST	49775	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.181991100 CEST	443	49775	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.182430983 CEST	49775	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.182435989 CEST	443	49775	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.186847925 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.187210083 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.187243938 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.187685013 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.187691927 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.193828106 CEST	443	49772	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.193911076 CEST	443	49772	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.193962097 CEST	49772	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.194144011 CEST	49772	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.194161892 CEST	443	49772	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.194174051 CEST	49772	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.194180012 CEST	443	49772	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.196791887 CEST	49777	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.196880102 CEST	443	49777	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.196970940 CEST	49777	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.197141886 CEST	49777	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.197180033 CEST	443	49777	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.249527931 CEST	443	49774	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.249598980 CEST	443	49774	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.249722004 CEST	49774	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.250066996 CEST	49774	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.250091076 CEST	443	49774	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.250164032 CEST	49774	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.250170946 CEST	443	49774	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.254089117 CEST	49778	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.254137039 CEST	443	49778	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.254209995 CEST	49778	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.254446983 CEST	49778	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.254463911 CEST	443	49778	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.287173986 CEST	443	49775	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.287250042 CEST	443	49775	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.287323952 CEST	49775	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.292006969 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.292079926 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.294800997 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.296394110 CEST	49775	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.296412945 CEST	443	49775	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.298578024 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.298614979 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.304220915 CEST	49779	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.304267883 CEST	443	49779	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.304406881 CEST	49779	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.305059910 CEST	49779	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.305073977 CEST	443	49779	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.306386948 CEST	49780	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.306408882 CEST	443	49780	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.306560040 CEST	49780	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.306930065 CEST	49780	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.306940079 CEST	443	49780	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.853657961 CEST	443	49776	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.854475975 CEST	49776	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.854504108 CEST	443	49776	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.855299950 CEST	49776	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.855309963 CEST	443	49776	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.865123034 CEST	443	49777	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.865756035 CEST	49777	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.865806103 CEST	443	49777	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:23.867423058 CEST	49777	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:23.867444992 CEST	443	49777	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.130980015 CEST	443	49777	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.131030083 CEST	443	49777	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.131128073 CEST	49777	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.131321907 CEST	443	49776	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.131360054 CEST	49777	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.131360054 CEST	49777	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.131412029 CEST	443	49777	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.131434917 CEST	443	49777	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.131686926 CEST	443	49776	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.131778002 CEST	49776	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.135776043 CEST	443	49780	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.136526108 CEST	443	49778	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.136893034 CEST	443	49779	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.154261112 CEST	49779	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.154298067 CEST	443	49779	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.155065060 CEST	49779	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.155072927 CEST	443	49779	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.155576944 CEST	49778	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.155638933 CEST	443	49778	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.156274080 CEST	49778	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.156287909 CEST	443	49778	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.156584024 CEST	49776	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.156606913 CEST	443	49776	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.157668114 CEST	49780	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.157685995 CEST	443	49780	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.158279896 CEST	49780	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.158284903 CEST	443	49780	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.164329052 CEST	49781	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.164365053 CEST	443	49781	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.164438009 CEST	49781	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.165754080 CEST	49782	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.165761948 CEST	443	49782	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.165931940 CEST	49782	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.166280985 CEST	49782	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.166292906 CEST	443	49782	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.166428089 CEST	49781	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.166436911 CEST	443	49781	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.254843950 CEST	443	49780	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.254908085 CEST	443	49780	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.254971981 CEST	49780	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.255662918 CEST	49780	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.255664110 CEST	49780	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.255681992 CEST	443	49780	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.255692959 CEST	443	49780	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.255976915 CEST	443	49779	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.256061077 CEST	443	49779	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.256202936 CEST	49779	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.258389950 CEST	49779	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.258407116 CEST	443	49779	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.259686947 CEST	443	49778	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.259746075 CEST	443	49778	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.260001898 CEST	49778	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.263722897 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.263757944 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.263994932 CEST	49778	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.264017105 CEST	443	49778	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.264030933 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.264055967 CEST	49778	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.264070988 CEST	443	49778	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.266033888 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.266047955 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.269916058 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.269939899 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.270045042 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.270423889 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.270438910 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.271130085 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.271155119 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:24.271290064 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.271554947 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:24.271564007 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.005151987 CEST	443	49782	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.005721092 CEST	49782	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.005742073 CEST	443	49782	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.006211996 CEST	443	49781	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.006251097 CEST	49782	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.006259918 CEST	443	49782	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.006584883 CEST	49781	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.006603003 CEST	443	49781	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.007123947 CEST	49781	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.007133961 CEST	443	49781	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.008390903 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.008450031 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.008866072 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.008878946 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.009080887 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.009100914 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.009280920 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.009287119 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.009638071 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.009641886 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.010938883 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.011290073 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.011306047 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.011750937 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.011755943 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.106293917 CEST	443	49782	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.106374979 CEST	443	49782	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.106488943 CEST	49782	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.106605053 CEST	49782	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.106635094 CEST	443	49782	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.106647968 CEST	49782	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.106657028 CEST	443	49782	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.107628107 CEST	443	49781	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.107686043 CEST	443	49781	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.107805014 CEST	49781	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.107959986 CEST	49781	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.107974052 CEST	443	49781	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.109610081 CEST	49786	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.109652042 CEST	443	49786	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.109709978 CEST	49786	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.109951973 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.110017061 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.110083103 CEST	49787	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.110084057 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.110121012 CEST	443	49787	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.110126019 CEST	49786	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.110140085 CEST	443	49786	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.110179901 CEST	49787	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.110277891 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.110294104 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.110305071 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.110310078 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.110420942 CEST	49787	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.110435009 CEST	443	49787	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.111464977 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.111515999 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.111635923 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.111843109 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.111843109 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.111852884 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.111860991 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.112010956 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.112080097 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.112186909 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.112665892 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.112675905 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.112684965 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.112690926 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.113132954 CEST	49788	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.113154888 CEST	443	49788	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.113212109 CEST	49788	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.114238024 CEST	49788	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.114248037 CEST	443	49788	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.114691973 CEST	49789	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.114713907 CEST	443	49789	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.114818096 CEST	49789	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.115001917 CEST	49789	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.115017891 CEST	443	49789	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.115786076 CEST	49790	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.115794897 CEST	443	49790	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.116050959 CEST	49790	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.116259098 CEST	49790	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.116271019 CEST	443	49790	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.761415005 CEST	443	49786	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.761915922 CEST	49786	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.761955023 CEST	443	49786	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.762123108 CEST	443	49787	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.762418985 CEST	49786	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.762427092 CEST	443	49786	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.762618065 CEST	443	49788	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.762789965 CEST	49787	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.762809992 CEST	443	49787	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.762975931 CEST	49788	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.762993097 CEST	443	49788	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.763365984 CEST	49787	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.763400078 CEST	443	49787	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.763667107 CEST	443	49789	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.763891935 CEST	49788	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.763897896 CEST	443	49788	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.763951063 CEST	49789	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.763993979 CEST	443	49789	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.764307022 CEST	443	49790	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.764321089 CEST	49789	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.764331102 CEST	443	49789	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.764703989 CEST	49790	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.764713049 CEST	443	49790	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.765094042 CEST	49790	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.765099049 CEST	443	49790	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.862346888 CEST	443	49787	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.862515926 CEST	443	49787	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.862593889 CEST	49787	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.862680912 CEST	49787	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.862680912 CEST	49787	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.862699032 CEST	443	49787	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.862708092 CEST	443	49787	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.863131046 CEST	443	49786	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.863183975 CEST	443	49786	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.863401890 CEST	49786	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.863532066 CEST	49786	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.863544941 CEST	443	49786	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.863559961 CEST	49786	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.863564968 CEST	443	49786	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.864331961 CEST	443	49788	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.864386082 CEST	443	49788	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.864495993 CEST	49788	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.864631891 CEST	49788	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.864641905 CEST	443	49788	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.864666939 CEST	49788	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.864672899 CEST	443	49788	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.865158081 CEST	443	49789	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.865312099 CEST	443	49789	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.865502119 CEST	49789	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.865611076 CEST	443	49790	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.865674019 CEST	443	49790	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.865724087 CEST	49790	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.866036892 CEST	49791	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.866060019 CEST	443	49791	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.866188049 CEST	49791	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.866216898 CEST	49789	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.866230965 CEST	443	49789	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.866245985 CEST	49789	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.866251945 CEST	443	49789	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.867398977 CEST	49790	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.867404938 CEST	443	49790	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.867428064 CEST	49790	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.867433071 CEST	443	49790	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.867531061 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.867563009 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.867928982 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.868957996 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.868982077 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.869184971 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.869457960 CEST	49791	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.869467974 CEST	443	49791	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.869697094 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.869708061 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.870441914 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.870460033 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.870598078 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.870615959 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.870641947 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.870881081 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.870884895 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.871792078 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.871803999 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:25.871870041 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.872026920 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:25.872040033 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.523423910 CEST	443	49791	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.523971081 CEST	49791	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.523989916 CEST	443	49791	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.524452925 CEST	49791	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.524458885 CEST	443	49791	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.525702000 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.526082039 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.526094913 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.526506901 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.526513100 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.536572933 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.537058115 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.537072897 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.537473917 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.537486076 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.540004969 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.540395021 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.540410042 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.540796041 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.540807009 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.554497004 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.554869890 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.554893017 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.555320978 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.555325985 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.646122932 CEST	443	49791	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.646192074 CEST	443	49791	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.646246910 CEST	49791	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.646441936 CEST	49791	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.646456957 CEST	443	49791	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.646469116 CEST	49791	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.646475077 CEST	443	49791	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.649285078 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.649406910 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.649497986 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.649678946 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.649717093 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.651284933 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.651499033 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.651602983 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.651638031 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.651638031 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.651655912 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.651664972 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.653949976 CEST	49797	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.653980970 CEST	443	49797	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.654234886 CEST	49797	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.654351950 CEST	49797	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.654362917 CEST	443	49797	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.711431980 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.711597919 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.711673975 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.711874962 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.711874962 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.711894035 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.711904049 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.712277889 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.712362051 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.712451935 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.713655949 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.713726997 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.713821888 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.718086958 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.718087912 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.718106985 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.718116999 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.718373060 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.718391895 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.718461990 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.718467951 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.721275091 CEST	49798	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.721302032 CEST	443	49798	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.721338987 CEST	49799	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.721359968 CEST	49798	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.721430063 CEST	443	49799	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.721509933 CEST	49799	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.721523046 CEST	49798	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.721532106 CEST	443	49798	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.721601009 CEST	49799	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.721626043 CEST	443	49799	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.722543001 CEST	49800	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.722584009 CEST	443	49800	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:26.722652912 CEST	49800	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.722783089 CEST	49800	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:26.722793102 CEST	443	49800	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.302030087 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.302588940 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.302625895 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.303071976 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.303081036 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.331948996 CEST	443	49797	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.332493067 CEST	49797	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.332510948 CEST	443	49797	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.332973957 CEST	49797	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.332978964 CEST	443	49797	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.389286041 CEST	443	49800	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.389856100 CEST	49800	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.389867067 CEST	443	49800	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.390388966 CEST	49800	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.390393972 CEST	443	49800	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.391612053 CEST	443	49799	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.392009974 CEST	49799	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.392045021 CEST	443	49799	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.392703056 CEST	49799	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.392710924 CEST	443	49799	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.409555912 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.409626961 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.409833908 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.409915924 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.409915924 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.409976006 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.410002947 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.412763119 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.412794113 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.412883997 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.413187027 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.413196087 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.413944960 CEST	443	49798	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.414347887 CEST	49798	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.414372921 CEST	443	49798	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.414794922 CEST	49798	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.414802074 CEST	443	49798	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.437999964 CEST	443	49797	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.438069105 CEST	443	49797	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.438263893 CEST	49797	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.438293934 CEST	49797	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.438309908 CEST	443	49797	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.438323021 CEST	49797	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.438328981 CEST	443	49797	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.441142082 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.441185951 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.441261053 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.441456079 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.441463947 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.491905928 CEST	443	49800	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.491966963 CEST	443	49800	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.492050886 CEST	49800	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.492324114 CEST	49800	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.492328882 CEST	443	49800	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.495121002 CEST	443	49799	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.495178938 CEST	443	49799	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.495315075 CEST	49799	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.495356083 CEST	49799	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.495356083 CEST	49799	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.495376110 CEST	443	49799	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.495400906 CEST	443	49799	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.495949984 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.495974064 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.496237993 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.496416092 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.496427059 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.497816086 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.497829914 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.498019934 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.498172998 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.498179913 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.519876957 CEST	443	49798	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.519962072 CEST	443	49798	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.520056963 CEST	49798	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.520240068 CEST	49798	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.520251036 CEST	443	49798	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.520265102 CEST	49798	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.520270109 CEST	443	49798	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.523668051 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.523705959 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:27.523907900 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.524209023 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:27.524219990 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.113408089 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.117378950 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.130811930 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.130831003 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.153983116 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.154469967 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.154481888 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.162357092 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.166244984 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.166251898 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.174329042 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.174335003 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.176531076 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.176567078 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.177339077 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.177344084 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.178450108 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.182440042 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.182452917 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.183296919 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.183301926 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.221718073 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.245800018 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.245809078 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.247128010 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.247133017 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.253066063 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.253123999 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.253170967 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.253731012 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.253745079 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.260838032 CEST	49806	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.260868073 CEST	443	49806	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.261132956 CEST	49806	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.261421919 CEST	49806	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.261432886 CEST	443	49806	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.273049116 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.273216963 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.273567915 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.273796082 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.273806095 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.274801016 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.274957895 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.275032997 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.275568962 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.275578022 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.275619984 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.275631905 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.280267000 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.280324936 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.280467033 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.282412052 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.282450914 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.282685995 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.282869101 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.282880068 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.283045053 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.283054113 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.288415909 CEST	49808	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.288456917 CEST	443	49808	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.288580894 CEST	49808	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.289589882 CEST	49809	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.289638996 CEST	443	49809	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.289705038 CEST	49809	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.290239096 CEST	49808	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.290257931 CEST	443	49808	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.290482044 CEST	49809	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.290498018 CEST	443	49809	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.349406004 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.349478006 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.349559069 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.349715948 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.349729061 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.349739075 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.349745035 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.355977058 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.355999947 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.356081963 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.356281042 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.356292963 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.910828114 CEST	443	49806	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.912451982 CEST	49806	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.912476063 CEST	443	49806	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.913588047 CEST	49806	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.913594007 CEST	443	49806	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.927311897 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.928404093 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.928420067 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.929352999 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.929357052 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.951710939 CEST	443	49809	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.952222109 CEST	49809	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.952236891 CEST	443	49809	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.953048944 CEST	49809	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.953056097 CEST	443	49809	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.956691027 CEST	443	49808	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.957134962 CEST	49808	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.957165003 CEST	443	49808	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:28.957767963 CEST	49808	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:28.957772970 CEST	443	49808	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.014991045 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.015584946 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.015598059 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.016169071 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.016175985 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.016561985 CEST	443	49806	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.016608953 CEST	443	49806	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.016675949 CEST	49806	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.017002106 CEST	49806	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.017002106 CEST	49806	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.017019033 CEST	443	49806	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.017030001 CEST	443	49806	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.020091057 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.020102024 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.020349979 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.020490885 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.020499945 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.027626038 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.027643919 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.027697086 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.027718067 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.027920008 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.027925968 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.027935982 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.027951956 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.027965069 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.030729055 CEST	49812	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.030766964 CEST	443	49812	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.030951023 CEST	49812	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.031044960 CEST	49812	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.031056881 CEST	443	49812	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.054269075 CEST	443	49809	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.054344893 CEST	443	49809	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.054546118 CEST	49809	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.054578066 CEST	49809	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.054593086 CEST	443	49809	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.054605007 CEST	49809	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.054613113 CEST	443	49809	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.057687044 CEST	49813	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.057706118 CEST	443	49813	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.057866096 CEST	49813	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.058109045 CEST	49813	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.058118105 CEST	443	49813	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.060056925 CEST	443	49808	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.060117960 CEST	443	49808	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.060235977 CEST	49808	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.060269117 CEST	49808	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.060280085 CEST	443	49808	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.060291052 CEST	49808	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.060296059 CEST	443	49808	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.062577009 CEST	49814	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.062586069 CEST	443	49814	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.062666893 CEST	49814	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.062777042 CEST	49814	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.062783957 CEST	443	49814	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.115981102 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.116007090 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.116091967 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.116106033 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.116497993 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.116859913 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.116934061 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.116951942 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.116965055 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.116972923 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.119786978 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.119839907 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.121340990 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.121340990 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.121370077 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.915450096 CEST	443	49812	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.916085005 CEST	49812	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.916094065 CEST	443	49812	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.917063951 CEST	49812	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.917068005 CEST	443	49812	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.936032057 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.936152935 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.936706066 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.936712980 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.937680960 CEST	443	49813	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.938055038 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.938059092 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.938667059 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.938683033 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.939515114 CEST	443	49814	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.939685106 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.939697027 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.940023899 CEST	49814	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.940037012 CEST	443	49814	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.940846920 CEST	49814	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.940851927 CEST	443	49814	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.941510916 CEST	49813	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.941517115 CEST	443	49813	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:29.942131996 CEST	49813	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:29.942135096 CEST	443	49813	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.023309946 CEST	443	49812	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.023377895 CEST	443	49812	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.023516893 CEST	443	49812	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.023519993 CEST	49812	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.023566961 CEST	49812	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.024049997 CEST	49812	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.024061918 CEST	443	49812	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.024101019 CEST	49812	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.024106979 CEST	443	49812	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.031956911 CEST	49816	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.032001972 CEST	443	49816	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.032133102 CEST	49816	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.032386065 CEST	49816	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.032401085 CEST	443	49816	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.042661905 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.042687893 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.042742968 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.042747021 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.042814016 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.042920113 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.042984009 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.043046951 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.043052912 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.043066025 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.043602943 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.043608904 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.043617964 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.043622017 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.047689915 CEST	49817	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.047715902 CEST	443	49817	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.047796011 CEST	49817	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.048018932 CEST	49817	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.048032999 CEST	443	49817	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.051435947 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.051445007 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.051505089 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.051870108 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.051877975 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.052512884 CEST	443	49814	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.052576065 CEST	443	49814	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.052696943 CEST	49814	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.053114891 CEST	49814	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.053121090 CEST	443	49814	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.053129911 CEST	49814	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.053133965 CEST	443	49814	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.056408882 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.056432009 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.056525946 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.056891918 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.056906939 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.080204010 CEST	443	49813	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.080389977 CEST	443	49813	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.080658913 CEST	49813	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.080797911 CEST	49813	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.080817938 CEST	443	49813	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.085495949 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.085534096 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.085854053 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.085995913 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.086008072 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.700844049 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.701370001 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.701383114 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.701982021 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.701987028 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.719137907 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.719839096 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.719861984 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.720356941 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.720362902 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.726103067 CEST	443	49816	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.726650000 CEST	49816	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.726665020 CEST	443	49816	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.727242947 CEST	49816	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.727253914 CEST	443	49816	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.744034052 CEST	443	49817	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.744431973 CEST	49817	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.744447947 CEST	443	49817	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.745148897 CEST	49817	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.745152950 CEST	443	49817	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.780193090 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.780826092 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.780843019 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.781511068 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.781516075 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.803980112 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.804037094 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.804209948 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.804663897 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.804676056 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.804685116 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.804689884 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.808324099 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.808360100 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.808429003 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.808603048 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.808618069 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.821644068 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.821710110 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.821767092 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.822014093 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.822029114 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.822046041 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.822052002 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.826132059 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.826152086 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.826792002 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.827033997 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.827043056 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.832678080 CEST	443	49816	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.834506989 CEST	443	49816	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.834675074 CEST	49816	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.834845066 CEST	49816	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.834861994 CEST	443	49816	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.847280025 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.847326994 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.847613096 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.847790956 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.847800970 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.858412027 CEST	443	49817	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.858469963 CEST	443	49817	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.858604908 CEST	49817	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.858742952 CEST	49817	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.858750105 CEST	443	49817	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.858778000 CEST	49817	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.858782053 CEST	443	49817	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.861505985 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.861530066 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.861802101 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.861957073 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.861963987 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.886924982 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.887087107 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.887159109 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.887260914 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.887273073 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.887284040 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.887290955 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.890264034 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.890351057 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:30.890444040 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.890614986 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:30.890652895 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.477171898 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.478461027 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.478503942 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.479427099 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.479434013 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.506803036 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.508482933 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.508495092 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.516213894 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.521636963 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.521641970 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.531161070 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.562417984 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.562429905 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.563472986 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.563478947 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.564050913 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.564060926 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.565077066 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.565082073 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.572571039 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.579030037 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.579102993 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.579255104 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.580704927 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.580734968 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.587344885 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.587416887 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.589329004 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.589376926 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.623708963 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.623783112 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.623846054 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.625140905 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.625180006 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.625343084 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.625344038 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.625355959 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.628254890 CEST	49827	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.628304958 CEST	443	49827	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.628371954 CEST	49827	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.628664017 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.628683090 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.628962040 CEST	49827	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.628974915 CEST	443	49827	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.661514044 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.661793947 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.661843061 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.662229061 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.662246943 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.662281990 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.662288904 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.665997028 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.666033983 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.666213989 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.666501999 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.666518927 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.671366930 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.672413111 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.672475100 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.672530890 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.672738075 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.672750950 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.672761917 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.672768116 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.676083088 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.676116943 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.676196098 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.676383018 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.676393032 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.770987034 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.771025896 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.771089077 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.771111965 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.771143913 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.771395922 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.771414995 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.771447897 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.771455050 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.775643110 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.775687933 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:31.775783062 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.775934935 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:31.775947094 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.331201077 CEST	443	49827	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.331662893 CEST	49827	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.331687927 CEST	443	49827	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.332199097 CEST	49827	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.332205057 CEST	443	49827	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.338892937 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.339297056 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.339323044 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.339728117 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.339732885 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.342509985 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.343008041 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.343033075 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.343475103 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.343478918 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.374337912 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.374912024 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.374922037 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.375498056 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.375505924 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.431621075 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.432152987 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.432182074 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.432622910 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.432629108 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.432907104 CEST	443	49827	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.432960987 CEST	443	49827	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.433012962 CEST	49827	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.433203936 CEST	49827	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.433226109 CEST	443	49827	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.433238983 CEST	49827	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.433243990 CEST	443	49827	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.436306000 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.436342001 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.436400890 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.436570883 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.436583996 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.439912081 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.439975023 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.440031052 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.440190077 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.440190077 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.440237045 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.440273046 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.443427086 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.443468094 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.443567038 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.443614960 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.443937063 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.443944931 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.443949938 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.443994045 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.444013119 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.444065094 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.444081068 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.444097996 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.444106102 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.444112062 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.444122076 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.444125891 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.446481943 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.446518898 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.446593046 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.446758986 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.446774006 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.487775087 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.487848043 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.487898111 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.488123894 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.488143921 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.488246918 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.488255024 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.491164923 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.491204977 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.491364002 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.491590023 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.491601944 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.531765938 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.532085896 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.532181978 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.532258987 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.532280922 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.532293081 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.532310009 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.535346031 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.535397053 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:32.535645962 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.535645962 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:32.535679102 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.085711002 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.086472988 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.086488962 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.086841106 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.086846113 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.111578941 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.112143040 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.112154007 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.112613916 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.112618923 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.118884087 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.119299889 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.119313002 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.119822025 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.119827986 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.151907921 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.152628899 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.152650118 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.153295994 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.153301954 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.186800003 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.186880112 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.187158108 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.187305927 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.187329054 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.187341928 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.187346935 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.188564062 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.189883947 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.189883947 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.189909935 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.189939022 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.190483093 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.190521002 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.190630913 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.190846920 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.190862894 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.214934111 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.215234041 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.215372086 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.215372086 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.215372086 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.218103886 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.218118906 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.218225002 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.218404055 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.218414068 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.222266912 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.222299099 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.222342968 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.222376108 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.222434998 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.222553968 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.222553968 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.222570896 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.222579002 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.225027084 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.225083113 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.225220919 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.225457907 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.225472927 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.255186081 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.255249977 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.255405903 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.255588055 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.255588055 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.255614996 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.255625010 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.259660006 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.259701967 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.259896994 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.260234118 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.260247946 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.296473980 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.296684027 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.296771049 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.296791077 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.296865940 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.296958923 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.296958923 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.296989918 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.296998978 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.299830914 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.299880028 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.300157070 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.300420046 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.300437927 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.443711996 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.443747997 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.845616102 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.846153021 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.846235037 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.846628904 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.846642971 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.876152992 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.876687050 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.876723051 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.877166033 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.877177954 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.897475958 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.898195028 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.898236036 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.898993969 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.899005890 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.939263105 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.939882040 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.939899921 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.940681934 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.940697908 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.947119951 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.947176933 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.947326899 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.951138020 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.951164007 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.951174974 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.951183081 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.954096079 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.954128981 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.954368114 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.954452991 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.954770088 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.954782009 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.954813957 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.954842091 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.955262899 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.955267906 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.975773096 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.975927114 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.976006031 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.976093054 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.976093054 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.976110935 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.976130962 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.978974104 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.978997946 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:33.979135036 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.979288101 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:33.979300976 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.002800941 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.002880096 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.002935886 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.003058910 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.003092051 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.003120899 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.003137112 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.005939960 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.005990982 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.006062031 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.006570101 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.006584883 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.044018984 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.044373989 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.044425964 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.044487000 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.044554949 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.044579029 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.044615984 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.044621944 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.047283888 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.047333002 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.047394991 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.047543049 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.047558069 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.058021069 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.058176041 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.058247089 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.058361053 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.058381081 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.058394909 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.058399916 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.061758041 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.061813116 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.061913013 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.062079906 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.062096119 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.786840916 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.787442923 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.787455082 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.788005114 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.788009882 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.791804075 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.792654991 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.792654991 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.792686939 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.792691946 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.799029112 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.799412012 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.799954891 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.799966097 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.800339937 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.800343037 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.800353050 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.800367117 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.800872087 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.800879955 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.805399895 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.805783987 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.805819035 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.806194067 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.806205988 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.912394047 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.912472963 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.912539959 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.912705898 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.912705898 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.912728071 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.912736893 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.915494919 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.915544987 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.915867090 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.916076899 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.916093111 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.927160978 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.927314043 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.927402973 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.927615881 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.927653074 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.927653074 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.927654982 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.927666903 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.927670956 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.927675962 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.927721024 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.927726984 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.927728891 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.927757978 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.927774906 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.927777052 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.927804947 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.927843094 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.928046942 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.928064108 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.928076982 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.928082943 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.929579973 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.929590940 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.931206942 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.931214094 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.931229115 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.931235075 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.933780909 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.933808088 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.933887959 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.934030056 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.934077978 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.934082031 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.934112072 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.934180021 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.934314966 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.934322119 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.934355021 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.934418917 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.934447050 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.934762001 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.934775114 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.934793949 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.934806108 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:34.934847116 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.934925079 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:34.934937000 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.573791027 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.574400902 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.574428082 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.574979067 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.574985027 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.588047981 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.588596106 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.588644981 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.588856936 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.589056969 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.589067936 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.589432001 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.589453936 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.589895010 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.589900017 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.597035885 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.597681999 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.597706079 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.598141909 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.598146915 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.620661974 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.621217012 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.621244907 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.621665001 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.621673107 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.676084042 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.676259041 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.676326036 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.676423073 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.676474094 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.676506042 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.676523924 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.679445982 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.679533005 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.679611921 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.679783106 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.679816008 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.688477039 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.688621044 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.688702106 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.688774109 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.688774109 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.688808918 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.688836098 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.689227104 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.689366102 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.689424992 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.689471960 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.689495087 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.689507961 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.689519882 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.691454887 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.691485882 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.691689968 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.691689968 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.691715002 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.691945076 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.691987991 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.692437887 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.692437887 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.692475080 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.699964046 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.699992895 