Edit tour

Windows Analysis Report
http://mail.findmy-ld.help/icloud-archivos/code2022esp.php

Overview

General Information

Sample URL:	http://mail.findmy-ld.help/icloud-archivos/code2022esp.php
Analysis ID:	1532678
Tags:	openphish
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Phishing site detected (based on favicon image match)

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5916 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5736 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2448 --field-trial-handle=2412,i,14578733095005110323,16163136755117033568,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5344 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://mail.findmy-ld.help/icloud-archivos/code2022esp.php" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

ET PHISHING Possible Phish - Saved Website Comment Observed

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-13T20:11:06.573755+0200	2018334	2	Potentially Bad Traffic	50.6.138.164	80	192.168.2.9	49748	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://mail.findmy-ld.help/icloud-archivos/code2022esp.php

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

Phishing site detected (based on favicon image match)

Source: http://findmy-ld.help

Matcher: Template: apple matched with high similarity

Source: http://mail.findmy-ld.help/icloud-archivos/code2022esp.php

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.9:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.9:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.9:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.9:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.9:49993 version: TLS 1.2

Source: Network traffic

Suricata IDS: 2018334 - Severity 2 - ET PHISHING Possible Phish - Saved Website Comment Observed : 50.6.138.164:80 -> 192.168.2.9:49748

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 13 Oct 2024 18:11:06 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, Keep-AliveVary: Accept-EncodingContent-Encoding: gzipAccept-Ranges: noneContent-Length: 2876Keep-Alive: timeout=5, max=75Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 52 61 73 db 36 12 fd ee 5f 81 30 9d 8c d4 0b 49 cb 72 dc c4 16 d5 49 1c e7 ea 99 e4 d2 26 ce 75 6e 6e ae 19 08 58 89 48 40 80 01 40 c9 8a eb 9f d4 4f f9 09 f9 63 b7 00 29 8a b2 9d da bd f1 64 ae 73 47 7b 44 62 b1 fb f6 ed db 37 ba f3 f4 e5 e1 c9 3f 7e 3c 22 b9 2b 24 f9 f1 cd 93 e7 c7 87 24 8a d3 f4 e7 e1 61 9a 3e 3d 79 4a 7e 38 79 f1 9c ec 26 db 03 72 62 a8 b2 c2 09 ad a8 4c d3 a3 bf 45 24 ca 9d 2b f7 d3 74 b1 58 24 8b 61 a2 cd 2c 3d 79 95 7a a8 dd 54 6a 6d 21 e1 8e 47 e3 ad d1 9d 38 26 96 ce 81 93 a9 d1 05 a9 8c cc 7a db db 0f b6 fb 1e c0 36 08 82 49 5d f1 84 e9 22 56 36 a9 6c 4a df 0c ff 3e 48 0b 3d 11 12 52 a6 39 24 65 5e 92 38 46 40 df 63 3c ca 81 f2 f1 a8 00 47 89 07 8a e1 43 25 e6 59 74 a8 95 03 e5 e2 93 65 09 11 61 f5 29 8b 1c 9c ba 40 ee 80 b0 9c 1a 0b 2e 7b 73 f2 2c 7e 88 04 09 3e e1 a7 06 53 b4 80 2c 9a 0b 58 94 da b8 0e c4 42 70 97 67 1c e6 82 41 1c 0e f7 89 50 a8 09 95 b1 65 54 42 36 b8 4f 0a 7a 2a 8a aa 58 05 1a f8 91 14 ea 3d 31 20 b3 a8 34 30 05 c7 72 62 dd 52 82 cd 01 b0 47 8e c1 2c 4a d2 29 f6 b2 09 b3 36 22 0e f9 37 b4 fd f9 12 4e b7 fc 42 2e 29 80 0b 8a 29 cc 00 a8 35 3a 2d cb e4 b6 b0 42 49 83 16 e0 ba cf d6 95 87 5a e8 51 a8 bc 34 de a8 46 c4 77 d8 eb d6 68 a2 f9 12 5f 5c cc 09 93 d4 5a a4 20 62 1f 24 f8 f6 3b a1 42 81 21 ed 57 3c 95 95 e0 11 11 3c 8b 9a 95 45 84 53 47 63 97 83 df a8 14 0e b0 0f 8a 20 21 a6 95 cb c7 41 85 70 16 3c 96 7a a6 49 81 3e cb a2 33 ff 3a 8f 9a ee 1e b0 2e 6a b2 a2 15 a1 8d 28 c9 05 47 5c b9 a0 cb 56 61 b1 ca 14 c8 88 f8 9f b7 a1 c6 8f 2b 10 3e 45 7c 94 6f 94 76 49 6c 0e 8d 3e 9b 81 eb 0c 3c a5 d8 46 28 82 9b b3 ce 08 e6 62 b4 5c bc c8 c9 ea a6 99 ba 1e 05 8a 09 f0 d5 8a da 71 ac 83 32 ea c8 ea cf a4 21 7d 29 f1 48 b6 a9 04 93 46 56 cc 14 b6 d9 a4 39 07 23 a6 cb b8 cc b5 82 96 c8 b8 ed da 81 ce 07 9d c6 eb ed 39 e1 bc 2b de 63 9d 33 28 b1 a3 13 a1 38 9c 66 51 3c 88 48 f0 46 16 4d 31 3d b6 e2 23 ec 0f 1e 96 a7 07 4c 4b 6d f6 ef ee 3e f2 7f 07 1d fe fe 39 56 33 54 08 08 48 c2 3e 7f e2 02 37 c4 01 ff ed 44 ea 0f 15 f8 93 24 5c d8 52 5b e1 c4 5c b7 04 d3 7c 30 be e4 e8 56 95 15 77 60 48 1e c7 5c 18 dc 1d 98 0b cd 47 78 5f 19 e1 96 21 89 48 50 33 97 a3 b1 fc e9 79 38 9c e3 88 cb 12 67 72 80 fa 5a 13 a4 80 53 97 45 35 71 7a 81 78 10 58 30 ca c4 e7 4f b8 62 a9 19 95 c2 02 8f 31 41 60 d5 d3 cf bf e1 1b 85 03 63 b4 89 0b b0 96 ce 10 fe f0 0b 10 44 28 a6 8d 01 e6 74 82 4b dd 1c 6d 4d 3d cc 35 12 bc b0 71 0d dc cc 4b ce 50 3a 3a 91 de f1 b2 be b2 e7 59 94 53 7b e4 bf 9f d3 89 1f eb ec 97 ba c8 4f 8a b7 e1 70 82 df 11 29 75 a9 91 4f 4c 2b a7 63 26 b5 f5 db a5 d2 82 2f ba dc 2e 0e dc c0 b7 f0 97 a1 c7 cf f5 d5 61 7d 83 75 d8 bc 61 12 53 c5 e3 a9 66 55 97 93 7d ac f8 33 1f c3 54 9b eb 45 9d fb 85
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 13 Oct 2024 18:11:06 GMTServer: ApacheLast-Modified: Sat, 26 Nov 2022 14:31:26 GMTAccept-Ranges: noneVary: Accept-EncodingContent-Encoding: gzipContent-Length: 478Keep-Alive: timeout=5, max=74Connection: Keep-AliveContent-Type: text/cssData Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 92 4f 4e 83 40 14 87 d7 f6 14 2f 6c 68 1b 69 6b e3 9f b4 6e 34 ae 5c 98 98 f6 00 66 0a 0f 3b 71 60 c8 cc ab 4a 8c 57 70 ed 51 8c c7 f1 02 5e 41 a0 b4 d1 49 83 0e e9 c2 b2 9c 07 bf 07 bf 6f be b3 50 c6 e4 85 cc 47 78 6a ed 95 87 88 8b 74 ec 5e a5 8a b3 00 a6 48 70 ad a4 7b 5a 3e d6 94 0a 1c c7 52 45 4c ac 66 0f c8 6f e7 34 1e 0e 06 d9 44 2b 7f 2c a4 cf 44 db fd 78 7d ff 7c 7b 71 3b fb b0 50 a2 ed f4 fa 51 b1 d3 d3 48 5e a2 e4 0d cd 79 dc 7b 90 61 e8 74 20 cc 37 52 db 59 1e 2b 13 44 df 03 a4 16 48 69 82 4e 27 fb 78 bf 0b 17 32 c9 32 d9 ff 40 db ef c0 c1 68 34 84 f3 40 ce 10 a6 a9 26 8c 34 5c c6 be 54 89 54 8c 30 e8 c1 b9 10 30 c9 5f d7 30 41 8d ea 3e 1f 96 dd b9 06 06 a4 58 80 11 53 77 20 c3 ca 4d dd 7e eb b9 d5 3a ab 49 94 13 13 dc df 06 51 6f b9 ca 1e ec 2a d8 0c be 90 c1 73 4b 7a 15 32 a1 a4 5d 6b f6 17 73 0e ad cd c1 47 aa 67 ce b7 60 33 cc 31 f8 c6 79 1d 61 f0 3d b2 e5 1b 61 c0 17 91 1d da 32 d3 48 aa 1b ad ad 49 b5 96 b7 3f a3 cd 60 0c 19 40 b7 24 58 a9 14 4a da b5 6e 86 3f 71 7e 55 c2 f0 e7 d8 d6 1f 8d 11 9f 49 11 d8 a9 b3 4e 35 c3 1a 83 2c 27 26 b8 bf 2d b2 de 72 5d 3d c0 ab 70 33 38 43 06 d1 2d 29 fe 22 16 4a da b5 76 86 45 71 7e 59 c2 b0 e8 c4 d6 a2 02 86 95 3a 45 a2 19 be 18 44 39 31 c1 fd 6d 10 f5 96 ab ec c1 ae 82 cd e0 0b 19 3c b7 a4 57 21 13 4a da b5 66 86 39 71 7e 51 c2 30 e7 70 6d ce e6 ee 84 8f b4 ee 6e 21 58 91 b3 32 ab 48 fc 6b a5 be 00 9b 6e d4 da 27 11 00 00 Data Ascii: ON@/lhikn4\f;q`JWpQ^AIoPGxjt^Hp{Z>RELfo4D+,Dx}\|{q;PQH^y{at 7RY+DHiN'x22@h4@&4\TT00_0A>XSw M~:IQo*sKz2]ksGg`31ya=a2HI?`@$XJn?q~UIN5,'&-r]=p38C-)"JvEq~Y:ED91m<W!Jf9q~Q0pmn!X2Hkn'
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 13 Oct 2024 18:11:07 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, Keep-AliveLast-Modified: Sat, 26 Nov 2022 14:31:26 GMTAccept-Ranges: noneVary: Accept-EncodingContent-Encoding: gzipContent-Length: 286Keep-Alive: timeout=5, max=75Content-Type: text/cssData Raw: 1f 8b 08 00 00 00 00 00 00 03 55 50 dd 6a c3 20 14 be f7 29 84 31 58 21 06 6d 92 76 d5 ab 5e 74 ef 61 a2 4d 0e b3 2a c6 92 ac 63 ef be 93 8c 6c 0c 11 3c e7 7c 3f e7 b3 b4 29 85 e4 42 0f 9e 7e 92 56 77 ef 7d 0a 77 6f 58 17 5c 48 92 3e bd 9d 2f a7 73 a5 48 0c 23 64 08 5e 52 dd 8e c1 dd b3 55 64 02 93 07 79 e4 cf 8a dc 74 42 09 e6 ec 35 4b ca aa 23 b6 da 90 8c 4d 2c 69 03 f7 51 d2 26 ce 8a fc cc 9b 3d 8e a3 36 06 7c 2f a9 b0 b7 0d 8c 45 9c 29 ca 83 a1 a9 6f f5 8b 78 6d 0a 51 9f 0a 51 f0 b2 3e ee 16 dc cc c6 41 9b 30 49 ca 11 8b aa 54 2c 8f 3d de 95 c2 8b f5 94 62 f7 bb 55 0e 51 d2 d3 e2 ff 67 ba ae b3 85 6c 78 75 a9 b8 22 d7 e0 33 9b 2c f4 03 6e 59 73 ec 64 3b 67 a6 1d f4 18 bc b3 3e db a4 c8 83 81 37 76 46 91 8d 32 c2 c3 6e 9a ce 66 44 b1 31 ea 6e 75 62 bc e4 e2 b0 64 fc a7 de f0 8d 7c d5 37 70 1f f8 af 09 b4 53 e4 8b 7e 03 1b d6 07 a2 94 01 00 00 Data Ascii: UPj )1X!mv^taM*cl<\|?)B~Vw}woX\H>/sH#d^RUdytB5K#M,iQ&=6\|/E)oxmQQ>A0IT,=bUQglxu"3,nYsd;g>7vF2nfD1nubd\|7pS~

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=6TPyw8RKrSf8tzY&MD=d1V6kW9s HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=6TPyw8RKrSf8tzY&MD=d1V6kW9s HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/code2022esp.php HTTP/1.1Host: mail.findmy-ld.helpConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/fonts.css HTTP/1.1Host: mail.findmy-ld.helpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://mail.findmy-ld.help/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/app.css HTTP/1.1Host: mail.findmy-ld.helpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://mail.findmy-ld.help/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/style.css HTTP/1.1Host: mail.findmy-ld.helpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://mail.findmy-ld.help/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/ajax-loader.gif HTTP/1.1Host: mail.findmy-ld.helpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://mail.findmy-ld.help/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sep.png HTTP/1.1Host: mail.findmy-ld.helpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://mail.findmy-ld.help/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/myriad-set-pro_thin.woff HTTP/1.1Host: mail.findmy-ld.helpConnection: keep-aliveOrigin: http://mail.findmy-ld.helpUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://mail.findmy-ld.help/icloud-archivos/fonts.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/myriad-set-pro_text.woff HTTP/1.1Host: mail.findmy-ld.helpConnection: keep-aliveOrigin: http://mail.findmy-ld.helpUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://mail.findmy-ld.help/icloud-archivos/fonts.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/ajax-loader.gif HTTP/1.1Host: mail.findmy-ld.helpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/myriad-set-pro_text.ttf HTTP/1.1Host: mail.findmy-ld.helpConnection: keep-aliveOrigin: http://mail.findmy-ld.helpUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://mail.findmy-ld.help/icloud-archivos/fonts.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/myriad-set-pro_thin.ttf HTTP/1.1Host: mail.findmy-ld.helpConnection: keep-aliveOrigin: http://mail.findmy-ld.helpUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://mail.findmy-ld.help/icloud-archivos/fonts.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sep.png HTTP/1.1Host: mail.findmy-ld.helpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: mail.findmy-ld.helpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://mail.findmy-ld.help/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: mail.findmy-ld.helpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: mail.findmy-ld.help
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 13 Oct 2024 18:11:07 GMTServer: ApacheLast-Modified: Wed, 24 May 2023 01:50:54 GMTAccept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 4677Keep-Alive: timeout=5, max=72Connection: Keep-AliveContent-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 28 a5 1e fc 61 7b e3 38 6a 6f 8e 17 74 1e c2 45 49 2e fb b6 b1 d1 1f 36 b2 b2 ac 14 f6 71 5e 09 9d 3e 04 59 8a 5a a9 b3 ae 51 08 8e 8d e9 fc 48 ac 5d f3 72 42 69 73 5f 89 34 95 3a 1f 1e 8c 4a 61 72 a9 f9 21 63 0f fb 99 28 a5 6a 86 05 aa 29 3a 99 88 d1 9f cb 7b 7b de 64 21 35 9a fb ee ce cf 07 d5 1c 44 ed 68 34 93 a9 2b 86 bf fe f2 6b 35 df 79 03 f6 1c 55 ec f7 fd 44 24 77 b9 a1 5a a7 7d 59 8a 1c 87 b5 51 4f 9f 2c f5 86 35 1b f1 49 3e ff 69 36 f8 a3 ca 9f 3c 1b ad 5d 32 58 a1 70 43 4d dd d3 c6 e4 02 65 5e b8 e1 e1 57 68 94 32 fd 2e 1a 7c 7e 90 cb 6c 27 89 f6 a7 df 7c 83 fa 76 2c ec e5 c2 91 99 90 73 54 de 57 64 a5 93 a4 19 47 09 27 a7 38 52 98 b9 e1 d1 0b 46 c9 14 f1 00 ff fe 4f 00 e7 f3 f9 fd da e1 45 ac c7 3e 99 a3 17 ff c6 df 87 fc 38 82 2e b1 90 56 fb d5 3f 5c a4 f7 f5 09 7e 09 b5 5b 9f e2 4b d5 17 4a e6 7a 98 f0 16 9a ef 70 a0 83 83 3d 34 86 4c 42 29 de 87 e2 59 f9 0f 1c 1e 79 ae e1 75 d6 46 f9 eb c1 c1 b7 e2 4d 84 de ae e6 01 ff fb d6 eb 05 59 87 e9 a4 b9 df 1e bf 62 f7 f3 f3 05 3b eb 1a 85 43 e9 d8 83 64 b4 35 f1 5b 07 26 54 57 a4 ef 13 52 64 86 7b 2f 5f 1d 1c 6c 0e fb 79 e7 b0 6f 04 cf d1 59 27 0c 2b 02 f1 c5 11 47 87 3b 47 fc 8b fe af 8d 5c 84 e0 fd 3f 7a fe c5 4a 4c c8 39 2a 19 e5 7e 22 92 bb dc 50 ad d3 be 2c 45 8e c3 da a8 a7 4f a2 24 97 7d db d8 28 ac d9 88 4f b6 57 06 b9 cc 9e 3c 1b ad dd 32 58 21 b7 53 53 f7 b4 51 c8 a2 d5 72 78 fc ed e5 cc c4 e7 4f ab fd 85 1e 78 1e 22 0e df 23 a8 44 9a 4a 9d 0f e1 b0 4d be fd 19 41 a2 50 98 21 33 2d be 75 9a 48 12 32 a9 e4 36 ac c2 81 17 07 3f 8e a0 95 01 bf 3c 67 ec 11 94 52 f7 3b 31 3c ad 5d ea 98 1d 80 a8 1d 8d c0 e1 dc f5 39 c6 9c d7 12 06 47 f3 dd 24 a0 56 70 bf 8e a3 30 73 df 8f 42 bb 51 1e 3d fa 66
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 13 Oct 2024 18:11:07 GMTServer: ApacheLast-Modified: Wed, 24 May 2023 01:50:54 GMTAccept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 4677Keep-Alive: timeout=5, max=74Connection: Keep-AliveContent-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 28 a5 1e fc 61 7b e3 38 6a 6f 8e 17 74 1e c2 45 49 2e fb b6 b1 d1 1f 36 b2 b2 ac 14 f6 71 5e 09 9d 3e 04 59 8a 5a a9 b3 ae 51 08 8e 8d e9 fc 48 ac 5d f3 72 42 69 73 5f 89 34 95 3a 1f 1e 8c 4a 61 72 a9 f9 21 63 0f fb 99 28 a5 6a 86 05 aa 29 3a 99 88 d1 9f cb 7b 7b de 64 21 35 9a fb ee ce cf 07 d5 1c 44 ed 68 34 93 a9 2b 86 bf fe f2 6b 35 df 79 03 f6 1c 55 ec f7 fd 44 24 77 b9 a1 5a a7 7d 59 8a 1c 87 b5 51 4f 9f 2c f5 86 35 1b f1 49 3e ff 69 36 f8 a3 ca 9f 3c 1b ad 5d 32 58 a1 70 43 4d dd d3 c6 e4 02 65 5e b8 e1 e1 57 68 94 32 fd 2e 1a 7c 7e 90 cb 6c 27 89 f6 a7 df 7c 83 fa 76 2c ec e5 c2 91 99 90 73 54 de 57 64 a5 93 a4 19 47 09 27 a7 38 52 98 b9 e1 d1 0b 46 c9 14 f1 00 ff fe 4f 00 e7 f3 f9 fd da e1 45 ac c7 3e 99 a3 17 ff c6 df 87 fc 38 82 2e b1 90 56 fb d5 3f 5c a4 f7 f5 09 7e 09 b5 5b 9f e2 4b d5 17 4a e6 7a 98 f0 16 9a ef 70 a0 83 83 3d 34 86 4c 42 29 de 87 e2 59 f9 0f 1c 1e 79 ae e1 75 d6 46 f9 eb c1 c1 b7 e2 4d 84 de ae e6 01 ff fb d6 eb 05 59 87 e9 a4 b9 df 1e bf 62 f7 f3 f3 05 3b eb 1a 85 43 e9 d8 83 64 b4 35 f1 5b 07 26 54 57 a4 ef 13 52 64 86 7b 2f 5f 1d 1c 6c 0e fb 79 e7 b0 6f 04 cf d1 59 27 0c 2b 02 f1 c5 11 47 87 3b 47 fc 8b fe af 8d 5c 84 e0 fd 3f 7a fe c5 4a 4c c8 39 2a 19 e5 7e 22 92 bb dc 50 ad d3 be 2c 45 8e c3 da a8 a7 4f a2 24 97 7d db d8 28 ac d9 88 4f b6 57 06 b9 cc 9e 3c 1b ad dd 32 58 21 b7 53 53 f7 b4 51 c8 a2 d5 72 78 fc ed e5 cc c4 e7 4f ab fd 85 1e 78 1e 22 0e df 23 a8 44 9a 4a 9d 0f e1 b0 4d be fd 19 41 a2 50 98 21 33 2d be 75 9a 48 12 32 a9 e4 36 ac c2 81 17 07 3f 8e a0 95 01 bf 3c 67 ec 11 94 52 f7 3b 31 3c ad 5d ea 98 1d 80 a8 1d 8d c0 e1 dc f5 39 c6 9c d7 12 06 47 f3 dd 24 a0 56 70 bf 8e a3 30 73 df 8f 42 bb 51 1e 3d fa 66
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 13 Oct 2024 18:11:07 GMTServer: ApacheLast-Modified: Wed, 24 May 2023 01:50:54 GMTAccept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 4677Keep-Alive: timeout=5, max=73Connection: Keep-AliveContent-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 28 a5 1e fc 61 7b e3 38 6a 6f 8e 17 74 1e c2 45 49 2e fb b6 b1 d1 1f 36 b2 b2 ac 14 f6 71 5e 09 9d 3e 04 59 8a 5a a9 b3 ae 51 08 8e 8d e9 fc 48 ac 5d f3 72 42 69 73 5f 89 34 95 3a 1f 1e 8c 4a 61 72 a9 f9 21 63 0f fb 99 28 a5 6a 86 05 aa 29 3a 99 88 d1 9f cb 7b 7b de 64 21 35 9a fb ee ce cf 07 d5 1c 44 ed 68 34 93 a9 2b 86 bf fe f2 6b 35 df 79 03 f6 1c 55 ec f7 fd 44 24 77 b9 a1 5a a7 7d 59 8a 1c 87 b5 51 4f 9f 2c f5 86 35 1b f1 49 3e ff 69 36 f8 a3 ca 9f 3c 1b ad 5d 32 58 a1 70 43 4d dd d3 c6 e4 02 65 5e b8 e1 e1 57 68 94 32 fd 2e 1a 7c 7e 90 cb 6c 27 89 f6 a7 df 7c 83 fa 76 2c ec e5 c2 91 99 90 73 54 de 57 64 a5 93 a4 19 47 09 27 a7 38 52 98 b9 e1 d1 0b 46 c9 14 f1 00 ff fe 4f 00 e7 f3 f9 fd da e1 45 ac c7 3e 99 a3 17 ff c6 df 87 fc 38 82 2e b1 90 56 fb d5 3f 5c a4 f7 f5 09 7e 09 b5 5b 9f e2 4b d5 17 4a e6 7a 98 f0 16 9a ef 70 a0 83 83 3d 34 86 4c 42 29 de 87 e2 59 f9 0f 1c 1e 79 ae e1 75 d6 46 f9 eb c1 c1 b7 e2 4d 84 de ae e6 01 ff fb d6 eb 05 59 87 e9 a4 b9 df 1e bf 62 f7 f3 f3 05 3b eb 1a 85 43 e9 d8 83 64 b4 35 f1 5b 07 26 54 57 a4 ef 13 52 64 86 7b 2f 5f 1d 1c 6c 0e fb 79 e7 b0 6f 04 cf d1 59 27 0c 2b 02 f1 c5 11 47 87 3b 47 fc 8b fe af 8d 5c 84 e0 fd 3f 7a fe c5 4a 4c c8 39 2a 19 e5 7e 22 92 bb dc 50 ad d3 be 2c 45 8e c3 da a8 a7 4f a2 24 97 7d db d8 28 ac d9 88 4f b6 57 06 b9 cc 9e 3c 1b ad dd 32 58 21 b7 53 53 f7 b4 51 c8 a2 d5 72 78 fc ed e5 cc c4 e7 4f ab fd 85 1e 78 1e 22 0e df 23 a8 44 9a 4a 9d 0f e1 b0 4d be fd 19 41 a2 50 98 21 33 2d be 75 9a 48 12 32 a9 e4 36 ac c2 81 17 07 3f 8e a0 95 01 bf 3c 67 ec 11 94 52 f7 3b 31 3c ad 5d ea 98 1d 80 a8 1d 8d c0 e1 dc f5 39 c6 9c d7 12 06 47 f3 dd 24 a0 56 70 bf 8e a3 30 73 df 8f 42 bb 51 1e 3d fa 66
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 13 Oct 2024 18:11:07 GMTServer: ApacheLast-Modified: Wed, 24 May 2023 01:50:54 GMTAccept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 4677Keep-Alive: timeout=5, max=74Connection: Keep-AliveContent-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 28 a5 1e fc 61 7b e3 38 6a 6f 8e 17 74 1e c2 45 49 2e fb b6 b1 d1 1f 36 b2 b2 ac 14 f6 71 5e 09 9d 3e 04 59 8a 5a a9 b3 ae 51 08 8e 8d e9 fc 48 ac 5d f3 72 42 69 73 5f 89 34 95 3a 1f 1e 8c 4a 61 72 a9 f9 21 63 0f fb 99 28 a5 6a 86 05 aa 29 3a 99 88 d1 9f cb 7b 7b de 64 21 35 9a fb ee ce cf 07 d5 1c 44 ed 68 34 93 a9 2b 86 bf fe f2 6b 35 df 79 03 f6 1c 55 ec f7 fd 44 24 77 b9 a1 5a a7 7d 59 8a 1c 87 b5 51 4f 9f 2c f5 86 35 1b f1 49 3e ff 69 36 f8 a3 ca 9f 3c 1b ad 5d 32 58 a1 70 43 4d dd d3 c6 e4 02 65 5e b8 e1 e1 57 68 94 32 fd 2e 1a 7c 7e 90 cb 6c 27 89 f6 a7 df 7c 83 fa 76 2c ec e5 c2 91 99 90 73 54 de 57 64 a5 93 a4 19 47 09 27 a7 38 52 98 b9 e1 d1 0b 46 c9 14 f1 00 ff fe 4f 00 e7 f3 f9 fd da e1 45 ac c7 3e 99 a3 17 ff c6 df 87 fc 38 82 2e b1 90 56 fb d5 3f 5c a4 f7 f5 09 7e 09 b5 5b 9f e2 4b d5 17 4a e6 7a 98 f0 16 9a ef 70 a0 83 83 3d 34 86 4c 42 29 de 87 e2 59 f9 0f 1c 1e 79 ae e1 75 d6 46 f9 eb c1 c1 b7 e2 4d 84 de ae e6 01 ff fb d6 eb 05 59 87 e9 a4 b9 df 1e bf 62 f7 f3 f3 05 3b eb 1a 85 43 e9 d8 83 64 b4 35 f1 5b 07 26 54 57 a4 ef 13 52 64 86 7b 2f 5f 1d 1c 6c 0e fb 79 e7 b0 6f 04 cf d1 59 27 0c 2b 02 f1 c5 11 47 87 3b 47 fc 8b fe af 8d 5c 84 e0 fd 3f 7a fe c5 4a 4c c8 39 2a 19 e5 7e 22 92 bb dc 50 ad d3 be 2c 45 8e c3 da a8 a7 4f a2 24 97 7d db d8 28 ac d9 88 4f b6 57 06 b9 cc 9e 3c 1b ad dd 32 58 21 b7 53 53 f7 b4 51 c8 a2 d5 72 78 fc ed e5 cc c4 e7 4f ab fd 85 1e 78 1e 22 0e df 23 a8 44 9a 4a 9d 0f e1 b0 4d be fd 19 41 a2 50 98 21 33 2d be 75 9a 48 12 32 a9 e4 36 ac c2 81 17 07 3f 8e a0 95 01 bf 3c 67 ec 11 94 52 f7 3b 31 3c ad 5d ea 98 1d 80 a8 1d 8d c0 e1 dc f5 39 c6 9c d7 12 06 47 f3 dd 24 a0 56 70 bf 8e a3 30 73 df 8f 42 bb 51 1e 3d fa 66

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803

Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.9:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.9:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.9:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.9:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.9:49993 version: TLS 1.2

Source: classification engine

Classification label: mal52.phis.win@16/29@6/7

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2448 --field-trial-handle=2412,i,14578733095005110323,16163136755117033568,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://mail.findmy-ld.help/icloud-archivos/code2022esp.php"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2448 --field-trial-handle=2412,i,14578733095005110323,16163136755117033568,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://mail.findmy-ld.help/icloud-archivos/code2022esp.php	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.google.com	172.217.16.196	true	false	unknown
mail.findmy-ld.help	50.6.138.164	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
http://mail.findmy-ld.help/icloud-archivos/myriad-set-pro_thin.woff	false	unknown
http://mail.findmy-ld.help/sep.png	false	unknown
http://mail.findmy-ld.help/icloud-archivos/code2022esp.php	true	unknown
http://mail.findmy-ld.help/icloud-archivos/fonts.css	false	unknown
http://mail.findmy-ld.help/icloud-archivos/app.css	false	unknown
http://mail.findmy-ld.help/icloud-archivos/myriad-set-pro_text.woff	false	unknown
http://mail.findmy-ld.help/icloud-archivos/myriad-set-pro_thin.ttf	false	unknown
http://mail.findmy-ld.help/favicon.ico	false	unknown
http://mail.findmy-ld.help/icloud-archivos/myriad-set-pro_text.ttf	false	unknown
http://mail.findmy-ld.help/icloud-archivos/style.css	false	unknown
http://mail.findmy-ld.help/assets/img/ajax-loader.gif	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
50.6.138.164	mail.findmy-ld.help	United States	46606	UNIFIEDLAYER-AS-1US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.16.196	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.8
192.168.2.7
192.168.2.9
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1532678
Start date and time:	2024-10-13 20:10:05 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 19s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://mail.findmy-ld.help/icloud-archivos/code2022esp.php
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@16/29@6/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.227, 64.233.184.84, 142.250.184.238, 34.104.35.123, 216.58.206.42, 142.250.74.202, 142.250.186.138, 172.217.16.138, 142.250.185.106, 142.250.184.234, 142.250.186.74, 216.58.212.138, 142.250.185.234, 216.58.212.170, 142.250.185.202, 142.250.185.170, 142.250.185.74, 142.250.186.42, 142.250.185.138, 142.250.181.234, 192.229.221.95, 13.85.23.206, 52.165.164.15, 142.250.186.99
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, ajax.googleapis.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://mail.findmy-ld.help/icloud-archivos/code2022esp.php

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: http://mail.findmy-ld.help/icloud-archivos/code2022esp.php Model: gemini-1.5-flash	{ "text": "Ingrese el cdigo de desbloqueo del dispositivo Ingrese su cdigo de desbloqueo para ver la ubicacion actual de tus dispositivos", "contains_trigger_text": false, "trigger_text": "", "prominent_button_name": "", "text_input_field_labels": ["cdigo de desbloqueo del dispositivo", "cdigo de desbloqueo"], "pdf_icon_visible": false, "has_visible_qrcode": false, "has_visible_captcha": false, "has_urgent_text": false}

URL: http://mail.findmy-ld.help/icloud-archivos/code2022esp.php Model: jbxai	{ "brands":[], "text":"Ingresar el cdigo de desbloqueo del dispositivo", "contains_trigger_text":true, "trigger_text":"Ingresar el cdigo de desbloqueo del dispositivo", "prominent_button_name":"Ingresar el cdigo de desbloqueo del dispositivo", "text_input_field_labels":["Globi"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://mail.findmy-ld.help/icloud-archivos/code2022esp.php Model: gemini-1.5-flash	{ "brands": []}
	{ "brands": []}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 17:11:05 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.977667416428102
Encrypted:	false
SSDEEP:	48:8tvdsTYeHFidAKZdA1P4ehwiZUklqehBy+3:880YOey
MD5:	55BEA4FACE4A47F692F785C165A2A9C4
SHA1:	F79D88559A9B9503ABA706A27C68363E85D9D53B
SHA-256:	C4AA2ECF454197AF4A320FEF7678DA76ADB1F1A5A309695F4F570F4B48F04659
SHA-512:	C507B3B6B85EF5FCFCEE24EBCBD43006717E75AD482BD34C3F074EC33CB6A3E6892295DD5D80D0851A007AD988AAF8E87CD82605E25EA5A198885D75C881E409
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....7.KE......v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IMY`.....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMY`.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VMY`.....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VMY`..............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VMYc............................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............w.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 17:11:05 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.993253619242295
Encrypted:	false
SSDEEP:	48:8yvdsTYeHFidAKZdA1+4eh/iZUkAQkqehOy+2:8j0ZF9Qny
MD5:	11E892BC2C9604AD4B7AA8DAF9AF2D72
SHA1:	ED61221F4E330C61572B9119242681226743582C
SHA-256:	F6CBB8FD246E5F8EB45A62E783FC4623DEF89B1607FE4689CBFC04DD06D99EEB
SHA-512:	9E950F5402D9DBFAA8C4A312BAB002EA3C805051829F3A738BA6D5CF36D8D44365A433C6FA0003EAC7EC9B519E192DCA9AFCCCDD38DA09616AC12E2BFE290453
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......=E......v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IMY`.....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMY`.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VMY`.....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VMY`..............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VMYc............................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............w.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:56:51 2023, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.004456716091116
Encrypted:	false
SSDEEP:	48:8YdsTYVHFidAKZdA1404eh7sFiZUkmgqeh7scy+BX:8v0xInay
MD5:	4D49A6222EC78176A5C08DD4B238342E
SHA1:	D2831624C7FBC9FBE7A54D668E9401CF0A5B862A
SHA-256:	82DA4F5DD5B12B94E0F649DB7FDA862B15961A0A442B45C09AA9577CF78CA688
SHA-512:	BC80D4FB1779CEFE60BB674624519E79BB20BACC5F12C4D3F66E2B2871C3B36E2AA323565632D1460B8B6AB1C78D6E3DEFBAD631B1C6400FB0187A1A7A89138F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....<}.i.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IMY`.....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMY`.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VMY`.....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VMY`..............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VEW.F...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............w.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 17:11:05 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9915542145451
Encrypted:	false
SSDEEP:	48:8avdsTYeHFidAKZdA1p4ehDiZUkwqehCy+R:8L0O5Ey
MD5:	CA458492E58B51D4CFC755F4AB501D0B
SHA1:	BAE21AA5C741F0DEBAC7D4838D536F77EAD5BCC1
SHA-256:	25580A78DBC82B8577642A64AA0198C553AAD452D837F9A1B235ECBECEE9421F
SHA-512:	CFA58B52F5676FF00B9B5CA51587394E7CCA60369929037BF21AD36D4FDEEC05F7ACF8D7E9A75CCB80CCB6167A9A9793F2D0E2A701B52FB42CCD5DF1E956C138
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....57E......v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IMY`.....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMY`.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VMY`.....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VMY`..............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VMYc............................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............w.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 17:11:05 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.979315853775832
Encrypted:	false
SSDEEP:	48:8evdsTYeHFidAKZdA1X4ehBiZUk1W1qehoy+C:8/0gb9Iy
MD5:	474B1186053FD1F1273AF5A093C7A911
SHA1:	C92DB2EA7A927C9F21485AF6AD74DBA115C81E7C
SHA-256:	B16374DB636FB08A2BB8BC6DB419672EB11416F8DC578D7414CBDF62CD2F5D74
SHA-512:	73DC3CB59B99C1F09DF089137B50ED432491C2CEAA44FB2936776920FA5B609E4B15CB2C6727959AD0B9C847604181AA9CDF8B4FAD3E1A44B6FA0C445DC0DCD0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....}.EE......v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IMY`.....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMY`.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VMY`.....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VMY`..............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VMYc............................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............w.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 17:11:05 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9882295404438275
Encrypted:	false
SSDEEP:	48:8XvdsTYeHFidAKZdA1duTc4ehOuTbbiZUk5OjqehOuTbay+yT+:8+0dTcJTbxWOvTbay7T
MD5:	7F8526316E4D4B62E6011B7FC4AE499B
SHA1:	0FCE798FA0BEC2B8884FEF3DCF95D9161CD87129
SHA-256:	9F2F8664F44556557FCB9EAAE3C9176305AB95A19DDCDD0BDDCB878E3279A8B3
SHA-512:	5626B7858082222886C0BD7898A10EFC5B68006193E131E011428AD93DD247DDE653BC187F7CDF674749C6FA6A2CA95089FE361342A2B56F53FE4BFD556CB348
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......+E......v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IMY`.....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMY`.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VMY`.....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VMY`..............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VMYc............................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............w.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 11816
Category:	downloaded
Size (bytes):	4677
Entropy (8bit):	7.946065353100574
Encrypted:	false
SSDEEP:	96:bZ/NwFlux9fPOlplZDCxX44cnBn4PxuyjWe8zngjoNRc/YrdgN:bZ/CQZOLUcFleWJMUraYrdgN
MD5:	E6AAE2410885DF2F2629465B60A2691D
SHA1:	859D3D883FB8CA2AADEDF5753ABCD7ACCE922479
SHA-256:	A113D210F17827A95D9D1EEE68BF4E0AA8BD39D67DF1D9420FF5E9C0F49B1D48
SHA-512:	77CFA85A05295F3E1D239AE09D6EC80B7D038A0466276B7D5586E614035BABFAA7FAC4B965643EF18C38648ED68BACBFB510BCF06AC578BCFE2C11F7892544AD
Malicious:	false
Reputation:	low
URL:	http://mail.findmy-ld.help/icloud-archivos/myriad-set-pro_thin.woff
Preview:	...........Rms......sg...J&av.......$...Nm.Rm.H.I...n..M...=._c.pw...~y...........3(\.........G...(z}.......[8....32qQt.....j.E..l0;.....h.Q....o.A....q...K......./^..z..P....P.`..1P.P...%J^Vy..g::<.s.}........k9=.v.].....I.v.s8w..>....;.]........N......p..3x.y......v...G......e...).e.,...v.&FV..I...Jq....M3H.......hp8(...a{.8jo..t..EI......6.....q^..>.Y.Z...Q.....H.].rBis_.4.:...Jar..!c...(.j...):....{{.d!5........D.h4..+....k5.y...U...D$w..Z.}Y....QO.,..5..I>.i6...<..]2X.pCM.....e^...Wh.2...\|~..l'....\|..v,.....sT.Wd....G.'.8R.....F......O.......E..>.......8....V..?\....~..[..K..J.z.....p...=4.LB)..Y....y..u.F......M.........Y.....b....;...C..d.5.[.&TW...Rd.{/_..l..y.o...Y'.+....G.;G.....\...?z..JL.9..~"...P..,E....O.$.}..(..O.W...<...2X!.SS..Q..rx......O....x."..#.D.J...M...A.P.!3-.u.H.2..6....?.....<g...R.;1<.]..........9....G..$.Vp...0s.B.Q.=.f.%a..fQmB<.q..MZq..0&....V....k....I&;..A...}m.D3.q..Icy+!Ef.}.~...`.i....../~].B......&.