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.700046062 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.700074911 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.700098038 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.700506926 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.700524092 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.700535059 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.700541019 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.703397989 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.703432083 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.703607082 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.703694105 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.703706980 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.724195004 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.724455118 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.724517107 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.724549055 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.724549055 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.724564075 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.724569082 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.726964951 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.726985931 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:35.727205038 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.727487087 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:35.727495909 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.345132113 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.345977068 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.346021891 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.346672058 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.346678972 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.347693920 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.348833084 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.348833084 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.348846912 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.348859072 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.351815939 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.353734016 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.353734016 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.353766918 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.353782892 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.385504961 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.386581898 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.386581898 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.386611938 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.386624098 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.417727947 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.448724985 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.448968887 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.449012995 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.449084997 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.449088097 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.449129105 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.449587107 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.449647903 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.454792976 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.454834938 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.454883099 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.454906940 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.454960108 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.458939075 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.484230042 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.484251022 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.485044956 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.485052109 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.485713959 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.485765934 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.485807896 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.485826969 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.487688065 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.487708092 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.487798929 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.487806082 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.488883972 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.488903046 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.489031076 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.489037991 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.490510941 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.490639925 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.490731955 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.490971088 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.490971088 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.490998983 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.491017103 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.494780064 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.494824886 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.495038033 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.495320082 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.495342970 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.497033119 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.497055054 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.497478962 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.497765064 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.497785091 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.498116016 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.498131990 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.498183966 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.498747110 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.498774052 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.498878956 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.499037981 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.499051094 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.499305964 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.499315023 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.587924004 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.587965012 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.588032007 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.588052988 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.588372946 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.588573933 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.588573933 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.588607073 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.588617086 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.592545986 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.592578888 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:36.592751026 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.593780041 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:36.593792915 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.168632030 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.170526028 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.170574903 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.171006918 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.171019077 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.182333946 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.183597088 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.183630943 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.185230970 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.185589075 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.185606956 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.186580896 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.186599016 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.187994957 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.188005924 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.204437017 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.205001116 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.205018044 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.206031084 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.206036091 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.268527985 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.269598961 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.269610882 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.269788980 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.269854069 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.269916058 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.270987034 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.270992994 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.271279097 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.271330118 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.271358967 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.271373987 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.277616024 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.277646065 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.277736902 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.278058052 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.278072119 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.285782099 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.285811901 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.285856009 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.285860062 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.285902023 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.286191940 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.286217928 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.286242008 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.286254883 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.291487932 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.291510105 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.291593075 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.292141914 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.292161942 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.292176962 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.292907000 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.292963982 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.292979002 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.293024063 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.293256044 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.293270111 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.293288946 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.293293953 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.299243927 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.299280882 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.299340010 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.299595118 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.299602985 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.311336040 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.311413050 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.311466932 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.311685085 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.311690092 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.311700106 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.311703920 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.318197966 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.318238974 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.318312883 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.318728924 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.318739891 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.368489027 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.368658066 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.368705988 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.389303923 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.389333010 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.389344931 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.389352083 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.395209074 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.395246029 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.395303965 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.395684004 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:37.395695925 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.940185070 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.955125093 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.980118036 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.987941027 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:37.990442991 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.006444931 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.021430016 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.037029982 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.062046051 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.088684082 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.088704109 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.089570045 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.089575052 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.090024948 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.090045929 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.090708017 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.090722084 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.091626883 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.091638088 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.092350006 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.092355013 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.093154907 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.093168974 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.093789101 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.093792915 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.094660044 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.094669104 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.095164061 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.095169067 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.189491034 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.189608097 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.189739943 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.190643072 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.190807104 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.190917969 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.191773891 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.191839933 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.191929102 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.192023993 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.193800926 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.193873882 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.193928957 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.197678089 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.197751045 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.197818995 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.197868109 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.202251911 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.202251911 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.202272892 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.202284098 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.204622030 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.204657078 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.204668999 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.204674959 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.206130981 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.206145048 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.206294060 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.206300974 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.206473112 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.206489086 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.208789110 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.208802938 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.208813906 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.208818913 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.227473021 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.227508068 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.227622986 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.229564905 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.229595900 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.229676008 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.230072021 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.230082989 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.270605087 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.270622969 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.272279978 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.272324085 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.272382975 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.272520065 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.272535086 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.273514032 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.273555040 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.273638010 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.274780035 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.274800062 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.274864912 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.275134087 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.275147915 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.275407076 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.275417089 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.881319046 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.882144928 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.882158995 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.883161068 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.883166075 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.930356979 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.930584908 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.931529999 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.931549072 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.931966066 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.932135105 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.932138920 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.932272911 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.932308912 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.933128119 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.933141947 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.934490919 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.934509039 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.934880018 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.934885979 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.951539993 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.952569008 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.952593088 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:38.953814030 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:38.953819036 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.014616966 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.014727116 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.014878035 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.015404940 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.015428066 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.015616894 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.015623093 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.023530960 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.023627996 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.024110079 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.024739027 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.024764061 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.033632040 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.033674002 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.034959078 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.035001993 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.035057068 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.035309076 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.035309076 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.035346985 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.035365105 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.036629915 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.036667109 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.036725044 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.036751032 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.036796093 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.036966085 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.036983013 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.037003040 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.037009001 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.040245056 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.040266991 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.040297985 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.040303946 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.044430017 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.044462919 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.045205116 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.046435118 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.046469927 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.046556950 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.049957991 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.049988985 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.050232887 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.050806999 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.050822020 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.050828934 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.050849915 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.051110029 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.051122904 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.056725979 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.057430029 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.057521105 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.057667017 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.057683945 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.057704926 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.057712078 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.061583042 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.061610937 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.061731100 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.062395096 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.062406063 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.676959991 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.677540064 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.677570105 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.678452969 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.678459883 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.719768047 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.720133066 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.720330000 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.720343113 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.720834017 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.720840931 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.723009109 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.723009109 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.723025084 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.723040104 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.727925062 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.728696108 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.728707075 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.729708910 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.729716063 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.732868910 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.733342886 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.733359098 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.734337091 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.734348059 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.779102087 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.779148102 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.779211044 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.779221058 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.779284000 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.780282021 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.780303955 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.780318975 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.780325890 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.784750938 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.784794092 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.785037041 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.785454988 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.785470009 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.821203947 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.821281910 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.821604013 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.822302103 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.822494030 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.822515011 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.822542906 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.822549105 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.822582006 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.822690964 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.824615955 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.824635983 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.824662924 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.824667931 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.830514908 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.830555916 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.831034899 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.831583023 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.831662893 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.831749916 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.832456112 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.832473993 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.832530022 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.833142042 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.833158016 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.833300114 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.833313942 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.833328962 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.833333015 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.835583925 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.835594893 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.837265968 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.837306023 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.837776899 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.838087082 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.838107109 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.838182926 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.838248014 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.838320971 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.838403940 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.838421106 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.838430882 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.838437080 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.841365099 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.841409922 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:39.841474056 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.841650009 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:39.841667891 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.483467102 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.483887911 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.483927965 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.483931065 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.484355927 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.484369040 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.484729052 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.484764099 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.485091925 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.485107899 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.490164042 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.490817070 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.490855932 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.491553068 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.491563082 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.509932041 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.510436058 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.510468006 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.511254072 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.511262894 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.526055098 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.526731968 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.526755095 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.527173042 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.527179003 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.585302114 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.585489988 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.585541010 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.585699081 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.585722923 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.585736036 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.585742950 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.588872910 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.588918924 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.588984966 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.589199066 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.589215994 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.590470076 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.591137886 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.591206074 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.591247082 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.591247082 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.591267109 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.591280937 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.591939926 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.591995955 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.592042923 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.592129946 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.592158079 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.592175007 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.592184067 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.593803883 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.593833923 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.593890905 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.594067097 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.594079971 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.594494104 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.594547987 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.594599009 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.594757080 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.594772100 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.614689112 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.614872932 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.614927053 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.615047932 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.615068913 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.615083933 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.615092993 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.617996931 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.618031025 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.618206024 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.618340969 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.618350983 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.634305000 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.634352922 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.634397030 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.634401083 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.634437084 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.634576082 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.634597063 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.634609938 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.634617090 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.637478113 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.637521982 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:40.637587070 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.637722969 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:40.637733936 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.246881008 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.247451067 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.247476101 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.247924089 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.247934103 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.255127907 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.255697966 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.255734921 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.256333113 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.256342888 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.268421888 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.268912077 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.268935919 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.269382954 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.269395113 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.294080019 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.294666052 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.294687033 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.295129061 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.295150042 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.301533937 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.302031994 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.302057028 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.302475929 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.302483082 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.348946095 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.349287987 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.349350929 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.349415064 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.349433899 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.349461079 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.349467039 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.352371931 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.352406025 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.352633953 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.352814913 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.352823973 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.359227896 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.359250069 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.359309912 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.359311104 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.359369040 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.359525919 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.359550953 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.359564066 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.359571934 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.362313032 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.362354994 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.362606049 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.362772942 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.362786055 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.381563902 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.381639957 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.381822109 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.381968975 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.381987095 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.381999969 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.382006884 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.385159969 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.385206938 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.385284901 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.385474920 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.385498047 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.398770094 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.398829937 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.398888111 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.399002075 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.399002075 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.399259090 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.399259090 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.399277925 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.399288893 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.402353048 CEST	49889	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.402384996 CEST	443	49889	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.402569056 CEST	49889	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.402757883 CEST	49889	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.402770042 CEST	443	49889	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.404841900 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.405683994 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.405730963 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.405746937 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.405812025 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.405915976 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.405922890 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.405941963 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.405946016 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.408305883 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.408327103 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:41.408409119 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.408627987 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:41.408642054 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.693144083 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.693861961 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.693881035 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.694268942 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.694276094 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.694333076 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.694672108 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.694683075 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.695154905 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.695162058 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.695270061 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.695571899 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.695579052 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.696094036 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.696098089 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.697536945 CEST	443	49889	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.697829008 CEST	49889	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.697837114 CEST	443	49889	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.698206902 CEST	49889	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.698211908 CEST	443	49889	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.702775955 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.703140020 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.703149080 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.703739882 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.703744888 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.795902967 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.796154976 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.796411037 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.796449900 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.796469927 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.796482086 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.796488047 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.797451019 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.797519922 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.797687054 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.797744036 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.797744036 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.797764063 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.797774076 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.798118114 CEST	443	49889	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.798144102 CEST	443	49889	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.798194885 CEST	49889	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.798207045 CEST	443	49889	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.798398018 CEST	49889	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.798404932 CEST	443	49889	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.798420906 CEST	49889	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.798574924 CEST	443	49889	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.798610926 CEST	443	49889	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.798657894 CEST	49889	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.799985886 CEST	49891	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.800015926 CEST	443	49891	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.800297022 CEST	49891	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.800422907 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.800451040 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.800491095 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.800501108 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.800540924 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.800632954 CEST	49891	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.800647974 CEST	443	49891	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.801151037 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.801157951 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.801170111 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.801173925 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.801383972 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.801423073 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.801480055 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.801843882 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.801851034 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.802509069 CEST	49893	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.802550077 CEST	443	49893	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.802741051 CEST	49893	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.803030968 CEST	49893	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.803044081 CEST	443	49893	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.803205013 CEST	49894	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.803211927 CEST	443	49894	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.803282022 CEST	49894	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.803370953 CEST	49894	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.803383112 CEST	443	49894	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.808923006 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.809209108 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.809253931 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.809272051 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.809360027 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.809360027 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.809360027 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.811350107 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.811393976 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.811533928 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.811686039 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:42.811697960 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:42.857131958 CEST	49835	53	192.168.2.5	1.1.1.1
Oct 13, 2024 20:09:42.862049103 CEST	53	49835	1.1.1.1	192.168.2.5
Oct 13, 2024 20:09:42.862126112 CEST	49835	53	192.168.2.5	1.1.1.1
Oct 13, 2024 20:09:42.862205029 CEST	49835	53	192.168.2.5	1.1.1.1
Oct 13, 2024 20:09:42.867247105 CEST	53	49835	1.1.1.1	192.168.2.5
Oct 13, 2024 20:09:43.115355968 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.115389109 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.532881975 CEST	53	49835	1.1.1.1	192.168.2.5
Oct 13, 2024 20:09:43.533205986 CEST	53	49835	1.1.1.1	192.168.2.5
Oct 13, 2024 20:09:43.533248901 CEST	49835	53	192.168.2.5	1.1.1.1
Oct 13, 2024 20:09:43.533627033 CEST	49835	53	192.168.2.5	1.1.1.1
Oct 13, 2024 20:09:43.540528059 CEST	443	49894	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.540999889 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.541006088 CEST	443	49891	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.541024923 CEST	443	49893	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.543246031 CEST	53	49835	1.1.1.1	192.168.2.5
Oct 13, 2024 20:09:43.543409109 CEST	49835	53	192.168.2.5	1.1.1.1
Oct 13, 2024 20:09:43.565047026 CEST	49894	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.565067053 CEST	443	49894	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.566310883 CEST	49894	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.566317081 CEST	443	49894	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.567332983 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.567368031 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.568166018 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.568172932 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.568384886 CEST	49891	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.568408012 CEST	443	49891	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.570481062 CEST	49891	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.570487976 CEST	443	49891	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.571197987 CEST	49893	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.571211100 CEST	443	49893	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.572006941 CEST	49893	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.572010994 CEST	443	49893	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.664402008 CEST	443	49894	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.664571047 CEST	443	49894	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.664726019 CEST	49894	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.664913893 CEST	49894	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.664913893 CEST	49894	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.664961100 CEST	443	49894	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.664989948 CEST	443	49894	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.668802977 CEST	443	49891	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.668879986 CEST	443	49891	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.668930054 CEST	49891	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.668950081 CEST	443	49891	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.669011116 CEST	443	49891	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.669075012 CEST	49891	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.669435024 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.669631004 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.669683933 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.671046972 CEST	443	49893	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.671153069 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.671180964 CEST	443	49893	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.671200991 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.671246052 CEST	49893	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.671294928 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.671669960 CEST	49891	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.671669960 CEST	49891	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.671689034 CEST	443	49891	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.671696901 CEST	443	49891	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.674619913 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.674642086 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.676892042 CEST	49893	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.676909924 CEST	443	49893	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.676951885 CEST	49893	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.676965952 CEST	443	49893	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.678816080 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.678853035 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.683582067 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.683628082 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.683712006 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.684437037 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.684458017 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.686253071 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.686286926 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.686367035 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.686609030 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.686621904 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.687560081 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.687587976 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.687736988 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.688160896 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.688173056 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.728923082 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.729825974 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.729854107 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.730690956 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.730700970 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.833055019 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.833090067 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.833137035 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.833146095 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.833185911 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.833333015 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.833353043 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.833430052 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.833436966 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.838165998 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.838207960 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:43.838361025 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.838515997 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:43.838529110 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.280842066 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.281447887 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.281477928 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.282391071 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.282397032 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.337002993 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.340224981 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.343091011 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.343107939 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.343903065 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.343909025 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.344367027 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.344389915 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.345052958 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.345057011 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.369133949 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.374737024 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.374769926 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.379223108 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.379231930 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.389503956 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.389580965 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.389661074 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.390117884 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.390141964 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.390173912 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.390181065 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.396545887 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.396612883 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.396713972 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.397387981 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.397401094 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.440888882 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.441608906 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.441670895 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.441740036 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.441936970 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.441952944 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.441963911 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.441968918 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.443609953 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.443916082 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.443979979 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.447124004 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.447148085 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.447272062 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.447278023 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.450615883 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.450645924 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.450727940 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.451244116 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.451284885 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.451324940 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.451337099 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.451349974 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.451570034 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.451582909 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.480525017 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.480554104 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.480606079 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.480626106 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.480740070 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.480885029 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.480905056 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.480936050 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.480941057 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.483623981 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.483668089 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.483737946 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.483917952 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.483928919 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.486437082 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.486807108 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.486819983 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.487246990 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.487258911 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.588109016 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.588350058 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.589302063 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.589862108 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.589862108 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.589875937 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.589885950 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.592775106 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.592824936 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:44.592972994 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.593147039 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:44.593158960 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.081893921 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.096014023 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.096034050 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.097203016 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.097209930 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.117902040 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.131474018 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.131504059 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.133240938 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.133248091 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.134438038 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.135243893 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.135268927 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.136059999 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.136065006 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.194298983 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.194367886 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.194452047 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.204818010 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.204839945 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.231374025 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.231961012 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.232033014 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.235356092 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.235404968 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.235551119 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.236207008 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.236219883 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.236233950 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.236239910 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.240216017 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.241063118 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.241127968 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.242176056 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.259659052 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.281147957 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.281208992 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.281274080 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.282341957 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.282367945 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.283468008 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.283493042 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.284184933 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.284189939 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.284929037 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.284934998 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.285693884 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.285696983 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.291527033 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.291549921 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.292608976 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.292630911 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.292649984 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.292655945 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.363528967 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.363571882 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.363799095 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.369982004 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.370002031 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.381124973 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.381938934 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.381999969 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.382061958 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.382281065 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.382303953 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.382313967 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.382319927 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.388068914 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.388144016 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.388185978 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.388741016 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.388753891 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.399342060 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.399389982 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.399450064 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.407058954 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.407130957 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.407318115 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.407680988 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.407694101 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.414510965 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.414535046 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.944133997 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.944593906 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.944617987 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.945070028 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.945075989 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.964658976 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.966909885 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.966938972 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:45.967302084 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:45.967308044 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.045726061 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.045830965 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.045888901 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.046037912 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.046052933 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.046062946 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.046068907 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.048841000 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.048888922 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.049072027 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.049251080 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.049259901 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.057394981 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.057781935 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.057806969 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.058227062 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.058232069 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.063102961 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.063421011 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.063435078 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.063817024 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.063822985 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.070373058 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.070400953 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.070440054 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.070482969 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.070585012 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.070600033 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.070610046 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.070615053 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.072989941 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.073023081 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.073151112 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.073283911 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.073295116 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.092940092 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.093446016 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.093465090 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.093910933 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.093916893 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.158534050 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.158611059 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.158746958 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.158947945 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.158967972 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.158979893 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.158984900 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.161668062 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.161710978 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.161995888 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.162167072 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.162178040 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.172696114 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.173010111 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.173089027 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.173142910 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.173142910 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.173156023 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.173163891 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.175426960 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.175448895 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.175498009 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.175636053 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.175643921 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.194328070 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.194516897 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.194560051 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.194618940 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.194720030 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.194730043 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.196954966 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.196980953 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.197046995 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.197175026 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.197185040 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.706758976 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.707432985 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.707451105 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.708170891 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.708177090 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.749339104 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.803147078 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.807039976 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.807049036 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.808089972 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.808095932 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.809263945 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.809354067 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.809405088 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.809420109 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.809464931 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.809573889 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.809874058 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.809895039 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.809906006 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.809921980 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.812798023 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.813677073 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.813692093 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.814446926 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.814451933 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.836581945 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.859863043 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.881262064 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.903589010 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.903599977 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.904514074 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.904520035 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.905505896 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.905539989 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.906230927 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.906239033 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.909138918 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.910084963 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.910166979 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.910166979 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.910260916 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.910276890 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.929698944 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.929722071 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.929771900 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.929776907 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:46.929825068 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.950921059 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:46.950942993 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.007019997 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.008018970 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.008070946 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.008086920 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.008138895 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.009933949 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.009979010 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.010128975 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.012495995 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.012561083 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.012690067 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.012748957 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.031511068 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.031537056 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.032790899 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.032808065 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.033265114 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.033289909 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.033390999 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.033416033 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.033430099 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.033560991 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.033571959 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.040368080 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.040390015 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.040406942 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.040412903 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.040462017 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.040653944 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.042927980 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.042959929 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.043075085 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.043219090 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.043231964 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.043514967 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.043528080 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.043709993 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.043723106 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.690479994 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.691196918 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.691229105 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.691772938 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.691778898 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.697344065 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.700978041 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.701020956 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.701453924 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.701461077 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.707302094 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.707640886 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.707670927 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.708113909 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.708123922 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.713521004 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.713820934 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.713829994 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.714287043 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.714292049 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.736943007 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.737375021 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.737395048 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.737762928 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.737767935 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.793087006 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.793253899 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.793323040 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.793554068 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.793575048 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.793586016 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.793591976 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.796546936 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.796598911 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.796891928 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.797158957 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.797172070 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.798680067 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.799017906 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.799076080 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.799113989 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.799134970 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.799155951 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.799160957 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.801574945 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.801621914 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.801743984 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.801894903 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.801904917 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.811453104 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.811495066 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.811543941 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.811598063 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.811778069 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.811804056 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.811820030 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.811825037 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.814646959 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.814685106 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.814879894 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.815046072 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.815058947 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.820380926 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.820406914 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.820451975 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.820503950 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.820604086 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.820605040 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.820615053 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.820622921 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.823067904 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.823108912 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.823168993 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.823312044 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.823324919 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.844651937 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.844975948 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.845083952 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.845113039 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.845128059 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.845139980 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.845145941 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.847851992 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.847886086 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:47.847954988 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.848104954 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:47.848114014 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.468451977 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.469038010 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.469055891 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.469610929 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.469614983 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.476558924 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.476905107 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.476919889 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.477303982 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.477309942 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.500976086 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.501435041 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.501457930 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.501967907 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.501972914 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.509252071 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.509610891 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.509635925 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.510102034 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.510106087 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.524946928 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.525445938 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.525459051 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.525943995 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.525949001 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.571279049 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.571320057 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.571376085 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.571402073 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.571423054 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.571769953 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.571787119 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.571798086 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.571804047 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.575143099 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.575180054 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.575333118 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.575514078 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.575526953 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.577513933 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.577631950 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.577687979 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.577874899 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.577897072 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.577909946 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.577917099 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.580564022 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.580605030 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.580826998 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.581067085 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.581083059 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.607096910 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.607172012 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.607292891 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.607358932 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.607358932 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.607378006 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.607391119 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.609821081 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.609864950 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.609927893 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.610049963 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.610059977 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.617965937 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.617990971 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.618031979 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.618077040 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.618201017 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.618213892 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.618225098 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.618230104 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.620862961 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.620896101 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.620958090 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.621097088 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.621104956 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.631181002 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.631279945 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.631633043 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.631633043 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.631685019 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.631699085 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.634573936 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.634618044 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:48.634776115 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.634979963 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:48.634998083 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.243848085 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.244385958 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.244419098 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.244851112 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.244858027 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.262173891 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.262638092 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.262661934 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.263087034 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.263092041 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.280445099 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.280906916 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.280925035 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.281346083 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.281351089 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.285862923 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.286349058 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.286362886 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.286762953 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.286767960 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.305768967 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.306358099 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.306385994 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.306904078 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.306910038 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.346467972 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.346541882 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.346607924 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.346854925 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.346875906 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.346889973 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.346895933 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.349751949 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.349792004 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.349910975 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.351223946 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.351248980 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.367429018 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.367588043 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.367636919 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.367636919 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.367695093 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.367870092 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.367887974 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.367899895 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.367904902 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.370631933 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.370681047 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.370953083 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.371123075 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.371133089 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.382261992 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.382452011 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.382498980 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.382514954 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.382550955 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.382601023 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.382616043 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.382625103 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.382630110 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.385072947 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.385107040 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.385349035 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.385497093 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.385504961 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.390753984 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.391124964 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.391180992 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.391215086 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.391215086 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.391227961 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.391237974 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.393605947 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.393645048 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.394720078 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.394720078 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.394752979 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.407978058 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.408051968 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.408122063 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.408271074 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.408292055 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.408305883 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.408312082 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.410645962 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.410679102 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:49.410778999 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.410902023 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:49.410912991 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.022903919 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.023425102 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.023443937 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.023926020 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.023931026 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.028610945 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.029059887 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.029095888 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.029617071 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.029635906 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.039025068 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.039438963 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.039452076 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.039866924 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.039871931 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.065206051 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.065745115 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.065768957 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.066246033 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.066257000 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.068790913 CEST	49713	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:09:50.073566914 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.073887110 CEST	80	49713	50.6.138.164	192.168.2.5