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 4391
Category:	downloaded
Size (bytes):	478
Entropy (8bit):	7.513782066941152
Encrypted:	false
SSDEEP:	12:XviJMf980VmeqMMTTaFboWdrMdMUExD6//CM14r0:XvDlrVmGMOboWOM4Ir0
MD5:	C746FC3127CFA3EB80C0B4E37C0A3809
SHA1:	C236B3E78037531CC16970D3FDD3755E629CA7E7
SHA-256:	05D139E2C2F90C5F47DCFE620F12235F292FB9BFED7CA69DF83E400C808D2EC7
SHA-512:	26CFDAFEB59886EEFA24D98740C0EC2C03945D6A63EF3C3E91E2269F8BE8DC1920FDD4B8D05972F99705C75E0B6B6B9E08135AC696E3F80408EB071EF89C02D5
Malicious:	false
Reputation:	low
URL:	http://mail.findmy-ld.help/icloud-archivos/fonts.css
Preview:	...........ON.@...../lh.ik.n4.\....f..;q`..J.Wp.Q....^A...I.........o..P...Gxj...t.^.....Hp..{Z>....REL.f..o.4....D+.,..D..x}.\|{q;..P....Q...H^....y.{.a.t .7R.Y.+.D....Hi.N'.x...2.2..@....h4..@....&.4\.T.T.0....0._.0A..>......X..Sw ..M.~..:.I......Qo....*.....sKz.2..]k..s....G.g.`3.1..y.a.=...a.....2.H....I...?..`..@.$X..J.n.?q~U.........I...N5...,'&..-..r]=..p38C..-).".J.v.Eq~Y.......:E....D91..m............<..W!.J.f.9q~Q.0.pm.....n!X..2.H.k....n..'...

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	4.332758651241789
Encrypted:	false
SSDEEP:	3:O2PRk5xCunnVKekY:OEkLCokY
MD5:	4C73EF2C5836B2524CF0DCF05C5A5E1E
SHA1:	A3C11721A416039DDF8328DBC0C24C270F75C3AB
SHA-256:	462CCC2B7B8048DBE77886E203959F49B02EDA47C9AF39F22BFD649D219A44F1
SHA-512:	DF21A0EA934263545DDF076D2BB84A76FA6906BAD1EC5A8D2DD268E62E2A69827107FF0B7F09CF96879B5FE8A23502F53934B7FF72228537BB4EBCCFC835241D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSJQnQPpg0N1NiLhIFDYJGpz8SBQ0Dp5DTEgUNaenAthIFDUGn_58=?alt=proto
Preview:	CiQKBw2CRqc/GgAKBw0Dp5DTGgAKBw1p6cC2GgAKBw1Bp/+fGgA=

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 82736
Category:	downloaded
Size (bytes):	19063
Entropy (8bit):	7.980853600738599
Encrypted:	false
SSDEEP:	384:TvfIAy2mTqa+D3MxbWlu/3hCih2NmFnO6y6yhIybA0geonVx5WPrxXF:DLy2mTj+D3Bls3hC1NSWk0gR5yxXF
MD5:	A9C38D6EA5B19E01F836A181355F8EAC
SHA1:	48DB47805747E2F2D49C3B532331C2F77975929B
SHA-256:	3DF622AAD9A8AD1F0A5E5AE96E980DC14363DB3A47315D7806D46C6B0FE2D209
SHA-512:	748956F252133CCF57B04799894D1ED61433A4B9476E87BF0D9B512563248D5C150939DAB18FFC4F7522887EF1A2199C5284568BC09E349D56045A22AE1DAD21
Malicious:	false
Reputation:	low
URL:	http://mail.findmy-ld.help/icloud-archivos/app.css
Preview:	.............-.;.).H..A...D.T.<u.?.6.s...r..J.$.)R ..#.y.}6).,.vD.9...as....{..<...w...e.d.%.4..i.X....52.`.f..a..6q...'[..d..$....$/vB.U.D....+.RN.?`...G........S\.&..\+(fR...?......d]=~(1.TIE..A......M..K.....+.a...t.......R,.1...........^.......gjuc.0g9,.`M-.D..i...pN%.....&.......N.`.P...%......9...n/.J%.......0.,.p.g{.. ...X...'..f....#....i.,......LIc .....1'.V."y.!.8..y.0..8Q.EtBD.`N./^ fOkZ...q..3.>f....}?.a..%...y.N.Vu]...+.Z...]%5....E..p.kV..FVq......m........t...........b....A....X^+...f..l.V..a>.-...........q.... \...$..]B.-.....3\2.q,.....>.>~..9j7Nj..x..DU....2...x)...q?...uk...U....cZ<....L.....f....!...T.....-L.....y...M..{.A.......\|/...AhO..3.W..0/..4T6..v.J2pHy....1.'.{R...Hm7..........e2.5bBP.....RxWaB\h.....YG]t.......;-h.........9.X6c.T..m.E]&T.....1.r.+&P/V...6..........VZL{h..1...R)....l5.y....r..]&{.M..5..I<f...^G.!.3.\|LC..{.X.L.....{2[.h..=.....4..\....V.[.\|.*.r.]V&W..l9.....1....6..!(...JS{...cMW8.g....

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel
Category:	downloaded
Size (bytes):	9062
Entropy (8bit):	3.284224550667547
Encrypted:	false
SSDEEP:	48:z87CC6NTQ8Om4F/POAVpSVyvFElSfwa89A4:ACC6NTEmAGAVcLSfwa8N
MD5:	28EC4EABA5AE210B98A11257CAF5BADE
SHA1:	6164148A39D6A27286641896FCE3B76F439AEAB1
SHA-256:	3F5086612AAE9363C9FB02949219CEF19854C18FE5AD4EDA78AA1AEFCC79CC71
SHA-512:	4EFB48689296863D6E05B3CF32F8F98AC57A2BDEAE09209735170DD7F1C70E22A9BD2FBE93FCCB7181B8C1B6DFE555AF548129EF7B8705ED50486A972815868E
Malicious:	false
Reputation:	low
URL:	http://mail.findmy-ld.help/favicon.ico
Preview:	...... ..........F...........h....... .... .....V......... .h.......(... ...@...............................BBB.....rrr.....ZZZ.............NNN.~~~.fff.................JJJ.....zzz.bbb.VVV.....nnn.........FFF.....vvv.....^^^.............RRR.....jjj...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 382 x 50, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1240
Entropy (8bit):	7.76387952763145
Encrypted:	false
SSDEEP:	24:6wss9YhvQELfVIWf1W9jKNhW0i9i3rhrk58hsUY:6wss9OFLfOWsqWbidrkaA
MD5:	AFE4BC3227B4889FC78A8181E014A931
SHA1:	E3FF6C0083FBEDED76E33ACE08BACAC04E7AD35B
SHA-256:	E39F78E3FD9428C8AD22060046D9CC07D65CF9FA784A16A3925B9ACB52F35C3D
SHA-512:	59A92FDEE85A7E47A8D2D0CF757BFFAD15187F5095F74E87CCD3074EB6FA9A18E3286ABD27919135C534A07E3BA350C6BCDDF974B77FE2D58AB5510964DAE8BB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...~...2........l....pHYs...........~.....PLTE....................tRNS....9.qb...^IDATh..Y..0..:.....u.._.Y#.....8.A...X.5....95.b..j.f.?...../V..?.:..'.gL.#..o.^S)%'y.....h.u....x...]].w.Qu.......V..u.7.K.U......b...W#.y.@.1. .r..\|-..Z.%.\|.....F$........k....-.......J. .h.{.....5@..5....L........\|D@...2..........(....\.......O..W.+...:...QB.4..../ ?K..(..x.....+ ..=....)...r.../...P...;....UX..-..t.&.T.....HD.[.aA.0.gz..F^...@OS.......vk,4...V~.A..c0. .;..j...o. A...(..........?:.R8...\|.Em..\|.~.......S......R.!.MBk..i..>\|.\|.@....h....=J.c..-.......?.?..9...h...:...K.19..Pm..F..$...4..%.) ....0<n....Y.....$z..2^....u....E.T;..q..d.P.j..yQ.,.U..y.......dDm.`!..n.l..T..x?.....TC[.i.$.:.MC.......m.....`.W...Qc..t.Zf....k.z%...., .2.0...:3...{.6J........X..mDXiv.?..!p.{....46u......W=..k.y..LB...._.9....{1>...F.h.q....~z4.=:..{.7.o:.1..>.1..=..}+<<......Y'......,..P.....k..$...$.J"V.#.......f..{.....[.#.....WN.I.W...t....E.p..

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 382 x 50, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1240
Entropy (8bit):	7.76387952763145
Encrypted:	false
SSDEEP:	24:6wss9YhvQELfVIWf1W9jKNhW0i9i3rhrk58hsUY:6wss9OFLfOWsqWbidrkaA
MD5:	AFE4BC3227B4889FC78A8181E014A931
SHA1:	E3FF6C0083FBEDED76E33ACE08BACAC04E7AD35B
SHA-256:	E39F78E3FD9428C8AD22060046D9CC07D65CF9FA784A16A3925B9ACB52F35C3D
SHA-512:	59A92FDEE85A7E47A8D2D0CF757BFFAD15187F5095F74E87CCD3074EB6FA9A18E3286ABD27919135C534A07E3BA350C6BCDDF974B77FE2D58AB5510964DAE8BB
Malicious:	false
Reputation:	low
URL:	http://mail.findmy-ld.help/sep.png
Preview:	.PNG........IHDR...~...2........l....pHYs...........~.....PLTE....................tRNS....9.qb...^IDATh..Y..0..:.....u.._.Y#.....8.A...X.5....95.b..j.f.?...../V..?.:..'.gL.#..o.^S)%'y.....h.u....x...]].w.Qu.......V..u.7.K.U......b...W#.y.@.1. .r..\|-..Z.%.\|.....F$........k....-.......J. .h.{.....5@..5....L........\|D@...2..........(....\.......O..W.+...:...QB.4..../ ?K..(..x.....+ ..=....)...r.../...P...;....UX..-..t.&.T.....HD.[.aA.0.gz..F^...@OS.......vk,4...V~.A..c0. .;..j...o. A...(..........?:.R8...\|.Em..\|.~.......S......R.!.MBk..i..>\|.\|.@....h....=J.c..-.......?.?..9...h...:...K.19..Pm..F..$...4..%.) ....0<n....Y.....$z..2^....u....E.T;..q..d.P.j..yQ.,.U..y.......dDm.`!..n.l..T..x?.....TC[.i.$.:.MC.......m.....`.W...Qc..t.Zf....k.z%...., .2.0...:3...{.6J........X..mDXiv.?..!p.{....46u......W=..k.y..LB...._.9....{1>...F.h.q....~z4.=:..{.7.o:.1..>.1..=..}+<<......Y'......,..P.....k..$...$.J"V.#.......f..{.....[.#.....WN.I.W...t....E.p..

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 32 x 32
Category:	downloaded
Size (bytes):	4178
Entropy (8bit):	7.491119873175258
Encrypted:	false
SSDEEP:	48:3je4MHZKDtbvGOFkYajWVOwD2W4UYX084HY4zHdwU4zeoAF5R4JTp3uV04gBFy8g:3je4XtDlqWdWvfWJXPF5RcdU0dsmuS
MD5:	20295FD727FBC02635F3D8C947E54556
SHA1:	DE01015DB36A6330D4E0854A69555A5E3F3556C7
SHA-256:	93C99B1A62BDEF426C6029D8EEAA796AF079BD0B67C7BD67FDA444E8AFB6F562
SHA-512:	495A1766EC0560E31689C449AF356BDB88CD862784D9B4C7E2E3AD1E4345ED2EAE434FC15B3ECEAC04397E49C21AC52096B1434B465AB8D8A2DF2F0129820CF4
Malicious:	false
Reputation:	low
URL:	http://mail.findmy-ld.help/assets/img/ajax-loader.gif
Preview:	GIF89a . .........................~~~................................>>>VVV```\|\|\|......JJJlll...............,,,^^^...LLL.................................................................................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,.... . ....@.pH$.8.Gq.$N..A.3(..L....V....K\|P(...:.(..r.B.._@X!/...BxBnb}E.g....o.r..E.g..^..oWD.c.....JC.g......oqm.o..........E.....{p~....r...D....}.M....d......K......r.........o....\|........].q...` 9C.f).$'.=..}.C.^.u..-.H..!.............O.K"1......5.&{j.T. .BBo..e...6..<...@.B?..1..)..G.b.K... .!.......,.... . ....@.pH$&4.Bq.$..D..b(.......V....[4.._..:.t:"r.qh@..a..)..g.Bk_.o..E.g~.....#r.JD.g.xl.oWF.C....~mg......o.D.....B.....w...K.!.......C........wE... ..d....X.............r................s'...xM.&T$$..\|M...C.... .A...Bl..d....K.d.V..?oFl-X. .L[.J*....6..!."...5\@....p..oI..m...N!Q.Xm..@..%2u:uH2.\.R.#.a..!.......,.... . ....@.pH$...Bq.$&.D...(..L....V....[$.....:4P(.r.s..._...I..g.BxB.o..E g.w^

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 404
Category:	downloaded
Size (bytes):	286
Entropy (8bit):	7.202571665522594
Encrypted:	false
SSDEEP:	6:XtbfW388Hmx9tyIo+q/tJcOiPaaPiSSso3k2XVHM4kll:XtWM8QrOp/IO4Do3k2XVVk/
MD5:	CB5A7254A701EDBA03B1AC2B4F5E4313
SHA1:	2C08907B89A2E04EBBDCC50FC99944B55C0F8CD0
SHA-256:	839909B0ED20B10587DC1034CFDF4A78215DA3E0B5C7674AEE2FDE3F1EFB8E39
SHA-512:	5B961F8E160E814786EB55BB856C14A5546B03F5D77AB78961753A4DF6C74E9EB61B501AE83D12944E33ED5C6C9066F16792829DA7E5F8AA5AEA8B91B8C56CB1
Malicious:	false
Reputation:	low
URL:	http://mail.findmy-ld.help/icloud-archivos/style.css
Preview:	..........UP.j. ...).1X!.m.v.^t.a.M..*..c..l..<.\|?.)..B..~.Vw.}.woX.\H.>../.s.H.#d.^R...Ud...y...tB...5K.#...M,i..Q.&...=..6.\|/.....E.)...o..xm.Q..Q.>.....A.0I....T,.=....b..U.Q....g....lxu.."..3.,..nYs.d;g......>...7vF..2..n..fD.1.nub...d.....\|.7p.....S.~.........

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 32 x 32
Category:	dropped
Size (bytes):	4178
Entropy (8bit):	7.491119873175258
Encrypted:	false
SSDEEP:	48:3je4MHZKDtbvGOFkYajWVOwD2W4UYX084HY4zHdwU4zeoAF5R4JTp3uV04gBFy8g:3je4XtDlqWdWvfWJXPF5RcdU0dsmuS
MD5:	20295FD727FBC02635F3D8C947E54556
SHA1:	DE01015DB36A6330D4E0854A69555A5E3F3556C7
SHA-256:	93C99B1A62BDEF426C6029D8EEAA796AF079BD0B67C7BD67FDA444E8AFB6F562
SHA-512:	495A1766EC0560E31689C449AF356BDB88CD862784D9B4C7E2E3AD1E4345ED2EAE434FC15B3ECEAC04397E49C21AC52096B1434B465AB8D8A2DF2F0129820CF4
Malicious:	false
Reputation:	low
Preview:	GIF89a . .........................~~~................................>>>VVV```\|\|\|......JJJlll...............,,,^^^...LLL.................................................................................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,.... . ....@.pH$.8.Gq.$N..A.3(..L....V....K\|P(...:.(..r.B.._@X!/...BxBnb}E.g....o.r..E.g..^..oWD.c.....JC.g......oqm.o..........E.....{p~....r...D....}.M....d......K......r.........o....\|........].q...` 9C.f).$'.=..}.C.^.u..-.H..!.............O.K"1......5.&{j.T. .BBo..e...6..<...@.B?..1..)..G.b.K... .!.......,.... . ....@.pH$&4.Bq.$..D..b(.......V....[4.._..:.t:"r.qh@..a..)..g.Bk_.o..E.g~.....#r.JD.g.xl.oWF.C....~mg......o.D.....B.....w...K.!.......C........wE... ..d....X.............r................s'...xM.&T$$..\|M...C.... .A...Bl..d....K.d.V..?oFl-X. .L[.J*....6..!."...5\@....p..oI..m...N!Q.Xm..@..%2u:uH2.\.R.#.a..!.......,.... . ....@.pH$...Bq.$&.D...(..L....V....[$.....:4P(.r.s..._...I..g.BxB.o..E g.w^

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 9582
Category:	downloaded
Size (bytes):	2876
Entropy (8bit):	7.927258942534974
Encrypted:	false
SSDEEP:	48:XUmcQDWwu+f3LHWw21Sf1qLohQp8X6g68ul7P7wYC0i3ANJJosIvpdc7U:1DWI/K1SootX6NXNVBQANBom7U
MD5:	68FFFDE2F5C5F5A23A790089EA17A4DA
SHA1:	FA076FAB236C3FE2A0992596318FB2D4E5343752
SHA-256:	3065955F7F491320703127A0FED2F0C13EFB3C27B701F2211BDE5F0DC5C5D8B5
SHA-512:	2EB902449AF92BB53B4D8AAEE3F59612D29D9C668073439C62416C8A44124FBB8E005C9EEDD4F79294371A06C2ABF6C5FCAE42AF9B96BD24B505F946F39CC762
Malicious:	false
Reputation:	low
URL:	http://mail.findmy-ld.help/icloud-archivos/code2022esp.php
Preview:	...........Ras.6..._.0....I.r....I.....&.unn...X.H@..@...O...c..).....d.sG{Db.....7......?~<".+$.....$.....a.>=yJ~8y..&..rb......L..E$.+..t.X$.a..,=y.z..Tjm!.G..8&.........z.......6..I].."V6.lJ...>H.=..R.9$e^.8F@.c<....G....C%.Yt.....e..a.)....@.....{s.,~...>..S..,..X....Bp.g..A....P....eTB6.O.z*..X......=1 ..40..rb.R....G..,J.)....6"..7....N..B.)...)...5:-..BI......Z.Q..4.F.w...h..._\....Z. b.$..;.B.!.W<.....<...E.SGc........ !....A.p.<.z.I.>.3.:......j.....(..G\...Va.........+.>E\|.o.vIl..>....<..F(......b.\............q..2....!}).H....FV....9.#..............9.+.c.3(....8.fQ<.H.F.M1=..#......LKm...>......9V3T..H.>...7....D.....$\.R[..\...\|0...V..w`H..\......Gx_..!.HP3.....y8....gr..Z...S.E5qz.x.X0...O.b......1A`.......c...........D(....t.K..mM=.5...q...K.P::.....Y.S{......O...p...)u..OL+.c&..../............a}.u.a.S..fU..}..3..T..E......W._.G.....bk_.C...&.@..\|3.f...G....x.;"T..{........"........poogg/......"...].o.p..[.......

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel
Category:	dropped
Size (bytes):	9062
Entropy (8bit):	3.284224550667547
Encrypted:	false
SSDEEP:	48:z87CC6NTQ8Om4F/POAVpSVyvFElSfwa89A4:ACC6NTEmAGAVcLSfwa8N
MD5:	28EC4EABA5AE210B98A11257CAF5BADE
SHA1:	6164148A39D6A27286641896FCE3B76F439AEAB1
SHA-256:	3F5086612AAE9363C9FB02949219CEF19854C18FE5AD4EDA78AA1AEFCC79CC71
SHA-512:	4EFB48689296863D6E05B3CF32F8F98AC57A2BDEAE09209735170DD7F1C70E22A9BD2FBE93FCCB7181B8C1B6DFE555AF548129EF7B8705ED50486A972815868E
Malicious:	false
Reputation:	low
Preview:	...... ..........F...........h....... .... .....V......... .h.......(... ...@...............................BBB.....rrr.....ZZZ.............NNN.~~~.fff.................JJJ.....zzz.bbb.VVV.....nnn.........FFF.....vvv.....^^^.............RRR.....jjj...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	75266
Entropy (8bit):	5.288579016625548
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiXw:DIh8GgP3hujzwbhdl
MD5:	22AAAB0670349C50184F352A88CEE1DC
SHA1:	36467E2CAE71F7B1C5C5DD4F7ADA92931511E547
SHA-256:	30ED2E13A49A7DCC10032F0C55FFE7D1CC146576EB92A78938241D87606B8FD5
SHA-512:	7AAA7F5EDC8B1911072A1A5B495C5D39BD72BF1D0EF9F8FA2BCF5D03001A3A08F0CF9BBA3B13D20B2454E493C6E4B6D0D4B915265144ABED45CDE1FF2FA23F77
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Static File Info

⊘No static file info

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-13T20:11:06.573755+0200	2018334	ET PHISHING Possible Phish - Saved Website Comment Observed	2	50.6.138.164	80	192.168.2.9	49748	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 13, 2024 20:10:54.905119896 CEST	49677	443	192.168.2.9	20.189.173.11
Oct 13, 2024 20:10:55.326946974 CEST	49676	443	192.168.2.9	23.206.229.209
Oct 13, 2024 20:10:55.327115059 CEST	49675	443	192.168.2.9	23.206.229.209
Oct 13, 2024 20:10:55.545659065 CEST	49674	443	192.168.2.9	23.206.229.209
Oct 13, 2024 20:10:55.903089046 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:55.903119087 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:55.903358936 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:55.903548956 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:55.903564930 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.571650982 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.571846962 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.578198910 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.578212976 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.578490019 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.592276096 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.635407925 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.693836927 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.693862915 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.693878889 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.693947077 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.693947077 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.693979025 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.694036961 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.784076929 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.784100056 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.784159899 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.784197092 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.784215927 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.784238100 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.787866116 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.787889957 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.787935019 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.787957907 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.787970066 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.788000107 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.902405024 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.902431011 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.902520895 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.902553082 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.902601957 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.905235052 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.905251026 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.905316114 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.905340910 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.905355930 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.905381918 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.907179117 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.907198906 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.907244921 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.907258987 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.907284975 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.907301903 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.909146070 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.909172058 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.909229994 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.909251928 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.909272909 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.909287930 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.993135929 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.993165970 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.993304014 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.993336916 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.993390083 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.994899988 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.994927883 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.994978905 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.994985104 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.995033979 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.997805119 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.997831106 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.997911930 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.997919083 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.997948885 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.997972965 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.999542952 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.999560118 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.999614000 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.999619961 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:56.999665022 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:56.999696970 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.083513021 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.083544970 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.083667040 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.083709955 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.083759069 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.085721016 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.085741043 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.085804939 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.085829973 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.085870028 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.086554050 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.086620092 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.086628914 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.086674929 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.087136984 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.087155104 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.087167978 CEST	49706	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.087173939 CEST	443	49706	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.132831097 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.132880926 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.132970095 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.139492035 CEST	49708	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.139532089 CEST	443	49708	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.139596939 CEST	49708	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.140141010 CEST	49709	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.140194893 CEST	443	49709	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.140292883 CEST	49709	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.141077042 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.141094923 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.143039942 CEST	49710	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.143074036 CEST	443	49710	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.143148899 CEST	49710	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.143366098 CEST	49708	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.143393040 CEST	443	49708	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.143631935 CEST	49710	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.143647909 CEST	443	49710	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.143790007 CEST	49709	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.143801928 CEST	443	49709	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.144896984 CEST	49711	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.144922972 CEST	443	49711	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.144993067 CEST	49711	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.145201921 CEST	49711	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.145209074 CEST	443	49711	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.816170931 CEST	443	49711	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.819026947 CEST	443	49708	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.823448896 CEST	443	49709	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.827923059 CEST	49711	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.827939987 CEST	443	49711	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.828782082 CEST	49711	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.828792095 CEST	443	49711	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.829056025 CEST	49708	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.829068899 CEST	443	49708	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.829431057 CEST	49708	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.829438925 CEST	443	49708	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.829627991 CEST	49709	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.829648018 CEST	443	49709	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.830674887 CEST	49709	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.830682993 CEST	443	49709	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.836308002 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.837102890 CEST	443	49710	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.837388992 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.837408066 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.838610888 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.838623047 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.839040995 CEST	49710	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.839050055 CEST	443	49710	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:57.839881897 CEST	49710	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:57.839888096 CEST	443	49710	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.057287931 CEST	443	49709	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.057301998 CEST	443	49711	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.057315111 CEST	443	49709	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.057327032 CEST	443	49708	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.057328939 CEST	443	49711	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.057370901 CEST	443	49709	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.057379007 CEST	443	49711	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.057394028 CEST	443	49708	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.057426929 CEST	49709	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.057506084 CEST	49709	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.057509899 CEST	49711	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.061908960 CEST	49708	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.147094965 CEST	49709	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.147115946 CEST	443	49709	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.147130966 CEST	49709	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.147139072 CEST	443	49709	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.148200989 CEST	49711	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.148221970 CEST	443	49711	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.148967028 CEST	49708	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.148972988 CEST	443	49708	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.148982048 CEST	49708	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.148988962 CEST	443	49708	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.151685953 CEST	49712	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.151730061 CEST	443	49712	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.151827097 CEST	49712	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.151968002 CEST	49712	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.151978970 CEST	443	49712	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.152077913 CEST	49713	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.152124882 CEST	443	49713	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.152175903 CEST	49713	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.152303934 CEST	49713	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.152317047 CEST	443	49713	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.152335882 CEST	49714	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.152343988 CEST	443	49714	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.152385950 CEST	49714	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.152462006 CEST	49714	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.152471066 CEST	443	49714	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.154463053 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.154490948 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.154546976 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.154577017 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.154699087 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.154699087 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.154699087 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.154709101 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.154829979 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.154859066 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.156721115 CEST	49715	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.156734943 CEST	443	49715	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.156800032 CEST	49715	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.156917095 CEST	49715	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.156925917 CEST	443	49715	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.159106016 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.163197994 CEST	443	49710	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.163254976 CEST	443	49710	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.163322926 CEST	49710	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.163460970 CEST	49710	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.163466930 CEST	443	49710	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.163480043 CEST	49710	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.163484097 CEST	443	49710	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.165317059 CEST	49716	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.165349007 CEST	443	49716	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.165461063 CEST	49716	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.165579081 CEST	49716	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.165587902 CEST	443	49716	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.842427015 CEST	443	49714	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.842515945 CEST	443	49713	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.845448971 CEST	443	49712	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.864778042 CEST	443	49715	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.870857000 CEST	443	49716	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:58.889442921 CEST	49714	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.889448881 CEST	49712	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.889442921 CEST	49713	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.905066013 CEST	49715	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:58.920694113 CEST	49716	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:59.349322081 CEST	49716	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:59.349345922 CEST	443	49716	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:59.350285053 CEST	49716	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:59.350291014 CEST	443	49716	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:59.350857973 CEST	49714	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:59.350886106 CEST	443	49714	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:59.351739883 CEST	49714	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:59.351749897 CEST	443	49714	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:59.352298021 CEST	49713	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:59.352313042 CEST	443	49713	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:59.353144884 CEST	49713	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:59.353152037 CEST	443	49713	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:59.353714943 CEST	49712	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:59.353734016 CEST	443	49712	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:59.354406118 CEST	49712	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:59.354413986 CEST	443	49712	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:59.354921103 CEST	49715	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:59.354934931 CEST	443	49715	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:59.355792046 CEST	49715	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:59.355798006 CEST	443	49715	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:59.467730999 CEST	443	49714	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:59.467813969 CEST	443	49714	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:59.467910051 CEST	49714	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:59.468194962 CEST	443	49713	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:59.468285084 CEST	443	49713	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:59.468326092 CEST	443	49712	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:59.468333960 CEST	49713	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:59.468401909 CEST	443	49712	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:59.468450069 CEST	49712	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:59.470504999 CEST	443	49716	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:59.470576048 CEST	443	49716	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:59.470628977 CEST	49716	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:59.473345995 CEST	443	49715	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:59.473423958 CEST	443	49715	13.107.246.60	192.168.2.9
Oct 13, 2024 20:10:59.473491907 CEST	49715	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:10:59.717521906 CEST	49677	443	192.168.2.9	20.189.173.11
Oct 13, 2024 20:11:00.106209040 CEST	49714	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:00.106246948 CEST	443	49714	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:00.106260061 CEST	49714	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:00.106266975 CEST	443	49714	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:00.107659101 CEST	49715	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:00.107703924 CEST	443	49715	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:00.107719898 CEST	49715	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:00.107728004 CEST	443	49715	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:00.115319014 CEST	49713	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:00.115345955 CEST	443	49713	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:00.115360022 CEST	49713	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:00.115366936 CEST	443	49713	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:00.123250961 CEST	49712	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:00.123275995 CEST	443	49712	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:00.123287916 CEST	49712	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:00.123295069 CEST	443	49712	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:00.125252962 CEST	49716	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:00.125277042 CEST	443	49716	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:00.125291109 CEST	49716	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:00.125297070 CEST	443	49716	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:00.920718908 CEST	49673	443	192.168.2.9	204.79.197.203
Oct 13, 2024 20:11:01.712481022 CEST	49717	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:01.712537050 CEST	443	49717	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:01.712752104 CEST	49717	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:01.713367939 CEST	49718	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:01.713378906 CEST	443	49718	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:01.713706017 CEST	49718	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:01.714169025 CEST	49719	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:01.714225054 CEST	443	49719	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:01.714284897 CEST	49719	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:01.715305090 CEST	49720	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:01.715337992 CEST	443	49720	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:01.715398073 CEST	49720	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:01.715881109 CEST	49721	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:01.715929985 CEST	443	49721	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:01.715986013 CEST	49721	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:01.716202021 CEST	49717	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:01.716202021 CEST	49718	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:01.716226101 CEST	443	49717	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:01.716228008 CEST	443	49718	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:01.716296911 CEST	49721	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:01.716310978 CEST	443	49721	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:01.716342926 CEST	49719	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:01.716356993 CEST	443	49719	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:01.716730118 CEST	49720	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:01.716741085 CEST	443	49720	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.376215935 CEST	443	49719	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.379226923 CEST	443	49717	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.382220984 CEST	443	49721	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.396156073 CEST	443	49720	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.413841009 CEST	443	49718	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.420641899 CEST	49719	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.420736074 CEST	49717	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.424218893 CEST	49718	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.424237013 CEST	443	49718	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.424935102 CEST	49718	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.424941063 CEST	443	49718	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.425308943 CEST	49719	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.425332069 CEST	443	49719	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.425889969 CEST	49719	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.425895929 CEST	443	49719	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.426206112 CEST	49717	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.426211119 CEST	443	49717	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.426434994 CEST	49721	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.426449060 CEST	443	49721	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.426594019 CEST	49717	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.426608086 CEST	443	49717	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.426843882 CEST	49720	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.426863909 CEST	443	49720	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.427146912 CEST	49721	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.427151918 CEST	443	49721	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.427251101 CEST	49720	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.427258015 CEST	443	49720	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.522592068 CEST	443	49719	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.522677898 CEST	443	49719	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.522747040 CEST	49719	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.523849964 CEST	443	49717	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.523919106 CEST	443	49717	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.523963928 CEST	49717	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.525036097 CEST	443	49720	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.525202036 CEST	443	49720	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.525274038 CEST	49720	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.525434971 CEST	443	49721	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.525499105 CEST	443	49721	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.525557995 CEST	49721	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.526135921 CEST	443	49718	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.526194096 CEST	443	49718	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.526251078 CEST	49718	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.527278900 CEST	49719	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.527295113 CEST	443	49719	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.527307034 CEST	49719	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.527312994 CEST	443	49719	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.527479887 CEST	49718	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.527502060 CEST	443	49718	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.527513981 CEST	49718	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.527519941 CEST	443	49718	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.528192043 CEST	49717	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.528198004 CEST	443	49717	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.528214931 CEST	49717	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.528218031 CEST	443	49717	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.528913021 CEST	49720	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.528913021 CEST	49720	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.528938055 CEST	443	49720	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.528950930 CEST	443	49720	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.529294968 CEST	49721	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.529314995 CEST	443	49721	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.529326916 CEST	49721	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.529333115 CEST	443	49721	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.533559084 CEST	49722	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.533591986 CEST	443	49722	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.533652067 CEST	49722	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.534446955 CEST	49722	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.534460068 CEST	443	49722	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.536576986 CEST	49723	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.536604881 CEST	443	49723	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.536669016 CEST	49723	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.537053108 CEST	49724	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.537092924 CEST	443	49724	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.537153959 CEST	49724	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.537220955 CEST	49723	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.537235022 CEST	443	49723	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.538261890 CEST	49725	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.538305044 CEST	443	49725	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.538525105 CEST	49725	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.539212942 CEST	49726	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.539227009 CEST	443	49726	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.539335012 CEST	49726	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.539335966 CEST	49724	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.539351940 CEST	443	49724	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.539594889 CEST	49725	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.539634943 CEST	443	49725	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:02.539686918 CEST	49726	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:02.539697886 CEST	443	49726	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.188410997 CEST	443	49726	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.197237015 CEST	443	49723	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.204910040 CEST	443	49725	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.232929945 CEST	443	49722	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.233222008 CEST	49726	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:03.248816967 CEST	49725	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:03.249212027 CEST	49723	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:03.255183935 CEST	49726	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:03.255194902 CEST	443	49726	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.255419016 CEST	49723	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:03.255433083 CEST	443	49723	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.255812883 CEST	49726	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:03.255817890 CEST	443	49726	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.255949020 CEST	49723	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:03.255954027 CEST	443	49723	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.264285088 CEST	443	49724	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.265419006 CEST	49724	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:03.265450954 CEST	443	49724	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.266429901 CEST	49724	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:03.266436100 CEST	443	49724	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.280051947 CEST	49722	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:03.309585094 CEST	49725	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:03.309613943 CEST	443	49725	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.310235023 CEST	49725	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:03.310241938 CEST	443	49725	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.353202105 CEST	443	49726	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.353276014 CEST	443	49726	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.353358030 CEST	49726	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:03.354363918 CEST	443	49723	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.354434967 CEST	443	49723	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.355169058 CEST	49723	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:03.371083021 CEST	443	49724	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.371159077 CEST	443	49724	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.371294022 CEST	49724	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:03.409461975 CEST	443	49725	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.409609079 CEST	443	49725	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.409779072 CEST	49725	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:03.824477911 CEST	49722	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:03.824503899 CEST	443	49722	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.827851057 CEST	49722	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:03.827878952 CEST	443	49722	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.830358028 CEST	49725	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:03.830398083 CEST	443	49725	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.830409050 CEST	49725	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:03.830416918 CEST	443	49725	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.910433054 CEST	49726	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:03.910465002 CEST	443	49726	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.910515070 CEST	49726	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:03.910521984 CEST	443	49726	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.912386894 CEST	49723	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:03.912415981 CEST	443	49723	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.912548065 CEST	49723	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:03.912554979 CEST	443	49723	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.913798094 CEST	49724	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:03.913842916 CEST	443	49724	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.913861990 CEST	49724	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:03.913870096 CEST	443	49724	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.942034006 CEST	443	49722	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.942118883 CEST	443	49722	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:03.942204952 CEST	49722	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:04.046164036 CEST	49722	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:04.046204090 CEST	443	49722	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:04.047125101 CEST	49722	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:04.047136068 CEST	443	49722	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:04.054234028 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:04.054286003 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:04.054374933 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:04.132971048 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:04.133011103 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:04.305087090 CEST	49728	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:04.305143118 CEST	443	49728	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:04.305217981 CEST	49728	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:04.311898947 CEST	49729	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:04.311940908 CEST	443	49729	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:04.312001944 CEST	49729	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:04.350652933 CEST	49730	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:04.350702047 CEST	443	49730	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:04.350783110 CEST	49730	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:04.351202011 CEST	49728	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:04.351242065 CEST	443	49728	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:04.368690014 CEST	49729	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:04.368709087 CEST	443	49729	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:04.370137930 CEST	49731	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:04.370184898 CEST	443	49731	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:04.370249987 CEST	49731	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:04.370307922 CEST	49730	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:04.370320082 CEST	443	49730	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:04.370413065 CEST	49731	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:04.370426893 CEST	443	49731	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:04.822118044 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:04.822693110 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:04.822730064 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:04.823199034 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:04.823205948 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:04.934221983 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:04.934300900 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:04.934350014 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:04.934539080 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:04.934562922 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:04.934573889 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:04.934581995 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:04.937484980 CEST	49737	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:04.937530041 CEST	443	49737	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:04.937611103 CEST	49737	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:04.937849045 CEST	49737	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:04.937860012 CEST	443	49737	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.026609898 CEST	443	49729	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.027138948 CEST	49729	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.027163982 CEST	443	49729	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.027606964 CEST	49729	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.027616024 CEST	443	49729	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.030674934 CEST	443	49730	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.031091928 CEST	49730	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.031133890 CEST	443	49730	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.031507015 CEST	49730	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.031517029 CEST	443	49730	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.032598972 CEST	49676	443	192.168.2.9	23.206.229.209
Oct 13, 2024 20:11:05.032613993 CEST	49675	443	192.168.2.9	23.206.229.209
Oct 13, 2024 20:11:05.048461914 CEST	443	49731	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.048934937 CEST	49731	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.048959017 CEST	443	49731	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.049041986 CEST	443	49728	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.049474955 CEST	49728	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.049504042 CEST	443	49728	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.049648046 CEST	49731	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.049654007 CEST	443	49731	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.049984932 CEST	49728	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.049989939 CEST	443	49728	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.127449989 CEST	443	49729	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.127526045 CEST	443	49729	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.127588034 CEST	49729	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.127810001 CEST	49729	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.127810001 CEST	49729	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.127835989 CEST	443	49729	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.127849102 CEST	443	49729	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.130749941 CEST	49738	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.130796909 CEST	443	49738	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.130860090 CEST	443	49730	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.130876064 CEST	49738	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.130929947 CEST	443	49730	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.131014109 CEST	49730	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.131086111 CEST	49738	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.131100893 CEST	443	49738	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.131160975 CEST	49730	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.131180048 CEST	443	49730	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.131232977 CEST	49730	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.131242037 CEST	443	49730	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.133675098 CEST	49739	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.133708954 CEST	443	49739	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.133795023 CEST	49739	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.133933067 CEST	49739	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.133945942 CEST	443	49739	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.155837059 CEST	443	49728	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.155896902 CEST	443	49728	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.155946016 CEST	49728	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.156191111 CEST	49728	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.156210899 CEST	443	49728	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.156224012 CEST	49728	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.156229019 CEST	443	49728	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.159363031 CEST	49740	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.159471989 CEST	443	49740	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.159554958 CEST	49740	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.159709930 CEST	49740	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.159734011 CEST	443	49740	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.164376020 CEST	443	49731	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.164464951 CEST	443	49731	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.164524078 CEST	49731	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.164629936 CEST	49731	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.164639950 CEST	443	49731	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.164654970 CEST	49731	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.164659977 CEST	443	49731	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.167422056 CEST	49741	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.167457104 CEST	443	49741	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.167541027 CEST	49741	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.168030977 CEST	49741	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.168045044 CEST	443	49741	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.235713959 CEST	49674	443	192.168.2.9	23.206.229.209
Oct 13, 2024 20:11:05.626267910 CEST	443	49737	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.627135992 CEST	49737	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.627165079 CEST	443	49737	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.627489090 CEST	49737	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.627494097 CEST	443	49737	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.741154909 CEST	443	49737	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.741219997 CEST	443	49737	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.741277933 CEST	49737	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.741446972 CEST	49737	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.741472006 CEST	443	49737	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.741483927 CEST	49737	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.741488934 CEST	443	49737	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.781402111 CEST	49742	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.781445026 CEST	443	49742	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.781577110 CEST	49742	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.781752110 CEST	49742	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.781764030 CEST	443	49742	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.783792019 CEST	443	49739	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.784291029 CEST	49739	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.784315109 CEST	443	49739	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.784811974 CEST	49739	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.784816980 CEST	443	49739	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.784972906 CEST	443	49738	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.785391092 CEST	49738	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.785417080 CEST	443	49738	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.785857916 CEST	49738	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.785862923 CEST	443	49738	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.816473007 CEST	443	49741	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.817779064 CEST	49741	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.817795992 CEST	443	49741	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.818304062 CEST	49741	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.818319082 CEST	443	49741	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.867559910 CEST	443	49740	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.868093014 CEST	49740	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.868128061 CEST	443	49740	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.868470907 CEST	49740	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.868478060 CEST	443	49740	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.886419058 CEST	443	49739	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.886476994 CEST	443	49739	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.886723995 CEST	49739	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.886723995 CEST	49739	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.886769056 CEST	49739	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.886785030 CEST	443	49739	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.887497902 CEST	443	49738	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.887564898 CEST	443	49738	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.887696028 CEST	49738	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.887774944 CEST	49738	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.887798071 CEST	443	49738	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.887809992 CEST	49738	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.887814999 CEST	443	49738	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.890024900 CEST	49743	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.890070915 CEST	443	49743	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.890146017 CEST	49743	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.890209913 CEST	49744	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.890248060 CEST	443	49744	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.890281916 CEST	49743	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.890297890 CEST	443	49743	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.890299082 CEST	49744	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.890381098 CEST	49744	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.890393972 CEST	443	49744	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.919507980 CEST	443	49741	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.919575930 CEST	443	49741	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.919821978 CEST	49741	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.919859886 CEST	49741	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.919859886 CEST	49741	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.919877052 CEST	443	49741	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.919887066 CEST	443	49741	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.922419071 CEST	49745	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.922461033 CEST	443	49745	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.922729015 CEST	49745	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.922928095 CEST	49745	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.922946930 CEST	443	49745	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.976463079 CEST	443	49740	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.976536989 CEST	443	49740	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.976670027 CEST	49740	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.976934910 CEST	49740	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.976934910 CEST	49740	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.976977110 CEST	443	49740	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.976993084 CEST	443	49740	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.979535103 CEST	49746	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.979585886 CEST	443	49746	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.979661942 CEST	49746	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.979809999 CEST	49746	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:05.979825020 CEST	443	49746	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:05.998172045 CEST	49747	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:05.998636007 CEST	49748	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:06.003134966 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.003568888 CEST	80	49748	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.003680944 CEST	49747	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:06.006095886 CEST	49748	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:06.007863045 CEST	49748	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:06.012965918 CEST	80	49748	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.443393946 CEST	443	49742	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.459992886 CEST	49742	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.460010052 CEST	443	49742	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.461066961 CEST	49742	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.461071968 CEST	443	49742	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.503478050 CEST	80	49748	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.503493071 CEST	80	49748	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.503513098 CEST	80	49748	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.503557920 CEST	49748	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:06.543472052 CEST	443	49743	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.547528982 CEST	49748	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:06.554708004 CEST	49743	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.554750919 CEST	443	49743	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.555500031 CEST	49743	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.555519104 CEST	443	49743	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.562042952 CEST	443	49742	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.562131882 CEST	443	49742	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.562176943 CEST	49742	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.567420006 CEST	49742	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.567420006 CEST	49742	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.567430019 CEST	443	49742	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.567445040 CEST	443	49742	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.568747044 CEST	49749	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:06.568974018 CEST	49748	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:06.569250107 CEST	49747	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:06.573611021 CEST	80	49749	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.573719978 CEST	49749	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:06.573755026 CEST	80	49748	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.574071884 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.574354887 CEST	443	49745	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.578500986 CEST	49749	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:06.581327915 CEST	443	49744	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.582243919 CEST	49745	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.582279921 CEST	443	49745	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.582891941 CEST	49745	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.582902908 CEST	443	49745	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.583144903 CEST	49744	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.583167076 CEST	443	49744	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.583534002 CEST	80	49749	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.583714962 CEST	49744	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.583720922 CEST	443	49744	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.587543964 CEST	49750	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.587582111 CEST	443	49750	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.587646961 CEST	49750	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.588457108 CEST	49750	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.588466883 CEST	443	49750	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.654031992 CEST	443	49743	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.654098988 CEST	443	49743	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.654159069 CEST	49743	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.654580116 CEST	49743	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.654608011 CEST	443	49743	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.654620886 CEST	49743	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.654627085 CEST	443	49743	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.654819012 CEST	443	49746	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.655957937 CEST	49746	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.655985117 CEST	443	49746	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.656424046 CEST	49746	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.656435013 CEST	443	49746	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.680104017 CEST	443	49745	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.680171013 CEST	443	49745	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.680214882 CEST	49745	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.684590101 CEST	49751	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.684623957 CEST	443	49751	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.684742928 CEST	49751	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.685502052 CEST	49745	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.685529947 CEST	443	49745	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.685544968 CEST	49745	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.685550928 CEST	443	49745	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.686091900 CEST	49751	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.686110973 CEST	443	49751	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.694420099 CEST	80	49748	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.730911970 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.730930090 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.730947018 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.730993032 CEST	49747	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:06.731112003 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.731125116 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.731142044 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.731153965 CEST	49747	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:06.731162071 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.731183052 CEST	49747	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:06.731628895 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.731645107 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.731662989 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.731668949 CEST	49747	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:06.731698036 CEST	49747	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:06.736008883 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.739098072 CEST	49752	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:06.739157915 CEST	49748	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:06.739746094 CEST	443	49744	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.739826918 CEST	443	49744	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.739882946 CEST	49744	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.741277933 CEST	49748	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:06.744067907 CEST	80	49752	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.744215012 CEST	49752	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:06.745023012 CEST	49752	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:06.746104002 CEST	80	49748	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.749861002 CEST	80	49752	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.750680923 CEST	49744	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.750714064 CEST	443	49744	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.750725031 CEST	49744	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.750732899 CEST	443	49744	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.758392096 CEST	49754	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.758451939 CEST	443	49754	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.758524895 CEST	49754	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.760910988 CEST	49755	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.760943890 CEST	443	49755	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.761013031 CEST	49755	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.761147976 CEST	49754	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.761177063 CEST	443	49754	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.761310101 CEST	49755	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.761327028 CEST	443	49755	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.775890112 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.775938988 CEST	49747	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:06.776025057 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.783044100 CEST	443	49746	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.783118963 CEST	443	49746	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.783174038 CEST	49746	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.783890009 CEST	49746	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.783916950 CEST	443	49746	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.783931017 CEST	49746	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.783937931 CEST	443	49746	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.787616014 CEST	49757	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.787662983 CEST	443	49757	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.787719011 CEST	49757	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.787966013 CEST	49757	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:06.787977934 CEST	443	49757	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:06.825727940 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.825748920 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.825771093 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.825792074 CEST	49747	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:06.825838089 CEST	49747	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:06.825862885 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.825881004 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.825911999 CEST	49747	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:06.840276957 CEST	443	49704	23.206.229.209	192.168.2.9
Oct 13, 2024 20:11:06.840356112 CEST	49704	443	192.168.2.9	23.206.229.209
Oct 13, 2024 20:11:06.859055996 CEST	80	49748	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.859098911 CEST	80	49748	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.859111071 CEST	80	49748	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.859143972 CEST	49748	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:06.859261990 CEST	80	49748	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:06.859304905 CEST	49748	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:07.085726023 CEST	80	49749	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.124866009 CEST	49749	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:07.125998974 CEST	49748	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:07.130088091 CEST	80	49749	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.130824089 CEST	80	49748	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.152625084 CEST	49759	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:07.157461882 CEST	80	49759	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.157543898 CEST	49759	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:07.160012007 CEST	49759	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:07.164947987 CEST	80	49759	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.247415066 CEST	80	49748	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.247473955 CEST	80	49748	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.247492075 CEST	80	49748	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.247543097 CEST	49748	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:07.247687101 CEST	80	49749	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.247699022 CEST	80	49749	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.247720957 CEST	80	49749	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.247790098 CEST	49749	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:07.247966051 CEST	80	49749	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.247978926 CEST	80	49749	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.248018980 CEST	49749	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:07.248051882 CEST	80	49748	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.248097897 CEST	49748	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:07.257539988 CEST	49749	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:07.257853031 CEST	49747	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:07.260047913 CEST	443	49750	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.260561943 CEST	49750	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.260596991 CEST	443	49750	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.261043072 CEST	49750	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.261053085 CEST	443	49750	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.262438059 CEST	80	49749	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.262872934 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.277262926 CEST	80	49752	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.277362108 CEST	80	49752	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.277436972 CEST	49752	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:07.282826900 CEST	49760	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:07.288345098 CEST	80	49760	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.288589001 CEST	49760	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:07.288650036 CEST	49760	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:07.293582916 CEST	80	49760	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.335484982 CEST	80	49748	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.341907978 CEST	443	49751	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.342484951 CEST	49751	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.342514038 CEST	443	49751	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.342987061 CEST	49751	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.342995882 CEST	443	49751	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.367057085 CEST	443	49750	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.367139101 CEST	443	49750	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.367275000 CEST	49750	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.367360115 CEST	49750	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.367381096 CEST	443	49750	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.367409945 CEST	49750	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.367415905 CEST	443	49750	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.370320082 CEST	49761	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.370357990 CEST	443	49761	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.370477915 CEST	49761	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.370713949 CEST	49761	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.370727062 CEST	443	49761	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.377017975 CEST	49748	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:07.379955053 CEST	80	49749	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.380049944 CEST	80	49749	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.380063057 CEST	80	49749	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.380106926 CEST	49749	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:07.380152941 CEST	80	49749	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.380168915 CEST	80	49749	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.380187988 CEST	49749	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:07.383755922 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.383810997 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.383826017 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.383882046 CEST	49747	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:07.383981943 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.383991003 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.384025097 CEST	49747	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:07.410147905 CEST	443	49755	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.410759926 CEST	49755	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.410795927 CEST	443	49755	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.411207914 CEST	49755	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.411216974 CEST	443	49755	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.421837091 CEST	443	49754	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.422380924 CEST	49754	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.422414064 CEST	443	49754	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.422846079 CEST	49754	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.422853947 CEST	443	49754	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.424487114 CEST	49749	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:07.443644047 CEST	443	49751	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.443722010 CEST	443	49751	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.443778992 CEST	49751	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.444025040 CEST	49751	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.444050074 CEST	443	49751	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.444063902 CEST	49751	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.444070101 CEST	443	49751	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.447962999 CEST	49762	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.448004007 CEST	443	49762	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.448064089 CEST	49762	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.448447943 CEST	49762	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.448457956 CEST	443	49762	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.468976974 CEST	443	49757	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.471149921 CEST	49757	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.471174955 CEST	443	49757	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.473426104 CEST	49757	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.473438978 CEST	443	49757	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.511742115 CEST	443	49755	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.511806011 CEST	443	49755	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.511878014 CEST	49755	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.512046099 CEST	49755	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.512068987 CEST	443	49755	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.512084007 CEST	49755	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.512089968 CEST	443	49755	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.514993906 CEST	49763	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.515029907 CEST	443	49763	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.515252113 CEST	49763	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.515393972 CEST	49763	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.515405893 CEST	443	49763	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.525602102 CEST	443	49754	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.525672913 CEST	443	49754	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.525763035 CEST	49754	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.525846004 CEST	49754	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.525863886 CEST	443	49754	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.525880098 CEST	49754	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.525888920 CEST	443	49754	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.528337955 CEST	49764	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.528384924 CEST	443	49764	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.528470039 CEST	49764	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.528673887 CEST	49764	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.528692007 CEST	443	49764	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.932075977 CEST	443	49757	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.932140112 CEST	443	49757	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.932303905 CEST	49757	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.932344913 CEST	80	49759	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.932421923 CEST	80	49759	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.932434082 CEST	80	49759	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.932477951 CEST	49759	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:07.932598114 CEST	80	49759	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.932612896 CEST	49757	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.932625055 CEST	443	49757	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.932634115 CEST	49757	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.932637930 CEST	49759	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:07.932638884 CEST	443	49757	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.935148954 CEST	80	49759	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.935213089 CEST	49759	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:07.935235023 CEST	80	49760	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.935254097 CEST	80	49760	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.935309887 CEST	49760	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:07.935899019 CEST	80	49760	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.935933113 CEST	80	49759	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:07.935967922 CEST	49760	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:07.935967922 CEST	49759	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:07.940773010 CEST	49765	443	192.168.2.9	172.217.16.196
Oct 13, 2024 20:11:07.940798044 CEST	443	49765	172.217.16.196	192.168.2.9
Oct 13, 2024 20:11:07.940846920 CEST	49765	443	192.168.2.9	172.217.16.196
Oct 13, 2024 20:11:07.941087008 CEST	49765	443	192.168.2.9	172.217.16.196
Oct 13, 2024 20:11:07.941099882 CEST	443	49765	172.217.16.196	192.168.2.9
Oct 13, 2024 20:11:07.945971012 CEST	49766	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.946010113 CEST	443	49766	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:07.946074963 CEST	49766	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.946841002 CEST	49766	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:07.946866989 CEST	443	49766	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.011432886 CEST	49747	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:08.016458035 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:08.047118902 CEST	443	49762	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.048554897 CEST	49762	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.048582077 CEST	443	49762	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.049036026 CEST	49762	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.049041033 CEST	443	49762	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.126533031 CEST	443	49761	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.133244991 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:08.133268118 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:08.133321047 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:08.133352041 CEST	49747	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:08.133410931 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:08.133447886 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:08.133450031 CEST	49747	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:08.133461952 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:08.133771896 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:08.133824110 CEST	49747	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:08.134289026 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:08.134337902 CEST	49747	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:08.135283947 CEST	49761	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.135309935 CEST	443	49761	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.135772943 CEST	49761	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.135778904 CEST	443	49761	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.152837992 CEST	443	49762	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.152910948 CEST	443	49762	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.153105021 CEST	49762	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.153141975 CEST	49762	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.153156996 CEST	443	49762	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.153167963 CEST	49762	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.153173923 CEST	443	49762	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.156135082 CEST	49770	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.156166077 CEST	443	49770	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.156258106 CEST	49770	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.156426907 CEST	49770	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.156444073 CEST	443	49770	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.225883961 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:08.232845068 CEST	443	49761	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.232922077 CEST	443	49761	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.233026028 CEST	49761	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.233609915 CEST	49761	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.233633041 CEST	443	49761	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.233648062 CEST	49761	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.233654022 CEST	443	49761	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.234350920 CEST	49760	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:08.238806009 CEST	49771	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.238847971 CEST	443	49771	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.238928080 CEST	49771	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.239113092 CEST	49771	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.239126921 CEST	80	49760	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:08.239135027 CEST	443	49771	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.282145023 CEST	49747	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:08.352123022 CEST	80	49760	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:08.352138042 CEST	80	49760	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:08.352148056 CEST	80	49760	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:08.352258921 CEST	80	49760	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:08.352271080 CEST	80	49760	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:08.352297068 CEST	49760	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:08.352297068 CEST	49760	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:08.352633953 CEST	80	49760	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:08.352644920 CEST	80	49760	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:08.352838039 CEST	80	49760	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:08.353148937 CEST	49760	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:08.355132103 CEST	49760	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:08.441319942 CEST	80	49760	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:08.487340927 CEST	49760	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:08.583851099 CEST	443	49765	172.217.16.196	192.168.2.9
Oct 13, 2024 20:11:08.584913969 CEST	443	49764	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.587636948 CEST	49765	443	192.168.2.9	172.217.16.196
Oct 13, 2024 20:11:08.587656021 CEST	443	49765	172.217.16.196	192.168.2.9
Oct 13, 2024 20:11:08.588761091 CEST	443	49765	172.217.16.196	192.168.2.9
Oct 13, 2024 20:11:08.588835955 CEST	49765	443	192.168.2.9	172.217.16.196
Oct 13, 2024 20:11:08.592158079 CEST	443	49763	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.593997002 CEST	443	49766	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.626641989 CEST	49765	443	192.168.2.9	172.217.16.196
Oct 13, 2024 20:11:08.626739025 CEST	443	49765	172.217.16.196	192.168.2.9
Oct 13, 2024 20:11:08.627985954 CEST	49764	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.643551111 CEST	49763	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.643551111 CEST	49766	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.674781084 CEST	49765	443	192.168.2.9	172.217.16.196
Oct 13, 2024 20:11:08.674809933 CEST	443	49765	172.217.16.196	192.168.2.9
Oct 13, 2024 20:11:08.728189945 CEST	49765	443	192.168.2.9	172.217.16.196
Oct 13, 2024 20:11:08.774058104 CEST	49764	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.774072886 CEST	443	49764	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.774832964 CEST	49764	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.774840117 CEST	443	49764	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.775201082 CEST	49763	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.775222063 CEST	443	49763	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.775930882 CEST	49763	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.775938988 CEST	443	49763	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.776417971 CEST	49766	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.776443958 CEST	443	49766	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.776995897 CEST	49766	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.777000904 CEST	443	49766	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.803833961 CEST	443	49770	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.845568895 CEST	49770	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.872112036 CEST	443	49764	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.872198105 CEST	443	49764	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.872307062 CEST	49764	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.881751060 CEST	443	49766	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.881824017 CEST	443	49766	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.881932020 CEST	49766	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.882205963 CEST	443	49763	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.882247925 CEST	443	49763	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.882296085 CEST	49763	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.944645882 CEST	443	49771	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.946508884 CEST	49771	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.946526051 CEST	443	49771	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.946990013 CEST	49771	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.946997881 CEST	443	49771	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.947230101 CEST	49770	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.947236061 CEST	443	49770	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.947608948 CEST	49770	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.947613955 CEST	443	49770	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.948750973 CEST	49764	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.948771954 CEST	443	49764	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.948786974 CEST	49764	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.948793888 CEST	443	49764	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.950438023 CEST	49766	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.950438023 CEST	49766	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.950469017 CEST	443	49766	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.950475931 CEST	443	49766	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.950522900 CEST	49763	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.950548887 CEST	443	49763	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.950563908 CEST	49763	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.950572014 CEST	443	49763	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.968151093 CEST	49772	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.968189955 CEST	443	49772	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.968269110 CEST	49772	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.969782114 CEST	49773	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.969821930 CEST	443	49773	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.970271111 CEST	49772	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.970284939 CEST	443	49772	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.970310926 CEST	49773	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.970381975 CEST	49773	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.970387936 CEST	443	49773	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.971263885 CEST	49774	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.971272945 CEST	443	49774	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:08.971324921 CEST	49774	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.972182035 CEST	49774	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:08.972194910 CEST	443	49774	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.044285059 CEST	443	49770	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.044363022 CEST	443	49770	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.044440985 CEST	49770	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.045667887 CEST	49770	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.045667887 CEST	49770	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.045676947 CEST	443	49770	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.045686007 CEST	443	49770	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.050802946 CEST	49775	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.050838947 CEST	443	49775	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.051002026 CEST	49775	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.051414013 CEST	49775	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.051426888 CEST	443	49775	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.052728891 CEST	443	49771	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.052797079 CEST	443	49771	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.052957058 CEST	49771	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.053123951 CEST	49771	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.053132057 CEST	443	49771	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.053142071 CEST	49771	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.053145885 CEST	443	49771	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.055886984 CEST	49776	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.055907965 CEST	443	49776	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.056484938 CEST	49776	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.056817055 CEST	49776	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.056832075 CEST	443	49776	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.090373039 CEST	49777	443	192.168.2.9	184.28.90.27
Oct 13, 2024 20:11:09.090420961 CEST	443	49777	184.28.90.27	192.168.2.9
Oct 13, 2024 20:11:09.090629101 CEST	49777	443	192.168.2.9	184.28.90.27
Oct 13, 2024 20:11:09.092411041 CEST	49777	443	192.168.2.9	184.28.90.27
Oct 13, 2024 20:11:09.092427015 CEST	443	49777	184.28.90.27	192.168.2.9
Oct 13, 2024 20:11:09.319227934 CEST	49677	443	192.168.2.9	20.189.173.11
Oct 13, 2024 20:11:09.615288973 CEST	443	49773	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.616028070 CEST	49773	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.616050005 CEST	443	49773	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.616722107 CEST	49773	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.616729021 CEST	443	49773	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.617221117 CEST	443	49772	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.617552996 CEST	49772	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.617572069 CEST	443	49772	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.618088007 CEST	49772	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.618094921 CEST	443	49772	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.634536982 CEST	443	49774	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.635170937 CEST	49774	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.635188103 CEST	443	49774	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.635776043 CEST	49774	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.635781050 CEST	443	49774	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.717343092 CEST	443	49773	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.717410088 CEST	443	49773	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.717459917 CEST	49773	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.717657089 CEST	49773	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.717678070 CEST	443	49773	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.717686892 CEST	49773	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.717694044 CEST	443	49773	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.718628883 CEST	443	49772	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.718707085 CEST	443	49772	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.718751907 CEST	49772	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.718895912 CEST	49772	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.718914032 CEST	443	49772	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.718920946 CEST	49772	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.718925953 CEST	443	49772	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.722048044 CEST	49778	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.722084045 CEST	443	49778	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.722148895 CEST	49778	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.722404003 CEST	49778	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.722419024 CEST	443	49778	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.722691059 CEST	49779	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.722721100 CEST	443	49779	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.722769976 CEST	49779	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.722925901 CEST	49779	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.722933054 CEST	443	49779	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.735785961 CEST	443	49776	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.736295938 CEST	49776	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.736310005 CEST	443	49776	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.737364054 CEST	49776	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.737369061 CEST	443	49776	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.738337040 CEST	443	49774	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.738385916 CEST	443	49774	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.738431931 CEST	49774	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.738724947 CEST	49774	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.738739014 CEST	443	49774	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.738749027 CEST	49774	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.738754034 CEST	443	49774	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.739716053 CEST	443	49775	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.740272999 CEST	49775	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.740283966 CEST	443	49775	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.740742922 CEST	49775	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.740747929 CEST	443	49775	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.741887093 CEST	49780	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.741919041 CEST	443	49780	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.741980076 CEST	49780	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.742165089 CEST	49780	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.742177963 CEST	443	49780	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.816399097 CEST	443	49777	184.28.90.27	192.168.2.9
Oct 13, 2024 20:11:09.816483974 CEST	49777	443	192.168.2.9	184.28.90.27
Oct 13, 2024 20:11:09.819926023 CEST	49777	443	192.168.2.9	184.28.90.27
Oct 13, 2024 20:11:09.819940090 CEST	443	49777	184.28.90.27	192.168.2.9
Oct 13, 2024 20:11:09.820272923 CEST	443	49777	184.28.90.27	192.168.2.9
Oct 13, 2024 20:11:09.840950012 CEST	443	49776	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.841006041 CEST	443	49776	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.841048956 CEST	49776	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.841353893 CEST	49776	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.841362953 CEST	443	49776	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.841371059 CEST	49776	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.841375113 CEST	443	49776	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.846131086 CEST	49781	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.846151114 CEST	443	49775	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.846169949 CEST	443	49781	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.846220016 CEST	443	49775	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.846224070 CEST	49781	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.846259117 CEST	49775	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.846442938 CEST	49775	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.846465111 CEST	443	49775	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.846477032 CEST	49775	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.846483946 CEST	443	49775	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.846693993 CEST	49781	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.846713066 CEST	443	49781	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.850621939 CEST	49782	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.850656033 CEST	443	49782	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.850709915 CEST	49782	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.850944996 CEST	49782	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:09.850960970 CEST	443	49782	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:09.860528946 CEST	49777	443	192.168.2.9	184.28.90.27
Oct 13, 2024 20:11:09.865704060 CEST	49777	443	192.168.2.9	184.28.90.27
Oct 13, 2024 20:11:09.911396027 CEST	443	49777	184.28.90.27	192.168.2.9
Oct 13, 2024 20:11:10.564271927 CEST	443	49777	184.28.90.27	192.168.2.9
Oct 13, 2024 20:11:10.564354897 CEST	443	49777	184.28.90.27	192.168.2.9
Oct 13, 2024 20:11:10.564485073 CEST	49777	443	192.168.2.9	184.28.90.27
Oct 13, 2024 20:11:10.564543009 CEST	443	49777	184.28.90.27	192.168.2.9
Oct 13, 2024 20:11:10.564558029 CEST	49777	443	192.168.2.9	184.28.90.27
Oct 13, 2024 20:11:10.564558029 CEST	49777	443	192.168.2.9	184.28.90.27
Oct 13, 2024 20:11:10.564568996 CEST	443	49777	184.28.90.27	192.168.2.9
Oct 13, 2024 20:11:10.564577103 CEST	443	49777	184.28.90.27	192.168.2.9
Oct 13, 2024 20:11:10.599461079 CEST	49783	443	192.168.2.9	184.28.90.27
Oct 13, 2024 20:11:10.599503994 CEST	443	49783	184.28.90.27	192.168.2.9
Oct 13, 2024 20:11:10.599570036 CEST	49783	443	192.168.2.9	184.28.90.27
Oct 13, 2024 20:11:10.599955082 CEST	49783	443	192.168.2.9	184.28.90.27
Oct 13, 2024 20:11:10.599971056 CEST	443	49783	184.28.90.27	192.168.2.9
Oct 13, 2024 20:11:10.754138947 CEST	443	49780	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:10.754579067 CEST	443	49781	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:10.754885912 CEST	49780	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:10.754899979 CEST	443	49780	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:10.754982948 CEST	49781	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:10.755004883 CEST	443	49781	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:10.755364895 CEST	49780	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:10.755369902 CEST	443	49780	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:10.755677938 CEST	49781	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:10.755686045 CEST	443	49781	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:10.756041050 CEST	443	49778	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:10.756311893 CEST	443	49782	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:10.756525993 CEST	49778	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:10.756541967 CEST	443	49778	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:10.756738901 CEST	49782	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:10.756753922 CEST	443	49782	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:10.756967068 CEST	49778	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:10.756973028 CEST	443	49778	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:10.757231951 CEST	49782	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:10.757236958 CEST	443	49782	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:10.760149002 CEST	443	49779	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:10.760488987 CEST	49779	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:10.760513067 CEST	443	49779	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:10.760919094 CEST	49779	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:10.760924101 CEST	443	49779	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.038486958 CEST	443	49780	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.038562059 CEST	443	49780	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.038604975 CEST	443	49781	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.038609982 CEST	49780	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.038672924 CEST	443	49781	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.038789988 CEST	443	49782	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.038799047 CEST	49781	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.038877964 CEST	443	49782	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.038896084 CEST	443	49778	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.038957119 CEST	49782	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.039016962 CEST	49780	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.039038897 CEST	443	49780	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.039041042 CEST	443	49778	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.039052963 CEST	49780	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.039060116 CEST	443	49780	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.039100885 CEST	49778	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.041779041 CEST	49778	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.041795969 CEST	443	49778	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.041806936 CEST	49778	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.041812897 CEST	443	49778	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.042628050 CEST	49781	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.042649031 CEST	443	49781	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.042663097 CEST	49781	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.042668104 CEST	443	49781	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.043402910 CEST	49782	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.043416977 CEST	443	49782	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.043427944 CEST	49782	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.043432951 CEST	443	49782	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.045588970 CEST	49784	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.045617104 CEST	443	49784	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.045707941 CEST	49784	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.046381950 CEST	49784	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.046396971 CEST	443	49784	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.048815966 CEST	49785	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.048846960 CEST	443	49785	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.049063921 CEST	49785	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.049288034 CEST	49785	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.049300909 CEST	443	49785	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.050240993 CEST	49786	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.050251007 CEST	443	49786	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.050626993 CEST	49786	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.063613892 CEST	49786	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.063631058 CEST	443	49786	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.064285994 CEST	49787	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.064322948 CEST	443	49787	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.064440966 CEST	49787	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.064613104 CEST	49787	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.064626932 CEST	443	49787	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.135669947 CEST	443	49779	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.135749102 CEST	443	49779	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.135930061 CEST	49779	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.149933100 CEST	49779	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.149955034 CEST	443	49779	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.149977922 CEST	49779	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.149983883 CEST	443	49779	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.153002024 CEST	49788	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.153036118 CEST	443	49788	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.153423071 CEST	49788	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.153423071 CEST	49788	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.153454065 CEST	443	49788	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.324927092 CEST	443	49783	184.28.90.27	192.168.2.9
Oct 13, 2024 20:11:11.325068951 CEST	49783	443	192.168.2.9	184.28.90.27
Oct 13, 2024 20:11:11.339342117 CEST	49783	443	192.168.2.9	184.28.90.27
Oct 13, 2024 20:11:11.339375973 CEST	443	49783	184.28.90.27	192.168.2.9
Oct 13, 2024 20:11:11.339673996 CEST	443	49783	184.28.90.27	192.168.2.9
Oct 13, 2024 20:11:11.352113008 CEST	49783	443	192.168.2.9	184.28.90.27
Oct 13, 2024 20:11:11.395412922 CEST	443	49783	184.28.90.27	192.168.2.9
Oct 13, 2024 20:11:11.660324097 CEST	443	49783	184.28.90.27	192.168.2.9
Oct 13, 2024 20:11:11.660408020 CEST	443	49783	184.28.90.27	192.168.2.9
Oct 13, 2024 20:11:11.660742998 CEST	49783	443	192.168.2.9	184.28.90.27
Oct 13, 2024 20:11:11.660815001 CEST	443	49787	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.661288977 CEST	49787	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.661317110 CEST	443	49787	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.661370993 CEST	49783	443	192.168.2.9	184.28.90.27
Oct 13, 2024 20:11:11.661389112 CEST	443	49783	184.28.90.27	192.168.2.9
Oct 13, 2024 20:11:11.661400080 CEST	49783	443	192.168.2.9	184.28.90.27
Oct 13, 2024 20:11:11.661406040 CEST	443	49783	184.28.90.27	192.168.2.9
Oct 13, 2024 20:11:11.661853075 CEST	49787	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.661859035 CEST	443	49787	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.719235897 CEST	443	49785	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.720073938 CEST	49785	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.720089912 CEST	443	49785	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.720740080 CEST	49785	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.720746994 CEST	443	49785	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.720755100 CEST	443	49784	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.721013069 CEST	443	49786	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.721482038 CEST	49784	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.721512079 CEST	443	49784	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.722107887 CEST	49784	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.722116947 CEST	443	49784	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.722572088 CEST	49786	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.722579956 CEST	443	49786	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.722975016 CEST	49786	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.722979069 CEST	443	49786	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.780468941 CEST	443	49787	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.780554056 CEST	443	49787	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.780632019 CEST	49787	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.780780077 CEST	49787	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.780803919 CEST	443	49787	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.780814886 CEST	49787	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.780822039 CEST	443	49787	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.783863068 CEST	49789	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.783900976 CEST	443	49789	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.783986092 CEST	49789	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.784203053 CEST	49789	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.784214973 CEST	443	49789	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.817267895 CEST	443	49788	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.817956924 CEST	49788	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.817990065 CEST	443	49788	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.818319082 CEST	49788	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.818327904 CEST	443	49788	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.819858074 CEST	443	49785	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.819933891 CEST	443	49785	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.820034981 CEST	49785	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.820194960 CEST	49785	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.820219994 CEST	443	49785	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.820280075 CEST	49785	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.820286989 CEST	443	49785	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.822978973 CEST	49790	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.823016882 CEST	443	49790	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.823134899 CEST	49790	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.823232889 CEST	49790	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.823246002 CEST	443	49790	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.823292971 CEST	443	49784	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.823301077 CEST	443	49786	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.823373079 CEST	443	49786	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.823498964 CEST	49786	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.823513031 CEST	443	49784	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.823535919 CEST	49786	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.823535919 CEST	49786	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.823543072 CEST	443	49786	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.823561907 CEST	443	49786	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.823560953 CEST	49784	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.823599100 CEST	49784	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.823599100 CEST	49784	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.823617935 CEST	443	49784	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.823627949 CEST	443	49784	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.825782061 CEST	49791	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.825819969 CEST	443	49791	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.825865984 CEST	49792	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.825889111 CEST	49791	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.825901985 CEST	443	49792	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.825946093 CEST	49792	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.826097012 CEST	49791	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.826109886 CEST	443	49791	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.826141119 CEST	49792	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.826154947 CEST	443	49792	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.920831919 CEST	443	49788	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.920891047 CEST	443	49788	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.921140909 CEST	49788	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.921140909 CEST	49788	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.921214104 CEST	49788	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.921233892 CEST	443	49788	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.924030066 CEST	49793	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.924067974 CEST	443	49793	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:11.924212933 CEST	49793	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.924416065 CEST	49793	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:11.924427986 CEST	443	49793	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.247977018 CEST	80	49748	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:12.248050928 CEST	49748	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:12.277250051 CEST	80	49752	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:12.277297020 CEST	49752	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:12.380816936 CEST	80	49749	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:12.380896091 CEST	49749	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:12.473938942 CEST	443	49789	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.480262041 CEST	49789	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.480285883 CEST	443	49789	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.480851889 CEST	49789	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.480858088 CEST	443	49789	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.482296944 CEST	443	49790	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.483320951 CEST	49790	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.483333111 CEST	443	49790	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.485198975 CEST	49790	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.485204935 CEST	443	49790	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.494364023 CEST	443	49791	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.497632980 CEST	49791	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.497664928 CEST	443	49791	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.505270958 CEST	443	49792	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.506992102 CEST	49791	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.507010937 CEST	443	49791	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.521632910 CEST	49792	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.521665096 CEST	443	49792	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.531606913 CEST	49792	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.531625986 CEST	443	49792	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.584268093 CEST	443	49790	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.584343910 CEST	443	49790	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.584650040 CEST	49790	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.585400105 CEST	443	49789	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.585472107 CEST	443	49789	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.585520029 CEST	49789	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.592358112 CEST	49790	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.592380047 CEST	443	49790	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.593029022 CEST	49789	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.593038082 CEST	443	49789	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.593084097 CEST	49789	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.593090057 CEST	443	49789	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.600220919 CEST	443	49793	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.603880882 CEST	49794	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.603934050 CEST	443	49794	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.603997946 CEST	49794	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.604569912 CEST	49793	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.604589939 CEST	443	49793	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.606031895 CEST	49793	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.606038094 CEST	443	49793	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.606642008 CEST	443	49791	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.606712103 CEST	443	49791	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.606847048 CEST	49791	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.607264996 CEST	49791	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.607287884 CEST	443	49791	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.607486010 CEST	49794	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.607505083 CEST	443	49794	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.611542940 CEST	49795	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.611573935 CEST	443	49795	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.611727953 CEST	49795	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.613253117 CEST	49796	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.613318920 CEST	443	49796	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.613383055 CEST	49796	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.613817930 CEST	49796	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.613863945 CEST	443	49796	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.613956928 CEST	49795	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.613970041 CEST	443	49795	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.617078066 CEST	49752	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:12.617163897 CEST	49748	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:12.617367983 CEST	49749	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:12.621881962 CEST	80	49752	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:12.621969938 CEST	80	49748	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:12.622086048 CEST	80	49749	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:12.633389950 CEST	443	49792	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.633457899 CEST	443	49792	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.633786917 CEST	49792	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.634238005 CEST	49792	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.634258032 CEST	443	49792	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.640206099 CEST	49797	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.640249968 CEST	443	49797	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.640319109 CEST	49797	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.640742064 CEST	49797	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.640757084 CEST	443	49797	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.674973011 CEST	80	49759	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:12.675149918 CEST	49759	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:12.707355976 CEST	443	49793	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.707442045 CEST	443	49793	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.707523108 CEST	49793	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.708266973 CEST	49793	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.708285093 CEST	443	49793	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.708297014 CEST	49793	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.708302975 CEST	443	49793	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.714006901 CEST	49798	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.714032888 CEST	443	49798	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:12.714117050 CEST	49798	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.714260101 CEST	49798	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:12.714271069 CEST	443	49798	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.133651018 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:13.133717060 CEST	49747	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:13.255301952 CEST	443	49794	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.256638050 CEST	49794	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.256664991 CEST	443	49794	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.257628918 CEST	49794	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.257637978 CEST	443	49794	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.258418083 CEST	443	49795	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.259370089 CEST	49795	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.259392977 CEST	443	49795	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.260447025 CEST	49795	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.260453939 CEST	443	49795	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.291555882 CEST	443	49796	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.292331934 CEST	49796	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.292359114 CEST	443	49796	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.293380976 CEST	49796	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.293391943 CEST	443	49796	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.327286005 CEST	443	49797	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.328082085 CEST	49797	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.328103065 CEST	443	49797	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.328953981 CEST	49797	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.328959942 CEST	443	49797	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.353794098 CEST	80	49760	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:13.353965998 CEST	49760	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:13.356332064 CEST	443	49794	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.356410027 CEST	443	49794	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.356463909 CEST	49794	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.356822014 CEST	49794	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.356842995 CEST	443	49794	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.356849909 CEST	49794	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.356857061 CEST	443	49794	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.359191895 CEST	443	49795	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.359267950 CEST	443	49795	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.359410048 CEST	49795	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.361794949 CEST	49799	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.361845970 CEST	443	49799	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.361905098 CEST	49799	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.362261057 CEST	49795	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.362289906 CEST	443	49795	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.362304926 CEST	49795	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.362310886 CEST	443	49795	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.364229918 CEST	49799	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.364252090 CEST	443	49799	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.366836071 CEST	49800	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.366873026 CEST	443	49800	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.367136955 CEST	49800	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.367283106 CEST	49800	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.367310047 CEST	443	49800	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.375108004 CEST	443	49798	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.375509024 CEST	49798	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.375534058 CEST	443	49798	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.376100063 CEST	49798	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.376105070 CEST	443	49798	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.399100065 CEST	443	49796	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.399162054 CEST	443	49796	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.399250984 CEST	49796	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.399478912 CEST	49796	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.399504900 CEST	443	49796	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.399523020 CEST	49796	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.399532080 CEST	443	49796	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.402407885 CEST	49801	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.402471066 CEST	443	49801	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.402610064 CEST	49801	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.402808905 CEST	49801	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.402837038 CEST	443	49801	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.434547901 CEST	443	49797	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.434619904 CEST	443	49797	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.434753895 CEST	49797	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.435003996 CEST	49797	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.435023069 CEST	443	49797	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.435036898 CEST	49797	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.435041904 CEST	443	49797	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.437935114 CEST	49802	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.437979937 CEST	443	49802	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.438155890 CEST	49802	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.438416958 CEST	49802	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.438435078 CEST	443	49802	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.477973938 CEST	443	49798	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.478060961 CEST	443	49798	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.478111029 CEST	49798	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.478296995 CEST	49798	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.478312969 CEST	443	49798	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.478360891 CEST	49798	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.478367090 CEST	443	49798	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.481772900 CEST	49803	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.481812000 CEST	443	49803	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:13.481887102 CEST	49803	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.482202053 CEST	49803	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:13.482217073 CEST	443	49803	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.253974915 CEST	443	49802	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.254745007 CEST	443	49801	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.254759073 CEST	49802	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.254787922 CEST	443	49802	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.255036116 CEST	443	49799	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.256378889 CEST	443	49803	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.256424904 CEST	49802	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.256448030 CEST	443	49802	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.256649971 CEST	443	49800	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.257616043 CEST	49801	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.257638931 CEST	443	49801	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.258248091 CEST	49801	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.258266926 CEST	443	49801	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.258390903 CEST	49800	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.258409023 CEST	443	49800	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.259283066 CEST	49800	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.259289980 CEST	443	49800	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.260397911 CEST	49799	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.260431051 CEST	443	49799	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.261395931 CEST	49799	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.261401892 CEST	443	49799	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.262289047 CEST	49803	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.262300968 CEST	443	49803	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.263434887 CEST	49803	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.263439894 CEST	443	49803	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.354770899 CEST	443	49802	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.354795933 CEST	443	49802	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.354849100 CEST	49802	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.354866982 CEST	443	49802	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.354882956 CEST	443	49802	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.354979038 CEST	49802	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.355119944 CEST	49802	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.355138063 CEST	443	49802	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.355148077 CEST	49802	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.355160952 CEST	443	49802	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.355998039 CEST	443	49801	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.356065989 CEST	443	49801	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.356146097 CEST	49801	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.356853962 CEST	49801	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.356862068 CEST	443	49801	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.356873989 CEST	49801	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.356878042 CEST	443	49801	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.359950066 CEST	443	49799	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.360048056 CEST	443	49799	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.360297918 CEST	49799	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.361021042 CEST	443	49800	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.361080885 CEST	443	49800	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.361134052 CEST	49800	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.361645937 CEST	443	49803	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.361704111 CEST	443	49803	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.361759901 CEST	49803	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.362410069 CEST	49804	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.362448931 CEST	443	49804	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.362559080 CEST	49804	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.362921953 CEST	49799	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.362937927 CEST	443	49799	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.362950087 CEST	49799	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.362956047 CEST	443	49799	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.365849972 CEST	49805	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.365878105 CEST	443	49805	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.366112947 CEST	49805	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.366322994 CEST	49805	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.366353989 CEST	443	49805	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.367646933 CEST	49806	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.367656946 CEST	443	49806	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.367852926 CEST	49806	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.367949963 CEST	49806	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.367963076 CEST	443	49806	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.367973089 CEST	49800	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.367985010 CEST	443	49800	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.369993925 CEST	49803	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.370001078 CEST	443	49803	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.370038033 CEST	49803	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.370047092 CEST	443	49803	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.372806072 CEST	49804	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.372817993 CEST	443	49804	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.375251055 CEST	49807	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.375264883 CEST	443	49807	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.375549078 CEST	49807	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.375993967 CEST	49807	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.376003027 CEST	443	49807	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.377788067 CEST	49808	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.377823114 CEST	443	49808	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.377958059 CEST	49808	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.378179073 CEST	49808	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:14.378194094 CEST	443	49808	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:14.590116024 CEST	49759	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:14.590197086 CEST	49747	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:14.590280056 CEST	49760	80	192.168.2.9	50.6.138.164