Oct 13, 2024 20:09:50.074090958 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.074110031 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.074623108 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.074634075 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.125951052 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.126701117 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.126754999 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.126759052 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.126806021 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.126867056 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.126890898 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.126903057 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.126909018 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.129172087 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.129309893 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.129427910 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.129508972 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.129527092 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.129789114 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.129836082 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.129894972 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.130362034 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.130376101 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.131786108 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.131794930 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.131908894 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.132093906 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.132101059 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.140572071 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.140697002 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.140742064 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.140747070 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.140799046 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.140881062 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.140908003 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.140923977 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.140928984 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.143124104 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.143166065 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.143233061 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.143367052 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.143378973 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.166239023 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.166389942 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.166512966 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.166558981 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.166574955 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.166585922 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.166591883 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.169588089 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.169636965 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.169852018 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.170037031 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.170054913 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.185631037 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.185848951 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.185976028 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.186067104 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.186067104 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.186089039 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.186098099 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.188857079 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.188911915 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:50.188982964 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.189135075 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:50.189152956 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.011689901 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.012180090 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.012197971 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.012718916 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.012725115 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.015285969 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.015705109 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.015738010 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.015774012 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.016321898 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.016328096 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.016556978 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.016586065 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.016959906 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.016969919 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.019026041 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.019562006 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.019581079 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.019962072 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.019967079 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.022269011 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.022985935 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.022985935 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.023000956 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.023015022 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.112941027 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.113270044 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.113666058 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.118417025 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.118427038 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.118725061 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.118904114 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.119425058 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.119479895 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.119504929 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.119744062 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.123744965 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.123856068 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.125235081 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.128732920 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.128926039 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.128976107 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.128978968 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.129045010 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.129050970 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.129080057 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.129106998 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.129115105 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.130733013 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.130733967 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.130754948 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.130768061 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.132724047 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.132754087 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.132777929 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.132785082 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.133181095 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.133182049 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.133217096 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.133223057 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.134361029 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.134366989 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.134390116 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.134396076 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.140245914 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.140294075 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.140605927 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.142646074 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.142693996 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.143152952 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.143182993 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.143212080 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.143567085 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.143584967 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.145293951 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.145343065 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.145433903 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.146955967 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.146994114 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.147212029 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.147216082 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.147232056 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.147365093 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.147377014 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.148559093 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.148582935 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.149224997 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.150073051 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.150090933 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.820955992 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.824551105 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.828022003 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.828042030 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.829056978 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.829063892 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.829911947 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.829911947 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.829927921 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.829937935 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.909034967 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.909746885 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.909775972 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.910413027 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.910419941 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.913147926 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.914588928 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.914588928 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.914616108 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.914638042 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.928574085 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.928601980 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.928644896 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.928675890 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.928766966 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.929961920 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.929961920 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.929984093 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.929989100 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.930676937 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.931499958 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.931512117 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.932244062 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.932249069 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.937194109 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.937237024 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.937424898 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.941008091 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.941318989 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.941442966 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.941442966 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.941626072 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.941637993 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.946357965 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.946388960 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.948827028 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.948878050 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:51.949129105 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.954401016 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:51.954432011 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:52.354897022 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:52.354906082 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:52.354926109 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:52.354943991 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:52.354984045 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:52.354991913 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:52.355000019 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:52.355035067 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:52.355070114 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:52.355099916 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:52.355099916 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:52.355209112 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:52.355230093 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:52.355243921 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:52.355251074 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:52.355480909 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:52.355496883 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:52.355509043 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:52.355515003 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:52.356589079 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:52.356602907 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:52.356612921 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:52.356617928 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:52.359420061 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:52.359461069 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:52.359513998 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:52.359885931 CEST	49891	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:52.359922886 CEST	443	49891	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:52.359977007 CEST	49891	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:52.360044956 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:52.360061884 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:52.360199928 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:52.360248089 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:52.360312939 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:52.360325098 CEST	49891	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:52.360336065 CEST	443	49891	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:52.360414982 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:52.360428095 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:52.637034893 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:52.638108969 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:52.638128996 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:52.639473915 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:52.639487982 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:52.744335890 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:52.744400024 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:52.744446993 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:52.744911909 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:52.744940996 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:52.744954109 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:52.744961023 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:52.752717972 CEST	49893	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:52.752779007 CEST	443	49893	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:52.752844095 CEST	49893	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:52.753578901 CEST	49893	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:52.753595114 CEST	443	49893	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.020652056 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.021255970 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.021291018 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.022466898 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.022486925 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.023123026 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.024235964 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.024235964 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.024257898 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.024274111 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.025306940 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.025319099 CEST	443	49891	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.026144028 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.026163101 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.026434898 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.026441097 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.027405024 CEST	49891	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.027405024 CEST	49891	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.027412891 CEST	443	49891	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.027426958 CEST	443	49891	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.122466087 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.123034000 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.123334885 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.123395920 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.123395920 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.123416901 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.123430967 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.126980066 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.127010107 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.127063036 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.127262115 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.127262115 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.127262115 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.127526045 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.127542973 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.127578974 CEST	49894	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.127626896 CEST	443	49894	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.128206015 CEST	443	49891	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.128283024 CEST	443	49891	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.128314972 CEST	49894	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.128779888 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.128997087 CEST	49891	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.129013062 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.129115105 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.129596949 CEST	49894	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.129609108 CEST	49891	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.129615068 CEST	443	49891	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.129621983 CEST	443	49894	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.129662037 CEST	49891	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.129667044 CEST	443	49891	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.130781889 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.130805969 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.130830050 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.130836010 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.136782885 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.136787891 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.136823893 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.136831999 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.136909962 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.136910915 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.137413979 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.137428999 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.137703896 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.137708902 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.137732029 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.137741089 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.138083935 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.138262987 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.138274908 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.409271002 CEST	443	49893	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.410592079 CEST	49893	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.410656929 CEST	443	49893	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.413297892 CEST	49893	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.413311958 CEST	443	49893	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.511219978 CEST	443	49893	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.511253119 CEST	443	49893	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.511301041 CEST	443	49893	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.511323929 CEST	49893	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.511420965 CEST	49893	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.511585951 CEST	49893	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.511585951 CEST	49893	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.511601925 CEST	443	49893	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.511610985 CEST	443	49893	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.516767979 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.516825914 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.516931057 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.517163038 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.517175913 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.792494059 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.793093920 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.793109894 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.793625116 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.793631077 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.799711943 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.800689936 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.800719976 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.801305056 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.801311016 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.812022924 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.812489986 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.812514067 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.812937021 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.812942982 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.817048073 CEST	443	49894	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.817532063 CEST	49894	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.817559958 CEST	443	49894	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.817939997 CEST	49894	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.817948103 CEST	443	49894	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.895071983 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.895153999 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.895366907 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.895478964 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.895478964 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.895498037 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.895502090 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.899019957 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.899045944 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.899415016 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.899415016 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.899441957 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.903728008 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.904220104 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.904479027 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.904535055 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.904535055 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.904560089 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.904570103 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.906842947 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.906877041 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.906985998 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.907149076 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.907160997 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.926197052 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.926290035 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.926383972 CEST	443	49894	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.926450968 CEST	443	49894	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.926479101 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.926537037 CEST	49894	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.926666975 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.926685095 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.926711082 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.926717997 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.927562952 CEST	49894	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.927603960 CEST	443	49894	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.927649975 CEST	49894	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.927666903 CEST	443	49894	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.930027962 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.930068970 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.930248022 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.930644989 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.930644989 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.930661917 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.930671930 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:53.931082010 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.931204081 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:53.931224108 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.180191994 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.181471109 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.181502104 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.182212114 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.182218075 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.593182087 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.593262911 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.593322039 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.593688965 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.593713045 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.593724966 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.593730927 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.600239038 CEST	49904	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.600284100 CEST	443	49904	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.600343943 CEST	49904	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.600792885 CEST	49904	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.600805044 CEST	443	49904	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.780797958 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.781728029 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.781744003 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.782983065 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.782993078 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.785156012 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.785255909 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.786303997 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.786318064 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.787456989 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.787467003 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.788094044 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.788156986 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.788172007 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.789102077 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.789110899 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.789865017 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.789880991 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.790770054 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.790776014 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.882960081 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.882994890 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.883044958 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.883079052 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.883105040 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.883414984 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.883440971 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.887733936 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.887892008 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.887936115 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.888632059 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.888703108 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.888744116 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.889446974 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.889462948 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.892141104 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.892162085 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.892175913 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.892182112 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.894912004 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.894983053 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.895024061 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.934031010 CEST	49905	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.934077978 CEST	443	49905	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.934142113 CEST	49905	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.936235905 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.936261892 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.936275005 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.936281919 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.938497066 CEST	49905	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.938510895 CEST	443	49905	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.942938089 CEST	49906	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.942953110 CEST	443	49906	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.943099976 CEST	49906	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.944307089 CEST	49906	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.944315910 CEST	443	49906	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.946132898 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.946176052 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.946228981 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.946491003 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.946507931 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.948760033 CEST	49908	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.948788881 CEST	443	49908	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:54.948864937 CEST	49908	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.949292898 CEST	49908	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:54.949306965 CEST	443	49908	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.291486979 CEST	443	49904	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.292020082 CEST	49904	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.292046070 CEST	443	49904	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.292479992 CEST	49904	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.292484999 CEST	443	49904	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.399646997 CEST	443	49904	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.399673939 CEST	443	49904	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.399717093 CEST	443	49904	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.399780035 CEST	49904	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.400000095 CEST	49904	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.400000095 CEST	49904	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.400018930 CEST	443	49904	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.400022984 CEST	443	49904	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.402899027 CEST	49909	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.402935982 CEST	443	49909	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.403151989 CEST	49909	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.403181076 CEST	49909	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.403186083 CEST	443	49909	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.595567942 CEST	443	49905	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.597376108 CEST	443	49906	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.606242895 CEST	49905	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.606282949 CEST	443	49905	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.607573032 CEST	49905	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.607584000 CEST	443	49905	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.608730078 CEST	49906	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.608743906 CEST	443	49906	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.609823942 CEST	49906	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.609829903 CEST	443	49906	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.611938953 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.612505913 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.612535000 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.613558054 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.613564014 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.614922047 CEST	443	49908	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.615390062 CEST	49908	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.615413904 CEST	443	49908	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.616169930 CEST	49908	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.616174936 CEST	443	49908	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.704993010 CEST	443	49905	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.705060959 CEST	443	49905	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.705147982 CEST	49905	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.705377102 CEST	49905	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.705394030 CEST	443	49905	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.705404997 CEST	49905	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.705410957 CEST	443	49905	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.707681894 CEST	443	49906	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.707717896 CEST	443	49906	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.707766056 CEST	443	49906	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.707813978 CEST	49906	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.707813978 CEST	49906	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.708182096 CEST	49906	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.708185911 CEST	443	49906	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.708225965 CEST	49906	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.708229065 CEST	443	49906	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.708399057 CEST	49910	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.708432913 CEST	443	49910	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.708503008 CEST	49910	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.708661079 CEST	49910	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.708683014 CEST	443	49910	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.710592031 CEST	49911	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.710637093 CEST	443	49911	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.711045980 CEST	49911	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.711448908 CEST	49911	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.711467028 CEST	443	49911	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.714404106 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.714483023 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.714540958 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.714760065 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.714777946 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.714793921 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.714799881 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.717247963 CEST	49912	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.717283010 CEST	443	49912	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.717343092 CEST	49912	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.717488050 CEST	49912	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.717499018 CEST	443	49912	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.717650890 CEST	443	49908	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.717834949 CEST	443	49908	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.717884064 CEST	49908	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.717994928 CEST	49908	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.718007088 CEST	443	49908	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.718022108 CEST	49908	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.718027115 CEST	443	49908	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.720702887 CEST	49913	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.720738888 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:55.721024990 CEST	49913	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.721024990 CEST	49913	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:55.721054077 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.066572905 CEST	443	49909	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.067300081 CEST	49909	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.067318916 CEST	443	49909	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.067709923 CEST	49909	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.067718029 CEST	443	49909	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.170793056 CEST	443	49909	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.170866013 CEST	443	49909	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.171029091 CEST	49909	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.171226978 CEST	49909	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.171250105 CEST	443	49909	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.171416998 CEST	49909	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.171425104 CEST	443	49909	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.174071074 CEST	49914	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.174108982 CEST	443	49914	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.174168110 CEST	49914	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.174305916 CEST	49914	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.174320936 CEST	443	49914	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.356765032 CEST	443	49910	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.357419968 CEST	49910	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.357434988 CEST	443	49910	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.357883930 CEST	49910	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.357889891 CEST	443	49910	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.367933035 CEST	443	49912	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.368294001 CEST	49912	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.368315935 CEST	443	49912	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.368690968 CEST	49912	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.368695021 CEST	443	49912	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.403784990 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.404254913 CEST	49913	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.404267073 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.404711962 CEST	49913	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.404716969 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.406502962 CEST	443	49911	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.406882048 CEST	49911	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.406913996 CEST	443	49911	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.407284021 CEST	49911	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.407293081 CEST	443	49911	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.462369919 CEST	443	49910	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.464715004 CEST	443	49910	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.464765072 CEST	443	49910	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.464834929 CEST	49910	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.464834929 CEST	49910	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.464898109 CEST	49910	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.464917898 CEST	443	49910	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.464999914 CEST	49910	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.465008020 CEST	443	49910	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.467689037 CEST	49915	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.467722893 CEST	443	49915	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.467788935 CEST	49915	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.467942953 CEST	49915	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.467953920 CEST	443	49915	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.472342968 CEST	443	49912	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.472404003 CEST	443	49912	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.472484112 CEST	49912	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.472678900 CEST	49912	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.472698927 CEST	443	49912	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.472712040 CEST	49912	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.472717047 CEST	443	49912	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.475311995 CEST	49916	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.475366116 CEST	443	49916	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.475433111 CEST	49916	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.475564957 CEST	49916	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.475583076 CEST	443	49916	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.510020971 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.510055065 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.510282040 CEST	49913	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.510302067 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.510409117 CEST	49913	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.510426044 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.510436058 CEST	49913	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.510587931 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.510622978 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.510691881 CEST	49913	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.513118982 CEST	49917	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.513154984 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.513226032 CEST	49917	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.513438940 CEST	49917	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.513456106 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.515628099 CEST	443	49911	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.516166925 CEST	443	49911	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.516231060 CEST	49911	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.516283989 CEST	49911	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.516294003 CEST	443	49911	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.516326904 CEST	49911	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.516333103 CEST	443	49911	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.518878937 CEST	49918	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.518910885 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:56.518996000 CEST	49918	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.519164085 CEST	49918	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:56.519181013 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.036195040 CEST	443	49914	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.037312031 CEST	49914	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.037312984 CEST	49914	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.037348986 CEST	443	49914	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.037365913 CEST	443	49914	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.138652086 CEST	443	49914	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.138726950 CEST	443	49914	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.138885975 CEST	49914	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.139008045 CEST	49914	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.139008045 CEST	49914	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.139036894 CEST	443	49914	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.139041901 CEST	443	49914	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.141891003 CEST	49919	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.141948938 CEST	443	49919	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.142039061 CEST	49919	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.142206907 CEST	49919	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.142220020 CEST	443	49919	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.170419931 CEST	443	49916	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.170886993 CEST	49916	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.170928001 CEST	443	49916	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.171402931 CEST	49916	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.171418905 CEST	443	49916	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.197839975 CEST	443	49915	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.198311090 CEST	49915	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.198333979 CEST	443	49915	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.198787928 CEST	49915	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.198793888 CEST	443	49915	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.199181080 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.199534893 CEST	49917	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.199561119 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.199913025 CEST	49917	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.199918032 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.209167004 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.209671021 CEST	49918	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.209687948 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.210370064 CEST	49918	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.210375071 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.271639109 CEST	443	49916	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.271653891 CEST	443	49916	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.271722078 CEST	49916	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.271763086 CEST	443	49916	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.271992922 CEST	49916	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.272018909 CEST	443	49916	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.272027016 CEST	49916	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.272187948 CEST	443	49916	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.272212029 CEST	443	49916	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.272412062 CEST	49916	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.274950027 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.275003910 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.275103092 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.275269032 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.275286913 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.306025028 CEST	443	49915	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.306041002 CEST	443	49915	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.306106091 CEST	49915	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.306123972 CEST	443	49915	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.306935072 CEST	49915	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.306935072 CEST	49915	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.306951046 CEST	443	49915	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.307054996 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.307075977 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.307102919 CEST	443	49915	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.307123899 CEST	49917	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.307126999 CEST	443	49915	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.307151079 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.307185888 CEST	49915	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.307435989 CEST	49917	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.307452917 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.307457924 CEST	49917	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.307663918 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.307739019 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.307976007 CEST	49917	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.310072899 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.310106039 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.310203075 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.310317039 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.310327053 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.310380936 CEST	49922	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.310389996 CEST	443	49922	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.310436964 CEST	49922	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.310574055 CEST	49922	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.310580015 CEST	443	49922	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.317784071 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.317807913 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.317857027 CEST	49918	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.317884922 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.318023920 CEST	49918	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.318042994 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.318052053 CEST	49918	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.318176031 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.318212986 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.318263054 CEST	49918	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.320746899 CEST	49923	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.320781946 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.320982933 CEST	49923	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.320982933 CEST	49923	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.321007013 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.812829018 CEST	443	49919	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.813324928 CEST	49919	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.813354969 CEST	443	49919	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.813874960 CEST	49919	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.813880920 CEST	443	49919	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.926603079 CEST	443	49919	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.926675081 CEST	443	49919	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.926781893 CEST	49919	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.926989079 CEST	49919	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.927012920 CEST	443	49919	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.927027941 CEST	49919	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.927032948 CEST	443	49919	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.929872036 CEST	49924	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.929910898 CEST	443	49924	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.929975986 CEST	49924	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.930126905 CEST	49924	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.930140972 CEST	443	49924	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.940627098 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.941020966 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.941034079 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.941581011 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.941587925 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.969369888 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.969768047 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.969780922 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.970206976 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.970211983 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.975346088 CEST	443	49922	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.975784063 CEST	49922	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.975799084 CEST	443	49922	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:57.976304054 CEST	49922	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:57.976309061 CEST	443	49922	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.021450996 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.022077084 CEST	49923	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.022087097 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.022540092 CEST	49923	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.022543907 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.044020891 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.044086933 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.044230938 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.044480085 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.044508934 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.044523001 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.044538021 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.047393084 CEST	49925	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.047444105 CEST	443	49925	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.047537088 CEST	49925	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.047775030 CEST	49925	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.047787905 CEST	443	49925	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.072072983 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.072138071 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.072211981 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.072366953 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.072366953 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.072390079 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.072398901 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.074846029 CEST	49926	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.074860096 CEST	443	49926	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.075131893 CEST	49926	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.075299978 CEST	49926	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.075310946 CEST	443	49926	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.128216028 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.128238916 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.128298998 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.128302097 CEST	49923	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.128349066 CEST	49923	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.128474951 CEST	49923	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.128490925 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.128500938 CEST	49923	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.128505945 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.131082058 CEST	49927	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.131122112 CEST	443	49927	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.131192923 CEST	49927	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.131380081 CEST	49927	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.131405115 CEST	443	49927	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.140784979 CEST	443	49922	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.140959978 CEST	443	49922	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.141014099 CEST	49922	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.141036987 CEST	49922	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.141057014 CEST	443	49922	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.141067982 CEST	49922	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.141073942 CEST	443	49922	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.143663883 CEST	49928	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.143707991 CEST	443	49928	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.143790007 CEST	49928	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.144196033 CEST	49928	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.144210100 CEST	443	49928	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.584422112 CEST	443	49924	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.584882021 CEST	49924	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.584927082 CEST	443	49924	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.585350037 CEST	49924	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.585357904 CEST	443	49924	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.687469959 CEST	443	49924	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.687537909 CEST	443	49924	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.687628031 CEST	49924	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.687659025 CEST	443	49924	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.687680006 CEST	443	49924	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.687761068 CEST	49924	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.691713095 CEST	49924	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.691732883 CEST	443	49924	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.691744089 CEST	49924	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.691750050 CEST	443	49924	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.699661970 CEST	49929	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.699707031 CEST	443	49929	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.699769020 CEST	49929	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.699934006 CEST	49929	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.699949980 CEST	443	49929	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.701395035 CEST	443	49925	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.701788902 CEST	49925	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.701857090 CEST	443	49925	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.702224970 CEST	49925	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.702239990 CEST	443	49925	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.757246971 CEST	443	49926	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.758285999 CEST	49926	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.758307934 CEST	443	49926	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.759262085 CEST	49926	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.759267092 CEST	443	49926	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.781438112 CEST	443	49927	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.782138109 CEST	49927	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.782171011 CEST	443	49927	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.783165932 CEST	49927	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.783170938 CEST	443	49927	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.807728052 CEST	443	49928	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.809036970 CEST	49928	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.809066057 CEST	443	49928	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.810633898 CEST	49928	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.810640097 CEST	443	49928	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.822113037 CEST	443	49925	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.822144032 CEST	443	49925	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.822161913 CEST	443	49925	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.822223902 CEST	49925	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.822282076 CEST	443	49925	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.822313070 CEST	49925	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.822335958 CEST	49925	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.865700006 CEST	443	49926	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.865725040 CEST	443	49926	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.865787983 CEST	443	49926	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.865788937 CEST	49926	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.865833998 CEST	49926	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.866348982 CEST	49926	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.866389990 CEST	443	49926	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.866415977 CEST	49926	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.866431952 CEST	443	49926	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.876862049 CEST	49930	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.876951933 CEST	443	49930	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.877119064 CEST	49930	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.877578020 CEST	49930	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.877612114 CEST	443	49930	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.891424894 CEST	443	49927	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.891448021 CEST	443	49927	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.891463995 CEST	443	49927	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.891514063 CEST	49927	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.891541004 CEST	443	49927	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.891557932 CEST	49927	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.891586065 CEST	49927	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.900952101 CEST	443	49925	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.901026964 CEST	443	49925	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.901050091 CEST	49925	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.901082993 CEST	49925	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.901110888 CEST	443	49925	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.901135921 CEST	49925	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.901135921 CEST	49925	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.901153088 CEST	443	49925	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.901170969 CEST	443	49925	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.906766891 CEST	49931	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.906812906 CEST	443	49931	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.906898022 CEST	49931	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.907341003 CEST	49931	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.907356977 CEST	443	49931	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.927329063 CEST	443	49928	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.927360058 CEST	443	49928	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.927417994 CEST	443	49928	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.927428961 CEST	49928	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.927520990 CEST	49928	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.927762032 CEST	49928	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.927778959 CEST	443	49928	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.927793026 CEST	49928	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.927800894 CEST	443	49928	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.932918072 CEST	49932	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.932960987 CEST	443	49932	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.933105946 CEST	49932	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.933644056 CEST	49932	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.933662891 CEST	443	49932	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.977952003 CEST	443	49927	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.978008032 CEST	443	49927	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.978039026 CEST	443	49927	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.978066921 CEST	49927	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.978123903 CEST	49927	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.982086897 CEST	49927	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.982106924 CEST	443	49927	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.987340927 CEST	49933	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.987379074 CEST	443	49933	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:58.987467051 CEST	49933	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.987737894 CEST	49933	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:58.987751007 CEST	443	49933	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.382163048 CEST	443	49929	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.390388012 CEST	49929	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.390414000 CEST	443	49929	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.392124891 CEST	49929	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.392132044 CEST	443	49929	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.493098974 CEST	443	49929	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.493163109 CEST	443	49929	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.493259907 CEST	49929	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.493280888 CEST	443	49929	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.493649960 CEST	443	49929	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.493722916 CEST	49929	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.493791103 CEST	49929	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.493804932 CEST	443	49929	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.493818998 CEST	49929	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.493824005 CEST	443	49929	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.499453068 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.499500990 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.499568939 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.499929905 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.499948025 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.522490025 CEST	443	49930	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.523169041 CEST	49930	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.523190975 CEST	443	49930	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.524199009 CEST	49930	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.524203062 CEST	443	49930	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.575445890 CEST	443	49931	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.576056004 CEST	49931	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.576087952 CEST	443	49931	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.577116966 CEST	49931	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.577127934 CEST	443	49931	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.608783960 CEST	443	49932	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.609812021 CEST	49932	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.609828949 CEST	443	49932	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.611042976 CEST	49932	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.611048937 CEST	443	49932	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.623699903 CEST	443	49930	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.623861074 CEST	443	49930	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.623920918 CEST	49930	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.624558926 CEST	49930	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.624571085 CEST	443	49930	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.624597073 CEST	49930	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.624602079 CEST	443	49930	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.628468037 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.628510952 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.628710032 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.628828049 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.628842115 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.678049088 CEST	443	49933	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.680470943 CEST	443	49931	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.680533886 CEST	443	49931	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.680691957 CEST	49931	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.682077885 CEST	49933	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.682110071 CEST	443	49933	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.683372021 CEST	49933	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.683378935 CEST	443	49933	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.683806896 CEST	49931	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.683835983 CEST	443	49931	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.683847904 CEST	49931	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.683854103 CEST	443	49931	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.687251091 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.687325954 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.687419891 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.687767982 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.687800884 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.714907885 CEST	443	49932	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.714976072 CEST	443	49932	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.715152025 CEST	49932	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.717492104 CEST	49932	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.717510939 CEST	443	49932	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.717566013 CEST	49932	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.717576981 CEST	443	49932	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.720500946 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.720599890 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.720701933 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.720875025 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.720915079 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.786473036 CEST	443	49933	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.786714077 CEST	443	49933	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.786994934 CEST	49933	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.787039042 CEST	49933	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.787065029 CEST	443	49933	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.787080050 CEST	49933	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.787087917 CEST	443	49933	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.789757967 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.789794922 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 13, 2024 20:09:59.789896011 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.790074110 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:09:59.790086031 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.158159971 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.159358025 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:10:00.159405947 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.160711050 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:10:00.160722017 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.260359049 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.260462999 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.260576963 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.260629892 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:10:00.260942936 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:10:00.260961056 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.260974884 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:10:00.260979891 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.314501047 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.315241098 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:10:00.315253973 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.316423893 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:10:00.316428900 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.336302042 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.336815119 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:10:00.336853027 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.337775946 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:10:00.337785006 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.367872953 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.369895935 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:10:00.369926929 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.370371103 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:10:00.370377064 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.421880960 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.422188044 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.422261953 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:10:00.422358990 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:10:00.422358990 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:10:00.422382116 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.422391891 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.439992905 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.440061092 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.440124989 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:10:00.440326929 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:10:00.440346003 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.440386057 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:10:00.440392017 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.467694998 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.468307018 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:10:00.468338966 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.469054937 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:10:00.469058990 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.474389076 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.474550009 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.474983931 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:10:00.475153923 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:10:00.475166082 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.475177050 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:10:00.475181103 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.573462009 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.573520899 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.573620081 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:10:00.573949099 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:10:00.573961973 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:00.573971987 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 13, 2024 20:10:00.573976040 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 13, 2024 20:10:06.570966005 CEST	49713	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:10:06.571243048 CEST	49940	443	192.168.2.5	216.58.212.132
Oct 13, 2024 20:10:06.571284056 CEST	443	49940	216.58.212.132	192.168.2.5
Oct 13, 2024 20:10:06.571376085 CEST	49940	443	192.168.2.5	216.58.212.132
Oct 13, 2024 20:10:06.571927071 CEST	49940	443	192.168.2.5	216.58.212.132
Oct 13, 2024 20:10:06.571938992 CEST	443	49940	216.58.212.132	192.168.2.5
Oct 13, 2024 20:10:06.576529980 CEST	80	49713	50.6.138.164	192.168.2.5
Oct 13, 2024 20:10:06.576666117 CEST	49713	80	192.168.2.5	50.6.138.164
Oct 13, 2024 20:10:07.249840021 CEST	443	49940	216.58.212.132	192.168.2.5
Oct 13, 2024 20:10:07.250125885 CEST	49940	443	192.168.2.5	216.58.212.132
Oct 13, 2024 20:10:07.250139952 CEST	443	49940	216.58.212.132	192.168.2.5
Oct 13, 2024 20:10:07.250488043 CEST	443	49940	216.58.212.132	192.168.2.5
Oct 13, 2024 20:10:07.250916958 CEST	49940	443	192.168.2.5	216.58.212.132
Oct 13, 2024 20:10:07.250982046 CEST	443	49940	216.58.212.132	192.168.2.5
Oct 13, 2024 20:10:07.303596020 CEST	49940	443	192.168.2.5	216.58.212.132
Oct 13, 2024 20:10:17.173348904 CEST	443	49940	216.58.212.132	192.168.2.5
Oct 13, 2024 20:10:17.173557997 CEST	443	49940	216.58.212.132	192.168.2.5
Oct 13, 2024 20:10:17.173621893 CEST	49940	443	192.168.2.5	216.58.212.132
Oct 13, 2024 20:10:17.205929041 CEST	49940	443	192.168.2.5	216.58.212.132
Oct 13, 2024 20:10:17.205961943 CEST	443	49940	216.58.212.132	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 13, 2024 20:09:02.192868948 CEST	53	64911	1.1.1.1	192.168.2.5
Oct 13, 2024 20:09:02.221292973 CEST	53	64579	1.1.1.1	192.168.2.5
Oct 13, 2024 20:09:03.203854084 CEST	53	60889	1.1.1.1	192.168.2.5
Oct 13, 2024 20:09:03.983604908 CEST	61233	53	192.168.2.5	1.1.1.1
Oct 13, 2024 20:09:03.985016108 CEST	53414	53	192.168.2.5	1.1.1.1
Oct 13, 2024 20:09:04.222321987 CEST	53	53414	1.1.1.1	192.168.2.5
Oct 13, 2024 20:09:04.224950075 CEST	53	61233	1.1.1.1	192.168.2.5
Oct 13, 2024 20:09:05.060468912 CEST	53	49918	1.1.1.1	192.168.2.5
Oct 13, 2024 20:09:05.305069923 CEST	65374	53	192.168.2.5	1.1.1.1
Oct 13, 2024 20:09:05.305250883 CEST	50696	53	192.168.2.5	1.1.1.1
Oct 13, 2024 20:09:05.523076057 CEST	53	65374	1.1.1.1	192.168.2.5
Oct 13, 2024 20:09:05.525072098 CEST	53	50696	1.1.1.1	192.168.2.5
Oct 13, 2024 20:09:06.334775925 CEST	53	65181	1.1.1.1	192.168.2.5
Oct 13, 2024 20:09:06.356770039 CEST	53	64497	1.1.1.1	192.168.2.5
Oct 13, 2024 20:09:06.508158922 CEST	54696	53	192.168.2.5	1.1.1.1
Oct 13, 2024 20:09:06.508536100 CEST	64575	53	192.168.2.5	1.1.1.1
Oct 13, 2024 20:09:06.516639948 CEST	53	54696	1.1.1.1	192.168.2.5
Oct 13, 2024 20:09:06.517297029 CEST	53	64575	1.1.1.1	192.168.2.5
Oct 13, 2024 20:09:20.117913961 CEST	53	50143	1.1.1.1	192.168.2.5
Oct 13, 2024 20:09:38.805237055 CEST	53	59254	1.1.1.1	192.168.2.5
Oct 13, 2024 20:09:42.856656075 CEST	53	62188	1.1.1.1	192.168.2.5
Oct 13, 2024 20:10:01.792715073 CEST	53	63455	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 13, 2024 20:09:03.983604908 CEST	192.168.2.5	1.1.1.1	0xe292	Standard query (0)	mail.w-find.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:09:03.985016108 CEST	192.168.2.5	1.1.1.1	0xa6a2	Standard query (0)	mail.w-find.com	65	IN (0x0001)	false
Oct 13, 2024 20:09:05.305069923 CEST	192.168.2.5	1.1.1.1	0x6b39	Standard query (0)	mail.w-find.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:09:05.305250883 CEST	192.168.2.5	1.1.1.1	0x4353	Standard query (0)	mail.w-find.com	65	IN (0x0001)	false
Oct 13, 2024 20:09:06.508158922 CEST	192.168.2.5	1.1.1.1	0x5bb2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:09:06.508536100 CEST	192.168.2.5	1.1.1.1	0x8733	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 13, 2024 20:09:04.224950075 CEST	1.1.1.1	192.168.2.5	0xe292	No error (0)	mail.w-find.com		50.6.138.164	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:09:05.523076057 CEST	1.1.1.1	192.168.2.5	0x6b39	No error (0)	mail.w-find.com		50.6.138.164	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:09:06.516639948 CEST	1.1.1.1	192.168.2.5	0x5bb2	No error (0)	www.google.com		216.58.212.132	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:09:06.517297029 CEST	1.1.1.1	192.168.2.5	0x8733	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 13, 2024 20:09:14.124274015 CEST	1.1.1.1	192.168.2.5	0xa3f0	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 20:09:14.124274015 CEST	1.1.1.1	192.168.2.5	0xa3f0	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:09:16.301487923 CEST	1.1.1.1	192.168.2.5	0x8212	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 20:09:16.301487923 CEST	1.1.1.1	192.168.2.5	0x8212	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:09:29.937145948 CEST	1.1.1.1	192.168.2.5	0x8f07	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 20:09:29.937145948 CEST	1.1.1.1	192.168.2.5	0x8f07	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:10:27.531368971 CEST	1.1.1.1	192.168.2.5	0x4c89	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 20:10:27.531368971 CEST	1.1.1.1	192.168.2.5	0x4c89	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