Oct 13, 2024 20:11:14.595141888 CEST	80	49759	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:14.595160007 CEST	80	49747	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:14.595170021 CEST	80	49760	50.6.138.164	192.168.2.9
Oct 13, 2024 20:11:15.028331041 CEST	443	49807	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.028757095 CEST	49807	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.028772116 CEST	443	49807	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.029453993 CEST	49807	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.029459953 CEST	443	49807	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.034507036 CEST	443	49808	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.034907103 CEST	49808	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.034946918 CEST	443	49808	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.035389900 CEST	49808	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.035398960 CEST	443	49808	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.038814068 CEST	443	49804	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.039190054 CEST	49804	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.039210081 CEST	443	49804	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.039839983 CEST	49804	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.039846897 CEST	443	49804	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.042006969 CEST	443	49805	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.042320013 CEST	49805	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.042345047 CEST	443	49805	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.042747974 CEST	49805	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.042753935 CEST	443	49805	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.043564081 CEST	443	49806	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.043823004 CEST	49806	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.043837070 CEST	443	49806	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.044200897 CEST	49806	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.044209957 CEST	443	49806	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.129226923 CEST	443	49807	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.129256010 CEST	443	49807	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.129350901 CEST	49807	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.129368067 CEST	443	49807	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.129668951 CEST	49807	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.129668951 CEST	49807	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.129683971 CEST	443	49807	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.129843950 CEST	443	49807	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.129882097 CEST	443	49807	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.129955053 CEST	49807	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.133388042 CEST	49809	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.133429050 CEST	443	49809	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.133632898 CEST	49809	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.134001017 CEST	49809	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.134013891 CEST	443	49809	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.135736942 CEST	443	49808	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.136245012 CEST	443	49808	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.136315107 CEST	49808	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.136351109 CEST	49808	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.136368990 CEST	443	49808	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.136382103 CEST	49808	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.136388063 CEST	443	49808	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.139570951 CEST	49810	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.139601946 CEST	443	49810	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.139697075 CEST	49810	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.139987946 CEST	49810	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.140000105 CEST	443	49810	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.141601086 CEST	443	49804	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.141624928 CEST	443	49804	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.141680002 CEST	49804	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.141690016 CEST	443	49804	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.141810894 CEST	443	49804	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.141849995 CEST	49804	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.141876936 CEST	443	49804	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.141890049 CEST	49804	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.141890049 CEST	49804	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.141900063 CEST	443	49804	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.141908884 CEST	443	49804	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.144299984 CEST	49811	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.144325972 CEST	443	49811	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.144598007 CEST	49811	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.144721031 CEST	49811	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.144732952 CEST	443	49811	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.146662951 CEST	443	49805	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.146727085 CEST	443	49805	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.146816969 CEST	49805	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.146881104 CEST	49805	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.146900892 CEST	443	49805	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.146907091 CEST	49805	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.146912098 CEST	443	49805	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.148857117 CEST	443	49806	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.148889065 CEST	443	49806	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.148945093 CEST	49806	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.148956060 CEST	443	49806	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.149015903 CEST	49806	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.149194956 CEST	443	49806	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.149250984 CEST	443	49806	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.149291039 CEST	49806	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.149780989 CEST	49812	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.149821043 CEST	443	49812	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.149885893 CEST	49812	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.149983883 CEST	49806	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.149991989 CEST	443	49806	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.150001049 CEST	49806	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.150005102 CEST	443	49806	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.150173903 CEST	49812	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.150187969 CEST	443	49812	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.152179956 CEST	49813	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.152200937 CEST	443	49813	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.152446032 CEST	49813	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.152563095 CEST	49813	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.152580023 CEST	443	49813	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.396241903 CEST	49814	443	192.168.2.9	20.109.210.53
Oct 13, 2024 20:11:15.396276951 CEST	443	49814	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:15.396435976 CEST	49814	443	192.168.2.9	20.109.210.53
Oct 13, 2024 20:11:15.398034096 CEST	49814	443	192.168.2.9	20.109.210.53
Oct 13, 2024 20:11:15.398049116 CEST	443	49814	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:15.813031912 CEST	443	49812	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.813739061 CEST	49812	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.813750029 CEST	443	49812	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.814006090 CEST	443	49809	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.814948082 CEST	443	49811	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.815048933 CEST	49812	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.815054893 CEST	443	49812	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.815584898 CEST	49809	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.815601110 CEST	443	49809	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.816328049 CEST	49809	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.816344976 CEST	443	49809	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.816854954 CEST	49811	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.816880941 CEST	443	49811	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.817595959 CEST	49811	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.817603111 CEST	443	49811	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.818145990 CEST	443	49810	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.818447113 CEST	49810	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.818453074 CEST	443	49810	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.819094896 CEST	49810	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.819099903 CEST	443	49810	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.831105947 CEST	443	49813	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.832107067 CEST	49813	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.832129955 CEST	443	49813	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.833164930 CEST	49813	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.833170891 CEST	443	49813	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.913937092 CEST	443	49812	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.914012909 CEST	443	49812	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.914096117 CEST	49812	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.914386988 CEST	49812	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.914406061 CEST	443	49812	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.914459944 CEST	49812	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.914465904 CEST	443	49812	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.916938066 CEST	443	49809	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.917010069 CEST	443	49809	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.917215109 CEST	49809	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.917660952 CEST	49809	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.917681932 CEST	443	49809	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.918062925 CEST	443	49811	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.918211937 CEST	443	49811	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.918260098 CEST	49811	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.919899940 CEST	49811	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.919914007 CEST	443	49811	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.922396898 CEST	49815	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.922425985 CEST	443	49815	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.922514915 CEST	49815	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.923465967 CEST	49815	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.923480988 CEST	443	49815	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.924997091 CEST	49816	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.925050974 CEST	443	49816	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.925184965 CEST	49816	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.925292969 CEST	49816	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.925307989 CEST	443	49816	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.926781893 CEST	49817	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.926821947 CEST	443	49817	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.926914930 CEST	49817	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.927109957 CEST	49817	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.927123070 CEST	443	49817	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.936459064 CEST	443	49810	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.936530113 CEST	443	49810	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.936907053 CEST	49810	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.937140942 CEST	49810	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.937149048 CEST	443	49810	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.937175989 CEST	49810	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.937180996 CEST	443	49810	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.937268972 CEST	443	49813	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.937338114 CEST	443	49813	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.937387943 CEST	49813	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.939105034 CEST	49813	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.939120054 CEST	443	49813	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.943094015 CEST	49818	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.943115950 CEST	443	49818	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.943243027 CEST	49818	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.943536043 CEST	49818	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.943561077 CEST	443	49818	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.948121071 CEST	49819	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.948137999 CEST	443	49819	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:15.948244095 CEST	49819	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.952838898 CEST	49819	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:15.952851057 CEST	443	49819	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.114331961 CEST	443	49814	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:16.114418030 CEST	49814	443	192.168.2.9	20.109.210.53
Oct 13, 2024 20:11:16.117553949 CEST	49814	443	192.168.2.9	20.109.210.53
Oct 13, 2024 20:11:16.117567062 CEST	443	49814	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:16.117830992 CEST	443	49814	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:16.158021927 CEST	49814	443	192.168.2.9	20.109.210.53
Oct 13, 2024 20:11:16.379098892 CEST	49814	443	192.168.2.9	20.109.210.53
Oct 13, 2024 20:11:16.419403076 CEST	443	49814	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:16.593004942 CEST	443	49816	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.593513966 CEST	49816	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.593554974 CEST	443	49816	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.594073057 CEST	49816	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.594083071 CEST	443	49816	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.594737053 CEST	443	49817	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.595150948 CEST	49817	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.595168114 CEST	443	49817	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.595644951 CEST	49817	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.595660925 CEST	443	49817	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.603610039 CEST	443	49815	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.604028940 CEST	49815	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.604054928 CEST	443	49815	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.604455948 CEST	49815	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.604461908 CEST	443	49815	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.612392902 CEST	443	49814	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:16.612416983 CEST	443	49814	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:16.612426043 CEST	443	49814	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:16.612438917 CEST	443	49814	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:16.612472057 CEST	443	49814	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:16.612489939 CEST	49814	443	192.168.2.9	20.109.210.53
Oct 13, 2024 20:11:16.612513065 CEST	443	49814	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:16.612525940 CEST	49814	443	192.168.2.9	20.109.210.53
Oct 13, 2024 20:11:16.612559080 CEST	49814	443	192.168.2.9	20.109.210.53
Oct 13, 2024 20:11:16.612771034 CEST	443	49814	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:16.612823963 CEST	49814	443	192.168.2.9	20.109.210.53
Oct 13, 2024 20:11:16.612833023 CEST	443	49814	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:16.613177061 CEST	443	49814	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:16.613235950 CEST	49814	443	192.168.2.9	20.109.210.53
Oct 13, 2024 20:11:16.623893023 CEST	49814	443	192.168.2.9	20.109.210.53
Oct 13, 2024 20:11:16.623929977 CEST	443	49814	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:16.623946905 CEST	49814	443	192.168.2.9	20.109.210.53
Oct 13, 2024 20:11:16.623955965 CEST	443	49814	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:16.633661032 CEST	443	49818	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.634150982 CEST	49818	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.634166002 CEST	443	49818	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.634815931 CEST	49818	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.634820938 CEST	443	49818	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.636835098 CEST	443	49819	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.637197018 CEST	49819	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.637216091 CEST	443	49819	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.637593031 CEST	49819	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.637598038 CEST	443	49819	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.696504116 CEST	443	49816	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.696588993 CEST	443	49816	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.696659088 CEST	49816	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.696849108 CEST	49816	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.696871996 CEST	443	49816	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.696882963 CEST	49816	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.696891069 CEST	443	49816	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.699661016 CEST	443	49817	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.699826956 CEST	443	49817	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.699954033 CEST	49817	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.701055050 CEST	49817	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.701055050 CEST	49817	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.701075077 CEST	443	49817	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.701085091 CEST	443	49817	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.703553915 CEST	49821	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.703587055 CEST	443	49821	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.703696012 CEST	49821	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.703947067 CEST	49821	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.703959942 CEST	443	49821	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.705080032 CEST	49822	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.705090046 CEST	443	49822	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.705226898 CEST	49822	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.705384970 CEST	49822	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.705394030 CEST	443	49822	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.710540056 CEST	443	49815	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.710611105 CEST	443	49815	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.710747957 CEST	49815	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.710836887 CEST	49815	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.710836887 CEST	49815	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.710855961 CEST	443	49815	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.710870028 CEST	443	49815	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.713196993 CEST	49823	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.713226080 CEST	443	49823	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.713531017 CEST	49823	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.713609934 CEST	49823	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.713627100 CEST	443	49823	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.741575956 CEST	443	49818	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.741641045 CEST	443	49818	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.741736889 CEST	49818	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.742110968 CEST	49818	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.742130041 CEST	443	49818	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.743426085 CEST	443	49819	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.743453026 CEST	443	49819	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.743489981 CEST	49819	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.743505955 CEST	443	49819	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.743521929 CEST	443	49819	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.743561029 CEST	49819	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.743758917 CEST	49819	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.743768930 CEST	443	49819	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.743782997 CEST	49819	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.743789911 CEST	443	49819	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.745254040 CEST	49824	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.745286942 CEST	443	49824	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.745356083 CEST	49824	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.745728970 CEST	49824	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.745745897 CEST	443	49824	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.746061087 CEST	49825	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.746088028 CEST	443	49825	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:16.746181965 CEST	49825	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.746292114 CEST	49825	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:16.746304989 CEST	443	49825	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.368248940 CEST	443	49823	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.371345043 CEST	49823	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.371377945 CEST	443	49823	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.371911049 CEST	49823	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.371917963 CEST	443	49823	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.382472992 CEST	443	49821	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.386434078 CEST	49821	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.386451006 CEST	443	49821	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.387407064 CEST	49821	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.387415886 CEST	443	49821	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.391096115 CEST	443	49822	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.396184921 CEST	49822	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.396184921 CEST	49822	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.396200895 CEST	443	49822	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.396209002 CEST	443	49822	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.411885977 CEST	443	49825	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.412389994 CEST	49825	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.412404060 CEST	443	49825	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.413302898 CEST	49825	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.413326979 CEST	443	49825	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.856380939 CEST	443	49823	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.856446981 CEST	443	49823	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.856630087 CEST	49823	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.856726885 CEST	49823	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.856744051 CEST	443	49823	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.856755018 CEST	49823	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.856760979 CEST	443	49823	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.856863022 CEST	443	49821	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.856975079 CEST	443	49821	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.857044935 CEST	443	49822	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.857069016 CEST	443	49822	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.857121944 CEST	49821	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.857121944 CEST	49822	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.857152939 CEST	443	49822	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.857286930 CEST	49821	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.857286930 CEST	49821	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.857301950 CEST	443	49821	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.857309103 CEST	443	49821	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.857449055 CEST	443	49822	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.857597113 CEST	49822	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.858087063 CEST	443	49824	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.858213902 CEST	49822	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.858213902 CEST	49822	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.858221054 CEST	443	49822	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.858230114 CEST	443	49822	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.858990908 CEST	49824	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.858999968 CEST	443	49824	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.859462976 CEST	49824	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.859467030 CEST	443	49824	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.860914946 CEST	49826	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.860951900 CEST	443	49826	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.861418962 CEST	49826	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.861480951 CEST	49826	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.861490965 CEST	443	49826	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.862811089 CEST	49827	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.862832069 CEST	443	49827	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.862970114 CEST	49827	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.863059044 CEST	49827	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.863068104 CEST	443	49827	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.864109993 CEST	49828	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.864137888 CEST	443	49828	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.864187002 CEST	49828	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.864320040 CEST	49828	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.864335060 CEST	443	49828	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.954152107 CEST	443	49825	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.954214096 CEST	443	49825	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.954427004 CEST	49825	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.954427004 CEST	49825	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.954462051 CEST	49825	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.954482079 CEST	443	49825	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.957256079 CEST	49829	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.957283974 CEST	443	49829	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.957375050 CEST	49829	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.957536936 CEST	49829	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.957550049 CEST	443	49829	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.963011026 CEST	443	49824	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.963077068 CEST	443	49824	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.963193893 CEST	49824	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.963269949 CEST	49824	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.963284969 CEST	443	49824	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.963296890 CEST	49824	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.963301897 CEST	443	49824	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.965610027 CEST	49830	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.965639114 CEST	443	49830	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:17.965744019 CEST	49830	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.965967894 CEST	49830	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:17.965982914 CEST	443	49830	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.608561039 CEST	443	49765	172.217.16.196	192.168.2.9
Oct 13, 2024 20:11:18.608630896 CEST	443	49765	172.217.16.196	192.168.2.9
Oct 13, 2024 20:11:18.608680964 CEST	49765	443	192.168.2.9	172.217.16.196
Oct 13, 2024 20:11:18.610565901 CEST	443	49826	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.610991955 CEST	49826	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.611002922 CEST	443	49826	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.611901999 CEST	49826	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.611907005 CEST	443	49826	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.614418983 CEST	443	49827	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.614824057 CEST	49827	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.614845037 CEST	443	49827	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.615215063 CEST	49827	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.615219116 CEST	443	49827	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.716340065 CEST	443	49826	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.716371059 CEST	443	49826	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.716418028 CEST	49826	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.716422081 CEST	443	49826	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.716460943 CEST	49826	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.716703892 CEST	49826	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.716721058 CEST	443	49826	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.716747046 CEST	49826	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.716752052 CEST	443	49826	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.717830896 CEST	443	49827	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.717914104 CEST	443	49827	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.718208075 CEST	49827	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.718687057 CEST	49827	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.718708038 CEST	443	49827	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.718722105 CEST	49827	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.718728065 CEST	443	49827	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.722131968 CEST	49831	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.722163916 CEST	443	49831	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.722276926 CEST	49831	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.722940922 CEST	49832	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.723011017 CEST	443	49832	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.723208904 CEST	49832	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.723376036 CEST	49831	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.723393917 CEST	443	49831	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.723488092 CEST	49832	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.723510027 CEST	443	49832	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.795464993 CEST	443	49829	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.796251059 CEST	49829	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.796279907 CEST	443	49829	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.796740055 CEST	49829	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.796755075 CEST	443	49829	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.797096968 CEST	443	49830	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.797909021 CEST	49830	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.797920942 CEST	443	49830	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.797945976 CEST	49830	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.797950029 CEST	443	49830	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.803311110 CEST	443	49828	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.803734064 CEST	49828	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.803770065 CEST	443	49828	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.804136992 CEST	49828	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.804142952 CEST	443	49828	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.897088051 CEST	443	49829	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.897299051 CEST	443	49829	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.897439003 CEST	49829	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.897500992 CEST	49829	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.897524118 CEST	443	49829	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.897546053 CEST	49829	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.897555113 CEST	443	49829	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.899985075 CEST	443	49830	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.900311947 CEST	49833	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.900356054 CEST	443	49833	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.900536060 CEST	49833	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.900667906 CEST	49833	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.900690079 CEST	443	49833	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.901426077 CEST	443	49830	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.901472092 CEST	443	49830	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.901549101 CEST	49830	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.901549101 CEST	49830	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.901572943 CEST	49830	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.901591063 CEST	443	49830	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.903794050 CEST	49834	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.903810024 CEST	443	49834	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.903877020 CEST	49834	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.904042006 CEST	49834	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.904055119 CEST	443	49834	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.910410881 CEST	443	49828	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.910489082 CEST	443	49828	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.910672903 CEST	49828	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.910731077 CEST	49828	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.910747051 CEST	443	49828	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.910759926 CEST	49828	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.910765886 CEST	443	49828	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.913191080 CEST	49835	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.913232088 CEST	443	49835	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:18.913383007 CEST	49835	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.913552046 CEST	49835	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:18.913568020 CEST	443	49835	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.478950977 CEST	443	49831	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.479392052 CEST	49831	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.479417086 CEST	443	49831	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.479846954 CEST	443	49832	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.479986906 CEST	49831	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.479995966 CEST	443	49831	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.480297089 CEST	49832	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.480319023 CEST	443	49832	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.480750084 CEST	49832	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.480757952 CEST	443	49832	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.580049038 CEST	443	49831	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.580389023 CEST	443	49831	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.580447912 CEST	49831	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.580529928 CEST	49831	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.580548048 CEST	443	49831	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.580562115 CEST	49831	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.580569029 CEST	443	49831	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.583749056 CEST	49836	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.583791971 CEST	443	49836	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.583976984 CEST	49836	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.584162951 CEST	49836	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.584176064 CEST	443	49836	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.584393978 CEST	443	49832	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.584423065 CEST	443	49832	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.584472895 CEST	443	49832	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.584527969 CEST	49832	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.584698915 CEST	49832	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.584713936 CEST	443	49832	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.584723949 CEST	49832	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.584731102 CEST	443	49832	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.587193966 CEST	49837	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.587229013 CEST	443	49837	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.587291956 CEST	49837	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.587505102 CEST	49837	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.587519884 CEST	443	49837	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.667663097 CEST	443	49834	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.668368101 CEST	49834	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.668406010 CEST	443	49834	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.669270039 CEST	49834	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.669275999 CEST	443	49834	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.671755075 CEST	443	49833	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.672219992 CEST	49833	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.672228098 CEST	443	49833	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.672821045 CEST	49833	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.672827005 CEST	443	49833	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.677897930 CEST	443	49835	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.678261042 CEST	49835	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.678272963 CEST	443	49835	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.678864002 CEST	49835	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.678870916 CEST	443	49835	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.770301104 CEST	443	49834	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.770415068 CEST	443	49834	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.770471096 CEST	49834	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.770749092 CEST	49834	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.770770073 CEST	443	49834	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.770783901 CEST	49834	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.770791054 CEST	443	49834	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.773073912 CEST	443	49833	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.773264885 CEST	443	49833	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.773391008 CEST	49833	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.773580074 CEST	49833	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.773585081 CEST	443	49833	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.773597002 CEST	49833	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.773601055 CEST	443	49833	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.774004936 CEST	49838	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.774040937 CEST	443	49838	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.774229050 CEST	49838	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.774409056 CEST	49838	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.774425030 CEST	443	49838	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.776482105 CEST	49839	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.776520967 CEST	443	49839	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.776578903 CEST	49839	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.776729107 CEST	49839	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.776740074 CEST	443	49839	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.788868904 CEST	443	49835	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.789036036 CEST	443	49835	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.789088964 CEST	49835	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.789171934 CEST	49835	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.789181948 CEST	443	49835	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.789210081 CEST	49835	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.789215088 CEST	443	49835	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.792335987 CEST	49840	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.792368889 CEST	443	49840	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:19.792431116 CEST	49840	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.792824984 CEST	49840	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:19.792844057 CEST	443	49840	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:20.581803083 CEST	49765	443	192.168.2.9	172.217.16.196
Oct 13, 2024 20:11:20.581834078 CEST	443	49765	172.217.16.196	192.168.2.9
Oct 13, 2024 20:11:21.109736919 CEST	443	49837	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.110280037 CEST	443	49836	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.110526085 CEST	49837	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.110549927 CEST	443	49837	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.110892057 CEST	49836	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.110958099 CEST	443	49836	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.111171961 CEST	49837	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.111179113 CEST	443	49837	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.111318111 CEST	49836	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.111334085 CEST	443	49836	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.118221045 CEST	443	49838	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.118664026 CEST	49838	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.118679047 CEST	443	49838	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.119046926 CEST	49838	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.119057894 CEST	443	49838	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.119326115 CEST	443	49840	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.119636059 CEST	49840	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.119658947 CEST	443	49840	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.120054007 CEST	49840	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.120062113 CEST	443	49840	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.129081964 CEST	443	49839	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.129458904 CEST	49839	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.129535913 CEST	443	49839	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.129837990 CEST	49839	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.129853010 CEST	443	49839	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.214689970 CEST	443	49837	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.214699030 CEST	443	49836	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.214876890 CEST	443	49836	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.214932919 CEST	443	49836	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.215069056 CEST	443	49837	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.215087891 CEST	49836	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.215087891 CEST	49836	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.215087891 CEST	49836	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.215121984 CEST	49837	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.215218067 CEST	49837	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.215218067 CEST	49837	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.215240002 CEST	443	49837	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.215253115 CEST	443	49837	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.218570948 CEST	443	49838	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.218728065 CEST	49841	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.218775988 CEST	443	49841	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.218779087 CEST	443	49838	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.218802929 CEST	49842	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.218811989 CEST	443	49842	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.218847036 CEST	49841	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.218888998 CEST	49842	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.218897104 CEST	49838	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.219043016 CEST	49838	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.219043016 CEST	49838	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.219048977 CEST	443	49838	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.219057083 CEST	443	49838	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.219172001 CEST	49841	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.219189882 CEST	443	49841	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.219260931 CEST	49842	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.219275951 CEST	443	49842	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.220098019 CEST	443	49840	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.220216990 CEST	443	49840	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.220278025 CEST	49840	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.220282078 CEST	443	49840	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.220447063 CEST	49840	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.220447063 CEST	49840	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.220467091 CEST	443	49840	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.220479012 CEST	49840	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.220488071 CEST	443	49840	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.221659899 CEST	49843	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.221679926 CEST	443	49843	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.221767902 CEST	49843	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.221993923 CEST	49843	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.222006083 CEST	443	49843	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.222579956 CEST	49844	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.222605944 CEST	443	49844	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.222697020 CEST	49844	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.222807884 CEST	49844	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.222822905 CEST	443	49844	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.235224009 CEST	443	49839	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.235759020 CEST	443	49839	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.235821009 CEST	49839	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.235861063 CEST	49839	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.235861063 CEST	49839	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.235888958 CEST	443	49839	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.235893965 CEST	443	49839	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.238225937 CEST	49845	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.238255978 CEST	443	49845	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.238360882 CEST	49845	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.238442898 CEST	49845	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.238455057 CEST	443	49845	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.517437935 CEST	49836	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.517472029 CEST	443	49836	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.911920071 CEST	443	49842	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.912400007 CEST	49842	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.912431955 CEST	443	49842	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.912863970 CEST	49842	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.912869930 CEST	443	49842	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.918111086 CEST	443	49844	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.918453932 CEST	49844	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.918481112 CEST	443	49844	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.918895960 CEST	49844	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.918901920 CEST	443	49844	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.923239946 CEST	443	49841	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.923564911 CEST	49841	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.923571110 CEST	443	49841	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.923965931 CEST	49841	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.923969030 CEST	443	49841	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.924719095 CEST	443	49845	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.924860954 CEST	443	49843	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.925116062 CEST	49845	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.925142050 CEST	443	49845	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.925424099 CEST	49845	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.925424099 CEST	49843	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.925434113 CEST	443	49845	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.925440073 CEST	443	49843	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:21.925720930 CEST	49843	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:21.925734997 CEST	443	49843	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.015105963 CEST	443	49842	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.015460014 CEST	443	49842	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.015513897 CEST	49842	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.015568972 CEST	49842	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.015580893 CEST	443	49842	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.015592098 CEST	49842	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.015598059 CEST	443	49842	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.018767118 CEST	49846	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.018790960 CEST	443	49846	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.018975019 CEST	49846	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.019016027 CEST	49846	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.019021988 CEST	443	49846	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.037683010 CEST	443	49844	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.037719011 CEST	443	49844	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.037765026 CEST	443	49844	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.037904978 CEST	49844	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.038017035 CEST	49844	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.038026094 CEST	443	49844	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.038038015 CEST	49844	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.038043022 CEST	443	49844	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.038702965 CEST	443	49845	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.038763046 CEST	443	49845	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.039118052 CEST	49845	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.039118052 CEST	49845	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.039144039 CEST	49845	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.039153099 CEST	443	49845	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.039772034 CEST	443	49841	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.039910078 CEST	443	49843	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.039963007 CEST	443	49843	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.040070057 CEST	49843	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.040102959 CEST	443	49841	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.040153027 CEST	49841	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.040215015 CEST	49843	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.040226936 CEST	443	49843	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.040239096 CEST	49843	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.040246964 CEST	443	49843	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.041083097 CEST	49841	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.041088104 CEST	443	49841	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.042121887 CEST	49847	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.042131901 CEST	443	49847	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.042275906 CEST	49847	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.042682886 CEST	49848	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.042706966 CEST	443	49848	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.042769909 CEST	49848	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.043045998 CEST	49847	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.043055058 CEST	443	49847	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.043369055 CEST	49848	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.043396950 CEST	443	49848	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.043972969 CEST	49849	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.043991089 CEST	443	49849	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.044050932 CEST	49849	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.044164896 CEST	49849	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.044173956 CEST	443	49849	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.044280052 CEST	49850	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.044286966 CEST	443	49850	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.044337034 CEST	49850	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.044444084 CEST	49850	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.044449091 CEST	443	49850	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.656913042 CEST	443	49849	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.658453941 CEST	49849	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.658480883 CEST	443	49849	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.659657955 CEST	49849	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.659666061 CEST	443	49849	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.682414055 CEST	443	49846	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.682934999 CEST	49846	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.682960033 CEST	443	49846	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.683710098 CEST	49846	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.683718920 CEST	443	49846	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.720892906 CEST	443	49848	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.723800898 CEST	443	49847	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.724384069 CEST	49848	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.724399090 CEST	443	49848	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.725145102 CEST	49848	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.725152969 CEST	443	49848	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.725703955 CEST	49847	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.725723982 CEST	443	49847	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.726389885 CEST	49847	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.726398945 CEST	443	49847	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.727010012 CEST	443	49850	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.727494955 CEST	49850	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.727519035 CEST	443	49850	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.728085995 CEST	49850	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.728091002 CEST	443	49850	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.764867067 CEST	443	49849	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.765209913 CEST	443	49849	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.765261889 CEST	443	49849	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.765279055 CEST	49849	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.765300035 CEST	49849	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.775799036 CEST	49849	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.775820971 CEST	443	49849	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.775834084 CEST	49849	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.775840044 CEST	443	49849	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.779243946 CEST	49851	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.779279947 CEST	443	49851	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.779391050 CEST	49851	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.779695034 CEST	49851	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.779709101 CEST	443	49851	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.783711910 CEST	443	49846	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.784090996 CEST	443	49846	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.784281015 CEST	49846	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.784281015 CEST	49846	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.784549952 CEST	49846	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.784559011 CEST	443	49846	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.789844990 CEST	49852	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.789881945 CEST	443	49852	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.790138006 CEST	49852	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.790513992 CEST	49852	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.790528059 CEST	443	49852	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.822683096 CEST	443	49848	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.822841883 CEST	443	49848	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.822890997 CEST	443	49848	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.823033094 CEST	49848	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.823290110 CEST	49848	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.823290110 CEST	49848	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.823308945 CEST	443	49848	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.823312998 CEST	443	49848	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.826823950 CEST	49853	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.826862097 CEST	443	49853	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.827001095 CEST	49853	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.827811003 CEST	49853	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.827825069 CEST	443	49853	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.902976990 CEST	443	49850	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.903076887 CEST	443	49850	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.903362989 CEST	49850	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.903491020 CEST	49850	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.903512955 CEST	443	49850	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.903527021 CEST	49850	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.903533936 CEST	443	49850	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.906791925 CEST	443	49847	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.906995058 CEST	443	49847	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.907049894 CEST	49847	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.907284021 CEST	49854	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.907329082 CEST	443	49854	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.907479048 CEST	49847	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.907491922 CEST	443	49847	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.907521963 CEST	49854	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.907526016 CEST	49847	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.907531023 CEST	443	49847	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.909006119 CEST	49854	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.909019947 CEST	443	49854	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.911361933 CEST	49855	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.911412001 CEST	443	49855	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:22.911791086 CEST	49855	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.912123919 CEST	49855	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:22.912141085 CEST	443	49855	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.439376116 CEST	443	49852	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.440217972 CEST	49852	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.440243959 CEST	443	49852	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.440676928 CEST	49852	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.440682888 CEST	443	49852	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.459382057 CEST	443	49851	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.462637901 CEST	49851	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.462651014 CEST	443	49851	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.463193893 CEST	49851	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.463201046 CEST	443	49851	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.520734072 CEST	443	49853	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.521208048 CEST	49853	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.521230936 CEST	443	49853	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.521692991 CEST	49853	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.521699905 CEST	443	49853	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.540111065 CEST	443	49852	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.540190935 CEST	443	49852	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.540240049 CEST	443	49852	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.540261984 CEST	49852	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.540301085 CEST	49852	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.540417910 CEST	49852	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.540432930 CEST	443	49852	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.540450096 CEST	49852	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.540456057 CEST	443	49852	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.543653965 CEST	49856	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.543680906 CEST	443	49856	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.543819904 CEST	49856	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.543970108 CEST	49856	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.543982983 CEST	443	49856	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.563642979 CEST	443	49851	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.563729048 CEST	443	49851	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.563797951 CEST	49851	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.564021111 CEST	49851	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.564037085 CEST	443	49851	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.564049006 CEST	49851	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.564064980 CEST	443	49851	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.567397118 CEST	49857	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.567431927 CEST	443	49857	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.567786932 CEST	49857	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.567990065 CEST	49857	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.567996979 CEST	443	49857	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.573000908 CEST	443	49855	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.573200941 CEST	443	49854	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.573477030 CEST	49855	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.573493004 CEST	443	49855	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.573648930 CEST	49854	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.573677063 CEST	443	49854	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.574013948 CEST	49855	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.574019909 CEST	443	49855	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.574147940 CEST	49854	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.574153900 CEST	443	49854	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.628082991 CEST	443	49853	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.628175974 CEST	443	49853	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.628222942 CEST	49853	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.628443956 CEST	49853	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.628463984 CEST	443	49853	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.628473997 CEST	49853	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.628479958 CEST	443	49853	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.631624937 CEST	49858	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.631661892 CEST	443	49858	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.631725073 CEST	49858	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.631943941 CEST	49858	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.631953955 CEST	443	49858	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.675271988 CEST	443	49855	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.675832987 CEST	443	49855	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.675908089 CEST	49855	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.676013947 CEST	49855	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.676033974 CEST	443	49855	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.678314924 CEST	443	49854	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.678344965 CEST	443	49854	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.678391933 CEST	443	49854	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.678399086 CEST	49854	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.678440094 CEST	49854	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.679907084 CEST	49854	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.679923058 CEST	443	49854	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.679944992 CEST	49854	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.679949999 CEST	443	49854	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.686106920 CEST	49859	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.686137915 CEST	443	49859	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.686285973 CEST	49859	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.688529968 CEST	49860	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.688571930 CEST	443	49860	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.688690901 CEST	49859	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.688703060 CEST	443	49859	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:23.688718081 CEST	49860	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.688839912 CEST	49860	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:23.688854933 CEST	443	49860	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.218439102 CEST	443	49856	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.219259024 CEST	49856	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.219290018 CEST	443	49856	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.220438957 CEST	49856	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.220447063 CEST	443	49856	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.261565924 CEST	443	49857	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.262070894 CEST	49857	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.262092113 CEST	443	49857	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.262876034 CEST	49857	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.262881994 CEST	443	49857	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.297487020 CEST	443	49858	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.313254118 CEST	49858	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.313278913 CEST	443	49858	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.314588070 CEST	49858	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.314594984 CEST	443	49858	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.321429014 CEST	443	49856	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.321465015 CEST	443	49856	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.321523905 CEST	443	49856	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.321609974 CEST	49856	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.327486992 CEST	49856	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.327486992 CEST	49856	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.327518940 CEST	443	49856	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.327528954 CEST	443	49856	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.362997055 CEST	443	49857	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.363450050 CEST	443	49857	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.363492966 CEST	49857	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.385065079 CEST	443	49860	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.393647909 CEST	443	49859	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.394675970 CEST	49857	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.394686937 CEST	443	49857	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.410887003 CEST	443	49858	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.411138058 CEST	443	49858	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.411178112 CEST	49858	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.412780046 CEST	49858	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.412786007 CEST	443	49858	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.416167021 CEST	49860	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.416201115 CEST	443	49860	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.417186022 CEST	49860	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.417191982 CEST	443	49860	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.417797089 CEST	49859	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.417808056 CEST	443	49859	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.419070005 CEST	49859	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.419075966 CEST	443	49859	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.424617052 CEST	49861	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.424655914 CEST	443	49861	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.424716949 CEST	49861	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.426402092 CEST	49862	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.426413059 CEST	443	49862	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.426469088 CEST	49862	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.426855087 CEST	49862	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.426871061 CEST	443	49862	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.427676916 CEST	49861	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.427683115 CEST	443	49861	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.428977013 CEST	49863	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.428999901 CEST	443	49863	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.431210041 CEST	49863	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.431330919 CEST	49863	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.431340933 CEST	443	49863	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.515145063 CEST	443	49860	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.515249014 CEST	443	49860	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.515297890 CEST	49860	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.515798092 CEST	49860	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.515808105 CEST	443	49860	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.515851974 CEST	49860	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.515856981 CEST	443	49860	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.518400908 CEST	443	49859	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.518440962 CEST	443	49859	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.518481970 CEST	443	49859	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.518527985 CEST	49859	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.518527985 CEST	49859	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.520117044 CEST	49859	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.520117044 CEST	49859	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.520138025 CEST	443	49859	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.520150900 CEST	443	49859	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.526566982 CEST	49865	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.526601076 CEST	49864	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.526607037 CEST	443	49865	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.526632071 CEST	443	49864	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.526706934 CEST	49865	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.526927948 CEST	49864	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.526932001 CEST	49865	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.526943922 CEST	443	49865	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:24.527156115 CEST	49864	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:24.527175903 CEST	443	49864	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.076709032 CEST	443	49862	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.077445030 CEST	49862	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.077487946 CEST	443	49862	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.077920914 CEST	49862	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.077931881 CEST	443	49862	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.078650951 CEST	443	49861	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.079118967 CEST	49861	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.079138041 CEST	443	49861	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.079766035 CEST	49861	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.079776049 CEST	443	49861	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.109641075 CEST	443	49863	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.110193968 CEST	49863	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.110223055 CEST	443	49863	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.110784054 CEST	49863	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.110790014 CEST	443	49863	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.177054882 CEST	443	49864	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.178318024 CEST	443	49862	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.178539038 CEST	443	49862	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.178600073 CEST	443	49862	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.178625107 CEST	49862	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.178656101 CEST	49862	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.180948019 CEST	443	49861	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.181190968 CEST	443	49861	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.181566954 CEST	49861	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.181974888 CEST	49864	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.182001114 CEST	443	49864	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.182316065 CEST	49862	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.182334900 CEST	443	49862	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.182380915 CEST	49862	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.182391882 CEST	443	49862	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.182842970 CEST	49864	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.182862997 CEST	443	49864	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.184025049 CEST	49861	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.184034109 CEST	443	49861	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.184053898 CEST	49861	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.184062004 CEST	443	49861	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.187431097 CEST	49866	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.187489986 CEST	443	49866	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.187678099 CEST	49866	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.188484907 CEST	49867	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.188519955 CEST	443	49867	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.188590050 CEST	49867	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.188776016 CEST	49867	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.188791037 CEST	443	49867	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.188926935 CEST	49866	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.188952923 CEST	443	49866	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.203098059 CEST	443	49865	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.203547001 CEST	49865	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.203576088 CEST	443	49865	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.204718113 CEST	49865	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.204730034 CEST	443	49865	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.216310024 CEST	443	49863	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.216376066 CEST	443	49863	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.216641903 CEST	49863	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.216861963 CEST	49863	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.216872931 CEST	443	49863	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.216886044 CEST	49863	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.216891050 CEST	443	49863	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.221777916 CEST	49868	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.221810102 CEST	443	49868	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.222361088 CEST	49868	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.222511053 CEST	49868	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.222521067 CEST	443	49868	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.281863928 CEST	443	49864	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.281934023 CEST	443	49864	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.282169104 CEST	49864	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.283154011 CEST	49864	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.283174038 CEST	443	49864	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.283190012 CEST	49864	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.283196926 CEST	443	49864	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.288146019 CEST	49869	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.288182974 CEST	443	49869	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.288245916 CEST	49869	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.288661003 CEST	49869	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.288676977 CEST	443	49869	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.309282064 CEST	443	49865	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.309350014 CEST	443	49865	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.309423923 CEST	49865	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.309762955 CEST	49865	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.309784889 CEST	443	49865	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.309793949 CEST	49865	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.309807062 CEST	443	49865	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.314600945 CEST	49870	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.314630985 CEST	443	49870	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.314821005 CEST	49870	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.315237999 CEST	49870	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.315260887 CEST	443	49870	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.842438936 CEST	443	49866	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.856224060 CEST	49866	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.856250048 CEST	443	49866	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.857187986 CEST	49866	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.857193947 CEST	443	49866	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.859759092 CEST	443	49867	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.860219955 CEST	49867	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.860243082 CEST	443	49867	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.860629082 CEST	49867	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.860645056 CEST	443	49867	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.914334059 CEST	443	49868	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.915117979 CEST	49868	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.915132046 CEST	443	49868	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.916241884 CEST	49868	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.916245937 CEST	443	49868	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.945708036 CEST	443	49869	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.946852922 CEST	49869	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.946876049 CEST	443	49869	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.947844028 CEST	49869	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.947849989 CEST	443	49869	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.953233004 CEST	443	49866	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.953332901 CEST	443	49866	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.953382969 CEST	443	49866	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.953433990 CEST	49866	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.953767061 CEST	49866	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.953785896 CEST	443	49866	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.953799009 CEST	49866	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.953804970 CEST	443	49866	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.957665920 CEST	49871	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.957699060 CEST	443	49871	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.957905054 CEST	49871	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.958024025 CEST	49871	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.958035946 CEST	443	49871	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.962439060 CEST	443	49867	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.962532043 CEST	443	49867	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.962605000 CEST	49867	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.962861061 CEST	49867	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.962877989 CEST	443	49867	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.962999105 CEST	49867	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.963009119 CEST	443	49867	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.964309931 CEST	443	49870	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.964787960 CEST	49870	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.964816093 CEST	443	49870	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.965435982 CEST	49870	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.965451002 CEST	443	49870	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.968039036 CEST	49872	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.968069077 CEST	443	49872	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:25.968127012 CEST	49872	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.968328953 CEST	49872	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:25.968342066 CEST	443	49872	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.033932924 CEST	443	49868	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.034109116 CEST	443	49868	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.034158945 CEST	49868	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.034167051 CEST	443	49868	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.034177065 CEST	443	49868	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.034241915 CEST	49868	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.034403086 CEST	49868	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.034403086 CEST	49868	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.034411907 CEST	443	49868	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.034419060 CEST	443	49868	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.040050983 CEST	49873	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.040083885 CEST	443	49873	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.040177107 CEST	49873	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.040381908 CEST	49873	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.040399075 CEST	443	49873	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.047358990 CEST	443	49869	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.047419071 CEST	443	49869	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.047672033 CEST	49869	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.047883034 CEST	49869	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.047898054 CEST	443	49869	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.047910929 CEST	49869	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.047918081 CEST	443	49869	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.054614067 CEST	49874	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.054622889 CEST	443	49874	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.054733992 CEST	49874	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.055217028 CEST	49874	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.055231094 CEST	443	49874	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.065205097 CEST	443	49870	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.065265894 CEST	443	49870	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.065375090 CEST	49870	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.065747976 CEST	49870	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.065759897 CEST	443	49870	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.065856934 CEST	49870	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.065862894 CEST	443	49870	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.071310043 CEST	49875	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.071345091 CEST	443	49875	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.071412086 CEST	49875	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.071634054 CEST	49875	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.071644068 CEST	443	49875	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.607399940 CEST	443	49871	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.614000082 CEST	49871	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.614021063 CEST	443	49871	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.616241932 CEST	49871	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.616246939 CEST	443	49871	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.647169113 CEST	443	49872	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.648092031 CEST	49872	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.648123026 CEST	443	49872	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.648746967 CEST	49872	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.648756981 CEST	443	49872	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.697390079 CEST	443	49873	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.698354006 CEST	49873	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.698383093 CEST	443	49873	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.699673891 CEST	49873	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.699680090 CEST	443	49873	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.704400063 CEST	443	49874	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.706577063 CEST	49874	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.706595898 CEST	443	49874	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.707771063 CEST	49874	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.707776070 CEST	443	49874	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.714251995 CEST	443	49871	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.714729071 CEST	443	49871	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.714802027 CEST	49871	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.715575933 CEST	49871	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.715590954 CEST	443	49871	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.722274065 CEST	49876	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.722322941 CEST	443	49876	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.722434998 CEST	49876	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.722951889 CEST	49876	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.722965956 CEST	443	49876	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.772520065 CEST	443	49875	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.773001909 CEST	49875	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.773039103 CEST	443	49875	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.773530960 CEST	49875	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.773541927 CEST	443	49875	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.805274963 CEST	443	49873	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.805337906 CEST	443	49873	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.805394888 CEST	49873	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.805694103 CEST	49873	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.805711031 CEST	443	49873	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.805721998 CEST	49873	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.805727959 CEST	443	49873	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.806116104 CEST	443	49872	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.806184053 CEST	443	49872	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.806227922 CEST	49872	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.806524038 CEST	49872	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.806544065 CEST	443	49872	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.806555986 CEST	49872	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.806561947 CEST	443	49872	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.806943893 CEST	443	49874	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.807013988 CEST	443	49874	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.807061911 CEST	49874	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.807749987 CEST	49874	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.807749987 CEST	49874	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.807755947 CEST	443	49874	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.807763100 CEST	443	49874	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.809945107 CEST	49877	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.809988022 CEST	443	49877	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.810048103 CEST	49877	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.810085058 CEST	49878	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.810095072 CEST	443	49878	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.810162067 CEST	49878	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.810617924 CEST	49877	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.810617924 CEST	49878	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.810638905 CEST	443	49877	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.810653925 CEST	443	49878	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.811072111 CEST	49879	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.811105967 CEST	443	49879	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.811172962 CEST	49879	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.811331987 CEST	49879	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.811343908 CEST	443	49879	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.947396994 CEST	443	49875	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.947473049 CEST	443	49875	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.947524071 CEST	49875	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.947714090 CEST	49875	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.947731018 CEST	443	49875	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.947736979 CEST	49875	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.947741985 CEST	443	49875	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.950776100 CEST	49880	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.950814009 CEST	443	49880	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:26.950894117 CEST	49880	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.951086044 CEST	49880	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:26.951102018 CEST	443	49880	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.398109913 CEST	443	49876	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.398634911 CEST	49876	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.398660898 CEST	443	49876	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.399111032 CEST	49876	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.399116993 CEST	443	49876	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.460623026 CEST	443	49878	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.460750103 CEST	443	49877	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.461107969 CEST	49878	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.461126089 CEST	443	49878	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.461575985 CEST	49877	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.461584091 CEST	443	49877	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.461612940 CEST	49878	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.461617947 CEST	443	49878	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.462071896 CEST	49877	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.462075949 CEST	443	49877	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.491534948 CEST	443	49879	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.492044926 CEST	49879	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.492078066 CEST	443	49879	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.492501020 CEST	49879	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.492508888 CEST	443	49879	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.522114038 CEST	443	49876	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.522136927 CEST	443	49876	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.522197962 CEST	443	49876	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.522320032 CEST	49876	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.522320032 CEST	49876	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.522521019 CEST	49876	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.522540092 CEST	443	49876	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.522548914 CEST	49876	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.522555113 CEST	443	49876	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.525548935 CEST	49881	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.525597095 CEST	443	49881	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.525681019 CEST	49881	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.525855064 CEST	49881	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.525873899 CEST	443	49881	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.561785936 CEST	443	49878	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.562285900 CEST	443	49878	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.562350035 CEST	49878	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.562469006 CEST	49878	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.562486887 CEST	443	49878	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.562493086 CEST	49878	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.562499046 CEST	443	49878	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.563441992 CEST	443	49877	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.563518047 CEST	443	49877	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.563781977 CEST	49877	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.564044952 CEST	49877	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.564052105 CEST	443	49877	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.564064980 CEST	49877	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.564069033 CEST	443	49877	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.571820974 CEST	49882	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.571866989 CEST	443	49882	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.571933031 CEST	49882	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.572271109 CEST	49882	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.572293043 CEST	443	49882	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.572673082 CEST	49883	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.572712898 CEST	443	49883	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.572952986 CEST	49883	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.572952986 CEST	49883	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.572988033 CEST	443	49883	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.600152016 CEST	443	49879	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.600219011 CEST	443	49879	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.600379944 CEST	49879	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.600444078 CEST	49879	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.600452900 CEST	443	49879	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.603477001 CEST	49884	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.603504896 CEST	443	49884	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.603569984 CEST	49884	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.603713036 CEST	49884	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.603734970 CEST	443	49884	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.645503998 CEST	443	49880	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.646183014 CEST	49880	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.646214962 CEST	443	49880	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:27.646646976 CEST	49880	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:27.646656036 CEST	443	49880	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:28.762777090 CEST	443	49880	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:28.762803078 CEST	443	49880	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:28.762861013 CEST	443	49880	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:28.762866020 CEST	49880	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:28.762948036 CEST	49880	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:28.763204098 CEST	49880	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:28.763221979 CEST	443	49880	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:28.763256073 CEST	49880	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:28.763262987 CEST	443	49880	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:28.766395092 CEST	49885	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:28.766438961 CEST	443	49885	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:28.766637087 CEST	49885	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:28.766849041 CEST	49885	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:28.766860962 CEST	443	49885	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:28.961656094 CEST	443	49883	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:28.962368965 CEST	49883	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:28.962383032 CEST	443	49883	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:28.962773085 CEST	49883	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:28.962785959 CEST	443	49883	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:28.962872028 CEST	443	49881	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:28.963727951 CEST	49881	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:28.963742971 CEST	443	49881	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:28.964509010 CEST	49881	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:28.964517117 CEST	443	49881	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:28.965373039 CEST	443	49882	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:28.965691090 CEST	49882	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:28.965702057 CEST	443	49882	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:28.966063976 CEST	49882	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:28.966068983 CEST	443	49882	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:28.966217995 CEST	443	49884	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:28.966469049 CEST	49884	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:28.966485023 CEST	443	49884	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:28.966823101 CEST	49884	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:28.966828108 CEST	443	49884	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.062874079 CEST	443	49883	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.063003063 CEST	443	49883	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.063067913 CEST	49883	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.063309908 CEST	49883	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.063330889 CEST	443	49883	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.063343048 CEST	49883	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.063349962 CEST	443	49883	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.064508915 CEST	443	49881	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.064616919 CEST	443	49881	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.064661026 CEST	443	49881	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.064726114 CEST	49881	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.065191031 CEST	49881	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.065211058 CEST	443	49881	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.067955971 CEST	49886	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.067986965 CEST	443	49886	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.068402052 CEST	49886	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.069006920 CEST	443	49882	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.069380045 CEST	443	49882	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.069426060 CEST	443	49882	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.069432020 CEST	49882	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.069462061 CEST	49882	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.069494009 CEST	49887	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.069525957 CEST	443	49887	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.069581032 CEST	49887	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.069762945 CEST	443	49884	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.069806099 CEST	443	49884	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.069853067 CEST	443	49884	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.069892883 CEST	49884	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.069927931 CEST	49886	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.069956064 CEST	443	49886	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.070179939 CEST	49882	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.070188046 CEST	443	49882	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.072747946 CEST	49888	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.072773933 CEST	443	49888	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.072846889 CEST	49888	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.073122025 CEST	49888	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.073122025 CEST	49887	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.073143959 CEST	443	49888	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.073159933 CEST	443	49887	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.073254108 CEST	49884	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.073265076 CEST	443	49884	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.073281050 CEST	49884	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.073285103 CEST	443	49884	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.076164961 CEST	49889	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.076186895 CEST	443	49889	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.076288939 CEST	49889	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.076384068 CEST	49889	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.076405048 CEST	443	49889	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.438208103 CEST	443	49885	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.438750982 CEST	49885	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.438771009 CEST	443	49885	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.439161062 CEST	49885	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.439172029 CEST	443	49885	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.540476084 CEST	443	49885	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.541419029 CEST	443	49885	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.541502953 CEST	49885	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.541569948 CEST	49885	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.541569948 CEST	49885	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.541591883 CEST	443	49885	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.541601896 CEST	443	49885	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.544244051 CEST	49890	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.544275999 CEST	443	49890	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.544424057 CEST	49890	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.544544935 CEST	49890	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.544555902 CEST	443	49890	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.724617004 CEST	443	49889	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.725193024 CEST	49889	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.725222111 CEST	443	49889	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.725712061 CEST	49889	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.725725889 CEST	443	49889	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.736727953 CEST	443	49888	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.737283945 CEST	49888	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.737314939 CEST	443	49888	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.737916946 CEST	49888	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.737922907 CEST	443	49888	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.769870043 CEST	443	49887	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.769920111 CEST	443	49886	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.770484924 CEST	49887	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.770505905 CEST	443	49887	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.770941019 CEST	49886	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.770958900 CEST	443	49886	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.770993948 CEST	49887	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.770998955 CEST	443	49887	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.771142006 CEST	49886	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.771159887 CEST	443	49886	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.827807903 CEST	443	49889	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.827888012 CEST	443	49889	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.827924967 CEST	49889	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.828169107 CEST	49889	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.828188896 CEST	443	49889	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.828202963 CEST	49889	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.828210115 CEST	443	49889	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.839303017 CEST	443	49888	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.839338064 CEST	49891	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.839369059 CEST	443	49891	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.839437008 CEST	49891	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.839637995 CEST	443	49888	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.839687109 CEST	443	49888	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.839690924 CEST	49888	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.839767933 CEST	49888	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.840127945 CEST	49888	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.840137005 CEST	443	49888	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.840219021 CEST	49888	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.840224028 CEST	443	49888	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.842426062 CEST	49891	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.842444897 CEST	443	49891	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.847032070 CEST	49892	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.847064972 CEST	443	49892	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.849251032 CEST	49892	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.849617958 CEST	49892	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.849630117 CEST	443	49892	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.875250101 CEST	443	49887	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.875288010 CEST	443	49887	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.875333071 CEST	443	49887	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.875341892 CEST	49887	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.875381947 CEST	49887	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.875513077 CEST	443	49886	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.875526905 CEST	443	49886	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.875571966 CEST	443	49886	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.875658035 CEST	49886	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.875749111 CEST	49886	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.875817060 CEST	49887	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.875833035 CEST	443	49887	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.875845909 CEST	49887	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.875852108 CEST	443	49887	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.876039028 CEST	49886	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.876039028 CEST	49886	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.876059055 CEST	443	49886	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.876070023 CEST	443	49886	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.881000996 CEST	49893	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.881020069 CEST	443	49893	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.881556034 CEST	49893	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.881774902 CEST	49893	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.881783962 CEST	443	49893	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.882798910 CEST	49894	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.882812023 CEST	443	49894	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:29.882870913 CEST	49894	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.883436918 CEST	49894	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:29.883445978 CEST	443	49894	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.196325064 CEST	443	49890	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.197541952 CEST	49890	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.197554111 CEST	443	49890	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.198502064 CEST	49890	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.198509932 CEST	443	49890	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.300657034 CEST	443	49890	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.300715923 CEST	443	49890	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.300955057 CEST	49890	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.301055908 CEST	49890	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.301055908 CEST	49890	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.301084995 CEST	443	49890	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.301095009 CEST	443	49890	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.306782961 CEST	49895	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.306817055 CEST	443	49895	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.307043076 CEST	49895	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.307168961 CEST	49895	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.307183027 CEST	443	49895	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.496917963 CEST	443	49892	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.497731924 CEST	49892	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.497745991 CEST	443	49892	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.498575926 CEST	49892	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.498580933 CEST	443	49892	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.507366896 CEST	443	49891	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.508208990 CEST	49891	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.508225918 CEST	443	49891	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.509116888 CEST	49891	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.509121895 CEST	443	49891	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.536833048 CEST	443	49894	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.537401915 CEST	49894	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.537414074 CEST	443	49894	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.538270950 CEST	49894	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.538275957 CEST	443	49894	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.563180923 CEST	443	49893	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.563806057 CEST	49893	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.563822031 CEST	443	49893	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.564331055 CEST	49893	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.564340115 CEST	443	49893	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.598854065 CEST	443	49892	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.598882914 CEST	443	49892	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.598944902 CEST	443	49892	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.598990917 CEST	49892	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.599066973 CEST	49892	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.599184990 CEST	49892	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.599196911 CEST	443	49892	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.599211931 CEST	49892	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.599217892 CEST	443	49892	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.604582071 CEST	49896	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.604593992 CEST	443	49896	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.604710102 CEST	49896	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.604847908 CEST	49896	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.604857922 CEST	443	49896	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.609754086 CEST	443	49891	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.609986067 CEST	443	49891	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.610073090 CEST	49891	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.610297918 CEST	49891	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.610297918 CEST	49891	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.610308886 CEST	443	49891	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.610312939 CEST	443	49891	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.614967108 CEST	49897	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.614993095 CEST	443	49897	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.615164042 CEST	49897	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.615262032 CEST	49897	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.615277052 CEST	443	49897	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.638309002 CEST	443	49894	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.638955116 CEST	443	49894	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.638993979 CEST	443	49894	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.639014959 CEST	49894	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.639116049 CEST	49894	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.639116049 CEST	49894	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.639146090 CEST	49894	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.639158964 CEST	443	49894	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.643012047 CEST	49898	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.643045902 CEST	443	49898	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.643368959 CEST	49898	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.644490957 CEST	49898	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.644516945 CEST	443	49898	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.668080091 CEST	443	49893	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.668631077 CEST	443	49893	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.669382095 CEST	49893	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.682070017 CEST	49893	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.682106018 CEST	443	49893	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.686151028 CEST	49899	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.686182976 CEST	443	49899	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.686268091 CEST	49899	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.686393023 CEST	49899	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.686398983 CEST	443	49899	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.983100891 CEST	443	49895	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.983601093 CEST	49895	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.983627081 CEST	443	49895	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:30.984093904 CEST	49895	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:30.984101057 CEST	443	49895	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.088748932 CEST	443	49895	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.089083910 CEST	443	49895	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.089186907 CEST	49895	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.089186907 CEST	49895	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.089229107 CEST	49895	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.089241982 CEST	443	49895	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.092087984 CEST	49900	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.092122078 CEST	443	49900	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.092446089 CEST	49900	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.092751980 CEST	49900	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.092762947 CEST	443	49900	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.264017105 CEST	443	49897	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.264734983 CEST	49897	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.264758110 CEST	443	49897	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.265801907 CEST	49897	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.265808105 CEST	443	49897	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.281771898 CEST	443	49896	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.282428980 CEST	49896	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.282459974 CEST	443	49896	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.283212900 CEST	49896	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.283217907 CEST	443	49896	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.297354937 CEST	443	49898	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.298024893 CEST	49898	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.298032999 CEST	443	49898	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.299715996 CEST	49898	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.299721956 CEST	443	49898	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.334393978 CEST	443	49899	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.354749918 CEST	49899	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.354773045 CEST	443	49899	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.356349945 CEST	49899	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.356354952 CEST	443	49899	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.366102934 CEST	443	49897	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.366422892 CEST	443	49897	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.366482019 CEST	49897	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.366607904 CEST	49897	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.366607904 CEST	49897	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.366621971 CEST	443	49897	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.366626978 CEST	443	49897	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.371524096 CEST	49901	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.371546984 CEST	443	49901	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.372090101 CEST	49901	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.372462988 CEST	49901	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.372476101 CEST	443	49901	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.386373043 CEST	443	49896	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.386650085 CEST	443	49896	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.386694908 CEST	443	49896	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.386759996 CEST	49896	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.387031078 CEST	49896	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.387043953 CEST	443	49896	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.387057066 CEST	49896	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.387062073 CEST	443	49896	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.392086983 CEST	49902	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.392102003 CEST	443	49902	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.392153978 CEST	49902	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.392482996 CEST	49902	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.392494917 CEST	443	49902	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.398778915 CEST	443	49898	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.399336100 CEST	443	49898	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.399442911 CEST	49898	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.399494886 CEST	49898	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.399501085 CEST	443	49898	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.399519920 CEST	49898	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.399525881 CEST	443	49898	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.404836893 CEST	49903	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.404891968 CEST	443	49903	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.404948950 CEST	49903	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.405272007 CEST	49903	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.405289888 CEST	443	49903	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.454123020 CEST	443	49899	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.454994917 CEST	443	49899	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.455075026 CEST	49899	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.455132008 CEST	49899	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.455169916 CEST	443	49899	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.455178022 CEST	49899	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.455193043 CEST	443	49899	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.460273981 CEST	49904	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.460316896 CEST	443	49904	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.460473061 CEST	49904	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.460819006 CEST	49904	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.460840940 CEST	443	49904	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.746253014 CEST	443	49900	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.746866941 CEST	49900	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.746901989 CEST	443	49900	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.747603893 CEST	49900	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.747618914 CEST	443	49900	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.847847939 CEST	443	49900	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.847907066 CEST	443	49900	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.847984076 CEST	49900	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.848644972 CEST	49900	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.848669052 CEST	443	49900	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.848680019 CEST	49900	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.848685980 CEST	443	49900	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.853677034 CEST	49905	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.853715897 CEST	443	49905	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:31.853804111 CEST	49905	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.854341984 CEST	49905	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:31.854360104 CEST	443	49905	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.030837059 CEST	443	49901	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.040018082 CEST	49901	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.040049076 CEST	443	49901	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.040777922 CEST	49901	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.040792942 CEST	443	49901	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.044614077 CEST	443	49902	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.045082092 CEST	49902	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.045120955 CEST	443	49902	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.045794964 CEST	49902	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.045803070 CEST	443	49902	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.058140039 CEST	443	49903	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.068100929 CEST	49903	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.068137884 CEST	443	49903	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.068747044 CEST	49903	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.068756104 CEST	443	49903	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.130743980 CEST	443	49904	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.131580114 CEST	49904	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.131591082 CEST	443	49904	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.132390022 CEST	49904	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.132405043 CEST	443	49904	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.137772083 CEST	443	49901	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.138022900 CEST	443	49901	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.138089895 CEST	49901	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.138377905 CEST	49901	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.138411045 CEST	443	49901	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.138427973 CEST	49901	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.138434887 CEST	443	49901	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.143215895 CEST	49906	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.143248081 CEST	443	49906	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.143503904 CEST	49906	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.143791914 CEST	49906	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.143806934 CEST	443	49906	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.152096987 CEST	443	49902	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.152118921 CEST	443	49902	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.152169943 CEST	443	49902	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.152189970 CEST	49902	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.152242899 CEST	49902	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.152663946 CEST	49902	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.152676105 CEST	443	49902	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.152689934 CEST	49902	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.152695894 CEST	443	49902	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.159157991 CEST	49907	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.159195900 CEST	443	49907	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.159367085 CEST	49907	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.159857988 CEST	49907	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.159869909 CEST	443	49907	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.165544987 CEST	443	49903	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.165606976 CEST	443	49903	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.165739059 CEST	49903	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.166100979 CEST	49903	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.166125059 CEST	443	49903	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.166153908 CEST	49903	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.166160107 CEST	443	49903	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.169733047 CEST	49908	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.169764996 CEST	443	49908	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.170030117 CEST	49908	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.170166016 CEST	49908	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.170178890 CEST	443	49908	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.234771967 CEST	443	49904	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.235471964 CEST	443	49904	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.235594034 CEST	49904	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.235605955 CEST	443	49904	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.235763073 CEST	49904	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.236183882 CEST	49904	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.236202002 CEST	443	49904	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.241528988 CEST	49909	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.241564035 CEST	443	49909	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.241642952 CEST	49909	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.242160082 CEST	49909	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.242177010 CEST	443	49909	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.520313025 CEST	443	49905	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.520849943 CEST	49905	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.520867109 CEST	443	49905	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.521313906 CEST	49905	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.521320105 CEST	443	49905	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.624943972 CEST	443	49905	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.626661062 CEST	443	49905	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.626739025 CEST	49905	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.626807928 CEST	49905	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.626827955 CEST	443	49905	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.626833916 CEST	49905	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.626842976 CEST	443	49905	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.629863024 CEST	49910	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.629903078 CEST	443	49910	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.630026102 CEST	49910	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.630232096 CEST	49910	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.630244970 CEST	443	49910	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.809787989 CEST	443	49907	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.810992956 CEST	49907	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.811005116 CEST	443	49907	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.811461926 CEST	49907	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.811466932 CEST	443	49907	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.819842100 CEST	443	49906	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.820317984 CEST	49906	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.820358992 CEST	443	49906	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.821191072 CEST	49906	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.821197987 CEST	443	49906	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.858655930 CEST	443	49908	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.860495090 CEST	49908	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.860517979 CEST	443	49908	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.871876001 CEST	49908	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.871881962 CEST	443	49908	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.912587881 CEST	443	49907	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.913038015 CEST	443	49907	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.913091898 CEST	49907	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.915720940 CEST	49907	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.915733099 CEST	443	49907	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.936847925 CEST	443	49906	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.936922073 CEST	443	49906	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.937028885 CEST	443	49906	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.937088966 CEST	49906	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.937088966 CEST	49906	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.938550949 CEST	443	49909	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.969172955 CEST	49906	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.969202042 CEST	443	49906	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.969214916 CEST	49906	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.969222069 CEST	443	49906	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.972126961 CEST	49909	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.972167969 CEST	443	49909	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.972753048 CEST	49909	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.972776890 CEST	443	49909	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.974843025 CEST	443	49908	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.975545883 CEST	443	49908	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.975589991 CEST	443	49908	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.975661993 CEST	49908	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.976212025 CEST	49908	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.976231098 CEST	443	49908	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.976248026 CEST	49908	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.976253986 CEST	443	49908	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.980381012 CEST	49911	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.980405092 CEST	443	49911	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.980710983 CEST	49911	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.981350899 CEST	49911	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.981363058 CEST	443	49911	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.981621981 CEST	49912	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.981654882 CEST	443	49912	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.981712103 CEST	49912	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.981865883 CEST	49912	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.981885910 CEST	443	49912	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.983405113 CEST	49913	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.983428001 CEST	443	49913	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:32.985714912 CEST	49913	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.986051083 CEST	49913	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:32.986062050 CEST	443	49913	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.075373888 CEST	443	49909	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.075715065 CEST	443	49909	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.075788021 CEST	49909	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.117510080 CEST	49909	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.117553949 CEST	443	49909	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.117563963 CEST	49909	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.117574930 CEST	443	49909	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.123908043 CEST	49914	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.123948097 CEST	443	49914	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.124052048 CEST	49914	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.124490023 CEST	49914	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.124501944 CEST	443	49914	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.526966095 CEST	443	49910	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.527888060 CEST	49910	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.527918100 CEST	443	49910	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.528848886 CEST	49910	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.528855085 CEST	443	49910	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.629353046 CEST	443	49910	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.629378080 CEST	443	49910	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.629436970 CEST	49910	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.629463911 CEST	443	49910	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.629726887 CEST	443	49910	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.629843950 CEST	49910	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.629893064 CEST	49910	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.629909992 CEST	443	49910	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.635344028 CEST	49915	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.635401964 CEST	443	49915	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.635479927 CEST	49915	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.636143923 CEST	49915	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.636171103 CEST	443	49915	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.713983059 CEST	443	49912	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.714432955 CEST	49912	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.714483976 CEST	443	49912	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.714982033 CEST	49912	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.714992046 CEST	443	49912	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.720525026 CEST	443	49911	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.723953009 CEST	49911	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.723968983 CEST	443	49911	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.724354982 CEST	49911	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.724370956 CEST	443	49911	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.816833019 CEST	443	49912	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.816865921 CEST	443	49912	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.816914082 CEST	443	49912	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.816971064 CEST	49912	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.816971064 CEST	49912	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.817209959 CEST	49912	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.817231894 CEST	443	49912	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.817257881 CEST	49912	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.817265987 CEST	443	49912	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.820091963 CEST	49916	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.820123911 CEST	443	49916	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.820192099 CEST	49916	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.820391893 CEST	49916	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.820409060 CEST	443	49916	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.821327925 CEST	443	49914	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.821708918 CEST	49914	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.821727037 CEST	443	49914	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.822138071 CEST	49914	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.822141886 CEST	443	49914	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.824922085 CEST	443	49911	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.824954987 CEST	443	49911	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.825048923 CEST	443	49911	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.825120926 CEST	49911	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.825191021 CEST	49911	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.825236082 CEST	49911	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.825242996 CEST	443	49911	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.825258970 CEST	49911	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.825264931 CEST	443	49911	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.827569962 CEST	49917	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.827666044 CEST	443	49917	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.827749968 CEST	49917	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.827888012 CEST	49917	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.827905893 CEST	443	49917	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.938262939 CEST	443	49914	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.938338995 CEST	443	49914	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.938441038 CEST	49914	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.938457012 CEST	443	49914	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.938504934 CEST	49914	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.938657045 CEST	49914	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.938673019 CEST	443	49914	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.941670895 CEST	49918	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.941756964 CEST	443	49918	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:33.941844940 CEST	49918	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.942034960 CEST	49918	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:33.942049026 CEST	443	49918	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.052606106 CEST	443	49913	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.053133965 CEST	49913	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.053153038 CEST	443	49913	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.053647995 CEST	49913	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.053653955 CEST	443	49913	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.157977104 CEST	443	49913	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.158490896 CEST	443	49913	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.158715010 CEST	49913	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.158755064 CEST	49913	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.158772945 CEST	443	49913	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.158802032 CEST	49913	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.158807993 CEST	443	49913	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.166944981 CEST	49919	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.166985989 CEST	443	49919	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.167110920 CEST	49919	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.167444944 CEST	49919	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.167459011 CEST	443	49919	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.279473066 CEST	443	49915	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.280054092 CEST	49915	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.280082941 CEST	443	49915	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.280519009 CEST	49915	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.280529976 CEST	443	49915	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.381407976 CEST	443	49915	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.381725073 CEST	443	49915	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.381840944 CEST	49915	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.381880045 CEST	49915	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.381903887 CEST	443	49915	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.381915092 CEST	49915	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.381922960 CEST	443	49915	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.384649038 CEST	49920	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.384696007 CEST	443	49920	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.384885073 CEST	49920	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.384969950 CEST	49920	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.384985924 CEST	443	49920	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.470804930 CEST	443	49916	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.471324921 CEST	49916	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.471348047 CEST	443	49916	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.471874952 CEST	49916	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.471883059 CEST	443	49916	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.513926029 CEST	443	49917	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.514499903 CEST	49917	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.514542103 CEST	443	49917	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.514944077 CEST	49917	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.514961958 CEST	443	49917	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.574404955 CEST	443	49916	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.574892044 CEST	443	49916	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.574939966 CEST	49916	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.574944973 CEST	443	49916	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.575007915 CEST	49916	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.575084925 CEST	49916	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.575102091 CEST	443	49916	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.575108051 CEST	49916	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.575114012 CEST	443	49916	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.577879906 CEST	49921	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.577923059 CEST	443	49921	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.577996016 CEST	49921	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.578174114 CEST	49921	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.578190088 CEST	443	49921	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.619313955 CEST	443	49917	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.619604111 CEST	443	49917	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.619740963 CEST	49917	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.619781971 CEST	49917	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.619797945 CEST	443	49917	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.619810104 CEST	49917	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.619816065 CEST	443	49917	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.622658014 CEST	49922	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.622665882 CEST	443	49922	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.622731924 CEST	49922	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.622915030 CEST	49922	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.622930050 CEST	443	49922	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.630666018 CEST	443	49918	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.631114006 CEST	49918	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.631139994 CEST	443	49918	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.631577969 CEST	49918	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.631586075 CEST	443	49918	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.737971067 CEST	443	49918	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.738032103 CEST	443	49918	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.738087893 CEST	443	49918	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.738188028 CEST	49918	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.738326073 CEST	49918	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.738347054 CEST	443	49918	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.738358021 CEST	49918	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.738363981 CEST	443	49918	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.741452932 CEST	49923	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.741491079 CEST	443	49923	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.741561890 CEST	49923	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.741764069 CEST	49923	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.741782904 CEST	443	49923	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.829380035 CEST	443	49919	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.829935074 CEST	49919	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.829974890 CEST	443	49919	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.830404043 CEST	49919	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.830413103 CEST	443	49919	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.940566063 CEST	443	49919	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.940639973 CEST	443	49919	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.940706968 CEST	49919	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.940980911 CEST	49919	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.941004992 CEST	443	49919	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.941019058 CEST	49919	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.941026926 CEST	443	49919	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.944127083 CEST	49924	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.944176912 CEST	443	49924	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:34.944411039 CEST	49924	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.944411039 CEST	49924	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:34.944453955 CEST	443	49924	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.036143064 CEST	443	49920	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.036715031 CEST	49920	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.036741972 CEST	443	49920	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.037173986 CEST	49920	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.037178993 CEST	443	49920	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.138597965 CEST	443	49920	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.138916969 CEST	443	49920	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.138967991 CEST	443	49920	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.139054060 CEST	49920	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.139118910 CEST	49920	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.139134884 CEST	443	49920	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.139164925 CEST	49920	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.139173031 CEST	443	49920	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.142559052 CEST	49925	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.142586946 CEST	443	49925	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.142654896 CEST	49925	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.142807961 CEST	49925	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.142827988 CEST	443	49925	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.267266989 CEST	443	49921	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.267796040 CEST	49921	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.267812967 CEST	443	49921	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.268346071 CEST	49921	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.268352032 CEST	443	49921	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.296775103 CEST	443	49922	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.297429085 CEST	49922	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.297449112 CEST	443	49922	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.297825098 CEST	49922	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.297830105 CEST	443	49922	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.429389000 CEST	443	49921	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.429464102 CEST	443	49921	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.429552078 CEST	49921	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.429800987 CEST	49921	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.429831028 CEST	443	49921	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.430013895 CEST	49921	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.430033922 CEST	443	49921	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.432176113 CEST	443	49922	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.432249069 CEST	443	49922	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.432465076 CEST	49922	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.432714939 CEST	49922	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.432714939 CEST	49922	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.432739019 CEST	443	49922	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.432754993 CEST	443	49922	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.432878017 CEST	49926	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.432915926 CEST	443	49926	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.432992935 CEST	49926	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.433129072 CEST	49926	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.433141947 CEST	443	49926	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.435272932 CEST	49927	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.435317993 CEST	443	49927	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.435482979 CEST	49927	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.435636044 CEST	49927	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.435657978 CEST	443	49927	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.435807943 CEST	443	49923	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.436172009 CEST	49923	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.436180115 CEST	443	49923	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.436593056 CEST	49923	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.436598063 CEST	443	49923	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.545480967 CEST	443	49923	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.545511007 CEST	443	49923	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.545558929 CEST	443	49923	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.545566082 CEST	49923	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.545604944 CEST	49923	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.545840979 CEST	49923	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.545860052 CEST	443	49923	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.545872927 CEST	49923	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.545878887 CEST	443	49923	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.548799992 CEST	49928	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.548839092 CEST	443	49928	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.548983097 CEST	49928	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.549190998 CEST	49928	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.549204111 CEST	443	49928	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.889897108 CEST	443	49925	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.890512943 CEST	49925	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.890532017 CEST	443	49925	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.890950918 CEST	49925	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.890965939 CEST	443	49925	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.996807098 CEST	443	49925	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.996998072 CEST	443	49925	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.997093916 CEST	49925	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.997134924 CEST	49925	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.997134924 CEST	49925	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.997157097 CEST	443	49925	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.997167110 CEST	443	49925	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.999857903 CEST	49929	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:35.999903917 CEST	443	49929	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:35.999964952 CEST	49929	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.000150919 CEST	49929	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.000164032 CEST	443	49929	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.091737986 CEST	443	49927	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.092221022 CEST	49927	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.092247963 CEST	443	49927	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.092669010 CEST	49927	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.092679024 CEST	443	49927	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.111959934 CEST	443	49926	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.112428904 CEST	49926	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.112443924 CEST	443	49926	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.113074064 CEST	49926	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.113079071 CEST	443	49926	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.194088936 CEST	443	49927	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.194149017 CEST	443	49927	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.194231987 CEST	49927	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.194401026 CEST	49927	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.194423914 CEST	443	49927	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.194439888 CEST	49927	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.194446087 CEST	443	49927	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.198158979 CEST	49930	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.198196888 CEST	443	49930	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.198498011 CEST	49930	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.198729992 CEST	49930	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.198745012 CEST	443	49930	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.217464924 CEST	443	49926	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.217518091 CEST	443	49926	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.217565060 CEST	443	49926	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.217565060 CEST	49926	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.217605114 CEST	49926	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.217844963 CEST	49926	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.217863083 CEST	443	49926	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.217875004 CEST	49926	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.217880964 CEST	443	49926	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.221035957 CEST	49931	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.221052885 CEST	443	49931	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.221143961 CEST	49931	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.221306086 CEST	49931	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.221316099 CEST	443	49931	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.252892017 CEST	443	49928	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.253474951 CEST	49928	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.253490925 CEST	443	49928	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.254020929 CEST	49928	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.254026890 CEST	443	49928	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.356705904 CEST	443	49928	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.357023001 CEST	443	49928	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.357076883 CEST	443	49928	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.357146025 CEST	49928	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.357222080 CEST	49928	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.357222080 CEST	49928	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.357243061 CEST	443	49928	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.357255936 CEST	443	49928	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.360100985 CEST	49932	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.360138893 CEST	443	49932	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.360200882 CEST	49932	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.360400915 CEST	49932	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.360438108 CEST	443	49932	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.480972052 CEST	443	49924	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.481494904 CEST	49924	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.481525898 CEST	443	49924	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.482049942 CEST	49924	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.482073069 CEST	443	49924	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.582894087 CEST	443	49924	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.583009005 CEST	443	49924	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.583070040 CEST	49924	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.583597898 CEST	49924	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.583621025 CEST	443	49924	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.583635092 CEST	49924	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.583642960 CEST	443	49924	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.586637020 CEST	49933	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.586673021 CEST	443	49933	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.587064028 CEST	49933	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.587167025 CEST	49933	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.587177038 CEST	443	49933	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.676093102 CEST	443	49929	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.677186966 CEST	49929	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.677186966 CEST	49929	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.677206039 CEST	443	49929	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.677242041 CEST	443	49929	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.814585924 CEST	443	49929	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.814651966 CEST	443	49929	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.814764023 CEST	49929	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.814990044 CEST	49929	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.814990044 CEST	49929	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.815016031 CEST	443	49929	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.815027952 CEST	443	49929	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.818371058 CEST	49934	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.818413019 CEST	443	49934	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.818671942 CEST	49934	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.818761110 CEST	49934	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.818770885 CEST	443	49934	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.914758921 CEST	443	49930	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.915402889 CEST	49930	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.915417910 CEST	443	49930	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.915535927 CEST	443	49931	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.915853024 CEST	49930	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.915870905 CEST	443	49930	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.916008949 CEST	49931	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.916023016 CEST	443	49931	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:36.916549921 CEST	49931	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:36.916555882 CEST	443	49931	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.023211956 CEST	443	49930	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.023291111 CEST	443	49930	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.023411989 CEST	49930	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.023540020 CEST	49930	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.023557901 CEST	443	49930	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.023612976 CEST	49930	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.023621082 CEST	443	49930	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.026679993 CEST	49935	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.026721001 CEST	443	49935	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.026823997 CEST	49935	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.026993990 CEST	49935	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.027009964 CEST	443	49935	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.031716108 CEST	443	49932	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.032229900 CEST	49932	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.032253981 CEST	443	49932	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.032787085 CEST	49932	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.032794952 CEST	443	49932	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.035969019 CEST	443	49931	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.036206961 CEST	443	49931	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.036262035 CEST	443	49931	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.036294937 CEST	49931	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.036364079 CEST	49931	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.036458015 CEST	49931	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.036458015 CEST	49931	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.036483049 CEST	443	49931	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.036488056 CEST	443	49931	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.039179087 CEST	49936	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.039215088 CEST	443	49936	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.039369106 CEST	49936	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.039586067 CEST	49936	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.039597034 CEST	443	49936	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.135548115 CEST	443	49932	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.135629892 CEST	443	49932	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.135833025 CEST	49932	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.135885000 CEST	49932	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.135885000 CEST	49932	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.135906935 CEST	443	49932	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.135915995 CEST	443	49932	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.138822079 CEST	49937	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.138875008 CEST	443	49937	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.138952017 CEST	49937	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.139172077 CEST	49937	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.139190912 CEST	443	49937	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.264552116 CEST	443	49933	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.265125990 CEST	49933	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.265139103 CEST	443	49933	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.265548944 CEST	49933	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.265553951 CEST	443	49933	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.365668058 CEST	443	49933	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.365755081 CEST	443	49933	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.365952969 CEST	49933	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.365992069 CEST	49933	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.365992069 CEST	49933	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.366007090 CEST	443	49933	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.366010904 CEST	443	49933	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.369539976 CEST	49938	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.369586945 CEST	443	49938	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.369744062 CEST	49938	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.369988918 CEST	49938	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.370004892 CEST	443	49938	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.480526924 CEST	443	49934	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.481380939 CEST	49934	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.481396914 CEST	443	49934	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.482630014 CEST	49934	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.482642889 CEST	443	49934	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.584485054 CEST	443	49934	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.585292101 CEST	443	49934	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.585345984 CEST	443	49934	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.585427999 CEST	49934	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.585510015 CEST	49934	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.585510015 CEST	49934	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.585530996 CEST	443	49934	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.585541964 CEST	443	49934	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.590189934 CEST	49939	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.590225935 CEST	443	49939	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.590306044 CEST	49939	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.590459108 CEST	49939	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.590475082 CEST	443	49939	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.688170910 CEST	443	49935	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.689068079 CEST	49935	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.689085007 CEST	443	49935	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.689857006 CEST	49935	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.689862967 CEST	443	49935	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.728183031 CEST	443	49936	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.728897095 CEST	49936	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.728913069 CEST	443	49936	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.729671001 CEST	49936	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.729676962 CEST	443	49936	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.794091940 CEST	443	49937	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.794701099 CEST	49937	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.794709921 CEST	443	49937	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.795418024 CEST	49937	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.795422077 CEST	443	49937	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.810437918 CEST	443	49935	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.810880899 CEST	443	49935	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.811031103 CEST	49935	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.811062098 CEST	49935	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.811072111 CEST	443	49935	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.815296888 CEST	49940	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.815329075 CEST	443	49940	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.815574884 CEST	49940	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.815746069 CEST	49940	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.815756083 CEST	443	49940	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.835377932 CEST	443	49936	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.836266994 CEST	443	49936	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.836307049 CEST	443	49936	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.836332083 CEST	49936	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.836452961 CEST	49936	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.836605072 CEST	49936	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.836605072 CEST	49936	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.836623907 CEST	443	49936	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.836635113 CEST	443	49936	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.840060949 CEST	49941	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.840099096 CEST	443	49941	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.840173006 CEST	49941	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.840591908 CEST	49941	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.840603113 CEST	443	49941	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.896676064 CEST	443	49937	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.896971941 CEST	443	49937	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.897043943 CEST	49937	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.899283886 CEST	49937	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.899300098 CEST	443	49937	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.899310112 CEST	49937	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.899315119 CEST	443	49937	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.902825117 CEST	49942	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.902859926 CEST	443	49942	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:37.903086901 CEST	49942	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.903175116 CEST	49942	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:37.903188944 CEST	443	49942	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.045142889 CEST	443	49938	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.045728922 CEST	49938	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.045746088 CEST	443	49938	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.046555042 CEST	49938	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.046560049 CEST	443	49938	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.149672031 CEST	443	49938	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.149746895 CEST	443	49938	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.149882078 CEST	49938	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.150619030 CEST	49938	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.150639057 CEST	443	49938	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.150652885 CEST	49938	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.150664091 CEST	443	49938	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.155596018 CEST	49943	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.155646086 CEST	443	49943	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.155714989 CEST	49943	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.156063080 CEST	49943	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.156074047 CEST	443	49943	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.237577915 CEST	443	49939	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.281852007 CEST	49939	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.308243990 CEST	49939	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.308254957 CEST	443	49939	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.309146881 CEST	49939	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.309151888 CEST	443	49939	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.411539078 CEST	443	49940	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.412111998 CEST	49940	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.412137985 CEST	443	49940	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.412650108 CEST	49940	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.412662029 CEST	443	49940	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.412739038 CEST	443	49939	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.412815094 CEST	443	49939	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.412864923 CEST	49939	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.412987947 CEST	49939	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.413006067 CEST	443	49939	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.413013935 CEST	49939	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.413019896 CEST	443	49939	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.416250944 CEST	49944	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.416275978 CEST	443	49944	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.416343927 CEST	49944	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.416526079 CEST	49944	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.416537046 CEST	443	49944	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.491075993 CEST	443	49941	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.491671085 CEST	49941	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.491709948 CEST	443	49941	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.492163897 CEST	49941	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.492172003 CEST	443	49941	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.521033049 CEST	443	49940	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.521064997 CEST	443	49940	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.521119118 CEST	443	49940	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.521121025 CEST	49940	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.521178007 CEST	49940	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.521491051 CEST	49940	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.521514893 CEST	443	49940	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.521527052 CEST	49940	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.521533966 CEST	443	49940	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.524430037 CEST	49945	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.524472952 CEST	443	49945	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.524547100 CEST	49945	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.524785042 CEST	49945	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.524804115 CEST	443	49945	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.582791090 CEST	443	49942	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.585994005 CEST	49942	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.586014032 CEST	443	49942	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.586436987 CEST	49942	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.586442947 CEST	443	49942	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.592727900 CEST	443	49941	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.593292952 CEST	443	49941	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.593338966 CEST	49941	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.593377113 CEST	49941	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.593390942 CEST	443	49941	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.593398094 CEST	49941	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.593405008 CEST	443	49941	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.596360922 CEST	49946	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.596407890 CEST	443	49946	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.596470118 CEST	49946	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.596749067 CEST	49946	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.596765041 CEST	443	49946	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.689795971 CEST	443	49942	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.689836979 CEST	443	49942	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.689877987 CEST	49942	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.689888954 CEST	443	49942	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.689934969 CEST	49942	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.690052986 CEST	49942	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.690071106 CEST	443	49942	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.690083981 CEST	49942	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.690089941 CEST	443	49942	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.693101883 CEST	49947	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.693136930 CEST	443	49947	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.693207979 CEST	49947	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.693507910 CEST	49947	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.693517923 CEST	443	49947	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.806225061 CEST	443	49943	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.806751013 CEST	49943	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.806781054 CEST	443	49943	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.807661057 CEST	49943	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.807676077 CEST	443	49943	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.909820080 CEST	443	49943	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.909900904 CEST	443	49943	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.909956932 CEST	49943	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.934962034 CEST	49943	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.934999943 CEST	443	49943	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.935024023 CEST	49943	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.935031891 CEST	443	49943	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.942972898 CEST	49948	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.943020105 CEST	443	49948	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:38.943089962 CEST	49948	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.943648100 CEST	49948	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:38.943655968 CEST	443	49948	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.071029902 CEST	443	49944	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.072690964 CEST	49944	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.072701931 CEST	443	49944	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.074542046 CEST	49944	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.074546099 CEST	443	49944	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.175204992 CEST	443	49945	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.175623894 CEST	49945	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.175656080 CEST	443	49945	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.176088095 CEST	49945	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.176095009 CEST	443	49945	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.193569899 CEST	443	49944	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.194597006 CEST	443	49944	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.194644928 CEST	443	49944	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.194647074 CEST	49944	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.194750071 CEST	49944	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.194813967 CEST	49944	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.194813967 CEST	49944	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.194829941 CEST	443	49944	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.194839001 CEST	443	49944	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.199671030 CEST	49949	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.199714899 CEST	443	49949	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.199970007 CEST	49949	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.200292110 CEST	49949	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.200318098 CEST	443	49949	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.255686998 CEST	443	49946	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.274683952 CEST	49946	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.274708033 CEST	443	49946	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.275484085 CEST	49946	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.275492907 CEST	443	49946	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.276643038 CEST	443	49945	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.278249025 CEST	443	49945	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.278304100 CEST	49945	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.278341055 CEST	49945	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.278357029 CEST	443	49945	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.278389931 CEST	49945	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.278399944 CEST	443	49945	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.282587051 CEST	49950	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.282639980 CEST	443	49950	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.282866955 CEST	49950	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.282866955 CEST	49950	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.282897949 CEST	443	49950	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.357409954 CEST	443	49947	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.368737936 CEST	49947	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.368756056 CEST	443	49947	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.369515896 CEST	49947	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.369527102 CEST	443	49947	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.378181934 CEST	443	49946	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.378307104 CEST	443	49946	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.378348112 CEST	49946	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.383882046 CEST	49946	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.383904934 CEST	443	49946	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.383912086 CEST	49946	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.383918047 CEST	443	49946	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.468760967 CEST	443	49947	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.469434023 CEST	443	49947	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.469516993 CEST	49947	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.472846985 CEST	49951	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.472881079 CEST	443	49951	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.473036051 CEST	49951	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.473289013 CEST	49947	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.473305941 CEST	443	49947	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.479149103 CEST	49951	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.479160070 CEST	443	49951	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.532279968 CEST	49952	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.532305002 CEST	443	49952	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.532780886 CEST	49952	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.534688950 CEST	49952	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.534698963 CEST	443	49952	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.774068117 CEST	443	49948	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.774725914 CEST	49948	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.774743080 CEST	443	49948	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.775644064 CEST	49948	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.775650024 CEST	443	49948	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.852654934 CEST	443	49949	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.853158951 CEST	49949	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.853183031 CEST	443	49949	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.853625059 CEST	49949	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.853629112 CEST	443	49949	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.878621101 CEST	443	49948	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.878679991 CEST	443	49948	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.878726959 CEST	49948	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.878743887 CEST	443	49948	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.878791094 CEST	49948	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.879046917 CEST	49948	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.879065037 CEST	443	49948	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.879070997 CEST	49948	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.879076958 CEST	443	49948	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.881949902 CEST	49953	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.881984949 CEST	443	49953	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.882074118 CEST	49953	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.883403063 CEST	49953	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.883414984 CEST	443	49953	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.954334021 CEST	443	49949	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.955204964 CEST	443	49949	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.955269098 CEST	49949	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.955391884 CEST	49949	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.955391884 CEST	49949	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.955416918 CEST	443	49949	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.955431938 CEST	443	49949	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.963116884 CEST	49954	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.963169098 CEST	443	49954	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.963587999 CEST	49954	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.963711977 CEST	49954	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.963725090 CEST	443	49954	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.967849970 CEST	443	49950	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.968328953 CEST	49950	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.968342066 CEST	443	49950	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:39.968842030 CEST	49950	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:39.968846083 CEST	443	49950	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.073554039 CEST	443	49950	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.073626041 CEST	443	49950	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.073892117 CEST	49950	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.073892117 CEST	49950	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.073923111 CEST	49950	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.073940992 CEST	443	49950	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.076700926 CEST	49955	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.076730967 CEST	443	49955	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.076868057 CEST	49955	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.077056885 CEST	49955	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.077069998 CEST	443	49955	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.142709017 CEST	443	49951	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.143208027 CEST	49951	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.143215895 CEST	443	49951	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.143695116 CEST	49951	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.143697977 CEST	443	49951	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.209465981 CEST	443	49952	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.209969044 CEST	49952	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.209988117 CEST	443	49952	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.211129904 CEST	49952	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.211133957 CEST	443	49952	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.245732069 CEST	443	49951	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.245784998 CEST	443	49951	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.246639013 CEST	49951	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.246639013 CEST	49951	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.247405052 CEST	49951	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.247420073 CEST	443	49951	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.254599094 CEST	49956	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.254627943 CEST	443	49956	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.254795074 CEST	49956	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.255157948 CEST	49956	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.255167007 CEST	443	49956	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.310535908 CEST	443	49952	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.310817957 CEST	443	49952	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.310885906 CEST	49952	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.321672916 CEST	49952	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.321708918 CEST	443	49952	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.321785927 CEST	49952	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.321793079 CEST	443	49952	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.328836918 CEST	49957	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.328893900 CEST	443	49957	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.328977108 CEST	49957	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.329760075 CEST	49957	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.329777002 CEST	443	49957	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.578835011 CEST	443	49953	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.580092907 CEST	49953	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.580115080 CEST	443	49953	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.581559896 CEST	49953	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.581566095 CEST	443	49953	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.614188910 CEST	443	49954	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.615163088 CEST	49954	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.615195990 CEST	443	49954	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.616343021 CEST	49954	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.616352081 CEST	443	49954	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.686842918 CEST	443	49953	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.686906099 CEST	443	49953	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.686989069 CEST	49953	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.687422991 CEST	49953	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.687443018 CEST	443	49953	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.687458992 CEST	49953	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.687464952 CEST	443	49953	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.693700075 CEST	49958	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.693738937 CEST	443	49958	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.693794966 CEST	49958	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.694020033 CEST	49958	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.694036007 CEST	443	49958	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.717392921 CEST	443	49954	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.717860937 CEST	443	49954	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.717964888 CEST	49954	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.717964888 CEST	49954	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.718039036 CEST	49954	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.718056917 CEST	443	49954	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.724260092 CEST	49959	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.724284887 CEST	443	49959	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.724337101 CEST	49959	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.724582911 CEST	49959	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.724594116 CEST	443	49959	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.756038904 CEST	443	49955	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.757016897 CEST	49955	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.757035971 CEST	443	49955	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.758213043 CEST	49955	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.758233070 CEST	443	49955	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.863013029 CEST	443	49955	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.863132954 CEST	443	49955	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.863292933 CEST	49955	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.863818884 CEST	49955	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.863818884 CEST	49955	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.863842010 CEST	443	49955	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.863854885 CEST	443	49955	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.870162010 CEST	49960	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.870194912 CEST	443	49960	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.870251894 CEST	49960	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.870609999 CEST	49960	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.870625973 CEST	443	49960	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.944297075 CEST	443	49956	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.948368073 CEST	49956	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.948385000 CEST	443	49956	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.962603092 CEST	49956	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.962611914 CEST	443	49956	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.984414101 CEST	443	49957	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.997286081 CEST	49957	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.997315884 CEST	443	49957	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:40.998152971 CEST	49957	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:40.998158932 CEST	443	49957	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.079056978 CEST	443	49956	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.079091072 CEST	443	49956	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.079138994 CEST	49956	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.079143047 CEST	443	49956	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.079184055 CEST	49956	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.079957962 CEST	49956	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.079977036 CEST	443	49956	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.079988003 CEST	49956	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.079994917 CEST	443	49956	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.087243080 CEST	49961	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.087270975 CEST	443	49961	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.087328911 CEST	49961	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.087708950 CEST	49961	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.087723970 CEST	443	49961	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.101826906 CEST	443	49957	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.102102041 CEST	443	49957	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.102149010 CEST	49957	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.102313995 CEST	49957	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.102327108 CEST	443	49957	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.102339029 CEST	49957	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.102344036 CEST	443	49957	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.108875990 CEST	49962	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.108896017 CEST	443	49962	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.108962059 CEST	49962	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.109395027 CEST	49962	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.109404087 CEST	443	49962	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.361623049 CEST	443	49958	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.362561941 CEST	49958	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.362561941 CEST	49958	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.362601995 CEST	443	49958	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.362612963 CEST	443	49958	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.388787031 CEST	443	49959	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.389903069 CEST	49959	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.389903069 CEST	49959	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.389924049 CEST	443	49959	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.389931917 CEST	443	49959	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.464175940 CEST	443	49958	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.464852095 CEST	443	49958	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.464900017 CEST	443	49958	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.464929104 CEST	49958	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.465001106 CEST	49958	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.465001106 CEST	49958	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.465080023 CEST	49958	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.465101004 CEST	443	49958	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.467892885 CEST	49963	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.467940092 CEST	443	49963	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.468133926 CEST	49963	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.468190908 CEST	49963	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.468199015 CEST	443	49963	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.490506887 CEST	443	49959	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.490595102 CEST	443	49959	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.490842104 CEST	49959	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.490879059 CEST	49959	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.490879059 CEST	49959	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.490895033 CEST	443	49959	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.490902901 CEST	443	49959	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.493825912 CEST	49964	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.493863106 CEST	443	49964	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.494071960 CEST	49964	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.494154930 CEST	49964	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.494175911 CEST	443	49964	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.528956890 CEST	443	49960	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.529942036 CEST	49960	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.529942036 CEST	49960	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.529973984 CEST	443	49960	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.529997110 CEST	443	49960	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.630253077 CEST	443	49960	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.630286932 CEST	443	49960	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.630338907 CEST	443	49960	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.630395889 CEST	49960	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.630593061 CEST	49960	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.630593061 CEST	49960	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.630616903 CEST	443	49960	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.630644083 CEST	49960	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.630650043 CEST	443	49960	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.633677959 CEST	49965	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.633722067 CEST	443	49965	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.633842945 CEST	49965	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.633940935 CEST	49965	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.633949995 CEST	443	49965	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.802417040 CEST	443	49961	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.804358006 CEST	49961	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.804358006 CEST	49961	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.804375887 CEST	443	49961	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.804385900 CEST	443	49961	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.876694918 CEST	443	49962	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.877213955 CEST	49962	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.877224922 CEST	443	49962	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.877705097 CEST	49962	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.877710104 CEST	443	49962	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.942214966 CEST	443	49961	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.942271948 CEST	443	49961	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.942590952 CEST	49961	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.942590952 CEST	49961	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.942683935 CEST	49961	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.942692995 CEST	443	49961	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.945676088 CEST	49966	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.945696115 CEST	443	49966	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.945847988 CEST	49966	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.946050882 CEST	49966	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.946057081 CEST	443	49966	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.982646942 CEST	443	49962	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.982714891 CEST	443	49962	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.982933044 CEST	49962	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.983057022 CEST	49962	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.983068943 CEST	443	49962	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.983156919 CEST	49962	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.983163118 CEST	443	49962	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.985755920 CEST	49967	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.985791922 CEST	443	49967	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:41.986068010 CEST	49967	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.986198902 CEST	49967	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:41.986213923 CEST	443	49967	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.226706982 CEST	443	49964	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.227658033 CEST	49964	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:42.227658033 CEST	49964	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:42.227678061 CEST	443	49964	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.227689028 CEST	443	49964	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.237755060 CEST	443	49963	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.238518000 CEST	49963	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:42.238518000 CEST	49963	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:42.238547087 CEST	443	49963	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.238555908 CEST	443	49963	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.331182957 CEST	443	49964	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.331218958 CEST	443	49964	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.331265926 CEST	443	49964	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.331280947 CEST	49964	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:42.331361055 CEST	49964	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:42.334446907 CEST	49964	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:42.334446907 CEST	49964	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:42.334471941 CEST	443	49964	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.334481955 CEST	443	49964	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.338999987 CEST	49968	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:42.339046955 CEST	443	49968	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.339122057 CEST	49968	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:42.339437962 CEST	49968	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:42.339449883 CEST	443	49968	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.344679117 CEST	443	49963	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.344849110 CEST	443	49963	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.344922066 CEST	49963	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:42.345187902 CEST	49963	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:42.345205069 CEST	443	49963	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.345216990 CEST	49963	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:42.345222950 CEST	443	49963	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.353924990 CEST	49969	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:42.353954077 CEST	443	49969	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.354006052 CEST	49969	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:42.354243040 CEST	49969	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:42.354249001 CEST	443	49969	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.391078949 CEST	443	49965	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.391741037 CEST	49965	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:42.391762972 CEST	443	49965	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.392224073 CEST	49965	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:42.392229080 CEST	443	49965	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.498656034 CEST	443	49965	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.499089956 CEST	443	49965	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.499157906 CEST	49965	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:42.499207973 CEST	49965	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:42.499223948 CEST	443	49965	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.499233961 CEST	49965	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:42.499239922 CEST	443	49965	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.502103090 CEST	49970	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:42.502123117 CEST	443	49970	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.502182961 CEST	49970	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:42.502341032 CEST	49970	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:42.502351046 CEST	443	49970	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.927424908 CEST	443	49966	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.927982092 CEST	49966	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:42.928009987 CEST	443	49966	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.928370953 CEST	443	49967	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.928474903 CEST	49966	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:42.928483009 CEST	443	49966	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.928865910 CEST	49967	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:42.928895950 CEST	443	49967	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:42.929393053 CEST	49967	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:42.929399967 CEST	443	49967	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.033426046 CEST	443	49966	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.033484936 CEST	443	49966	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.033543110 CEST	49966	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.033881903 CEST	49966	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.033900976 CEST	443	49966	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.033910990 CEST	49966	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.033916950 CEST	443	49966	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.036286116 CEST	443	49967	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.036310911 CEST	443	49967	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.036360979 CEST	443	49967	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.036381960 CEST	49967	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.036420107 CEST	49967	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.041532040 CEST	49967	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.041544914 CEST	443	49967	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.041564941 CEST	49967	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.041569948 CEST	443	49967	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.043663025 CEST	49971	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.043685913 CEST	443	49971	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.043749094 CEST	49971	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.043925047 CEST	49971	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.043939114 CEST	443	49971	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.044989109 CEST	49972	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.045005083 CEST	443	49972	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.045211077 CEST	49972	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.045211077 CEST	49972	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.045233965 CEST	443	49972	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.122606993 CEST	443	49969	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.123056889 CEST	49969	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.123066902 CEST	443	49969	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.123644114 CEST	49969	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.123647928 CEST	443	49969	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.125629902 CEST	443	49968	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.126069069 CEST	49968	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.126091003 CEST	443	49968	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.126523018 CEST	49968	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.126528025 CEST	443	49968	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.192931890 CEST	443	49970	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.193429947 CEST	49970	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.193444014 CEST	443	49970	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.194042921 CEST	49970	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.194047928 CEST	443	49970	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.224591017 CEST	443	49969	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.224607944 CEST	443	49969	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.224664927 CEST	49969	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.224670887 CEST	443	49969	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.224745989 CEST	443	49969	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.224821091 CEST	49969	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.224970102 CEST	49969	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.224984884 CEST	443	49969	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.224997044 CEST	49969	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.225003004 CEST	443	49969	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.227916956 CEST	49973	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.227968931 CEST	443	49973	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.228071928 CEST	49973	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.228220940 CEST	49973	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.228234053 CEST	443	49973	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.229608059 CEST	443	49968	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.229660034 CEST	443	49968	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.229713917 CEST	49968	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.229847908 CEST	49968	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.229866982 CEST	443	49968	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.229877949 CEST	49968	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.229885101 CEST	443	49968	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.232249022 CEST	49974	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.232269049 CEST	443	49974	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.232345104 CEST	49974	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.232589960 CEST	49974	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.232604980 CEST	443	49974	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.300429106 CEST	443	49970	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.300456047 CEST	443	49970	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.300513983 CEST	443	49970	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.300539970 CEST	49970	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.300611019 CEST	49970	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.300797939 CEST	49970	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.300797939 CEST	49970	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.300807953 CEST	443	49970	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.300816059 CEST	443	49970	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.303818941 CEST	49975	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.303858995 CEST	443	49975	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.304078102 CEST	49975	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.304079056 CEST	49975	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.304112911 CEST	443	49975	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.699795961 CEST	443	49972	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.700834990 CEST	49972	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.700834990 CEST	49972	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.700856924 CEST	443	49972	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.700895071 CEST	443	49972	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.724692106 CEST	443	49971	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.727850914 CEST	49971	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.727869987 CEST	443	49971	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.728585958 CEST	49971	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.728590965 CEST	443	49971	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.802180052 CEST	443	49972	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.802205086 CEST	443	49972	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.802256107 CEST	443	49972	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.802285910 CEST	49972	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.802434921 CEST	49972	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.802567005 CEST	49972	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.802567005 CEST	49972	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.802589893 CEST	443	49972	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.802598953 CEST	443	49972	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.805583954 CEST	49976	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.805628061 CEST	443	49976	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.805758953 CEST	49976	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.805939913 CEST	49976	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.805952072 CEST	443	49976	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.829941988 CEST	443	49971	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.829961061 CEST	443	49971	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.830020905 CEST	443	49971	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.830049992 CEST	49971	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.830171108 CEST	49971	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.830368042 CEST	49971	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.830368996 CEST	49971	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.830382109 CEST	443	49971	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.830390930 CEST	443	49971	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.833259106 CEST	49977	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.833287001 CEST	443	49977	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.833511114 CEST	49977	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.833511114 CEST	49977	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.833547115 CEST	443	49977	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.877818108 CEST	443	49973	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.878433943 CEST	49973	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.878458023 CEST	443	49973	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.879015923 CEST	49973	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.879029036 CEST	443	49973	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.912787914 CEST	443	49974	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.913760900 CEST	49974	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.913784981 CEST	443	49974	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.914447069 CEST	49974	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.914453030 CEST	443	49974	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.952044964 CEST	443	49975	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.952699900 CEST	49975	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.952709913 CEST	443	49975	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.953105927 CEST	49975	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.953110933 CEST	443	49975	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.981966019 CEST	443	49973	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.982033014 CEST	443	49973	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.982213974 CEST	49973	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.982388020 CEST	49973	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.982388020 CEST	49973	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.982409000 CEST	443	49973	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.982418060 CEST	443	49973	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.985671997 CEST	49978	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.985713959 CEST	443	49978	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:43.985912085 CEST	49978	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.985912085 CEST	49978	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:43.985951900 CEST	443	49978	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.018831968 CEST	443	49974	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.018884897 CEST	443	49974	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.019129038 CEST	49974	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.019264936 CEST	49974	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.019279003 CEST	443	49974	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.019335985 CEST	49974	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.019344091 CEST	443	49974	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.022080898 CEST	49979	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.022125006 CEST	443	49979	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.022399902 CEST	49979	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.022562981 CEST	49979	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.022572994 CEST	443	49979	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.054390907 CEST	443	49975	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.054462910 CEST	443	49975	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.054738998 CEST	49975	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.054738998 CEST	49975	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.054738998 CEST	49975	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.057842970 CEST	49980	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.057868958 CEST	443	49980	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.057951927 CEST	49980	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.058166981 CEST	49980	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.058176041 CEST	443	49980	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.360037088 CEST	49975	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.360064983 CEST	443	49975	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.454787016 CEST	443	49976	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.455307007 CEST	49976	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.455333948 CEST	443	49976	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.455764055 CEST	49976	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.455769062 CEST	443	49976	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.487505913 CEST	443	49977	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.488022089 CEST	49977	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.488029957 CEST	443	49977	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.488428116 CEST	49977	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.488440990 CEST	443	49977	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.556554079 CEST	443	49976	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.557765007 CEST	443	49976	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.557831049 CEST	49976	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.557874918 CEST	49976	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.557883024 CEST	443	49976	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.557897091 CEST	49976	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.557903051 CEST	443	49976	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.560705900 CEST	49981	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.560745955 CEST	443	49981	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.560890913 CEST	49981	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.561047077 CEST	49981	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.561059952 CEST	443	49981	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.588108063 CEST	443	49977	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.588143110 CEST	443	49977	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.588187933 CEST	49977	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.588193893 CEST	443	49977	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.588223934 CEST	49977	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.588308096 CEST	443	49977	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.588362932 CEST	443	49977	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.588416100 CEST	49977	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.588543892 CEST	49977	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.588543892 CEST	49977	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.588553905 CEST	443	49977	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.588562012 CEST	443	49977	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.591552019 CEST	49982	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.591583967 CEST	443	49982	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.591649055 CEST	49982	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.591816902 CEST	49982	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.591828108 CEST	443	49982	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.663336039 CEST	443	49978	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.664072990 CEST	49978	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.664091110 CEST	443	49978	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.664623976 CEST	49978	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.664642096 CEST	443	49978	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.676417112 CEST	443	49979	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.677078962 CEST	49979	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.677109003 CEST	443	49979	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.677570105 CEST	49979	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.677575111 CEST	443	49979	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.719934940 CEST	443	49980	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.720695019 CEST	49980	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.720727921 CEST	443	49980	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.721524954 CEST	49980	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.721534967 CEST	443	49980	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.769481897 CEST	443	49978	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.769507885 CEST	443	49978	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.769562006 CEST	443	49978	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.769577026 CEST	49978	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.769617081 CEST	49978	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.770678997 CEST	49978	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.770705938 CEST	443	49978	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.777746916 CEST	49983	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.777784109 CEST	443	49983	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.777997017 CEST	49983	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.777997017 CEST	49983	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.778028011 CEST	443	49983	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.780828953 CEST	443	49979	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.780844927 CEST	443	49979	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.780877113 CEST	443	49979	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.780904055 CEST	49979	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.780924082 CEST	443	49979	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.780946016 CEST	49979	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.780961990 CEST	49979	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.823240995 CEST	443	49980	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.823256016 CEST	443	49980	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.823298931 CEST	443	49980	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.823317051 CEST	49980	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.823427916 CEST	49980	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.823590040 CEST	49980	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.823606968 CEST	443	49980	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.824125051 CEST	49980	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.824140072 CEST	443	49980	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.826630116 CEST	49984	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.826657057 CEST	443	49984	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.826772928 CEST	49984	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.826957941 CEST	49984	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.826967955 CEST	443	49984	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.868519068 CEST	443	49979	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.868577003 CEST	443	49979	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.868609905 CEST	49979	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.868655920 CEST	49979	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.869210958 CEST	49979	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.869226933 CEST	443	49979	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.869240046 CEST	49979	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.869245052 CEST	443	49979	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.873886108 CEST	49985	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.873925924 CEST	443	49985	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:44.874056101 CEST	49985	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.874288082 CEST	49985	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:44.874300003 CEST	443	49985	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.224901915 CEST	443	49981	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.226476908 CEST	49981	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.226512909 CEST	443	49981	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.227931023 CEST	49981	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.227937937 CEST	443	49981	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.251806974 CEST	443	49982	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.253531933 CEST	49982	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.253549099 CEST	443	49982	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.254887104 CEST	49982	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.254892111 CEST	443	49982	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.330348969 CEST	443	49981	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.330378056 CEST	443	49981	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.330393076 CEST	443	49981	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.330461025 CEST	49981	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.330487967 CEST	443	49981	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.330534935 CEST	49981	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.354978085 CEST	443	49982	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.355004072 CEST	443	49982	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.355118990 CEST	49982	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.355149984 CEST	443	49982	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.355207920 CEST	49982	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.355285883 CEST	443	49982	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.355328083 CEST	443	49982	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.355329990 CEST	49982	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.355349064 CEST	443	49982	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.355380058 CEST	49982	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.355401039 CEST	443	49982	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.355415106 CEST	49982	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.355418921 CEST	443	49982	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.358609915 CEST	49986	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.358637094 CEST	443	49986	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.358781099 CEST	49986	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.358907938 CEST	49986	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.358916998 CEST	443	49986	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.419697046 CEST	443	49981	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.419758081 CEST	443	49981	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.419786930 CEST	443	49981	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.419802904 CEST	49981	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.419847012 CEST	49981	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.420378923 CEST	49981	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.420394897 CEST	443	49981	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.420429945 CEST	49981	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.420435905 CEST	443	49981	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.426251888 CEST	49987	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.426294088 CEST	443	49987	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.426378965 CEST	49987	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.426592112 CEST	49987	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.426603079 CEST	443	49987	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.456418037 CEST	443	49983	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.472685099 CEST	49983	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.472723961 CEST	443	49983	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.473567963 CEST	49983	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.473582983 CEST	443	49983	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.510206938 CEST	443	49984	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.510735035 CEST	49984	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.510760069 CEST	443	49984	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.511476994 CEST	49984	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.511482954 CEST	443	49984	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.521449089 CEST	443	49985	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.522106886 CEST	49985	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.522130966 CEST	443	49985	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.522845984 CEST	49985	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.522850990 CEST	443	49985	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.574867010 CEST	443	49983	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.574894905 CEST	443	49983	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.574954033 CEST	443	49983	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.574958086 CEST	49983	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.575011015 CEST	49983	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.575272083 CEST	49983	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.575285912 CEST	443	49983	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.578957081 CEST	49988	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.578982115 CEST	443	49988	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.579273939 CEST	49988	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.579374075 CEST	49988	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.579399109 CEST	443	49988	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.614713907 CEST	443	49984	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.614794970 CEST	443	49984	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.615688086 CEST	49984	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.615907907 CEST	49984	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.615923882 CEST	443	49984	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.615942955 CEST	49984	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.615948915 CEST	443	49984	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.620573997 CEST	49989	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.620606899 CEST	443	49989	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.620680094 CEST	49989	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.620949984 CEST	49989	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.620960951 CEST	443	49989	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.623007059 CEST	443	49985	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.623055935 CEST	443	49985	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.623128891 CEST	49985	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.623456955 CEST	49985	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.623469114 CEST	443	49985	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.623481035 CEST	49985	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.623486042 CEST	443	49985	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.628901958 CEST	49990	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.628920078 CEST	443	49990	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:45.629304886 CEST	49990	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.629772902 CEST	49990	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:45.629781008 CEST	443	49990	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.041551113 CEST	443	49986	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.042052031 CEST	49986	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.042062998 CEST	443	49986	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.042499065 CEST	49986	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.042503119 CEST	443	49986	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.077687979 CEST	443	49987	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.078277111 CEST	49987	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.078301907 CEST	443	49987	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.078743935 CEST	49987	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.078748941 CEST	443	49987	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.146629095 CEST	443	49986	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.146734953 CEST	443	49986	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.146807909 CEST	49986	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.147106886 CEST	49986	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.147121906 CEST	443	49986	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.147130966 CEST	49986	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.147136927 CEST	443	49986	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.149866104 CEST	49991	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.149883032 CEST	443	49991	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.149939060 CEST	49991	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.150144100 CEST	49991	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.150151968 CEST	443	49991	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.179161072 CEST	443	49987	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.179253101 CEST	443	49987	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.179354906 CEST	49987	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.179501057 CEST	49987	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.179514885 CEST	443	49987	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.182467937 CEST	49992	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.182481050 CEST	443	49992	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.182564020 CEST	49992	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.182694912 CEST	49992	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.182703972 CEST	443	49992	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.229909897 CEST	443	49988	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.230379105 CEST	49988	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.230392933 CEST	443	49988	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.230824947 CEST	49988	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.230830908 CEST	443	49988	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.273267031 CEST	443	49989	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.273879051 CEST	49989	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.273901939 CEST	443	49989	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.274331093 CEST	49989	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.274336100 CEST	443	49989	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.277333975 CEST	443	49990	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.277693033 CEST	49990	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.277699947 CEST	443	49990	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.278081894 CEST	49990	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.278090000 CEST	443	49990	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.332237005 CEST	443	49988	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.332658052 CEST	443	49988	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.332720995 CEST	443	49988	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.332756996 CEST	49988	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.332807064 CEST	49988	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.332876921 CEST	49988	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.332876921 CEST	49988	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.332892895 CEST	443	49988	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.332901955 CEST	443	49988	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.374631882 CEST	443	49989	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.374696970 CEST	443	49989	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.374758005 CEST	49989	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.375037909 CEST	49989	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.375051022 CEST	443	49989	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.375063896 CEST	49989	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.375071049 CEST	443	49989	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.378880024 CEST	443	49990	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.378922939 CEST	443	49990	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.379087925 CEST	49990	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.379165888 CEST	49990	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.379170895 CEST	443	49990	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:46.379189968 CEST	49990	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:46.379194021 CEST	443	49990	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:47.051928043 CEST	443	49992	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:47.055496931 CEST	443	49991	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:47.056906939 CEST	49992	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:47.056925058 CEST	443	49992	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:47.063775063 CEST	49992	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:47.063781023 CEST	443	49992	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:47.064291954 CEST	49991	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:47.064313889 CEST	443	49991	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:47.065195084 CEST	49991	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:47.065201998 CEST	443	49991	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:47.160494089 CEST	443	49992	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:47.160569906 CEST	443	49992	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:47.160640001 CEST	49992	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:47.163702011 CEST	443	49991	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:47.164254904 CEST	443	49991	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:47.164331913 CEST	49991	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:47.165858030 CEST	49992	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:47.165863037 CEST	443	49992	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:47.168148994 CEST	49991	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:47.168148994 CEST	49991	443	192.168.2.9	13.107.246.60
Oct 13, 2024 20:11:47.168169975 CEST	443	49991	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:47.168179989 CEST	443	49991	13.107.246.60	192.168.2.9
Oct 13, 2024 20:11:49.689502954 CEST	49705	80	192.168.2.9	199.232.210.172
Oct 13, 2024 20:11:49.695046902 CEST	80	49705	199.232.210.172	192.168.2.9
Oct 13, 2024 20:11:49.695101976 CEST	49705	80	192.168.2.9	199.232.210.172
Oct 13, 2024 20:11:53.217327118 CEST	49993	443	192.168.2.9	20.109.210.53
Oct 13, 2024 20:11:53.217365026 CEST	443	49993	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:53.217468977 CEST	49993	443	192.168.2.9	20.109.210.53
Oct 13, 2024 20:11:53.218084097 CEST	49993	443	192.168.2.9	20.109.210.53
Oct 13, 2024 20:11:53.218100071 CEST	443	49993	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:53.908895016 CEST	443	49993	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:53.908974886 CEST	49993	443	192.168.2.9	20.109.210.53
Oct 13, 2024 20:11:53.911089897 CEST	49993	443	192.168.2.9	20.109.210.53
Oct 13, 2024 20:11:53.911103964 CEST	443	49993	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:53.911364079 CEST	443	49993	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:53.912851095 CEST	49993	443	192.168.2.9	20.109.210.53
Oct 13, 2024 20:11:53.959408045 CEST	443	49993	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:54.173724890 CEST	443	49993	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:54.173754930 CEST	443	49993	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:54.173769951 CEST	443	49993	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:54.173813105 CEST	49993	443	192.168.2.9	20.109.210.53
Oct 13, 2024 20:11:54.173835993 CEST	443	49993	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:54.173866987 CEST	49993	443	192.168.2.9	20.109.210.53
Oct 13, 2024 20:11:54.173888922 CEST	49993	443	192.168.2.9	20.109.210.53
Oct 13, 2024 20:11:54.175187111 CEST	443	49993	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:54.175240040 CEST	443	49993	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:54.175252914 CEST	49993	443	192.168.2.9	20.109.210.53
Oct 13, 2024 20:11:54.175263882 CEST	443	49993	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:54.175302029 CEST	49993	443	192.168.2.9	20.109.210.53
Oct 13, 2024 20:11:54.175354958 CEST	443	49993	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:54.175429106 CEST	443	49993	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:54.175487041 CEST	49993	443	192.168.2.9	20.109.210.53
Oct 13, 2024 20:11:54.183326006 CEST	49993	443	192.168.2.9	20.109.210.53
Oct 13, 2024 20:11:54.183353901 CEST	443	49993	20.109.210.53	192.168.2.9
Oct 13, 2024 20:11:54.183366060 CEST	49993	443	192.168.2.9	20.109.210.53
Oct 13, 2024 20:11:54.183378935 CEST	443	49993	20.109.210.53	192.168.2.9
Oct 13, 2024 20:12:07.988940954 CEST	49995	443	192.168.2.9	172.217.16.196
Oct 13, 2024 20:12:07.988986015 CEST	443	49995	172.217.16.196	192.168.2.9
Oct 13, 2024 20:12:07.989147902 CEST	49995	443	192.168.2.9	172.217.16.196
Oct 13, 2024 20:12:07.989428997 CEST	49995	443	192.168.2.9	172.217.16.196
Oct 13, 2024 20:12:07.989459991 CEST	443	49995	172.217.16.196	192.168.2.9
Oct 13, 2024 20:12:08.648680925 CEST	443	49995	172.217.16.196	192.168.2.9
Oct 13, 2024 20:12:08.649010897 CEST	49995	443	192.168.2.9	172.217.16.196
Oct 13, 2024 20:12:08.649029016 CEST	443	49995	172.217.16.196	192.168.2.9
Oct 13, 2024 20:12:08.649346113 CEST	443	49995	172.217.16.196	192.168.2.9
Oct 13, 2024 20:12:08.649782896 CEST	49995	443	192.168.2.9	172.217.16.196
Oct 13, 2024 20:12:08.649842024 CEST	443	49995	172.217.16.196	192.168.2.9
Oct 13, 2024 20:12:08.689800978 CEST	49995	443	192.168.2.9	172.217.16.196
Oct 13, 2024 20:12:18.548778057 CEST	443	49995	172.217.16.196	192.168.2.9
Oct 13, 2024 20:12:18.548939943 CEST	443	49995	172.217.16.196	192.168.2.9
Oct 13, 2024 20:12:18.548999071 CEST	49995	443	192.168.2.9	172.217.16.196
Oct 13, 2024 20:12:18.585033894 CEST	49995	443	192.168.2.9	172.217.16.196
Oct 13, 2024 20:12:18.585058928 CEST	443	49995	172.217.16.196	192.168.2.9