otelrules.azureedge.net

mail.w-find.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	50.6.138.164	80	2228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:09:04.244875908 CEST	461	OUT	GET /icloud-archivos/code2022esp.php HTTP/1.1 Host: mail.w-find.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:09:04.742151976 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:04 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Vary: Accept-Encoding Content-Encoding: gzip Accept-Ranges: none Content-Length: 2876 Keep-Alive: timeout=5, max=75 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 52 61 73 db 36 12 fd ee 5f 81 30 9d 8c d4 0b 49 cb 72 dc c4 16 d5 49 1c e7 ea 99 e4 d2 26 ce 75 6e 6e ae 19 08 58 89 48 40 80 01 40 c9 8a eb 9f d4 4f f9 09 f9 63 b7 00 29 8a b2 9d da bd f1 64 ae 73 47 7b 44 62 b1 fb f6 ed db 37 ba f3 f4 e5 e1 c9 3f 7e 3c 22 b9 2b 24 f9 f1 cd 93 e7 c7 87 24 8a d3 f4 e7 e1 61 9a 3e 3d 79 4a 7e 38 79 f1 9c ec 26 db 03 72 62 a8 b2 c2 09 ad a8 4c d3 a3 bf 45 24 ca 9d 2b f7 d3 74 b1 58 24 8b 61 a2 cd 2c 3d 79 95 7a a8 dd 54 6a 6d 21 e1 8e 47 e3 ad d1 9d 38 26 96 ce 81 93 a9 d1 05 a9 8c cc 7a db db 0f b6 fb 1e c0 36 08 82 49 5d f1 84 e9 22 56 36 a9 6c 4a df 0c ff 3e 48 0b 3d 11 12 52 a6 39 24 65 5e 92 38 46 40 df 63 3c ca 81 f2 f1 a8 00 47 89 07 8a e1 43 25 e6 59 74 a8 95 03 e5 e2 93 65 09 11 61 f5 29 8b 1c 9c ba 40 ee 80 b0 9c 1a 0b 2e 7b 73 f2 2c 7e 88 04 09 3e e1 a7 06 53 b4 80 2c 9a 0b 58 94 da b8 0e c4 42 70 97 67 1c e6 82 41 1c 0e f7 89 50 a8 09 95 b1 65 54 42 36 b8 4f 0a 7a 2a 8a aa 58 05 1a f8 91 14 ea 3d 31 20 b3 a8 34 30 05 c7 72 [TRUNCATED] Data Ascii: Ras6_0IrI&unnXH@@Oc)dsG{Db7?~<"+$$a>=yJ~8y&rbLE$+tX$a,=yzTjm!G8&z6I]"V6lJ>H=R9$e^8F@c<GC%Ytea)@.{s,~>S,XBpgAPeTB6Oz*X=1 40rbRG,J)6"7NB.))5:-BIZQ4Fwh_\Z b$;B!W<<ESGc !Ap<zI>3:.j(G\Va+>E\|ovIl><F(b\q2!})HFV9#9+c3(8fQ<HFM1=#LKm>9V3TH>7D$\R[\\|0Vw`H\Gx_!HP3y8grZSE5qzxX0Ob1A`cD(tKmM=5qKP::YS{Op)uOL+c&/.a}uaSfU}3TEW_G.bk_C&@\|3fGx;"T{
Oct 13, 2024 20:09:04.742167950 CEST	1236	IN	Data Raw: 81 b2 e8 ee c6 22 82 12 f1 e0 c1 e0 bb 87 83 c1 70 6f 6f 67 67 2f 1e d4 db e9 ec 2e 22 82 d7 12 5d d0 6f b3 70 1b 0b 5b bf 8e a6 da 14 a4 00 97 6b ac 2d b5 75 c8 85 39 a1 55 16 a5 b8 9a 8a fb fe 49 99 97 35 fa 07 e3 cf af 80 0b ef 9e 67 58 1c 11 Data Ascii: "poogg/."]op[k-u9UI5gXEQ3mO`=!l""5RX{~b+A,axl'M>S+GzA\EfxuHOHQJpR8ThKc-k>$>%,&
Oct 13, 2024 20:09:04.742178917 CEST	687	IN	Data Raw: aa dc 41 db 6f 65 c8 91 65 46 94 6e 4c b6 e6 d4 90 9c da c7 95 d3 53 cd 2a 9b 71 fc 2d d0 e4 c9 0c dc 91 04 ff f9 64 79 cc 7b 11 cb a9 d9 8e fa 09 5d a5 1e 4c 2b c5 9c 5f f0 9c 4a c1 a9 aa 8a 09 98 1e f4 cf 0c b8 ca 28 e2 00 f5 59 03 52 29 bf 87 Data Ascii: AoeeFnLS*q-dy{]L+_J(YR)=,Q}H`Y~WRgnS^;&SCzJX0w$AppMnsMm7^p^m7\|i5J-3tc<[hu%/:=t%uHI.
Oct 13, 2024 20:09:04.815062046 CEST	373	OUT	GET /icloud-archivos/fonts.css HTTP/1.1 Host: mail.w-find.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://mail.w-find.com/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:09:04.934498072 CEST	764	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:04 GMT Server: Apache Last-Modified: Sat, 26 Nov 2022 14:31:26 GMT Accept-Ranges: none Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 478 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: text/css Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 92 4f 4e 83 40 14 87 d7 f6 14 2f 6c 68 1b 69 6b e3 9f b4 6e 34 ae 5c 98 98 f6 00 66 0a 0f 3b 71 60 c8 cc ab 4a 8c 57 70 ed 51 8c c7 f1 02 5e 41 a0 b4 d1 49 83 0e e9 c2 b2 9c 07 bf 07 bf 6f be b3 50 c6 e4 85 cc 47 78 6a ed 95 87 88 8b 74 ec 5e a5 8a b3 00 a6 48 70 ad a4 7b 5a 3e d6 94 0a 1c c7 52 45 4c ac 66 0f c8 6f e7 34 1e 0e 06 d9 44 2b 7f 2c a4 cf 44 db fd 78 7d ff 7c 7b 71 3b fb b0 50 a2 ed f4 fa 51 b1 d3 d3 48 5e a2 e4 0d cd 79 dc 7b 90 61 e8 74 20 cc 37 52 db 59 1e 2b 13 44 df 03 a4 16 48 69 82 4e 27 fb 78 bf 0b 17 32 c9 32 d9 ff 40 db ef c0 c1 68 34 84 f3 40 ce 10 a6 a9 26 8c 34 5c c6 be 54 89 54 8c 30 e8 c1 b9 10 30 c9 5f d7 30 41 8d ea 3e 1f 96 dd b9 06 06 a4 58 80 11 53 77 20 c3 ca 4d dd 7e eb b9 d5 3a ab 49 94 13 13 dc df 06 51 6f b9 ca 1e ec 2a d8 0c be 90 c1 73 4b 7a 15 32 a1 a4 5d 6b f6 17 73 0e ad cd c1 47 aa 67 ce b7 60 33 cc 31 f8 c6 79 1d 61 f0 3d b2 e5 1b 61 c0 17 91 1d da 32 d3 48 aa 1b ad ad 49 b5 96 b7 3f a3 cd 60 0c 19 40 b7 24 58 a9 14 4a da [TRUNCATED] Data Ascii: ON@/lhikn4\f;q`JWpQ^AIoPGxjt^Hp{Z>RELfo4D+,Dx}\|{q;PQH^y{at 7RY+DHiN'x22@h4@&4\TT00_0A>XSw M~:IQo*sKz2]ksGg`31ya=a2HI?`@$XJn?q~UIN5,'&-r]=p38C-)"JvEq~Y:ED91m<W!Jf9q~Q0pmn!X2Hkn'
Oct 13, 2024 20:09:05.166872025 CEST	420	OUT	GET /assets/img/ajax-loader.gif HTTP/1.1 Host: mail.w-find.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://mail.w-find.com/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:09:05.285353899 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:05 GMT Server: Apache Last-Modified: Sun, 07 May 2023 06:35:50 GMT Accept-Ranges: bytes Content-Length: 4178 Keep-Alive: timeout=5, max=73 Connection: Keep-Alive Content-Type: image/gif Data Raw: 47 49 46 38 39 61 20 00 20 00 f5 00 00 ff ff ff 00 00 00 fa fa fa c4 c4 c4 e8 e8 e8 f0 f0 f0 d0 d0 d0 7e 7e 7e 9a 9a 9a f6 f6 f6 e6 e6 e6 fc fc fc 92 92 92 86 86 86 e2 e2 e2 b8 b8 b8 a0 a0 a0 ec ec ec ae ae ae dc dc dc 3e 3e 3e 56 56 56 60 60 60 7c 7c 7c a8 a8 a8 ee ee ee 4a 4a 4a 6c 6c 6c 0c 0c 0c 00 00 00 ce ce ce c8 c8 c8 d8 d8 d8 2c 2c 2c 5e 5e 5e 1e 1e 1e 4c 4c 4c b0 b0 b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 09 0a 00 00 00 2c 00 00 00 00 20 00 20 00 00 06 ff 40 80 70 48 24 16 38 1c 47 71 c9 24 4e 12 c4 41 a7 33 28 0a 9a 4c 09 c5 12 9d 56 87 05 05 14 4b 7c 50 28 8f a1 94 3a 14 28 14 05 72 b1 42 d1 8c d7 5f 40 58 21 2f 1a ce 0c 42 78 42 6e 62 7d 45 [TRUNCATED] Data Ascii: GIF89a ~~~>>>VVV```\|\|\|JJJlll,,,^^^LLL!NETSCAPE2.0!Created with ajaxload.info!, @pH$8Gq$NA3(LVK\|P(:(rB_@X!/BxBnb}EgorEg^oWDcJCgoqmoE{p~rD}MdKro\|]q` 9Cf)$'=}C^u-H.!OK"15.&{jT BBoe6<@B?1)GbK !, @pH$&4Bq$Db(V[4_:t:"rqh@a)gBk_oEg~#rJDgxloWFC~mgoDBwK!CwE dXrs'xM&T$$\|MC ABldKdV?oFl-X L[J*6!"5\@poImN!QXm@%2u:uH2\R#a!, @pH$Bq$&D(LV[$:4P(rs_IgBxBo
Oct 13, 2024 20:09:05.285370111 CEST	1236	IN	Data Raw: 45 20 67 02 77 5e 00 09 1a 14 15 72 02 8e 46 67 57 85 10 6f 57 44 0c 63 42 0b 0a 0a 11 98 84 67 09 02 0e 0e 02 04 6f 1b 44 25 23 1d 1d 9f 00 19 a5 0a 05 76 0b 20 4a 45 13 16 69 00 6e b6 1d 14 45 02 bb 0a 7e 7f 05 22 c8 23 89 4c 09 bb c1 64 24 b6 Data Ascii: E gw^rFgWoWDcBgoD%#v JEinE~"#Ld$LX"yrvEd)xWO<2I&1a"UJ(qz+kQ\" tRjO}C7":sdE& R"#-=LQ2s:d+qV
Oct 13, 2024 20:09:05.285382032 CEST	448	IN	Data Raw: 00 20 00 20 00 00 06 ff 40 80 70 48 2c 2a 14 8b a2 72 49 4c 12 05 47 41 51 ca 54 26 14 99 67 94 58 50 24 aa d3 ad 10 aa a0 02 c8 05 70 31 72 1c 92 cd 99 b6 5a eb 1d 8b c9 df 39 f7 98 7c 0b 8f 11 6a 02 66 42 0b 47 69 7e 57 65 45 09 79 00 86 0a 11 Data Ascii: @pH,*rILGAQT&gXP$p1rZ9\|jfBGi~WeEy}RinlHCqNN]aGuzC`Ljz`dLKUWDcjs0R%+q"lQbwF.0s3
Oct 13, 2024 20:09:05.285433054 CEST	1236	IN	Data Raw: b7 83 c2 83 bd 82 c3 c4 aa c9 b9 73 64 ca ce aa af 4c cd ca 0b c7 c4 bf d5 d6 c5 43 db d2 bf 00 57 d1 45 05 03 0e dd 4f 9a 81 6a 1e 03 ed 04 b7 ad bc cc 06 ed 03 1e b3 42 b1 92 42 05 21 03 4a 0e 10 60 2a f0 a1 de 04 22 aa 6c 6d e8 d0 c1 00 01 08 Data Ascii: sdLCWEOjBB!J`"lm8p4!(P0EM(PC!#48I2=!4CCq@B6p$!, @pH,*rILGAQT&gXP$
Oct 13, 2024 20:09:05.285510063 CEST	264	IN	Data Raw: 60 78 44 14 64 0e 6b 5c 00 47 11 6e 0f 0f 45 0e 64 14 87 69 00 09 88 43 09 81 00 13 14 14 15 06 44 07 64 a0 02 53 0b 47 6d 7d 11 47 49 95 16 9d 14 17 04 42 05 24 03 4a 0b 19 ad 0b 5e a8 45 0f 1a b0 10 9a 61 bd 0a 11 6a 44 09 0c b0 17 78 c6 c4 4b Data Ascii: `xDdk\GnEdiCDdSGm}GIB$J^EajDxKnxExGnhaCJV8pIh>KE8D\2$C!"j1YB ST@D5d852^I$?a'T5UGN:J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49710	50.6.138.164	80	2228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:09:04.815123081 CEST	371	OUT	GET /icloud-archivos/app.css HTTP/1.1 Host: mail.w-find.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://mail.w-find.com/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:09:04.940010071 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:04 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Sat, 26 Nov 2022 14:31:26 GMT Accept-Ranges: none Vary: Accept-Encoding Content-Encoding: gzip Keep-Alive: timeout=5, max=75 Transfer-Encoding: chunked Content-Type: text/css Data Raw: 31 66 61 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cc b2 ed 8e e3 b8 96 2d f8 3b f2 29 d4 91 48 dc c8 be 41 97 e4 8f b0 ad 44 1d 54 df 3c 75 d0 3f e6 36 06 73 81 c1 0c 72 12 05 4a a4 24 b6 29 52 20 a9 b0 23 1a 79 9f 7d 36 29 c9 a6 2c c9 76 44 d6 39 dd 11 f9 61 73 af bd f6 da 7b ad c2 94 3c f8 8f 0f 77 99 14 06 65 b8 64 fc 25 0e 34 16 1a 69 aa 58 f6 e5 c3 1d 2a 35 32 f4 60 90 66 af 14 61 f2 ef b5 36 71 10 85 e1 27 5b dc d3 64 c7 cc 24 e0 c7 87 0f 89 24 2f 76 42 89 55 ce 44 1c 84 ee 15 2b c3 52 4e 1f 3f 60 cd 08 fc 47 a8 c1 8c eb c7 0f 19 cb 53 5c 19 26 85 fb 5c 2b 28 66 52 1a aa 1e 3f 14 14 13 f7 7f ae 64 5d 3d 7e 28 31 03 54 49 45 fd f8 41 e0 e7 c7 0f 9a a6 4d a7 ae 4b 98 e7 e6 12 a6 2b 8e 61 ab 84 cb 74 d7 0c af 09 93 8f 1f 52 2c 9e 31 8c ac 94 cc 15 d5 f0 e9 19 b4 c8 5e 13 13 9c 09 8a da de bb 67 6a 75 63 8e 30 67 39 2c 93 60 4d 2d e0 44 1b 0b 69 1e be a5 70 4e 25 b9 fe fe b9 c7 26 a4 85 de 15 94 e5 85 e9 4e f1 ad 60 84 50 f1 fd f1 83 a1 25 e0 0c 1d e9 b1 f4 f6 39 c1 e9 ce 6e 2f 08 4a 25 97 2a 0e 8c [TRUNCATED] Data Ascii: 1faa-;)HADT<u?6srJ$)R #y}6),vD9as{<wed%4iX52`fa6q'[d$$/vBUD+RN?`GS\&\+(fR?d]=~(1TIEAMK+atR,1^gjuc0g9,`M-DipN%&N`P%9n/J%0,pg{ X'f#i,LIc 1'V"y!8y08QEtBD`N/^ fOkZq3>f}?a%yNVu]+Z]%5EpkVFVq.mtbAX^+flVa>-q \$]B-3\2q,>>~9j7NjxDU2x)q?uk.UcZ<Lf!T-LyM{A\|/AhO3W0/4T6vJ2pHy1'{RHm7e25bBPRxWaB\h.YG]t;-h9X6cTmE]&T1r+&P/V6VZL{h1R)l5yr]&{M5I<f^G!3\|LC
Oct 13, 2024 20:09:04.940040112 CEST	1236	IN	Data Raw: 7b 94 58 e5 4c 80 05 c1 bc ea 7b 32 5b ac 68 09 ff 3d cd 9b ff d7 f0 9f a3 e6 34 a7 82 5c 09 91 bd 15 56 14 5b 98 7c a6 2a e3 72 ef 9d 5d 56 26 57 b2 ae 6c 39 83 f3 c1 2e 8d 31 89 b4 e7 b5 04 36 f4 a7 21 28 95 9c e3 4a 53 7b ee e6 d3 97 63 4d 57 Data Ascii: {XL{2[h=4\V[\|r]V&Wl9.16!(JS{cMW8gg?d,Q)_SK'4>'ASBgb7pWnok/(,Q)HI$y9dd%gjX5(cX/bDp&(Z[rYUq~8,)eDUIm
Oct 13, 2024 20:09:04.940053940 CEST	1236	IN	Data Raw: 9c 50 43 73 a1 be 3c d5 a7 bc 05 d4 ea 84 9a b2 16 50 4f 27 d4 d0 59 a8 af bd fa f4 5e 9b 13 6a ca 57 40 6d 4f a8 a1 ad f6 84 de 91 a7 5c b5 30 ef d4 53 a6 5a 98 7f ec 73 4f 65 96 69 6a 1a 57 4b ac 72 26 50 83 1c c7 45 03 dc e8 2d 5a f4 7c 80 1e Data Ascii: PCs<PO'Y^jW@mO\0SZsOeijWKr&PE-Z\|7/s[r<-p=^fHY<7?4q<=~.F0PBe):\|E(z<}{y}~>r]%v/~xuWnv2C>Y^^d}
Oct 13, 2024 20:09:04.940066099 CEST	1236	IN	Data Raw: 6f 0b f4 cf 3f 69 b7 05 f6 0c 18 b8 2d b3 4c 53 d3 fa 5d 62 95 33 81 1a ec 04 32 1a 22 c7 2f d3 e2 e7 43 fc 44 0c da 86 c5 b0 61 90 87 16 ba 1c 42 27 82 d1 36 ac 86 0d 13 09 69 1b 9e 86 0d 83 a8 b4 d0 f5 08 f4 e2 65 36 c3 86 89 f0 b4 0d db 61 c3 Data Ascii: o?i-LS]b32"/CDaB'6ie6a EK#N1v"W]]~\|0KtK0(2mL1S&A{T%j Y. PTbJF-@85Lg,XUslA1*Z\ZJS;WXDBU@KH`$@}_0C\|O]
Oct 13, 2024 20:09:04.940078974 CEST	1236	IN	Data Raw: c8 86 0c 43 f6 2c cb 4e 14 4c 64 d2 6f 74 c5 51 4d 49 1a 12 3a a2 e9 29 d9 10 dc 27 ec c5 c3 3e 34 d7 bb 69 ce 22 4a 42 b2 1a ce 89 92 27 b2 59 9d cd 71 16 ff 14 ed fc 69 8b 93 f4 8c b6 97 50 a7 ff f8 22 2b 2a fe 72 7a 27 4a 56 44 ee 05 32 32 cf Data Ascii: C,NLdotQMI:)'>4i"JB'YqiP"+rz'JVD229{I<x??t>03\^H{vpV'8<OU6{o]@W:py]er9#r{ot.$ftl'81}He
Oct 13, 2024 20:09:04.940092087 CEST	1120	IN	Data Raw: 83 6e 82 fa d8 7b 62 82 33 41 c7 de 06 68 5d 8e 3d 0d 08 8e 6f 03 74 49 c6 9e 06 04 c7 b7 01 9a e7 63 4f 03 82 e3 5b 83 be 7a a2 df 4a 4a 18 7e 28 f1 a1 f1 39 5e 3f ad ab c3 67 db 77 e6 f6 89 a7 61 f6 89 ee 7e 40 9a 31 60 27 7b 5c 75 d8 a3 2e 37 Data Ascii: n{b3Ah]=otIcO[zJJ~(9^?gwa~@1`'{\u.7 %kzIJ9?gyv>ecb{i~&mt>UoyX6\.'=aywE'&n#Sh=['jF%$d\A?w3\|1m#
Oct 13, 2024 20:09:04.940104008 CEST	1236	IN	Data Raw: 90 82 c2 13 da d3 64 c7 0c 1a 2b 95 f2 75 ec 3d 03 a3 a0 ad 19 2f a4 2a 31 ff 72 3c e3 62 e1 e4 1c d5 ad dd d7 ce 97 a6 e8 08 34 7b a5 71 30 8f dc 8b 0d 3d c2 9c e5 80 49 21 04 54 b9 5b 14 a6 e4 8f 1f 12 49 5e 1e e1 2e 0c d9 4f f6 00 1d 3b 64 ee Data Ascii: d+u=/1r<b4{q0=I!T[I^.O;dv\ZBWX>0(-4r%v)qsEg2XA6Mwpw-w)&f~` WG\K!E1LEMy+Fk/_\|
Oct 13, 2024 20:09:04.940121889 CEST	1236	IN	Data Raw: 59 86 8d 55 5f 62 95 33 98 70 63 cb ff c6 b6 29 95 5c aa 38 f8 b8 0a 17 bf 2f a0 f3 2e 03 10 dc 81 e5 85 89 83 a5 9d 7f 67 e8 c1 20 42 53 a9 da 1d 6a 50 a9 38 30 5d 9d 34 a3 4a 49 e5 ab c3 b5 91 5f ec d7 03 da 33 62 8a 38 58 84 2b 9b 83 21 13 61 Data Ascii: YU_b3pc)\8/.g BSjP80]4JI_3b8X+!a\|}Kq%I.Wv'!\|?(?wN3s]dcQrjjl{HyC\.(VbZ(`B{qI_U32L(p,"&@E"6uzm0
Oct 13, 2024 20:09:04.940136909 CEST	1236	IN	Data Raw: cc d5 e6 06 99 37 a9 bc 45 e4 55 8d 7d 89 eb d5 2d 37 bc 25 8f e8 86 40 a2 6b 89 44 bd 48 6e e7 37 88 bb 45 db 0d d2 ae 29 eb 09 0b ad af 51 18 de 20 2f bc 2a 2e bc 26 2d bc 28 2c 3c ca fa f1 e1 c3 6f 25 25 0c 3f 94 f8 80 f6 8c 98 22 5e 46 cb ea Data Ascii: 7EU}-7%@kDHn7E)Q /.&-(,<o%%?"^FiR)fdiJ VfY%zF`SNmqeyanVOOXLAHxfIxRc/q8{)_G{;ha9AHJamrZ^/M4x M