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 13, 2024 20:11:04.372833967 CEST	53	58658	1.1.1.1	192.168.2.9
Oct 13, 2024 20:11:04.374675989 CEST	53	52491	1.1.1.1	192.168.2.9
Oct 13, 2024 20:11:05.368434906 CEST	53	60188	1.1.1.1	192.168.2.9
Oct 13, 2024 20:11:05.764947891 CEST	51814	53	192.168.2.9	1.1.1.1
Oct 13, 2024 20:11:05.765389919 CEST	49343	53	192.168.2.9	1.1.1.1
Oct 13, 2024 20:11:05.986236095 CEST	53	51814	1.1.1.1	192.168.2.9
Oct 13, 2024 20:11:05.993403912 CEST	53	49343	1.1.1.1	192.168.2.9
Oct 13, 2024 20:11:06.752006054 CEST	53	58396	1.1.1.1	192.168.2.9
Oct 13, 2024 20:11:06.889481068 CEST	57776	53	192.168.2.9	1.1.1.1
Oct 13, 2024 20:11:06.889692068 CEST	54296	53	192.168.2.9	1.1.1.1
Oct 13, 2024 20:11:07.115111113 CEST	53	54296	1.1.1.1	192.168.2.9
Oct 13, 2024 20:11:07.151890993 CEST	53	57776	1.1.1.1	192.168.2.9
Oct 13, 2024 20:11:07.924943924 CEST	61287	53	192.168.2.9	1.1.1.1
Oct 13, 2024 20:11:07.925443888 CEST	56705	53	192.168.2.9	1.1.1.1
Oct 13, 2024 20:11:07.938781023 CEST	53	61287	1.1.1.1	192.168.2.9
Oct 13, 2024 20:11:07.938818932 CEST	53	56705	1.1.1.1	192.168.2.9
Oct 13, 2024 20:11:07.968012094 CEST	53	51352	1.1.1.1	192.168.2.9
Oct 13, 2024 20:11:22.375905991 CEST	53	54906	1.1.1.1	192.168.2.9
Oct 13, 2024 20:11:41.737680912 CEST	53	62744	1.1.1.1	192.168.2.9
Oct 13, 2024 20:11:49.805809021 CEST	138	138	192.168.2.9	192.168.2.255
Oct 13, 2024 20:12:03.434616089 CEST	53	62884	1.1.1.1	192.168.2.9
Oct 13, 2024 20:12:04.782201052 CEST	53	53365	1.1.1.1	192.168.2.9

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 13, 2024 20:11:05.764947891 CEST	192.168.2.9	1.1.1.1	0xb91b	Standard query (0)	mail.findmy-ld.help	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:11:05.765389919 CEST	192.168.2.9	1.1.1.1	0x45e	Standard query (0)	mail.findmy-ld.help	65	IN (0x0001)	false
Oct 13, 2024 20:11:06.889481068 CEST	192.168.2.9	1.1.1.1	0xc284	Standard query (0)	mail.findmy-ld.help	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:11:06.889692068 CEST	192.168.2.9	1.1.1.1	0x9c09	Standard query (0)	mail.findmy-ld.help	65	IN (0x0001)	false
Oct 13, 2024 20:11:07.924943924 CEST	192.168.2.9	1.1.1.1	0xa28b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:11:07.925443888 CEST	192.168.2.9	1.1.1.1	0xb9dd	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 13, 2024 20:10:55.902524948 CEST	1.1.1.1	192.168.2.9	0xe17e	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 20:10:55.902524948 CEST	1.1.1.1	192.168.2.9	0xe17e	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:11:05.986236095 CEST	1.1.1.1	192.168.2.9	0xb91b	No error (0)	mail.findmy-ld.help		50.6.138.164	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:11:07.151890993 CEST	1.1.1.1	192.168.2.9	0xc284	No error (0)	mail.findmy-ld.help		50.6.138.164	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:11:07.938781023 CEST	1.1.1.1	192.168.2.9	0xa28b	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:11:07.938818932 CEST	1.1.1.1	192.168.2.9	0xb9dd	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 13, 2024 20:11:16.407053947 CEST	1.1.1.1	192.168.2.9	0xb93d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 20:11:16.407053947 CEST	1.1.1.1	192.168.2.9	0xb93d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:11:28.918096066 CEST	1.1.1.1	192.168.2.9	0x364e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 20:11:28.918096066 CEST	1.1.1.1	192.168.2.9	0x364e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:11:56.839416027 CEST	1.1.1.1	192.168.2.9	0x72b3	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 20:11:56.839416027 CEST	1.1.1.1	192.168.2.9	0x72b3	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:12:16.838030100 CEST	1.1.1.1	192.168.2.9	0xff85	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 20:12:16.838030100 CEST	1.1.1.1	192.168.2.9	0xff85	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