Oct 13, 2024 20:09:04.940148115 CEST	104	IN	Data Raw: 17 61 78 8b b8 17 ca b9 dc 23 aa d4 4d 32 4e 70 77 1c 9c ee 72 25 6b 41 10 2b 71 0e ce d5 8a 3f dc cf 66 bf 1c ff 24 4c fc 92 26 8b f9 32 dc 46 f3 cd 7c fb 0b 61 da fc 82 35 d0 ea 5f 5c 93 fe e5 44 2a d5 ac 12 f9 fd 67 88 03 68 31 45 1c 3c ad 5c Data Ascii: ax#M2Npwr%kA+q?f$L&2F\|a5_\D*gh1E<\8v7Xb~+aR
Oct 13, 2024 20:09:04.945122957 CEST	1236	IN	Data Raw: c4 41 4a 85 3d 5d f3 5f 1f d4 a4 ae 5d fb 96 ab b5 e7 1f 3d 99 87 c3 37 dd f4 12 d9 19 16 db ab a7 92 4b 15 07 1f c3 70 b3 f9 fa 75 4a 2e b0 66 8c 72 e2 bd 41 6f 89 0f a8 bd ec 62 be 71 b7 3c 5d 48 51 8e 0d 7b a6 d7 28 cf ac ef f4 64 59 66 cf 2a Data Ascii: AJ=]_]=7KpuJ.frAobq<]HQ{(dYf*5_WW5AVkTU6D#n@e2L+h#"z@7cYr;>SmrM<co]3`NZ&V!%?i6ry41HWGrjP)_
Oct 13, 2024 20:09:05.172727108 CEST	401	OUT	GET /sep.png HTTP/1.1 Host: mail.w-find.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://mail.w-find.com/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:09:05.292789936 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:05 GMT Server: Apache Last-Modified: Sun, 07 May 2023 06:36:54 GMT Accept-Ranges: bytes Content-Length: 1240 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: image/png Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 7e 00 00 00 32 04 03 00 00 00 a9 19 ad 6c 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 0f 50 4c 54 45 e8 e8 e8 e1 e1 e1 e1 e1 e1 e0 e0 e0 b6 b6 b6 d7 b9 84 90 00 00 00 05 74 52 4e 53 01 06 0c 12 39 f4 8b 71 62 00 00 04 5e 49 44 41 54 68 de ed 59 eb 99 e2 30 0c b4 3a 90 dd 81 ed 0e cc 75 c0 f5 5f d3 59 23 f9 91 dd 00 d9 bd 38 fc 41 b0 f9 f8 58 88 35 a3 d1 c3 c6 39 35 f6 62 c1 a7 6a b7 66 f7 3f b0 fb df b7 d8 fd 2f 56 bf dd bb 3f a5 3a 17 e0 a8 27 b7 67 4c 86 23 a4 94 6f a5 5e 53 29 25 27 79 91 ca ed 2a cb e2 68 ca 75 c5 fa a2 04 78 1e a3 fa 5d 5d dc 77 dd 51 75 bf 9a e2 f3 f5 0b 09 56 04 c2 75 be 37 aa 4b ba 55 04 b0 18 a3 b1 ce 62 8e e1 ee 57 23 fc 79 8b 40 f4 31 85 20 10 72 ae cf 7c 2d 82 ba 5a be 25 89 7c 82 1b 06 a0 ba 46 24 ae f3 ae fb a0 bf f1 1f e5 6b 16 01 09 c1 2d e7 eb f4 93 eb 13 0a 4a 0a 20 f8 68 fc 7b 08 c5 ed b2 0f 04 35 40 96 02 35 09 a2 ea b0 de 4c f8 bf 0a 01 96 92 a0 9b 7c 44 40 2a fe 8a a0 32 bc 0b [TRUNCATED] Data Ascii: PNGIHDR~2lpHYs~PLTEtRNS9qb^IDAThY0:u_Y#8AX595bjf?/V?:'gL#o^S)%'yhux]]wQuVu7KUbW#y@1 r\|-Z%\|F$k-J h{5@5L\|D@2.(\OW+:QB4/ ?K(x+ =)r/P;.UX-t&THD[aA0gzF^@OSvk,4V~Ac0 ;jo A(?:R8\|Em\|~SR!MBki>\|\|@h=Jc-??9h:K19PmF$4%) 0<nY$z2^uET;qdPjyQ,UydDm`!nlTx?TC[i$:MCm`WQctZfkz%, 20:3{6JXmDXiv?!p{46uW=kyLB_9{1>Fhq~z4=:{7o:1>1=}+<<Y',Pk$$J"V#f{[#WNIWt
Oct 13, 2024 20:09:05.382371902 CEST	399	OUT	GET /icloud-archivos/myriad-set-pro_text.woff HTTP/1.1 Host: mail.w-find.com Connection: keep-alive Origin: http://mail.w-find.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mail.w-find.com/icloud-archivos/fonts.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:09:05.504482031 CEST	1236	IN	HTTP/1.1 404 Not Found Date: Sun, 13 Oct 2024 18:09:05 GMT Server: Apache Last-Modified: Wed, 24 May 2023 01:50:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4677 Keep-Alive: timeout=5, max=73 Connection: Keep-Alive Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 [TRUNCATED] Data Ascii: RmssgJ&av$NmRmHInM=_cpw~y3(\G(z}[832qQtjEl0;hQoAqK/^zPP`1PP%J^Vyg::<s}k9=v]Ivs8w>;]Np3xyvGe)e,v&FVIJqM3Hhp8(a{8jotEI.6q^>YZQH]rBis_4:Jar!c(j):{{d!5Dh4+k5yUD$wZ}YQO,5I>i6<]2XpCMe^Wh2.\|~l'\|v,sTWdG'8RFOE>8.V?\~[KJzp=4LB)YyuFMYb;Cd5[&TWRd{/_lyoY'+G;G\?zJL9*~"P,EO$}(OW<2X!SSQrxOx"#DJMAP!3-uH26?<gR;1<]9G$Vp0sBQ=f%afQmB<qMZq0&Vk
Oct 13, 2024 20:09:05.510809898 CEST	398	OUT	GET /icloud-archivos/myriad-set-pro_text.ttf HTTP/1.1 Host: mail.w-find.com Connection: keep-alive Origin: http://mail.w-find.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mail.w-find.com/icloud-archivos/fonts.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:09:05.637207985 CEST	1236	IN	HTTP/1.1 404 Not Found Date: Sun, 13 Oct 2024 18:09:05 GMT Server: Apache Last-Modified: Wed, 24 May 2023 01:50:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4677 Keep-Alive: timeout=5, max=72 Connection: Keep-Alive Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 [TRUNCATED] Data Ascii: RmssgJ&av$NmRmHInM=_cpw~y3(\G(z}[832qQtjEl0;hQoAqK/^zPP`1PP%J^Vyg::<s}k9=v]Ivs8w>;]Np3xyvGe)e,v&FVIJqM3Hhp8(a{8jotEI.6q^>YZQH]rBis_4:Jar!c(j):{{d!5Dh4+k5yUD$wZ}YQO,5I>i6<]2XpCMe^Wh2.\|~l'\|v,sTWdG'8RFOE>8.V?\~[KJzp=4LB)YyuFMYb;Cd5[&TWRd{/_lyoY'+G;G\?zJL9*~"P,EO$}(OW<2X!SSQrxOx"#DJMAP!3-uH26?<gR;1<]9G$Vp0sBQ=f%afQmB<qMZq0&Vk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49711	50.6.138.164	80	2228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:09:04.820631027 CEST	373	OUT	GET /icloud-archivos/style.css HTTP/1.1 Host: mail.w-find.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://mail.w-find.com/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:09:05.349024057 CEST	598	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:05 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Sat, 26 Nov 2022 14:31:26 GMT Accept-Ranges: none Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 286 Keep-Alive: timeout=5, max=75 Content-Type: text/css Data Raw: 1f 8b 08 00 00 00 00 00 00 03 55 50 dd 6a c3 20 14 be f7 29 84 31 58 21 06 6d 92 76 d5 ab 5e 74 ef 61 a2 4d 0e b3 2a c6 92 ac 63 ef be 93 8c 6c 0c 11 3c e7 7c 3f e7 b3 b4 29 85 e4 42 0f 9e 7e 92 56 77 ef 7d 0a 77 6f 58 17 5c 48 92 3e bd 9d 2f a7 73 a5 48 0c 23 64 08 5e 52 dd 8e c1 dd b3 55 64 02 93 07 79 e4 cf 8a dc 74 42 09 e6 ec 35 4b ca aa 23 b6 da 90 8c 4d 2c 69 03 f7 51 d2 26 ce 8a fc cc 9b 3d 8e a3 36 06 7c 2f a9 b0 b7 0d 8c 45 9c 29 ca 83 a1 a9 6f f5 8b 78 6d 0a 51 9f 0a 51 f0 b2 3e ee 16 dc cc c6 41 9b 30 49 ca 11 8b aa 54 2c 8f 3d de 95 c2 8b f5 94 62 f7 bb 55 0e 51 d2 d3 e2 ff 67 ba ae b3 85 6c 78 75 a9 b8 22 d7 e0 33 9b 2c f4 03 6e 59 73 ec 64 3b 67 a6 1d f4 18 bc b3 3e db a4 c8 83 81 37 76 46 91 8d 32 c2 c3 6e 9a ce 66 44 b1 31 ea 6e 75 62 bc e4 e2 b0 64 fc a7 de f0 8d 7c d5 37 70 1f f8 af 09 b4 53 e4 8b 7e 03 1b d6 07 a2 94 01 00 00 Data Ascii: UPj )1X!mv^taM*cl<\|?)B~Vw}woX\H>/sH#d^RUdytB5K#M,iQ&=6\|/E)oxmQQ>A0IT,=bUQglxu"3,nYsd;g>7vF2nfD1nubd\|7pS~
Oct 13, 2024 20:09:05.382294893 CEST	399	OUT	GET /icloud-archivos/myriad-set-pro_thin.woff HTTP/1.1 Host: mail.w-find.com Connection: keep-alive Origin: http://mail.w-find.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mail.w-find.com/icloud-archivos/fonts.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:09:05.512866974 CEST	1236	IN	HTTP/1.1 404 Not Found Date: Sun, 13 Oct 2024 18:09:05 GMT Server: Apache Last-Modified: Wed, 24 May 2023 01:50:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4677 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 [TRUNCATED] Data Ascii: RmssgJ&av$NmRmHInM=_cpw~y3(\G(z}[832qQtjEl0;hQoAqK/^zPP`1PP%J^Vyg::<s}k9=v]Ivs8w>;]Np3xyvGe)e,v&FVIJqM3Hhp8(a{8jotEI.6q^>YZQH]rBis_4:Jar!c(j):{{d!5Dh4+k5yUD$wZ}YQO,5I>i6<]2XpCMe^Wh2.\|~l'\|v,sTWdG'8RFOE>8.V?\~[KJzp=4LB)YyuFMYb;Cd5[&TWRd{/_lyoY'+G;G\?zJL9*~"P,EO$}(OW<2X!SSQrxOx"#DJMAP!3-uH26?<gR;1<]9G$Vp0sBQ=f%afQmB<qMZq0&Vk
Oct 13, 2024 20:09:05.512878895 CEST	1236	IN	Data Raw: 49 26 3b f9 fa 41 83 05 ea 7d 2a 6d a5 44 33 d4 a4 71 b1 99 49 63 79 2b 21 45 66 c8 7d ce 7e f9 e5 e0 60 b1 69 91 ef a6 ab dd a3 c9 f3 17 2f 7e 5d ec ba 42 9a b5 cd c3 17 bf 26 87 2f 56 43 53 84 7b 98 88 e4 2e 37 54 eb b4 bf 38 87 cf fd bf 11 0b Data Ascii: I&;A}mD3qIcy+!Ef}~`i/~]B&/VCS{.7T81),)VRCx{k_hT!dnD3bxixqTHr2=-c/7UtoGc-'9_e$'(e66FANz=86CG]__^g
Oct 13, 2024 20:09:05.512891054 CEST	1236	IN	Data Raw: 7f 5f 9a cc 0f 7c 7e cc 8d 47 d3 16 aa a5 c0 11 77 9c 06 70 2d f3 c2 71 9d 65 72 e7 67 b7 4d f9 97 a6 78 33 93 82 c8 22 5c 19 aa d0 38 89 76 00 b7 8c 58 2d df 59 8d 52 e0 90 bf bc 76 3f ae 12 5e 1f 5f 0e 51 fa 28 da aa 25 42 fb 6a 70 ac 19 d5 3a Data Ascii: _\|~Gwp-qergMx3"\8vX-YRv?^_Q(%Bjp:}P[_0uBTg0+\|~@('H{3jsrTMsMDk={j-o\|m4aG+.<W6CYkGm^jTRm=9tMj=;
Oct 13, 2024 20:09:05.512901068 CEST	1236	IN	Data Raw: 14 ae c5 80 4c 2a 8c 23 31 8e 23 06 59 f2 f0 d3 3a 38 d6 e1 50 bb de 46 46 b7 2c 79 13 c3 eb 75 2c de 42 97 c2 94 0d 7e ca ef ce d4 fc 46 da 3e 63 a3 84 03 87 6c 70 70 13 cd 94 f3 29 5a 76 13 0c 5e b2 55 09 1a 0f 04 36 41 2d 8c a4 36 a7 16 95 33 Data Ascii: L#1#Y:8PFF,yu,B~F>clpp)Zv^U6A-63YZ2Zsc]1Z [SiXCY^WQCbK~+n:)@UP7RpWO~b!/r@l-ElQK$gYzKoF
Oct 13, 2024 20:09:05.512906075 CEST	29	IN	Data Raw: b7 fe ec 9e d9 f5 30 98 c9 c5 d1 84 d2 26 3c 14 ae 64 4b ff 17 cc cb 70 7c 28 2e 00 00 Data Ascii: 0&<dKp\|(.
Oct 13, 2024 20:09:05.516115904 CEST	398	OUT	GET /icloud-archivos/myriad-set-pro_thin.ttf HTTP/1.1 Host: mail.w-find.com Connection: keep-alive Origin: http://mail.w-find.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mail.w-find.com/icloud-archivos/fonts.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:09:05.643513918 CEST	1236	IN	HTTP/1.1 404 Not Found Date: Sun, 13 Oct 2024 18:09:05 GMT Server: Apache Last-Modified: Wed, 24 May 2023 01:50:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4677 Keep-Alive: timeout=5, max=73 Connection: Keep-Alive Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 [TRUNCATED] Data Ascii: RmssgJ&av$NmRmHInM=_cpw~y3(\G(z}[832qQtjEl0;hQoAqK/^zPP`1PP%J^Vyg::<s}k9=v]Ivs8w>;]Np3xyvGe)e,v&FVIJqM3Hhp8(a{8jotEI.6q^>YZQH]rBis_4:Jar!c(j):{{d!5Dh4+k5yUD$wZ}YQO,5I>i6<]2XpCMe^Wh2.\|~l'\|v,sTWdG'8RFOE>8.V?\~[KJzp=4LB)YyuFMYb;Cd5[&TWRd{/_lyoY'+G;G\?zJL9*~"P,EO$}(OW<2X!SSQrxOx"#DJMAP!3-uH26?<gR;1<]9G$Vp0sBQ=f%afQmB<qMZq0&Vk
Oct 13, 2024 20:09:05.643526077 CEST	1236	IN	Data Raw: 49 26 3b f9 fa 41 83 05 ea 7d 2a 6d a5 44 33 d4 a4 71 b1 99 49 63 79 2b 21 45 66 c8 7d ce 7e f9 e5 e0 60 b1 69 91 ef a6 ab dd a3 c9 f3 17 2f 7e 5d ec ba 42 9a b5 cd c3 17 bf 26 87 2f 56 43 53 84 7b 98 88 e4 2e 37 54 eb b4 bf 38 87 cf fd bf 11 0b Data Ascii: I&;A}mD3qIcy+!Ef}~`i/~]B&/VCS{.7T81),)VRCx{k_hT!dnD3bxixqTHr2=-c/7UtoGc-'9_e$'(e66FANz=86CG]__^g
Oct 13, 2024 20:09:05.643537998 CEST	1236	IN	Data Raw: 7f 5f 9a cc 0f 7c 7e cc 8d 47 d3 16 aa a5 c0 11 77 9c 06 70 2d f3 c2 71 9d 65 72 e7 67 b7 4d f9 97 a6 78 33 93 82 c8 22 5c 19 aa d0 38 89 76 00 b7 8c 58 2d df 59 8d 52 e0 90 bf bc 76 3f ae 12 5e 1f 5f 0e 51 fa 28 da aa 25 42 fb 6a 70 ac 19 d5 3a Data Ascii: _\|~Gwp-qergMx3"\8vX-YRv?^_Q(%Bjp:}P[_0uBTg0+\|~@('H{3jsrTMsMDk={j-o\|m4aG+.<W6CYkGm^jTRm=9tMj=;
Oct 13, 2024 20:09:05.643881083 CEST	1236	IN	Data Raw: 14 ae c5 80 4c 2a 8c 23 31 8e 23 06 59 f2 f0 d3 3a 38 d6 e1 50 bb de 46 46 b7 2c 79 13 c3 eb 75 2c de 42 97 c2 94 0d 7e ca ef ce d4 fc 46 da 3e 63 a3 84 03 87 6c 70 70 13 cd 94 f3 29 5a 76 13 0c 5e b2 55 09 1a 0f 04 36 41 2d 8c a4 36 a7 16 95 33 Data Ascii: L#1#Y:8PFF,yu,B~F>clpp)Zv^U6A-63YZ2Zsc]1Z [SiXCY^WQCbK~+n:)@UP7RpWO~b!/r@l-ElQK$gYzKoF
Oct 13, 2024 20:09:05.643892050 CEST	29	IN	Data Raw: b7 fe ec 9e d9 f5 30 98 c9 c5 d1 84 d2 26 3c 14 ae 64 4b ff 17 cc cb 70 7c 28 2e 00 00 Data Ascii: 0&<dKp\|(.
Oct 13, 2024 20:09:06.351428032 CEST	405	OUT	GET /favicon.ico HTTP/1.1 Host: mail.w-find.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://mail.w-find.com/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:09:06.475799084 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:06 GMT Server: Apache Last-Modified: Thu, 15 Apr 2021 20:52:24 GMT Accept-Ranges: bytes Content-Length: 9062 Cache-Control: max-age=604800 Expires: Sun, 20 Oct 2024 18:09:06 GMT Keep-Alive: timeout=5, max=72 Connection: Keep-Alive Content-Type: image/x-icon Data Raw: 00 00 01 00 04 00 20 20 00 00 01 00 08 00 a8 08 00 00 46 00 00 00 10 10 00 00 01 00 08 00 68 05 00 00 ee 08 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 56 0e 00 00 10 10 00 00 01 00 20 00 68 04 00 00 fe 1e 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 42 42 42 00 9e 9e 9e 00 72 72 72 00 ce ce ce 00 5a 5a 5a 00 b6 b6 b6 00 e6 e6 e6 00 92 92 92 00 4e 4e 4e 00 7e 7e 7e 00 66 66 66 00 aa aa aa 00 da da da 00 c2 c2 c2 00 f2 f2 f2 00 4a 4a 4a 00 a6 a6 a6 00 7a 7a 7a 00 62 62 62 00 56 56 56 00 86 86 86 00 6e 6e 6e 00 e2 e2 e2 00 ca ca ca 00 46 46 46 00 a2 a2 a2 00 76 76 76 00 d2 d2 d2 00 5e 5e 5e 00 ba ba ba 00 ea ea ea 00 9a 9a 9a 00 52 52 52 00 82 82 82 00 6a 6a 6a 00 ae ae ae 00 de de de 00 c6 c6 c6 00 f6 f6 f6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: Fh V h( @BBBrrrZZZNNN~~~fffJJJzzzbbbVVVnnnFFFvvv^^^RRRjjj
Oct 13, 2024 20:09:06.475831985 CEST	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ''''''''''
Oct 13, 2024 20:09:06.475920916 CEST	1236	IN	Data Raw: 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 Data Ascii: '''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' #'''''''''''''''''' ''''''''''''''''''''

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49717	50.6.138.164	80	2228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:09:05.530915976 CEST	294	OUT	GET /assets/img/ajax-loader.gif HTTP/1.1 Host: mail.w-find.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:09:06.042453051 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:05 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Sun, 07 May 2023 06:35:50 GMT Accept-Ranges: bytes Content-Length: 4178 Keep-Alive: timeout=5, max=75 Content-Type: image/gif Data Raw: 47 49 46 38 39 61 20 00 20 00 f5 00 00 ff ff ff 00 00 00 fa fa fa c4 c4 c4 e8 e8 e8 f0 f0 f0 d0 d0 d0 7e 7e 7e 9a 9a 9a f6 f6 f6 e6 e6 e6 fc fc fc 92 92 92 86 86 86 e2 e2 e2 b8 b8 b8 a0 a0 a0 ec ec ec ae ae ae dc dc dc 3e 3e 3e 56 56 56 60 60 60 7c 7c 7c a8 a8 a8 ee ee ee 4a 4a 4a 6c 6c 6c 0c 0c 0c 00 00 00 ce ce ce c8 c8 c8 d8 d8 d8 2c 2c 2c 5e 5e 5e 1e 1e 1e 4c 4c 4c b0 b0 b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 09 0a 00 00 00 2c 00 00 00 00 20 00 20 00 00 06 ff 40 80 70 48 24 16 38 1c 47 71 c9 24 4e 12 c4 41 a7 33 28 0a 9a 4c 09 c5 12 9d 56 87 05 05 14 4b 7c 50 28 8f a1 94 3a 14 28 14 05 72 b1 42 d1 8c d7 5f 40 58 21 2f 1a ce 0c 42 78 42 6e 62 7d 45 [TRUNCATED] Data Ascii: GIF89a ~~~>>>VVV```\|\|\|JJJlll,,,^^^LLL!NETSCAPE2.0!Created with ajaxload.info!, @pH$8Gq$NA3(LVK\|P(:(rB_@X!/BxBnb}EgorEg^oWDcJCgoqmoE{p~rD}MdKro\|]q` 9Cf)$'=}C^u-H.!OK"15.&{jT BBoe6<@B?1)GbK !, @pH$&4Bq$Db(V[4_:t:"rqh@a)gBk_oEg~#rJDgxloWFC~mgoDBwK!CwE dXrs'xM&T$$\|MC ABldKdV?oFl-X L[J*6!"5\@poImN!QXm@%2u:uH2\R#a!, @pH$Bq$&D(LV[$:4
Oct 13, 2024 20:09:06.042490959 CEST	224	IN	Data Raw: 50 28 0d 72 f1 73 86 02 d6 5f 80 85 a2 49 c8 89 05 67 13 42 78 42 0f 6f 10 7f 45 20 67 02 77 5e 00 09 1a 14 15 72 02 8e 46 67 57 85 10 6f 57 44 0c 63 42 0b 0a 0a 11 98 84 67 09 02 0e 0e 02 04 6f 1b 44 25 23 1d 1d 9f 00 19 a5 0a 05 76 0b 20 4a 45 Data Ascii: P(rs_IgBxBoE gw^rFgWoWDcBgoD%#v JEinE~"#Ld$LX"yrvEd)xWO<2I&1a"UJ(qz+kQ\" *tRjO}C7":sd
Oct 13, 2024 20:09:06.042546988 CEST	1236	IN	Data Raw: 45 26 20 a1 0c 15 52 2a 83 22 23 a5 9e 2d 8d d4 f1 a9 10 8c 3d 85 4c 05 80 d5 ea d6 af 51 9f 32 73 3a 64 2b 00 71 1e c5 56 b5 aa a8 e6 d3 20 00 21 f9 04 09 0a 00 00 00 2c 00 00 00 00 20 00 20 00 00 06 ff 40 80 70 48 24 2e 06 03 41 71 c9 34 16 0b Data Ascii: E& R*"#-=LQ2s:d+qV !, @pH$.Aq4Bd&"t jQP(.q8Hy"3\HV$QBm{OeupzBeRumTDCWmDCetB]c~aVjUUf{L{[HU
Oct 13, 2024 20:09:06.042584896 CEST	1236	IN	Data Raw: d3 2b 03 16 08 08 71 c0 e0 df 03 22 aa 6c 51 62 77 c0 01 01 0a 14 1a 10 19 d0 a0 1e 91 46 bd 2e 01 18 d0 a1 c3 00 00 0d 30 e2 73 33 e0 83 9a 53 49 48 9a 44 a7 81 82 85 73 76 56 c9 3c 09 00 02 c6 2b 87 e7 34 0d d9 39 a4 02 05 0d b6 c0 f8 11 42 54 Data Ascii: +q"lQbwF.0s3SIHDsvV<+49BT~A2$O!(\8!, @pH,rILGAQT&gXP$p1rZ9\|jfBGi~WeEy}RinlHCqNN]aGuzC`L
Oct 13, 2024 20:09:06.042618036 CEST	514	IN	Data Raw: 00 ca 45 04 06 d2 d3 06 04 cd 67 02 d9 da 00 1a 14 de df 14 0f cd 64 47 e5 0a dd e0 de e2 7a e4 e6 0a d1 d4 d2 d6 7a 0b da f6 cf 5c cd f8 55 02 03 0d a5 6a a0 04 63 62 80 c1 81 03 0c e6 c4 11 a3 84 00 84 83 07 20 cc 03 d3 aa 5c 06 5d 0f 20 32 00 Data Ascii: EgdGzz\Ujcb \] 2!dZnVTgL0 F2T `2FjkXT.5X:)5,'R,tPuyzR0\|!, @pH,rI48eTJ,("GN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49716	50.6.138.164	80	2228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:09:05.531059027 CEST	275	OUT	GET /sep.png HTTP/1.1 Host: mail.w-find.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:09:06.044064999 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:05 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Sun, 07 May 2023 06:36:54 GMT Accept-Ranges: bytes Content-Length: 1240 Keep-Alive: timeout=5, max=75 Content-Type: image/png Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 7e 00 00 00 32 04 03 00 00 00 a9 19 ad 6c 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 0f 50 4c 54 45 e8 e8 e8 e1 e1 e1 e1 e1 e1 e0 e0 e0 b6 b6 b6 d7 b9 84 90 00 00 00 05 74 52 4e 53 01 06 0c 12 39 f4 8b 71 62 00 00 04 5e 49 44 41 54 68 de ed 59 eb 99 e2 30 0c b4 3a 90 dd 81 ed 0e cc 75 c0 f5 5f d3 59 23 f9 91 dd 00 d9 bd 38 fc 41 b0 f9 f8 58 88 35 a3 d1 c3 c6 39 35 f6 62 c1 a7 6a b7 66 f7 3f b0 fb df b7 d8 fd 2f 56 bf dd bb 3f a5 3a 17 e0 a8 27 b7 67 4c 86 23 a4 94 6f a5 5e 53 29 25 27 79 91 ca ed 2a cb e2 68 ca 75 c5 fa a2 04 78 1e a3 fa 5d 5d dc 77 dd 51 75 bf 9a e2 f3 f5 0b 09 56 04 c2 75 be 37 aa 4b ba 55 04 b0 18 a3 b1 ce 62 8e e1 ee 57 23 fc 79 8b 40 f4 31 85 20 10 72 ae cf 7c 2d 82 ba 5a be 25 89 7c 82 1b 06 a0 ba 46 24 ae f3 ae fb a0 bf f1 1f e5 6b 16 01 09 c1 2d e7 eb f4 93 eb 13 0a 4a 0a 20 f8 68 fc 7b 08 c5 ed b2 0f 04 35 40 96 02 35 09 a2 ea b0 de 4c f8 bf 0a 01 96 92 a0 9b 7c 44 40 2a fe 8a a0 32 bc 0b [TRUNCATED] Data Ascii: PNGIHDR~2lpHYs~PLTEtRNS9qb^IDAThY0:u_Y#8AX595bjf?/V?:'gL#o^S)%'yhux]]wQuVu7KUbW#y@1 r\|-Z%\|F$k-J h{5@5L\|D@2.(\OW+:QB4/ ?K(x+ =)r/P;.UX-t&THD[aA0gzF^@OSvk,4V~Ac0 ;jo A(?:R8\|Em\|~SR!MBki>\|\|@h=Jc-??9h:K19PmF$4%) 0<nY$z2^uET;qdPjyQ,UydDm`!nlTx?TC[i$:MCm`WQctZfkz%, 20:3{6JXmDXiv?!p{46uW=kyLB_9{1>Fhq~z4=:{7o:1>1=}+<<Y',Pk$$J"V#f{
Oct 13, 2024 20:09:06.044173956 CEST	272	IN	Data Raw: 09 ad a7 dd 5b e9 23 94 10 a5 93 8f 57 4e 85 49 86 57 fb b6 0c 74 88 83 95 a4 45 17 70 c4 aa d7 76 20 3e 6f 0f e9 30 f9 3c cd a3 7a e8 a5 c9 2c 83 a9 c6 76 c1 05 69 a6 aa 1f d4 b5 5a fe 83 00 68 fd 99 e7 6c b6 16 82 21 70 95 fb 9e db 16 cb ba cf Data Ascii: [#WNIWtEpv >o0<z,viZhl!pf(swp^ M[smKK?~+q]c2<wmk_OS+Kcg515eYr?zv}N>fc,^hCTss!bIEbQU
Oct 13, 2024 20:09:06.618201971 CEST	279	OUT	GET /favicon.ico HTTP/1.1 Host: mail.w-find.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:09:06.744329929 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:06 GMT Server: Apache Last-Modified: Thu, 15 Apr 2021 20:52:24 GMT Accept-Ranges: bytes Content-Length: 9062 Cache-Control: max-age=604800 Expires: Sun, 20 Oct 2024 18:09:06 GMT Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: image/x-icon Data Raw: 00 00 01 00 04 00 20 20 00 00 01 00 08 00 a8 08 00 00 46 00 00 00 10 10 00 00 01 00 08 00 68 05 00 00 ee 08 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 56 0e 00 00 10 10 00 00 01 00 20 00 68 04 00 00 fe 1e 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 42 42 42 00 9e 9e 9e 00 72 72 72 00 ce ce ce 00 5a 5a 5a 00 b6 b6 b6 00 e6 e6 e6 00 92 92 92 00 4e 4e 4e 00 7e 7e 7e 00 66 66 66 00 aa aa aa 00 da da da 00 c2 c2 c2 00 f2 f2 f2 00 4a 4a 4a 00 a6 a6 a6 00 7a 7a 7a 00 62 62 62 00 56 56 56 00 86 86 86 00 6e 6e 6e 00 e2 e2 e2 00 ca ca ca 00 46 46 46 00 a2 a2 a2 00 76 76 76 00 d2 d2 d2 00 5e 5e 5e 00 ba ba ba 00 ea ea ea 00 9a 9a 9a 00 52 52 52 00 82 82 82 00 6a 6a 6a 00 ae ae ae 00 de de de 00 c6 c6 c6 00 f6 f6 f6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: Fh V h( @BBBrrrZZZNNN~~~fffJJJzzzbbbVVVnnnFFFvvv^^^RRRjjj
Oct 13, 2024 20:09:06.744366884 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: '''''''''''''''''''''''''''''
Oct 13, 2024 20:09:06.744379044 CEST	1236	IN	Data Raw: 27 27 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e3 e3 ff ff c0 01 ff ff 80 00 ff ff 00 00 7f ff 00 00 7f fe 00 00 3f fe 00 00 3f fe 00 00 3f fc 00 00 7f fc 00 00 ff fc 00 01 ff fc 00 01 ff fc 00 01 ff fc 00 00 ff fc 00 00 ff fe 00 00 7f Data Ascii: ''????( FFFrrr^^^RRRjjjNNNzzzf
Oct 13, 2024 20:09:06.744390965 CEST	672	IN	Data Raw: 04 10 21 21 21 21 21 21 21 09 08 14 04 04 04 04 04 04 16 21 21 21 21 21 21 06 04 19 19 19 19 19 19 19 19 1d 21 21 21 21 07 00 04 12 12 12 12 12 12 12 04 1a 21 21 21 21 1f 0e 19 0a 0a 0a 0a 0a 0a 12 03 21 21 21 21 21 20 0e 12 0a 0a 0a 0a 0a 0a 06 Data Ascii: !!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!{
Oct 13, 2024 20:09:06.744402885 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: @@@ RRRXXX`PPPPVVVV
Oct 13, 2024 20:09:06.744415998 CEST	1236	IN	Data Raw: 68 ff 68 68 68 ff 68 68 68 ff 68 68 68 ff 68 68 68 ff 68 68 68 ff 68 68 68 ff 68 68 68 ff 68 68 68 ff 68 68 68 ff 62 62 62 ff 50 50 50 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: hhhhhhhhhhhhhhhhhhhhhhhhhhhhbbbPPP0<<<OOObbbiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiii^^^<<<PPPdddkkkk
Oct 13, 2024 20:09:06.744421959 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 40 40 10 3e 3e 3e 8f 43 43 43 bf 47 47 47 bf 47 47 47 bf 47 47 47 70 00 00 00 00 00 00 00 00 70 70 70 29 6c 6c 6c 93 60 60 60 cf 55 55 55 ff 4d 4d 4d ef 49 49 49 af Data Ascii: @@@>>>CCCGGGGGGGGGpppp)lll```UUUMMMIIIHHH@IIIddd{{{
Oct 13, 2024 20:09:06.744435072 CEST	104	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e3 e3 ff ff c0 00 ff ff 80 00 ff ff 00 00 7f ff 00 00 3f fe 00 00 3f fe 00 00 3f fe 00 00 3f Data Ascii: ????
Oct 13, 2024 20:09:06.834626913 CEST	1186	IN	Data Raw: 00 ff fc 00 00 ff fe 00 00 7f fe 00 00 3f ff 00 00 7f ff 81 80 ff ff ff 1f ff ff ff 0f ff ff ff 07 ff ff ff 87 ff ff ff 83 ff ff ff e3 ff ff ff ff ff ff ff ff ff ff ff ff ff 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 Data Ascii: ?( 3[[[8PPP0=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49713	50.6.138.164	80	2228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:09:50.068790913 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49722	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:08 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-13 18:09:08 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=167787 Date: Sun, 13 Oct 2024 18:09:08 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49723	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:09 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-13 18:09:10 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=167727 Date: Sun, 13 Oct 2024 18:09:09 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-13 18:09:10 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.5	49724	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:14 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:14 UTC	540	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:14 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 12 Oct 2024 04:31:01 GMT ETag: "0x8DCEA76AD821850" x-ms-request-id: 5e3cf53f-d01e-007a-3ba0-1cf38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180914Z-17db6f7c8cfvq8pt2ak3arkg6n000000033g00000000ms9y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:14 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-13 18:09:15 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-13 18:09:15 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-13 18:09:15 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-13 18:09:15 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-13 18:09:15 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-13 18:09:15 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-13 18:09:15 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-13 18:09:15 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-13 18:09:15 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.5	49728	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:15 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:16 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:15 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 466b9802-701e-000d-0d1f-1c6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180915Z-17db6f7c8cf8rgvlb86c9c009800000003cg000000007t8e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:16 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.5	49729	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:15 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:16 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:15 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 995dd301-801e-0035-24cd-1a752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180915Z-17db6f7c8cfvzwz27u5rnq9kpc00000005p00000000013nb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:16 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.5	49730	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:15 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:15 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 695c64e8-001e-0034-5de7-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180915Z-17db6f7c8cfhzb2znbk0zyvf6n00000004w000000000dxcy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:16 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.5	49726	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:15 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:16 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:15 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: c1f175ba-101e-0028-7611-1c8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180915Z-17db6f7c8cfvq8pt2ak3arkg6n000000034000000000hhkk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:16 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49727	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:15 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:15 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: d08e5818-a01e-003d-3417-1c98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180915Z-17db6f7c8cfvq8pt2ak3arkg6n000000034000000000hhkm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:16 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.5	49733	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:16 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:16 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: c05b1842-801e-0048-291c-1cf3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180916Z-17db6f7c8cf9c22xp43k2gbqvn00000002y0000000005mr9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:16 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49734	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:16 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:16 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 66411a6b-c01e-00a1-1eca-1a7e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180916Z-17db6f7c8cfnqpbkckdefmqa4400000005ag000000003w95 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:16 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49735	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:16 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:16 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 999224e7-101e-0079-39d7-1a5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180916Z-17db6f7c8cfqxt4wrzg7st2fm8000000057g00000000gwry x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:16 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49736	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:16 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:16 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: c77ee0be-a01e-0032-0c24-1b1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180916Z-17db6f7c8cfqkqk8bn4ck6f72000000004x000000000gbps x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:16 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49737	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:16 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:16 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 7bd6ade2-501e-008f-3ee2-1b9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180916Z-17db6f7c8cfgqlr45m385mnngs00000003r000000000fxhm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:16 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49745	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:17 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:17 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: e456ac6c-b01e-0097-6bbf-1a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180917Z-17db6f7c8cfbd7pgux3k6qfa60000000042000000000fn20 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:17 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49741	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:17 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:17 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: bef1d05a-c01e-0034-2ea3-1b2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180917Z-17db6f7c8cf9c22xp43k2gbqvn00000002ug00000000d4pz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:17 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49742	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:17 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:17 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: c03f5215-301e-005d-4a1d-1ce448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180917Z-17db6f7c8cfcl4jvqfdxaxz9w800000002mg00000000cxvw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:17 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49743	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:17 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:17 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: cbdfa3b4-e01e-0051-2293-1c84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180917Z-17db6f7c8cf6qp7g7r97wxgbqc00000004hg00000000b82r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:17 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49740	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:17 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:17 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 0f9ac3ff-201e-0003-4016-1cf85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180917Z-17db6f7c8cfmhggkx889x958tc00000002c000000000e3pk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:17 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49747	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:18 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:18 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: e5c54f26-c01e-00a1-35de-1a7e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180918Z-17db6f7c8cfvzwz27u5rnq9kpc00000005g000000000cy67 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:18 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49749	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:18 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:18 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: f907bcfc-101e-007a-11f5-1a047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180918Z-17db6f7c8cfqkqk8bn4ck6f72000000004xg00000000gsdw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:18 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49750	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:18 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:18 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 77080ea6-601e-003e-13e1-1a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180918Z-17db6f7c8cf4g2pjavqhm24vp400000005k0000000000s7k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:18 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49746	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:18 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:18 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: eb753988-701e-0021-591f-1c3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180918Z-17db6f7c8cfjxfnba42c5rukwg000000024g00000000f7pp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:18 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49748	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:18 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:18 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5355bdce-701e-0021-10ea-1a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180918Z-17db6f7c8cf8rgvlb86c9c009800000003f00000000009hx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:18 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49752	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:19 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:19 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 94304cac-901e-0048-809f-1bb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180919Z-17db6f7c8cf96l6t7bwyfgbkhw000000046g00000000fg95 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:19 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49754	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:19 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:19 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 6fc17292-101e-0034-6b4a-1c96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180919Z-17db6f7c8cfvq8pt2ak3arkg6n00000003a0000000002qgq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:19 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49753	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:19 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:19 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 94af937e-501e-0047-50ca-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180919Z-17db6f7c8cfqxt4wrzg7st2fm800000005b0000000009xud x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:19 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49756	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:19 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:19 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: ec733f58-401e-0035-529c-1b82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180919Z-17db6f7c8cf96l6t7bwyfgbkhw00000004b00000000033ew x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:19 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49755	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:19 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:19 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: bdf1ddaa-101e-0046-0383-1b91b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180919Z-17db6f7c8cfgqlr45m385mnngs00000003sg00000000bewu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:19 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49757	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:20 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:20 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: b54c199e-501e-0047-79d7-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180920Z-17db6f7c8cfvzwz27u5rnq9kpc00000005g000000000cy83 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:20 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49758	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:20 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:20 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: b93fa8e6-a01e-0002-462b-1c5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180920Z-17db6f7c8cfpm9w8b1ybgtytds000000035000000000bnm7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:20 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49759	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:20 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:20 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 9dc98f41-601e-0097-4647-1cf33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180920Z-17db6f7c8cf6f7vv3recfp4a6w00000002cg000000002uxw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:20 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49760	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:20 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:20 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 6ec52d65-901e-0083-299c-1bbb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180920Z-17db6f7c8cfwtn5x6ye8p8q9m000000003vg0000000076sf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49761	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:20 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:20 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 1507c9f1-d01e-007a-72eb-1af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180920Z-17db6f7c8cfgqlr45m385mnngs00000003s000000000dp0a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:20 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49762	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:21 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:21 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 574f47a0-001e-0028-2c81-1bc49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180921Z-17db6f7c8cfbd7pgux3k6qfa60000000043g00000000bggv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:21 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49763	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:21 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:21 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 30f6abec-501e-005b-072b-1ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180921Z-17db6f7c8cfvzwz27u5rnq9kpc00000005ng000000002qz2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:21 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49765	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:21 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:21 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 4ea1e91c-d01e-0066-2741-1cea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180921Z-17db6f7c8cfmhggkx889x958tc00000002f0000000006k43 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:21 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49764	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:21 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:21 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 69483ed4-001e-0034-56df-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180921Z-17db6f7c8cfbr2wt66emzt78g400000004r000000000dzmw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:21 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49766	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:21 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:21 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f4abfb5c-001e-00a2-33e5-1ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180921Z-17db6f7c8cfspvtq2pgqb2w5k0000000050000000000mz2n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:21 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49767	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:22 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:22 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: fbd0b5f8-a01e-0053-6218-1c8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180922Z-17db6f7c8cffhvbz3mt0ydz7x400000003cg00000000drkp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:22 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49768	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:22 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:22 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 421ec19d-901e-002a-55e6-1c7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180922Z-17db6f7c8cfcl4jvqfdxaxz9w800000002rg00000000296e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:22 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49771	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:22 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:22 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: c784ccc1-701e-0001-0116-1cb110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180922Z-17db6f7c8cfgqlr45m385mnngs00000003s000000000dp2s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:22 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49769	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:22 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:22 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: e9bc8845-c01e-008d-06d9-1a2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180922Z-17db6f7c8cfbd7pgux3k6qfa60000000041000000000k0a6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:22 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49773	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:23 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:23 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: b2260943-f01e-0052-0b1c-1c9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180923Z-17db6f7c8cffhvbz3mt0ydz7x400000003bg00000000f87s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:23 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49772	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:23 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:23 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 0fbb1da2-e01e-0085-1521-1cc311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180923Z-17db6f7c8cfbd7pgux3k6qfa60000000044000000000a252 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:23 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49774	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:23 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:23 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: c027d4fd-301e-005d-2016-1ce448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180923Z-17db6f7c8cf8rgvlb86c9c009800000003dg000000004gma x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:23 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49775	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:23 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:23 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 9ba87e07-d01e-008e-2ae9-1a387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180923Z-17db6f7c8cf5mtxmr1c51513n000000005eg00000000888z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:23 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49770	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:23 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:23 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 7c051060-401e-008c-630d-1c86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180923Z-17db6f7c8cfvzwz27u5rnq9kpc00000005gg00000000bn4t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:23 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49776	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:23 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:23 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 36e78a2e-101e-008d-054a-1c92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180923Z-17db6f7c8cfcrfgzd01a8emnyg00000002pg00000000gdyp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:24 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49777	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:23 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:23 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 4508f1f3-f01e-0096-78e2-1a10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180923Z-17db6f7c8cfhrxld7punfw920n0000000420000000003tw0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:24 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49779	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:24 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:24 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: d280ac0f-001e-0079-3c69-1c12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180924Z-17db6f7c8cf9c22xp43k2gbqvn00000002y0000000005n0x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:24 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49778	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:24 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:24 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 77f86656-001e-000b-08e7-1a15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180924Z-17db6f7c8cfbd7pgux3k6qfa60000000047g000000001huc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:24 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49780	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:24 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 01727dbb-701e-0032-7b9f-1ba540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180924Z-17db6f7c8cfbd7pgux3k6qfa60000000041g00000000g80s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:24 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49782	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:25 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:25 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: bf053e75-701e-000d-6f20-1b6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180925Z-17db6f7c8cfgqlr45m385mnngs00000003v000000000679y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:25 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49781	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:25 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: c0284108-301e-005d-6416-1ce448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180924Z-17db6f7c8cfcrfgzd01a8emnyg00000002pg00000000ge06 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49784	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:25 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:25 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: a2dd0523-901e-0064-1fe2-1ae8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180925Z-17db6f7c8cfp6mfve0htepzbps00000004qg000000006d2c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:25 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49783	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:25 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:25 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 0e087f1c-801e-00ac-7d47-1cfd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180925Z-17db6f7c8cfcl4jvqfdxaxz9w800000002rg0000000029c5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:25 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49785	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:25 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 150221b2-d01e-007a-13e9-1af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180925Z-17db6f7c8cfhrxld7punfw920n000000043g000000000haa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49786	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:25 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:25 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 8f8e431e-b01e-0097-6fac-1b4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180925Z-17db6f7c8cf96l6t7bwyfgbkhw000000047g00000000bayd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:25 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49787	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:25 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:25 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: a45e7bac-201e-003c-72f3-1a30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180925Z-17db6f7c8cfp6mfve0htepzbps00000004hg00000000gytr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:25 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49788	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:25 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:25 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: b3584e95-501e-0029-5500-1bd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180925Z-17db6f7c8cf4g2pjavqhm24vp400000005f0000000008nqg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:25 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49789	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:25 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:25 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: e64af527-401e-0015-1bcc-1a0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180925Z-17db6f7c8cf4g2pjavqhm24vp400000005d000000000dgdn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:25 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49790	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:25 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:25 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 9aad704f-d01e-0049-789c-1be7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180925Z-17db6f7c8cfvq8pt2ak3arkg6n00000003800000000098z2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:25 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49791	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:26 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:26 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 54149fda-b01e-0001-69e2-1a46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180926Z-17db6f7c8cfqkqk8bn4ck6f720000000051g000000006f7z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:26 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49794	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:26 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:26 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: f1390e2f-501e-005b-7fe2-1bd7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180926Z-17db6f7c8cfgqlr45m385mnngs00000003v00000000067cd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:26 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49792	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:26 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:26 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: fa8e6f2c-a01e-0021-6514-1c814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180926Z-17db6f7c8cfcrfgzd01a8emnyg00000002pg00000000ge27 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:26 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49793	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:26 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:26 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: a84dc0aa-d01e-002b-1b83-1b25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180926Z-17db6f7c8cfbd7pgux3k6qfa60000000043g00000000bgrd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:26 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49795	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:26 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:26 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 1bfa4875-a01e-0084-0b1c-1c9ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180926Z-17db6f7c8cf9c22xp43k2gbqvn00000002z0000000002tbn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:26 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49796	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:27 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:27 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 9542a535-401e-0064-601f-1b54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180927Z-17db6f7c8cfspvtq2pgqb2w5k0000000051g00000000g9m2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:27 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49797	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:27 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:27 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 24028bf8-401e-00a3-4b1c-1c8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180927Z-17db6f7c8cfmhggkx889x958tc00000002c000000000e44k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:27 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49800	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:27 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:27 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: b5702fc7-501e-0047-59e6-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180927Z-17db6f7c8cfbd7pgux3k6qfa600000000470000000002wnd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:27 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49799	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:27 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:27 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 5c2b82db-e01e-0071-3c2b-1c08e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180927Z-17db6f7c8cfmhggkx889x958tc00000002gg000000002ngc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:27 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49798	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:27 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:27 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 581fb33a-501e-00a0-339b-1b9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180927Z-17db6f7c8cfwtn5x6ye8p8q9m000000003v00000000089gr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:27 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49801	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:28 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:28 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: a550391c-b01e-003d-7d1d-1cd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180928Z-17db6f7c8cfvtw4hh2496wp8p800000003r0000000005w3r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:28 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49802	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:28 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:28 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 959f4817-801e-0078-5157-1cbac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180928Z-17db6f7c8cfvq8pt2ak3arkg6n000000035g00000000f1bs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:28 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49803	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:28 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:28 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 0588c624-801e-0048-72e0-1af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180928Z-17db6f7c8cfspvtq2pgqb2w5k0000000053g00000000cwxk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:28 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49805	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:28 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:28 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 38d12744-701e-0050-7297-1b6767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180928Z-17db6f7c8cfgqlr45m385mnngs00000003r000000000fy3t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:28 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49804	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:28 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:28 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 67a092be-301e-0099-76e2-1a6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180928Z-17db6f7c8cfvzwz27u5rnq9kpc00000005p00000000014m6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:28 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49806	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:28 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:28 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 8c991e50-501e-00a3-5716-1cc0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180928Z-17db6f7c8cfpm9w8b1ybgtytds000000038g0000000025t3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:29 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49807	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:28 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:29 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:28 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 5cdd4b1c-301e-005d-338a-1be448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180928Z-17db6f7c8cfp6mfve0htepzbps00000004s000000000285w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:29 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49809	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:28 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:28 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 1a8c6bd5-d01e-0014-0747-1ced58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180928Z-17db6f7c8cfcl4jvqfdxaxz9w800000002sg00000000006h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:29 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49808	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:28 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:28 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f76b9983-801e-0047-0eec-1a7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180928Z-17db6f7c8cfp6mfve0htepzbps00000004n000000000bne7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:29 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49810	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:29 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:29 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:29 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 8957210b-901e-005b-0df7-1a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180929Z-17db6f7c8cfvzwz27u5rnq9kpc00000005m00000000064sn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:29 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49812	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:29 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:30 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:29 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 0cb7a61f-501e-0064-6562-1c1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180929Z-17db6f7c8cfgqlr45m385mnngs00000003q000000000h0rf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:30 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49815	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:29 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:30 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:29 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: defb5908-e01e-0033-2de2-1a4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180929Z-17db6f7c8cf6qp7g7r97wxgbqc00000004kg000000009fb3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:30 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49811	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:29 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:30 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:29 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 2eee43c6-d01e-0066-0203-1bea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180929Z-17db6f7c8cf6qp7g7r97wxgbqc00000004eg00000000k3ev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:30 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49814	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:29 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:30 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:29 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: a671d058-901e-00a0-5ad6-1a6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180929Z-17db6f7c8cfvzwz27u5rnq9kpc00000005m00000000064td x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:30 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49813	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:29 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:30 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:29 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 588a334f-a01e-0098-1acf-1a8556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180929Z-17db6f7c8cfbr2wt66emzt78g400000004rg00000000d1sk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:30 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49818	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:30 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:30 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:30 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: f5c8f5dd-801e-0083-6721-1cf0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180930Z-17db6f7c8cfpm9w8b1ybgtytds000000033g00000000f504 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:30 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49819	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:30 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:30 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:30 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: d1236033-501e-008f-33ea-1a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180930Z-17db6f7c8cfhzb2znbk0zyvf6n00000004w000000000dy1z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:30 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49816	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:30 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:30 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:30 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: f0fd83ad-f01e-00aa-6f22-1c8521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180930Z-17db6f7c8cfvtw4hh2496wp8p800000003ng00000000cxy5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:30 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49817	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:30 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:30 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:30 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 07ebf894-801e-008c-19d8-1a7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180930Z-17db6f7c8cfspvtq2pgqb2w5k000000005500000000081a1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:30 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49820	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:30 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:30 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:30 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: f7510ca4-501e-000a-5e6f-1c0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180930Z-17db6f7c8cfcl4jvqfdxaxz9w800000002k000000000etxs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:30 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49822	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:31 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:31 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:31 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 0b054cf6-001e-00a2-745b-1cd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180931Z-17db6f7c8cfpm9w8b1ybgtytds000000038g0000000025yd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:31 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49821	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:31 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:31 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:31 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: f0eac77b-f01e-00aa-541b-1c8521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180931Z-17db6f7c8cfmhggkx889x958tc00000002eg0000000086b4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:31 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49824	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:31 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:31 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:31 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: efbad5a3-301e-0000-2ec0-1aeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180931Z-17db6f7c8cf5mtxmr1c51513n000000005a000000000ku8y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:31 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49823	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:31 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:31 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:31 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: f659b87d-a01e-0002-04d9-1a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180931Z-17db6f7c8cfbr2wt66emzt78g400000004s000000000d3q5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:31 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49825	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:31 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:31 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:31 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 37770a76-901e-0048-046f-1cb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180931Z-17db6f7c8cfcrfgzd01a8emnyg00000002ug000000003wgc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:31 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49827	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:32 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:32 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:32 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: c0002b7f-501e-0029-6e1c-1cd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180932Z-17db6f7c8cf5mtxmr1c51513n000000005cg00000000dm7g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:32 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49826	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:32 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:32 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:32 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 234b0266-801e-0035-5da3-1b752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180932Z-17db6f7c8cfhrxld7punfw920n0000000420000000003ub1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:32 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49829	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:32 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:32 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:32 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: e2d37e80-101e-0079-6257-1c5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180932Z-17db6f7c8cfcl4jvqfdxaxz9w800000002n000000000b55b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:32 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49828	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:32 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:32 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:32 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: fe1a38a0-a01e-0053-6ad8-1a8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180932Z-17db6f7c8cfqxt4wrzg7st2fm8000000059g00000000e1qy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:32 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49830	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:32 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:32 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:32 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 37d30e57-901e-0015-1248-1cb284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180932Z-17db6f7c8cf9c22xp43k2gbqvn00000002sg00000000khkw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:32 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49831	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:33 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:33 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:33 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 6d1bd684-201e-00aa-7f91-1c3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180933Z-17db6f7c8cf5mtxmr1c51513n000000005c000000000fpdr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:33 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49832	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:33 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:33 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:33 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: fa68fd7e-e01e-0099-0ae2-1ada8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180933Z-17db6f7c8cfvzwz27u5rnq9kpc00000005g000000000cyr3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:33 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49833	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:33 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:33 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:33 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 4ec19421-301e-006e-0147-1cf018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180933Z-17db6f7c8cfmhggkx889x958tc00000002bg00000000eg9a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:33 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49834	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:33 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:33 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:33 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: cec5e4df-e01e-001f-1c47-1c1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180933Z-17db6f7c8cfcrfgzd01a8emnyg00000002rg00000000bms9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:33 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49835	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:33 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:33 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:33 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: d113afee-501e-008f-14e4-1a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180933Z-17db6f7c8cfqxt4wrzg7st2fm800000005bg00000000acy3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:33 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49836	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:33 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:33 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:33 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: b9db8c53-a01e-0002-5a69-1c5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180933Z-17db6f7c8cf5mtxmr1c51513n000000005a000000000kud1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:33 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49838	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:33 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:33 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:33 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: b78d101d-701e-0032-2f20-1ca540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180933Z-17db6f7c8cfvq8pt2ak3arkg6n000000038g000000006t5e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:33 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O
2024-10-13 18:09:44 UTC	192	OUT	GET /rules/rule702051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:44 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:44 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE632C2F7" x-ms-request-id: f64c9d2d-b01e-003e-38e2-1a8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180944Z-17db6f7c8cf4g2pjavqhm24vp400000005fg0000000084yq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:44 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 49 6e 73 69 67 68 74 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Insights.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenI

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49837	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:33 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:33 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:33 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 5f90b282-c01e-00ad-7c2b-1ca2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180933Z-17db6f7c8cfvq8pt2ak3arkg6n000000035000000000fm7f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:33 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S
2024-10-13 18:09:44 UTC	192	OUT	GET /rules/rule701700v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:44 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:44 GMT Content-Type: text/xml Content-Length: 1386 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA21B9C1" x-ms-request-id: 4fd272c2-e01e-0071-18a9-1c08e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180944Z-17db6f7c8cf4g2pjavqhm24vp400000005k0000000000t2n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:44 UTC	1386	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 37 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 49 6e 74 65 6c 6c 69 67 65 6e 74 53 65 72 76 69 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 49 6e 74 65 6c 6c 69 67 65 6e 74 53 65 72 76 69 63 65 73 22 20 53 3d 22 4d 65 64 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701700" V="1" DC="SM" EN="Office.Telemetry.Event.Office.IntelligentServices" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenIntelligentServices" S="Med

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49839	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:33 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:34 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:33 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 609b4fe7-801e-007b-3997-1be7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180933Z-17db6f7c8cfp6mfve0htepzbps00000004m000000000eqpg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:34 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken
2024-10-13 18:09:44 UTC	192	OUT	GET /rules/rule700701v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:44 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:44 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0D532BE" x-ms-request-id: ec3de456-501e-0078-3b02-1a06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180944Z-17db6f7c8cfbr2wt66emzt78g400000004w00000000029ek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:44 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 49 64 65 6e 74 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700701" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Identity.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenI

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49840	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:33 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:34 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:33 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 47bad248-d01e-0014-2e9c-1bed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180933Z-17db6f7c8cfbd7pgux3k6qfa60000000047g000000001k7s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:34 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2
2024-10-13 18:09:44 UTC	192	OUT	GET /rules/rule702050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:44 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:44 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBE82B5E" x-ms-request-id: caeae265-a01e-0021-5197-1b814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180944Z-17db6f7c8cfgqlr45m385mnngs00000003ug0000000076bh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:44 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 49 6e 73 69 67 68 74 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 49 6e 73 69 67 68 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Insights" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenInsights" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49841	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:34 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:34 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:34 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 27ba3f1d-401e-00ac-3a62-1c0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180934Z-17db6f7c8cf6f7vv3recfp4a6w00000002ag000000007mha x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:34 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa
2024-10-13 18:09:44 UTC	192	OUT	GET /rules/rule700700v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:44 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:44 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDD5ABCF" x-ms-request-id: 5939a81f-601e-0032-1ceb-1aeebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180944Z-17db6f7c8cfbd7pgux3k6qfa60000000047g000000001kke x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:44 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 49 64 65 6e 74 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 49 64 65 6e 74 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700700" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Identity" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenIdentity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49845	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:34 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:34 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:34 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 842b74fa-501e-008c-2f04-1acd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180934Z-17db6f7c8cfqxt4wrzg7st2fm800000005bg00000000acze x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:34 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe
2024-10-13 18:09:45 UTC	192	OUT	GET /rules/rule703650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:45 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:45 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE8067B71" x-ms-request-id: 49b12ee4-001e-0082-7e1a-1c5880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180945Z-17db6f7c8cfwtn5x6ye8p8q9m000000003qg00000000ktbh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:45 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 47 72 6f 6f 76 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 47 72 6f 6f 76 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703650" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Groove" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenGroove" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49842	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:34 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:34 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:34 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 1c06004d-d01e-005a-0ee5-1a7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180934Z-17db6f7c8cf4g2pjavqhm24vp400000005bg00000000garq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:34 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">
2024-10-13 18:09:45 UTC	192	OUT	GET /rules/rule700551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:45 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:45 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAB1138E" x-ms-request-id: 99ecbcf6-d01e-0049-5b20-1ce7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180945Z-17db6f7c8cf8rgvlb86c9c009800000003d0000000005cz4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:45 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 48 65 6c 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 48 65 6c 70 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Help.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenHelp"

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49843	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:34 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:34 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:34 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: d1a23a3b-201e-0085-4ca2-1b34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180934Z-17db6f7c8cfq2j6f03aq9y8dns00000004bg00000000fpsw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:34 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken
2024-10-13 18:09:45 UTC	192	OUT	GET /rules/rule700550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:45 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:45 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE09D130" x-ms-request-id: 57865534-001e-0028-0f97-1bc49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180945Z-17db6f7c8cf96l6t7bwyfgbkhw000000047g00000000bbnw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:45 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 48 65 6c 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 48 65 6c 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Help" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenHelp" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49844	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:34 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:34 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:34 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: df344972-701e-001e-12cd-1af5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180934Z-17db6f7c8cfqkqk8bn4ck6f72000000004wg00000000kpe1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:34 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2
2024-10-13 18:09:45 UTC	192	OUT	GET /rules/rule703651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:45 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:45 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF4D456E" x-ms-request-id: 6aec833c-e01e-000c-20e2-1a8e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180945Z-17db6f7c8cfhzb2znbk0zyvf6n00000004v000000000h2gp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:45 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 47 72 6f 6f 76 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 47 72 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703651" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Groove.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenGro

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49846	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:35 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:35 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:35 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 0c263a70-701e-0098-1b5d-1c395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180935Z-17db6f7c8cfcrfgzd01a8emnyg00000002q000000000eh9t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:35 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">
2024-10-13 18:09:45 UTC	192	OUT	GET /rules/rule700601v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:45 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:45 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0D77C58" x-ms-request-id: ef54f996-201e-0000-3c5e-1ca537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180945Z-17db6f7c8cf9wwz8ehu7c5p33g00000002dg00000000hpf4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:45 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 36 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 47 72 61 70 68 69 63 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 47 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700601" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Graphics.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenG

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49848	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:35 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:35 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:35 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: db50f49a-301e-000c-213b-1c323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180935Z-17db6f7c8cf9c22xp43k2gbqvn00000002tg00000000ezr1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:35 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr
2024-10-13 18:09:45 UTC	192	OUT	GET /rules/rule703151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:46 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:45 GMT Content-Type: text/xml Content-Length: 1411 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:52 GMT ETag: "0x8DC582BE486B11C" x-ms-request-id: de691f2f-801e-0015-6b75-1af97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180945Z-17db6f7c8cfhrxld7punfw920n00000003z000000000bbwr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:46 UTC	1411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 47 6c 6f 62 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Globalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantT

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49847	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:35 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:35 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:35 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: c21fd998-001e-0014-4ce5-1a5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180935Z-17db6f7c8cfqxt4wrzg7st2fm800000005d000000000682z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:35 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">
2024-10-13 18:09:45 UTC	192	OUT	GET /rules/rule700600v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:46 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:45 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAAE54E3" x-ms-request-id: de47861e-f01e-0096-4621-1c10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180945Z-17db6f7c8cfqxt4wrzg7st2fm800000005dg000000004sfk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:46 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 36 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 47 72 61 70 68 69 63 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 47 72 61 70 68 69 63 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700600" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Graphics" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenGraphics" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49849	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:35 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:35 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:35 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 0506fa48-b01e-001e-4cc1-1a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180935Z-17db6f7c8cfp6mfve0htepzbps00000004rg0000000045fy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:35 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken
2024-10-13 18:09:46 UTC	192	OUT	GET /rules/rule703150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:46 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:46 GMT Content-Type: text/xml Content-Length: 1374 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC6E5EC0" x-ms-request-id: a75e3edb-a01e-0098-0797-1b8556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180946Z-17db6f7c8cf9c22xp43k2gbqvn00000002y0000000005p05 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:46 UTC	1374	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 47 6c 6f 62 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 47 6c 6f 62 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Globalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenGlobalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49850	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:35 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:35 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:35 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: c0003111-501e-0029-3e1c-1cd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180935Z-17db6f7c8cffhvbz3mt0ydz7x400000003d000000000de65 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:35 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2
2024-10-13 18:09:46 UTC	192	OUT	GET /rules/rule703951v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:46 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:46 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3F2C6F2" x-ms-request-id: b4f55c12-001e-0065-2d23-1b0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180946Z-17db6f7c8cfnqpbkckdefmqa44000000056000000000e84z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:46 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 46 6c 6f 6f 64 67 61 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703951" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Floodgate.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49851	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:36 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:36 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:36 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 71b03e0b-301e-0052-60b9-1c65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180936Z-17db6f7c8cfjxfnba42c5rukwg000000026000000000b3vx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:36 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus
2024-10-13 18:09:46 UTC	192	OUT	GET /rules/rule703950v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:46 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:46 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBAA8F1E" x-ms-request-id: aacc9745-701e-0032-18e4-1ba540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180946Z-17db6f7c8cfgqlr45m385mnngs00000003w00000000038sm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:46 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 46 6c 6f 6f 64 67 61 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 46 6c 6f 6f 64 67 61 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703950" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Floodgate" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenFloodgate" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49852	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:36 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:36 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:36 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: e2476cc5-001e-00ad-1ecd-1a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180936Z-17db6f7c8cfhzb2znbk0zyvf6n00000004v000000000h20u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:36 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M
2024-10-13 18:09:46 UTC	192	OUT	GET /rules/rule702851v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:46 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:46 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE45FA9A4" x-ms-request-id: e38748b8-b01e-003d-2097-1bd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180946Z-17db6f7c8cfhrxld7punfw920n00000003wg00000000gkeh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:46 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 46 69 6c 65 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702851" V="1" DC="SM" EN="Office.Telemetry.Event.Office.FileSystem.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49853	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:36 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:36 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:36 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: ef1c8585-201e-0000-7b47-1ca537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180936Z-17db6f7c8cffhvbz3mt0ydz7x400000003bg00000000f8na x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:36 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan
2024-10-13 18:09:46 UTC	192	OUT	GET /rules/rule702850v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:46 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:46 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAF4A271" x-ms-request-id: e2813e5b-101e-0079-7539-1c5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180946Z-17db6f7c8cf9c22xp43k2gbqvn00000002xg00000000636y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:46 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 46 69 6c 65 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 46 69 6c 65 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702850" V="1" DC="SM" EN="Office.Telemetry.Event.Office.FileSystem" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenFileSystem" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49854	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:36 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:36 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:36 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 1d2d3277-301e-0033-5697-1bfa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180936Z-17db6f7c8cfbd7pgux3k6qfa60000000043g00000000bh7q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:36 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />
2024-10-13 18:09:46 UTC	192	OUT	GET /rules/rule700001v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:46 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:46 GMT Content-Type: text/xml Content-Length: 1741 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE01D965B" x-ms-request-id: 644f37f0-d01e-002b-2261-1a25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180946Z-17db6f7c8cfqkqk8bn4ck6f7200000000510000000007x1m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:46 UTC	1741	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 46 69 6c 65 49 4f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 46 69 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700001" V="2" DC="SM" EN="Office.Telemetry.Event.Office.FileIO.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenFil

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49855	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:36 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:36 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:36 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 83ee3589-001e-00ad-137e-1b554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180936Z-17db6f7c8cfq2j6f03aq9y8dns00000004c000000000ds7t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:36 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke
2024-10-13 18:09:46 UTC	192	OUT	GET /rules/rule700000v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:47 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:46 GMT Content-Type: text/xml Content-Length: 1704 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE3ACEE95" x-ms-request-id: 3ff26e3e-201e-0051-65a2-1b7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180946Z-17db6f7c8cfgqlr45m385mnngs00000003w00000000038tq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:47 UTC	1704	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 46 69 6c 65 49 4f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 46 69 6c 65 49 4f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700000" V="2" DC="SM" EN="Office.Telemetry.Event.Office.FileIO" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenFileIO" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49859	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:37 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:37 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:37 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 6eea93bb-701e-0097-0521-1bb8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180937Z-17db6f7c8cfnqpbkckdefmqa44000000056000000000e7rn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:37 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=
2024-10-13 18:09:47 UTC	192	OUT	GET /rules/rule701400v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:47 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:47 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED67B7DF" x-ms-request-id: 6edc9c20-001e-0049-1970-1a5bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180947Z-17db6f7c8cf4g2pjavqhm24vp400000005g0000000006vv8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:47 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 34 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 46 65 65 64 62 61 63 6b 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 46 65 65 64 62 61 63 6b 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701400" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Feedback" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenFeedback" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49856	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:37 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:37 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:37 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 7ec36ae7-901e-0064-7562-1ce8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180937Z-17db6f7c8cfjxfnba42c5rukwg0000000270000000009x1r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:37 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan
2024-10-13 18:09:46 UTC	192	OUT	GET /rules/rule701401v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:47 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:46 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BED9B1C5E" x-ms-request-id: 49b1316a-001e-0082-531a-1c5880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180946Z-17db6f7c8cfcrfgzd01a8emnyg00000002r000000000c2n1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:47 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 34 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 46 65 65 64 62 61 63 6b 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701401" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Feedback.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenF

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49857	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:37 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:37 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:37 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 58a86add-c01e-0079-678e-1de51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180937Z-17db6f7c8cfvzwz27u5rnq9kpc00000005m000000000651k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:37 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok
2024-10-13 18:09:47 UTC	192	OUT	GET /rules/rule701951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:47 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:47 GMT Content-Type: text/xml Content-Length: 1417 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED018AE5" x-ms-request-id: c7cd87ce-201e-006e-80a2-1bbbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180947Z-17db6f7c8cfp6mfve0htepzbps00000004q0000000007ayd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:47 UTC	1417	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 45 78 74 65 6e 73 69 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Extensibility.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantT

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	49858	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:37 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:37 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:37 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 4d8cc52a-c01e-0079-3417-1ce51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180937Z-17db6f7c8cf8rgvlb86c9c009800000003a000000000bmtd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:37 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />
2024-10-13 18:09:47 UTC	192	OUT	GET /rules/rule701950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:47 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:47 GMT Content-Type: text/xml Content-Length: 1380 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAADDFBA" x-ms-request-id: 34ff6430-401e-0064-7824-1c54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180947Z-17db6f7c8cfqkqk8bn4ck6f72000000005400000000005e2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:47 UTC	1380	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 45 78 74 65 6e 73 69 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 45 78 74 65 6e 73 69 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Extensibility" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeExtensibility" S="Medium" /

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49860	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:37 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:37 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:37 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: f766e345-d01e-0014-78e6-1aed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180937Z-17db6f7c8cfqkqk8bn4ck6f72000000004xg00000000gt61 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:37 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F
2024-10-13 18:09:47 UTC	192	OUT	GET /rules/rule700851v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:47 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:47 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDD07A16" x-ms-request-id: f7e59bc0-a01e-000d-0d1e-1bd1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180947Z-17db6f7c8cfgqlr45m385mnngs00000003tg00000000anz8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:47 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 38 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 45 78 70 65 72 69 6d 65 6e 74 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700851" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Experimentation.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49865	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:38 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:38 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:38 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: e3c1877a-301e-003f-0f1b-1c266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180938Z-17db6f7c8cf9c22xp43k2gbqvn00000002u000000000du10 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:38 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan
2024-10-13 18:09:48 UTC	192	OUT	GET /rules/rule703050v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:48 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:48 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE9CC7A3E" x-ms-request-id: 36fa4ef9-601e-0032-7aa2-1beebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180948Z-17db6f7c8cf9c22xp43k2gbqvn00000002wg00000000922q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:48 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 35 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 45 78 63 65 6c 2e 49 6e 73 69 67 68 74 73 53 65 72 76 69 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 45 78 63 65 6c 49 6e 73 69 67 68 74 73 53 65 72 76 69 63 65 73 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703050" V="3" DC="SM" EN="Office.Telemetry.Event.Office.Excel.InsightsServices" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenExcelInsightsServices" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49861	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:38 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:38 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:38 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 63590950-201e-0085-2bd8-1a34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180938Z-17db6f7c8cf5mtxmr1c51513n000000005h000000000249u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:38 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo
2024-10-13 18:09:47 UTC	192	OUT	GET /rules/rule700850v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:47 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:47 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2ACFF4" x-ms-request-id: 8626d863-c01e-0034-1062-1c2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180947Z-17db6f7c8cffhvbz3mt0ydz7x400000003gg0000000035vn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:47 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 38 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 45 78 70 65 72 69 6d 65 6e 74 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 45 78 70 65 72 69 6d 65 6e 74 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700850" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Experimentation" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenExperimentation" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49862	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:38 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:38 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:38 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 934b2f53-501e-00a3-32e6-1ac0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180938Z-17db6f7c8cfnqpbkckdefmqa44000000055g00000000f1pr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:38 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">
2024-10-13 18:09:48 UTC	192	OUT	GET /rules/rule701851v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:48 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:48 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB94749A" x-ms-request-id: 15f62512-e01e-0003-4770-1c0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180948Z-17db6f7c8cfmhggkx889x958tc00000002eg00000000877e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:48 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 45 78 63 65 6c 2e 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701851" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Excel.Mobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49864	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:38 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:38 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:38 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: cb98536f-301e-003f-4895-1b266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180938Z-17db6f7c8cf96l6t7bwyfgbkhw000000049g0000000070px x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:38 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T
2024-10-13 18:09:48 UTC	192	OUT	GET /rules/rule703051v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:48 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:48 GMT Content-Type: text/xml Content-Length: 1428 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE07B8722" x-ms-request-id: 24300c03-401e-0048-124a-1c0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180948Z-17db6f7c8cfcl4jvqfdxaxz9w800000002sg0000000000n3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:48 UTC	1428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 35 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 45 78 63 65 6c 2e 49 6e 73 69 67 68 74 73 53 65 72 76 69 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703051" V="3" DC="SM" EN="Office.Telemetry.Event.Office.Excel.InsightsServices.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nex

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49863	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:38 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:38 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:38 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 103cb033-201e-003f-56aa-1c6d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180938Z-17db6f7c8cfcl4jvqfdxaxz9w800000002s0000000001bk9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:38 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok
2024-10-13 18:09:48 UTC	192	OUT	GET /rules/rule701850v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:48 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:48 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE374A8B3" x-ms-request-id: 983d7bd9-201e-000c-13a2-1c79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180948Z-17db6f7c8cffhvbz3mt0ydz7x400000003g0000000004u4a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:48 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 45 78 63 65 6c 2e 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 45 78 63 65 6c 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701850" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Excel.Mobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenExcelMobile" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49866	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:38 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:39 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:38 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 7dbe0e1e-c01e-007a-2997-1bb877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180938Z-17db6f7c8cfgqlr45m385mnngs00000003t000000000b6bv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:39 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />
2024-10-13 18:09:48 UTC	192	OUT	GET /rules/rule700101v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:48 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:48 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BED8AA404" x-ms-request-id: 83b225f1-f01e-003c-3683-1b8cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180948Z-17db6f7c8cf6qp7g7r97wxgbqc00000004mg000000007g0c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:48 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 45 78 63 65 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 45 78 63 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700101" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Excel.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenExce

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49868	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:38 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:39 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:38 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 83695c77-e01e-001f-80c4-1a1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180938Z-17db6f7c8cf96l6t7bwyfgbkhw0000000490000000008cm1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:39 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <
2024-10-13 18:09:49 UTC	192	OUT	GET /rules/rule702100v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:49 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:49 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE7DDEC0" x-ms-request-id: aa362d02-401e-0067-7d8a-1b09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180949Z-17db6f7c8cfp6mfve0htepzbps00000004m000000000er5a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:49 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 45 78 63 65 6c 2e 43 6f 61 75 74 68 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 45 78 63 65 6c 43 6f 61 75 74 68 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702100" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Excel.Coauth" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenExcelCoauth" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49867	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:38 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:39 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:38 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: d178e097-d01e-005a-72ac-1b7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180938Z-17db6f7c8cfpm9w8b1ybgtytds000000036g000000008kqa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:39 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn
2024-10-13 18:09:49 UTC	192	OUT	GET /rules/rule702101v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:49 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:49 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7F89AC4" x-ms-request-id: 3c0258e8-b01e-00ab-4d85-1bdafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180949Z-17db6f7c8cf6qp7g7r97wxgbqc00000004pg000000001p8g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:49 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 45 78 63 65 6c 2e 43 6f 61 75 74 68 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702101" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Excel.Coauth.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49869	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:38 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:39 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:38 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 6a7281b4-d01e-008e-2ea3-1b387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180938Z-17db6f7c8cfp6mfve0htepzbps00000004ng00000000a4da x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:39 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo
2024-10-13 18:09:49 UTC	192	OUT	GET /rules/rule700100v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:49 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:49 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE9BA0663" x-ms-request-id: 541318e2-301e-0096-461c-1ce71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180949Z-17db6f7c8cfvtw4hh2496wp8p800000003n000000000ds19 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:49 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 45 78 63 65 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 45 78 63 65 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700100" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Excel" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenExcel" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49870	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:38 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:39 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:38 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 0a20bae4-d01e-005a-49d9-1a7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180938Z-17db6f7c8cf4g2pjavqhm24vp400000005bg00000000gaxt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:39 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">
2024-10-13 18:09:49 UTC	192	OUT	GET /rules/rule700951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:49 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:49 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8CC94C0" x-ms-request-id: 7480a9d7-001e-0034-7f62-1cdd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180949Z-17db6f7c8cf6f7vv3recfp4a6w000000027g00000000e8cg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:49 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 44 79 6e 61 6d 69 63 43 61 6e 76 61 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.DynamicCanvas.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantT

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49871	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:39 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:39 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:39 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 94230e0f-f01e-0003-2847-1c4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180939Z-17db6f7c8cfpm9w8b1ybgtytds000000032000000000hhq2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:39 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan
2024-10-13 18:09:49 UTC	192	OUT	GET /rules/rule700950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:49 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:49 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE96D9F3D" x-ms-request-id: b093efd8-801e-00a0-5c39-1c2196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180949Z-17db6f7c8cfgqlr45m385mnngs00000003pg00000000mq3e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:49 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 44 79 6e 61 6d 69 63 43 61 6e 76 61 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 69 6c 64 66 69 72 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.DynamicCanvas" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWildfire" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49874	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:39 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:39 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:39 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: f75af137-a01e-000d-5feb-1ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180939Z-17db6f7c8cfp6mfve0htepzbps00000004qg000000006dn8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:39 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T
2024-10-13 18:09:50 UTC	192	OUT	GET /rules/rule700451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:50 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:50 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF341BCB" x-ms-request-id: c62e681d-901e-0015-1be3-1ab284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180950Z-17db6f7c8cf6qp7g7r97wxgbqc00000004kg000000009g88 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:50 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 44 6f 63 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 44 6f 63 73 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Docs.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenDocs"

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	49872	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:39 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:39 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:39 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: 53a35867-601e-0002-7e63-1ca786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180939Z-17db6f7c8cffhvbz3mt0ydz7x400000003bg00000000f8rp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:39 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F
2024-10-13 18:09:50 UTC	192	OUT	GET /rules/rule703551v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:50 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:50 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE572292" x-ms-request-id: 08f54184-001e-0066-65ac-1b561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180950Z-17db6f7c8cfgqlr45m385mnngs00000003tg00000000ap2m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:50 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 44 6f 63 75 6d 65 6e 74 58 52 61 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703551" V="0" DC="SM" EN="Office.Telemetry.Event.Office.DocumentXRay.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49875	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:39 UTC	192	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:39 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:39 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: c2ce770e-d01e-00ad-7c5e-1ce942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180939Z-17db6f7c8cfcl4jvqfdxaxz9w800000002kg00000000d49u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:39 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi
2024-10-13 18:09:50 UTC	192	OUT	GET /rules/rule702701v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:50 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:50 GMT Content-Type: text/xml Content-Length: 1404 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD76594E" x-ms-request-id: 5e981ac5-901e-00ac-4a1e-1cb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180950Z-17db6f7c8cfcrfgzd01a8emnyg00000002p000000000gh60 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:50 UTC	1404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 44 6f 63 73 2e 41 70 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702701" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Docs.Apple.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49873	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:39 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:39 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:39 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: fd9deda9-001e-0079-391f-1c12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180939Z-17db6f7c8cfbr2wt66emzt78g400000004t0000000009n2v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:39 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="
2024-10-13 18:09:50 UTC	192	OUT	GET /rules/rule703550v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:50 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:50 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3F3631C" x-ms-request-id: a679db90-901e-00a0-36d9-1a6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180950Z-17db6f7c8cfbr2wt66emzt78g400000004q000000000faw4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:50 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 44 6f 63 75 6d 65 6e 74 58 52 61 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 44 6f 63 75 6d 65 6e 74 58 52 61 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703550" V="0" DC="SM" EN="Office.Telemetry.Event.Office.DocumentXRay" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenDocumentXRay" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49876	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:40 UTC	192	OUT	GET /rules/rule702650v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:40 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:40 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEA1B544" x-ms-request-id: 06b81cbc-d01e-0065-2ee4-1ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180940Z-17db6f7c8cfgqlr45m385mnngs00000003ug00000000767e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:40 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 61 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702650" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedia" S="Medium" /> <F T="2">
2024-10-13 18:09:50 UTC	192	OUT	GET /rules/rule702700v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:50 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:50 GMT Content-Type: text/xml Content-Length: 1367 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:04 GMT ETag: "0x8DC582BEBBC4213" x-ms-request-id: c85ae098-b01e-0084-23d7-1ad736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180950Z-17db6f7c8cf5mtxmr1c51513n000000005f0000000007qqy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:50 UTC	1367	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 44 6f 63 73 2e 41 70 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 44 6f 63 73 41 70 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702700" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Docs.Apple" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenDocsApple" S="Medium" /> <F T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	49878	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:40 UTC	192	OUT	GET /rules/rule703100v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:40 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:40 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:04 GMT ETag: "0x8DC582BEBCD5699" x-ms-request-id: 77a9ad56-001e-000b-39ca-1a15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180940Z-17db6f7c8cfnqpbkckdefmqa44000000059g000000006uzy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:40 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 31 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 41 54 53 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 41 54 53 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703100" V="1" DC="SM" EN="Office.Telemetry.Event.Office.MATS" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMATS" S="Medium" /> <F T="2">
2024-10-13 18:09:51 UTC	192	OUT	GET /rules/rule701901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:51 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:51 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE60DB429" x-ms-request-id: 05b08c02-801e-0048-5eec-1af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180951Z-17db6f7c8cf5mtxmr1c51513n000000005f0000000007qsc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:51 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 44 69 61 67 6e 6f 73 74 69 63 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Diagnostics.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49880	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:09:40 UTC	192	OUT	GET /rules/rule702900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:40 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:40 GMT Content-Type: text/xml Content-Length: 1374 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE539933F" x-ms-request-id: ff0ccd45-a01e-0070-151c-1c573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180940Z-17db6f7c8cfwtn5x6ye8p8q9m000000003x00000000033mu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:40 UTC	1374	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 61 6e 61 67 65 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 61 6e 61 67 65 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Manageability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenManageability" S="Medium" />
2024-10-13 18:09:51 UTC	192	OUT	GET /rules/rule704001v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:09:51 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:09:51 GMT Content-Type: text/xml Content-Length: 1419 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC4EF80" x-ms-request-id: 2b304112-301e-0096-2d74-1ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T180951Z-17db6f7c8cf96l6t7bwyfgbkhw00000004bg000000001rhw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:09:51 UTC	1419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 34 30 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 44 69 61 67 6e 6f 73 74 69 63 73 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="704001" V="0" DC="SM" EN="Office.Telemetry.Event.Office.DiagnosticsSystem.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTen

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 1372, Parent PID: 5400

General

Target ID:	0
Start time:	14:08:57
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2228, Parent PID: 1372

General

Target ID:	2
Start time:	14:09:00
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1804,i,18377259503311229828,17997055347371181320,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 7092, Parent PID: 5400

General

Target ID:	3
Start time:	14:09:03
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://mail.w-find.com/icloud-archivos/code2022esp.php"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://mail.w-find.com/icloud-archivos/code2022esp.php

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Static File Info

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

Windows Analysis Report
http://mail.w-find.com/icloud-archivos/code2022esp.php