fs.microsoft.com

slscr.update.microsoft.com

mail.findmy-ld.help

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.9	49748	50.6.138.164	80	5736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:11:06.007863045 CEST	465	OUT	GET /icloud-archivos/code2022esp.php HTTP/1.1 Host: mail.findmy-ld.help Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:11:06.503478050 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:06 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Vary: Accept-Encoding Content-Encoding: gzip Accept-Ranges: none Content-Length: 2876 Keep-Alive: timeout=5, max=75 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 52 61 73 db 36 12 fd ee 5f 81 30 9d 8c d4 0b 49 cb 72 dc c4 16 d5 49 1c e7 ea 99 e4 d2 26 ce 75 6e 6e ae 19 08 58 89 48 40 80 01 40 c9 8a eb 9f d4 4f f9 09 f9 63 b7 00 29 8a b2 9d da bd f1 64 ae 73 47 7b 44 62 b1 fb f6 ed db 37 ba f3 f4 e5 e1 c9 3f 7e 3c 22 b9 2b 24 f9 f1 cd 93 e7 c7 87 24 8a d3 f4 e7 e1 61 9a 3e 3d 79 4a 7e 38 79 f1 9c ec 26 db 03 72 62 a8 b2 c2 09 ad a8 4c d3 a3 bf 45 24 ca 9d 2b f7 d3 74 b1 58 24 8b 61 a2 cd 2c 3d 79 95 7a a8 dd 54 6a 6d 21 e1 8e 47 e3 ad d1 9d 38 26 96 ce 81 93 a9 d1 05 a9 8c cc 7a db db 0f b6 fb 1e c0 36 08 82 49 5d f1 84 e9 22 56 36 a9 6c 4a df 0c ff 3e 48 0b 3d 11 12 52 a6 39 24 65 5e 92 38 46 40 df 63 3c ca 81 f2 f1 a8 00 47 89 07 8a e1 43 25 e6 59 74 a8 95 03 e5 e2 93 65 09 11 61 f5 29 8b 1c 9c ba 40 ee 80 b0 9c 1a 0b 2e 7b 73 f2 2c 7e 88 04 09 3e e1 a7 06 53 b4 80 2c 9a 0b 58 94 da b8 0e c4 42 70 97 67 1c e6 82 41 1c 0e f7 89 50 a8 09 95 b1 65 54 42 36 b8 4f 0a 7a 2a 8a aa 58 05 1a f8 91 14 ea 3d 31 20 b3 a8 34 30 05 c7 72 [TRUNCATED] Data Ascii: Ras6_0IrI&unnXH@@Oc)dsG{Db7?~<"+$$a>=yJ~8y&rbLE$+tX$a,=yzTjm!G8&z6I]"V6lJ>H=R9$e^8F@c<GC%Ytea)@.{s,~>S,XBpgAPeTB6Oz*X=1 40rbRG,J)6"7NB.))5:-BIZQ4Fwh_\Z b$;B!W<<ESGc !Ap<zI>3:.j(G\Va+>E\|ovIl><F(b\q2!})HFV9#9+c3(8fQ<HFM1=#LKm>9V3TH>7D$\R[\\|0Vw`H\Gx_!HP3y8grZSE5qzxX0Ob1A`cD(tKmM=5qKP::YS{Op)uOL+c&/.a}uaSfU}3TEW_G.bk_C&@\|3fGx;"T{
Oct 13, 2024 20:11:06.503493071 CEST	1236	IN	Data Raw: 81 b2 e8 ee c6 22 82 12 f1 e0 c1 e0 bb 87 83 c1 70 6f 6f 67 67 2f 1e d4 db e9 ec 2e 22 82 d7 12 5d d0 6f b3 70 1b 0b 5b bf 8e a6 da 14 a4 00 97 6b ac 2d b5 75 c8 85 39 a1 55 16 a5 b8 9a 8a fb fe 49 99 97 35 fa 07 e3 cf af 80 0b ef 9e 67 58 1c 11 Data Ascii: "poogg/."]op[k-u9UI5gXEQ3mO`=!l""5RX{~b+A,axl'M>S+GzA\EfxuHOHQJpR8ThKc-k>$>%,&
Oct 13, 2024 20:11:06.503513098 CEST	687	IN	Data Raw: aa dc 41 db 6f 65 c8 91 65 46 94 6e 4c b6 e6 d4 90 9c da c7 95 d3 53 cd 2a 9b 71 fc 2d d0 e4 c9 0c dc 91 04 ff f9 64 79 cc 7b 11 cb a9 d9 8e fa 09 5d a5 1e 4c 2b c5 9c 5f f0 9c 4a c1 a9 aa 8a 09 98 1e f4 cf 0c b8 ca 28 e2 00 f5 59 03 52 29 bf 87 Data Ascii: AoeeFnLS*q-dy{]L+_J(YR)=,Q}H`Y~WRgnS^;&SCzJX0w$AppMnsMm7^p^m7\|i5J-3tc<[hu%/:=t%uHI.
Oct 13, 2024 20:11:06.568974018 CEST	381	OUT	GET /icloud-archivos/fonts.css HTTP/1.1 Host: mail.findmy-ld.help Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://mail.findmy-ld.help/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:11:06.694420099 CEST	764	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:06 GMT Server: Apache Last-Modified: Sat, 26 Nov 2022 14:31:26 GMT Accept-Ranges: none Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 478 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: text/css Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 92 4f 4e 83 40 14 87 d7 f6 14 2f 6c 68 1b 69 6b e3 9f b4 6e 34 ae 5c 98 98 f6 00 66 0a 0f 3b 71 60 c8 cc ab 4a 8c 57 70 ed 51 8c c7 f1 02 5e 41 a0 b4 d1 49 83 0e e9 c2 b2 9c 07 bf 07 bf 6f be b3 50 c6 e4 85 cc 47 78 6a ed 95 87 88 8b 74 ec 5e a5 8a b3 00 a6 48 70 ad a4 7b 5a 3e d6 94 0a 1c c7 52 45 4c ac 66 0f c8 6f e7 34 1e 0e 06 d9 44 2b 7f 2c a4 cf 44 db fd 78 7d ff 7c 7b 71 3b fb b0 50 a2 ed f4 fa 51 b1 d3 d3 48 5e a2 e4 0d cd 79 dc 7b 90 61 e8 74 20 cc 37 52 db 59 1e 2b 13 44 df 03 a4 16 48 69 82 4e 27 fb 78 bf 0b 17 32 c9 32 d9 ff 40 db ef c0 c1 68 34 84 f3 40 ce 10 a6 a9 26 8c 34 5c c6 be 54 89 54 8c 30 e8 c1 b9 10 30 c9 5f d7 30 41 8d ea 3e 1f 96 dd b9 06 06 a4 58 80 11 53 77 20 c3 ca 4d dd 7e eb b9 d5 3a ab 49 94 13 13 dc df 06 51 6f b9 ca 1e ec 2a d8 0c be 90 c1 73 4b 7a 15 32 a1 a4 5d 6b f6 17 73 0e ad cd c1 47 aa 67 ce b7 60 33 cc 31 f8 c6 79 1d 61 f0 3d b2 e5 1b 61 c0 17 91 1d da 32 d3 48 aa 1b ad ad 49 b5 96 b7 3f a3 cd 60 0c 19 40 b7 24 58 a9 14 4a da [TRUNCATED] Data Ascii: ON@/lhikn4\f;q`JWpQ^AIoPGxjt^Hp{Z>RELfo4D+,Dx}\|{q;PQH^y{at 7RY+DHiN'x22@h4@&4\TT00_0A>XSw M~:IQo*sKz2]ksGg`31ya=a2HI?`@$XJn?q~UIN5,'&-r]=p38C-)"JvEq~Y:ED91m<W!Jf9q~Q0pmn!X2Hkn'
Oct 13, 2024 20:11:06.741277933 CEST	428	OUT	GET /assets/img/ajax-loader.gif HTTP/1.1 Host: mail.findmy-ld.help Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://mail.findmy-ld.help/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:11:06.859055996 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:06 GMT Server: Apache Last-Modified: Sun, 07 May 2023 06:35:50 GMT Accept-Ranges: bytes Content-Length: 4178 Keep-Alive: timeout=5, max=73 Connection: Keep-Alive Content-Type: image/gif Data Raw: 47 49 46 38 39 61 20 00 20 00 f5 00 00 ff ff ff 00 00 00 fa fa fa c4 c4 c4 e8 e8 e8 f0 f0 f0 d0 d0 d0 7e 7e 7e 9a 9a 9a f6 f6 f6 e6 e6 e6 fc fc fc 92 92 92 86 86 86 e2 e2 e2 b8 b8 b8 a0 a0 a0 ec ec ec ae ae ae dc dc dc 3e 3e 3e 56 56 56 60 60 60 7c 7c 7c a8 a8 a8 ee ee ee 4a 4a 4a 6c 6c 6c 0c 0c 0c 00 00 00 ce ce ce c8 c8 c8 d8 d8 d8 2c 2c 2c 5e 5e 5e 1e 1e 1e 4c 4c 4c b0 b0 b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 09 0a 00 00 00 2c 00 00 00 00 20 00 20 00 00 06 ff 40 80 70 48 24 16 38 1c 47 71 c9 24 4e 12 c4 41 a7 33 28 0a 9a 4c 09 c5 12 9d 56 87 05 05 14 4b 7c 50 28 8f a1 94 3a 14 28 14 05 72 b1 42 d1 8c d7 5f 40 58 21 2f 1a ce 0c 42 78 42 6e 62 7d 45 [TRUNCATED] Data Ascii: GIF89a ~~~>>>VVV```\|\|\|JJJlll,,,^^^LLL!NETSCAPE2.0!Created with ajaxload.info!, @pH$8Gq$NA3(LVK\|P(:(rB_@X!/BxBnb}EgorEg^oWDcJCgoqmoE{p~rD}MdKro\|]q` 9Cf)$'=}C^u-H.!OK"15.&{jT BBoe6<@B?1)GbK !, @pH$&4Bq$Db(V[4_:t:"rqh@a)gBk_oEg~#rJDgxloWFC~mgoDBwK!CwE dXrs'xM&T$$\|MC ABldKdV?oFl-X L[J*6!"5\@poImN!QXm@%2u:uH2\R#a!, @pH$Bq$&D(LV[$:4P(rs_IgBxBo
Oct 13, 2024 20:11:06.859098911 CEST	1236	IN	Data Raw: 45 20 67 02 77 5e 00 09 1a 14 15 72 02 8e 46 67 57 85 10 6f 57 44 0c 63 42 0b 0a 0a 11 98 84 67 09 02 0e 0e 02 04 6f 1b 44 25 23 1d 1d 9f 00 19 a5 0a 05 76 0b 20 4a 45 13 16 69 00 6e b6 1d 14 45 02 bb 0a 7e 7f 05 22 c8 23 89 4c 09 bb c1 64 24 b6 Data Ascii: E gw^rFgWoWDcBgoD%#v JEinE~"#Ld$LX"yrvEd)xWO<2I&1a"UJ(qz+kQ\" tRjO}C7":sdE& R"#-=LQ2s:d+qV
Oct 13, 2024 20:11:06.859111071 CEST	1236	IN	Data Raw: 00 20 00 20 00 00 06 ff 40 80 70 48 2c 2a 14 8b a2 72 49 4c 12 05 47 41 51 ca 54 26 14 99 67 94 58 50 24 aa d3 ad 10 aa a0 02 c8 05 70 31 72 1c 92 cd 99 b6 5a eb 1d 8b c9 df 39 f7 98 7c 0b 8f 11 6a 02 66 42 0b 47 69 7e 57 65 45 09 79 00 86 0a 11 Data Ascii: @pH,*rILGAQT&gXP$p1rZ9\|jfBGi~WeEy}RinlHCqNN]aGuzC`Ljz`dLKUWDcjs0R%+q"lQbwF.0s3
Oct 13, 2024 20:11:06.859261990 CEST	712	IN	Data Raw: 2b 9b 00 14 bd 02 c3 e0 40 03 2a 2d 07 cc d2 84 cc c0 46 78 42 92 ce c2 f3 0b c4 01 04 5c 80 46 e5 a7 33 aa d6 ae b7 86 0d 5d 12 04 00 21 f9 04 09 0a 00 00 00 2c 00 00 00 00 20 00 20 00 00 06 ff 40 80 70 48 2c 2a 14 8b a2 72 49 4c 12 05 47 41 51 Data Ascii: +@-FxB\F3]!, @pH,rILGAQT&gXP$p1rZ9\|jEGi~WeEy#D}RinlHB!$CfCN]Ej$sLjNszEgdGzz\
Oct 13, 2024 20:11:07.125998974 CEST	411	OUT	GET /icloud-archivos/myriad-set-pro_text.woff HTTP/1.1 Host: mail.findmy-ld.help Connection: keep-alive Origin: http://mail.findmy-ld.help User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mail.findmy-ld.help/icloud-archivos/fonts.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:11:07.247415066 CEST	1236	IN	HTTP/1.1 404 Not Found Date: Sun, 13 Oct 2024 18:11:07 GMT Server: Apache Last-Modified: Wed, 24 May 2023 01:50:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4677 Keep-Alive: timeout=5, max=72 Connection: Keep-Alive Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 [TRUNCATED] Data Ascii: RmssgJ&av$NmRmHInM=_cpw~y3(\G(z}[832qQtjEl0;hQoAqK/^zPP`1PP%J^Vyg::<s}k9=v]Ivs8w>;]Np3xyvGe)e,v&FVIJqM3Hhp8(a{8jotEI.6q^>YZQH]rBis_4:Jar!c(j):{{d!5Dh4+k5yUD$wZ}YQO,5I>i6<]2XpCMe^Wh2.\|~l'\|v,sTWdG'8RFOE>8.V?\~[KJzp=4LB)YyuFMYb;Cd5[&TWRd{/_lyoY'+G;G\?zJL9*~"P,EO$}(OW<2X!SSQrxOx"#DJMAP!3-uH26?<gR;1<]9G$Vp0sBQ=f%afQmB<qMZq0&Vk
Oct 13, 2024 20:11:07.247473955 CEST	1236	IN	Data Raw: 49 26 3b f9 fa 41 83 05 ea 7d 2a 6d a5 44 33 d4 a4 71 b1 99 49 63 79 2b 21 45 66 c8 7d ce 7e f9 e5 e0 60 b1 69 91 ef a6 ab dd a3 c9 f3 17 2f 7e 5d ec ba 42 9a b5 cd c3 17 bf 26 87 2f 56 43 53 84 7b 98 88 e4 2e 37 54 eb b4 bf 38 87 cf fd bf 11 0b Data Ascii: I&;A}mD3qIcy+!Ef}~`i/~]B&/VCS{.7T81),)VRCx{k_hT!dnD3bxixqTHr2=-c/7UtoGc-'9_e$'(e66FANz=86CG]__^g
Oct 13, 2024 20:11:07.247492075 CEST	1236	IN	Data Raw: 7f 5f 9a cc 0f 7c 7e cc 8d 47 d3 16 aa a5 c0 11 77 9c 06 70 2d f3 c2 71 9d 65 72 e7 67 b7 4d f9 97 a6 78 33 93 82 c8 22 5c 19 aa d0 38 89 76 00 b7 8c 58 2d df 59 8d 52 e0 90 bf bc 76 3f ae 12 5e 1f 5f 0e 51 fa 28 da aa 25 42 fb 6a 70 ac 19 d5 3a Data Ascii: _\|~Gwp-qergMx3"\8vX-YRv?^_Q(%Bjp:}P[_0uBTg0+\|~@('H{3jsrTMsMDk={j-o\|m4aG+.<W6CYkGm^jTRm=9tMj=;
Oct 13, 2024 20:11:07.248051882 CEST	372	IN	Data Raw: 14 ae c5 80 4c 2a 8c 23 31 8e 23 06 59 f2 f0 d3 3a 38 d6 e1 50 bb de 46 46 b7 2c 79 13 c3 eb 75 2c de 42 97 c2 94 0d 7e ca ef ce d4 fc 46 da 3e 63 a3 84 03 87 6c 70 70 13 cd 94 f3 29 5a 76 13 0c 5e b2 55 09 1a 0f 04 36 41 2d 8c a4 36 a7 16 95 33 Data Ascii: L#1#Y:8PFF,yu,B~F>clpp)Zv^U6A-63YZ2Zsc]1Z [SiXCY^WQCbK~+n:)@UP7RpWO~b!/r@l-ElQK$gYzKoF
Oct 13, 2024 20:11:07.335484982 CEST	893	IN	Data Raw: 48 70 69 dc 22 d4 ae e9 53 29 e0 fc f6 2a 8e 18 66 0b f5 03 e7 cc f1 f2 2e 54 86 72 23 ca 27 b6 65 f9 8e 52 fc d2 8d 9b 9b 37 61 a0 00 87 73 17 92 20 f3 a5 c3 9e 88 97 e9 9d e0 0a 9a 55 54 5b 37 d8 07 b5 d1 2d 36 11 b8 07 12 2d 87 c9 59 2d 42 17 Data Ascii: Hpi"S)f.Tr#'eR7as UT[7-6-Y-BE.y]ibW71W)Y+}8u_=_'j"jSJj?r.,gSI^\F_1wjP?gZO-lX#]Y-&C$3v/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.9	49747	50.6.138.164	80	5736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:11:06.569250107 CEST	379	OUT	GET /icloud-archivos/app.css HTTP/1.1 Host: mail.findmy-ld.help Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://mail.findmy-ld.help/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:11:06.730911970 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:06 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Sat, 26 Nov 2022 14:31:26 GMT Accept-Ranges: none Vary: Accept-Encoding Content-Encoding: gzip Keep-Alive: timeout=5, max=75 Transfer-Encoding: chunked Content-Type: text/css Data Raw: 31 66 61 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cc b2 ed 8e e3 b8 96 2d f8 3b f2 29 d4 91 48 dc c8 be 41 97 e4 8f b0 ad 44 1d 54 df 3c 75 d0 3f e6 36 06 73 81 c1 0c 72 12 05 4a a4 24 b6 29 52 20 a9 b0 23 1a 79 9f 7d 36 29 c9 a6 2c c9 76 44 d6 39 dd 11 f9 61 73 af bd f6 da 7b ad c2 94 3c f8 8f 0f 77 99 14 06 65 b8 64 fc 25 0e 34 16 1a 69 aa 58 f6 e5 c3 1d 2a 35 32 f4 60 90 66 af 14 61 f2 ef b5 36 71 10 85 e1 27 5b dc d3 64 c7 cc 24 e0 c7 87 0f 89 24 2f 76 42 89 55 ce 44 1c 84 ee 15 2b c3 52 4e 1f 3f 60 cd 08 fc 47 a8 c1 8c eb c7 0f 19 cb 53 5c 19 26 85 fb 5c 2b 28 66 52 1a aa 1e 3f 14 14 13 f7 7f ae 64 5d 3d 7e 28 31 03 54 49 45 fd f8 41 e0 e7 c7 0f 9a a6 4d a7 ae 4b 98 e7 e6 12 a6 2b 8e 61 ab 84 cb 74 d7 0c af 09 93 8f 1f 52 2c 9e 31 8c ac 94 cc 15 d5 f0 e9 19 b4 c8 5e 13 13 9c 09 8a da de bb 67 6a 75 63 8e 30 67 39 2c 93 60 4d 2d e0 44 1b 0b 69 1e be a5 70 4e 25 b9 fe fe b9 c7 26 a4 85 de 15 94 e5 85 e9 4e f1 ad 60 84 50 f1 fd f1 83 a1 25 e0 0c 1d e9 b1 f4 f6 39 c1 e9 ce 6e 2f 08 4a 25 97 2a 0e 8c [TRUNCATED] Data Ascii: 1faa-;)HADT<u?6srJ$)R #y}6),vD9as{<wed%4iX52`fa6q'[d$$/vBUD+RN?`GS\&\+(fR?d]=~(1TIEAMK+atR,1^gjuc0g9,`M-DipN%&N`P%9n/J%0,pg{ X'f#i,LIc 1'V"y!8y08QEtBD`N/^ fOkZq3>f}?a%yNVu]+Z]%5EpkVFVq.mtbAX^+flVa>-q \$]B-3\2q,>>~9j7NjxDU2x)q?uk.UcZ<Lf!T-LyM{A\|/AhO3W0/4T6vJ2pHy1'{RHm7e25bBPRxWaB\h.YG]t;-h9X6cTmE]&T1r+&P/V6VZL{h1R)l5yr]&{M5I<f^G!3\|LC
Oct 13, 2024 20:11:06.730930090 CEST	1236	IN	Data Raw: 7b 94 58 e5 4c 80 05 c1 bc ea 7b 32 5b ac 68 09 ff 3d cd 9b ff d7 f0 9f a3 e6 34 a7 82 5c 09 91 bd 15 56 14 5b 98 7c a6 2a e3 72 ef 9d 5d 56 26 57 b2 ae 6c 39 83 f3 c1 2e 8d 31 89 b4 e7 b5 04 36 f4 a7 21 28 95 9c e3 4a 53 7b ee e6 d3 97 63 4d 57 Data Ascii: {XL{2[h=4\V[\|r]V&Wl9.16!(JS{cMW8gg?d,Q)_SK'4>'ASBgb7pWnok/(,Q)HI$y9dd%gjX5(cX/bDp&(Z[rYUq~8,)eDUIm
Oct 13, 2024 20:11:06.730947018 CEST	1236	IN	Data Raw: 9c 50 43 73 a1 be 3c d5 a7 bc 05 d4 ea 84 9a b2 16 50 4f 27 d4 d0 59 a8 af bd fa f4 5e 9b 13 6a ca 57 40 6d 4f a8 a1 ad f6 84 de 91 a7 5c b5 30 ef d4 53 a6 5a 98 7f ec 73 4f 65 96 69 6a 1a 57 4b ac 72 26 50 83 1c c7 45 03 dc e8 2d 5a f4 7c 80 1e Data Ascii: PCs<PO'Y^jW@mO\0SZsOeijWKr&PE-Z\|7/s[r<-p=^fHY<7?4q<=~.F0PBe):\|E(z<}{y}~>r]%v/~xuWnv2C>Y^^d}
Oct 13, 2024 20:11:06.731112003 CEST	1236	IN	Data Raw: 6f 0b f4 cf 3f 69 b7 05 f6 0c 18 b8 2d b3 4c 53 d3 fa 5d 62 95 33 81 1a ec 04 32 1a 22 c7 2f d3 e2 e7 43 fc 44 0c da 86 c5 b0 61 90 87 16 ba 1c 42 27 82 d1 36 ac 86 0d 13 09 69 1b 9e 86 0d 83 a8 b4 d0 f5 08 f4 e2 65 36 c3 86 89 f0 b4 0d db 61 c3 Data Ascii: o?i-LS]b32"/CDaB'6ie6a EK#N1v"W]]~\|0KtK0(2mL1S&A{T%j Y. PTbJF-@85Lg,XUslA1*Z\ZJS;WXDBU@KH`$@}_0C\|O]
Oct 13, 2024 20:11:06.731125116 CEST	1236	IN	Data Raw: c8 86 0c 43 f6 2c cb 4e 14 4c 64 d2 6f 74 c5 51 4d 49 1a 12 3a a2 e9 29 d9 10 dc 27 ec c5 c3 3e 34 d7 bb 69 ce 22 4a 42 b2 1a ce 89 92 27 b2 59 9d cd 71 16 ff 14 ed fc 69 8b 93 f4 8c b6 97 50 a7 ff f8 22 2b 2a fe 72 7a 27 4a 56 44 ee 05 32 32 cf Data Ascii: C,NLdotQMI:)'>4i"JB'YqiP"+rz'JVD229{I<x??t>03\^H{vpV'8<OU6{o]@W:py]er9#r{ot.$ftl'81}He
Oct 13, 2024 20:11:06.731142044 CEST	1236	IN	Data Raw: 83 6e 82 fa d8 7b 62 82 33 41 c7 de 06 68 5d 8e 3d 0d 08 8e 6f 03 74 49 c6 9e 06 04 c7 b7 01 9a e7 63 4f 03 82 e3 5b 83 be 7a a2 df 4a 4a 18 7e 28 f1 a1 f1 39 5e 3f ad ab c3 67 db 77 e6 f6 89 a7 61 f6 89 ee 7e 40 9a 31 60 27 7b 5c 75 d8 a3 2e 37 Data Ascii: n{b3Ah]=otIcO[zJJ~(9^?gwa~@1`'{\u.7 %kzIJ9?gyv>ecb{i~&mt>UoyX6\.'=aywE'&n#Sh=['jF%$d\A?w3\|1m#
Oct 13, 2024 20:11:06.731162071 CEST	1236	IN	Data Raw: a5 34 05 dc 12 72 25 0c 83 76 ac 29 71 73 ab 93 8b 9d 7f 45 14 67 32 ad b5 ad c8 da 58 af ba cb 41 95 89 aa 36 df ac ff bf de a7 05 4d 77 70 df fb ef 8f bd 77 85 09 93 f7 df 2d 81 77 29 26 98 9d dd 66 84 c1 7e c2 60 20 57 47 5c 86 4b c6 21 b9 f7 Data Ascii: 4r%v)qsEg2XA6Mwpw-w)&f~` WG\K!E1LEMy+Fk/_\|p0bZwA;`)hI%XR3[{K-!wsM:g?jhuu/HF!Hu_Vk#mJ
Oct 13, 2024 20:11:06.731628895 CEST	1236	IN	Data Raw: b8 28 0c 3f c1 77 4e 33 73 fa a6 9a 5d db af 17 64 fc f7 f6 63 b3 ce 51 ff 72 bd 1e d7 af 0b bc a3 13 b9 6a 6a e1 6c a9 03 7b 48 ac 06 79 1a 43 5c 2e 8f 28 e0 8c d0 ba 9a d2 d0 56 c3 d9 62 5a c5 28 e6 1a 60 42 09 91 7b 71 49 8b ab 5f 55 33 82 ba Data Ascii: (?wN3s]dcQrjjl{HyC\.(VbZ(`B{qI_U32L(p,"&@E"6uzm0p;+i0KAn TeUEU\|q&Zr[lO1ECO2XX]]NFR`nRLMeIfgsOzck
Oct 13, 2024 20:11:06.731645107 CEST	1236	IN	Data Raw: 7a 46 95 92 ca a1 1b d6 60 b3 fa d4 8d 9c c1 53 4e cd 09 6d 71 05 65 79 61 80 11 6e 04 c0 92 89 56 4f b0 b0 f9 b3 4f 58 e5 4c c4 41 18 e0 da 48 78 a8 a4 66 86 49 78 52 14 16 63 cf 14 1e 09 d3 15 c7 2f 71 d0 dd 38 91 87 b1 e7 8c d3 fe 7b 29 5f 47 Data Ascii: zF`SNmqeyanVOOXLAHxfIxRc/q8{)_G{;ha9AHJamrZ^/M4x M<SeXyyT^k6>_RY_NV`a2tga"GFVX+l{&6mCPl& cL7d2f
Oct 13, 2024 20:11:06.731662989 CEST	1236	IN	Data Raw: 5d fb 96 ab b5 e7 1f 3d 99 87 c3 37 dd f4 12 d9 19 16 db ab a7 92 4b 15 07 1f c3 70 b3 f9 fa 75 4a 2e b0 66 8c 72 e2 bd 41 6f 89 0f a8 bd ec 62 be 71 b7 3c 5d 48 51 8e 0d 7b a6 d7 28 cf ac ef f4 64 59 66 cf 2a 15 a1 f0 35 aa 0e 81 96 9c 91 e0 e3 Data Ascii: ]=7KpuJ.frAobq<]HQ{(dYf*5_WW5AVkTU6D#n@e2L+h#"z@7cYr;>SmrM<co]3`NZ&V!%?i6ry41HWGrjP)_gK1G
Oct 13, 2024 20:11:06.736008883 CEST	153	IN	Data Raw: 0f 6b 57 98 10 26 f2 ee aa e7 cd 95 64 c2 c0 15 a1 2f ad 95 b6 83 da 27 e8 ed 0c 69 ae 76 47 98 ae 38 7e 89 03 b4 a7 c9 8e 19 94 c8 d1 e7 8c d3 fe 7b 29 5f 47 1e b5 7b 3b e3 68 61 de 04 84 39 cb 45 1c a4 b4 55 d5 75 0e 0b 6d 93 7b 47 cc d0 52 f7 Data Ascii: kW&d/'ivG8~{)_G{;ha9EUum{GR@xiuSd%V9rz/5R s?P[kNIk~31Zm\|
Oct 13, 2024 20:11:07.257853031 CEST	410	OUT	GET /icloud-archivos/myriad-set-pro_thin.ttf HTTP/1.1 Host: mail.findmy-ld.help Connection: keep-alive Origin: http://mail.findmy-ld.help User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mail.findmy-ld.help/icloud-archivos/fonts.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:11:07.383755922 CEST	1236	IN	HTTP/1.1 404 Not Found Date: Sun, 13 Oct 2024 18:11:07 GMT Server: Apache Last-Modified: Wed, 24 May 2023 01:50:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4677 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 [TRUNCATED] Data Ascii: RmssgJ&av$NmRmHInM=_cpw~y3(\G(z}[832qQtjEl0;hQoAqK/^zPP`1PP%J^Vyg::<s}k9=v]Ivs8w>;]Np3xyvGe)e,v&FVIJqM3Hhp8(a{8jotEI.6q^>YZQH]rBis_4:Jar!c(j):{{d!5Dh4+k5yUD$wZ}YQO,5I>i6<]2XpCMe^Wh2.\|~l'\|v,sTWdG'8RFOE>8.V?\~[KJzp=4LB)YyuFMYb;Cd5[&TWRd{/_lyoY'+G;G\?zJL9*~"P,EO$}(OW<2X!SSQrxOx"#DJMAP!3-uH26?<gR;1<]9G$Vp0sBQ=f%afQmB<qMZq0&Vk
Oct 13, 2024 20:11:08.011432886 CEST	413	OUT	GET /favicon.ico HTTP/1.1 Host: mail.findmy-ld.help Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://mail.findmy-ld.help/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:11:08.133244991 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:08 GMT Server: Apache Last-Modified: Thu, 15 Apr 2021 20:52:24 GMT Accept-Ranges: bytes Content-Length: 9062 Cache-Control: max-age=604800 Expires: Sun, 20 Oct 2024 18:11:08 GMT Keep-Alive: timeout=5, max=73 Connection: Keep-Alive Content-Type: image/x-icon Data Raw: 00 00 01 00 04 00 20 20 00 00 01 00 08 00 a8 08 00 00 46 00 00 00 10 10 00 00 01 00 08 00 68 05 00 00 ee 08 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 56 0e 00 00 10 10 00 00 01 00 20 00 68 04 00 00 fe 1e 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 42 42 42 00 9e 9e 9e 00 72 72 72 00 ce ce ce 00 5a 5a 5a 00 b6 b6 b6 00 e6 e6 e6 00 92 92 92 00 4e 4e 4e 00 7e 7e 7e 00 66 66 66 00 aa aa aa 00 da da da 00 c2 c2 c2 00 f2 f2 f2 00 4a 4a 4a 00 a6 a6 a6 00 7a 7a 7a 00 62 62 62 00 56 56 56 00 86 86 86 00 6e 6e 6e 00 e2 e2 e2 00 ca ca ca 00 46 46 46 00 a2 a2 a2 00 76 76 76 00 d2 d2 d2 00 5e 5e 5e 00 ba ba ba 00 ea ea ea 00 9a 9a 9a 00 52 52 52 00 82 82 82 00 6a 6a 6a 00 ae ae ae 00 de de de 00 c6 c6 c6 00 f6 f6 f6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: Fh V h( @BBBrrrZZZNNN~~~fffJJJzzzbbbVVVnnnFFFvvv^^^RRRjjj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.9	49749	50.6.138.164	80	5736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:11:06.578500986 CEST	381	OUT	GET /icloud-archivos/style.css HTTP/1.1 Host: mail.findmy-ld.help Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://mail.findmy-ld.help/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:11:07.085726023 CEST	598	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:07 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Sat, 26 Nov 2022 14:31:26 GMT Accept-Ranges: none Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 286 Keep-Alive: timeout=5, max=75 Content-Type: text/css Data Raw: 1f 8b 08 00 00 00 00 00 00 03 55 50 dd 6a c3 20 14 be f7 29 84 31 58 21 06 6d 92 76 d5 ab 5e 74 ef 61 a2 4d 0e b3 2a c6 92 ac 63 ef be 93 8c 6c 0c 11 3c e7 7c 3f e7 b3 b4 29 85 e4 42 0f 9e 7e 92 56 77 ef 7d 0a 77 6f 58 17 5c 48 92 3e bd 9d 2f a7 73 a5 48 0c 23 64 08 5e 52 dd 8e c1 dd b3 55 64 02 93 07 79 e4 cf 8a dc 74 42 09 e6 ec 35 4b ca aa 23 b6 da 90 8c 4d 2c 69 03 f7 51 d2 26 ce 8a fc cc 9b 3d 8e a3 36 06 7c 2f a9 b0 b7 0d 8c 45 9c 29 ca 83 a1 a9 6f f5 8b 78 6d 0a 51 9f 0a 51 f0 b2 3e ee 16 dc cc c6 41 9b 30 49 ca 11 8b aa 54 2c 8f 3d de 95 c2 8b f5 94 62 f7 bb 55 0e 51 d2 d3 e2 ff 67 ba ae b3 85 6c 78 75 a9 b8 22 d7 e0 33 9b 2c f4 03 6e 59 73 ec 64 3b 67 a6 1d f4 18 bc b3 3e db a4 c8 83 81 37 76 46 91 8d 32 c2 c3 6e 9a ce 66 44 b1 31 ea 6e 75 62 bc e4 e2 b0 64 fc a7 de f0 8d 7c d5 37 70 1f f8 af 09 b4 53 e4 8b 7e 03 1b d6 07 a2 94 01 00 00 Data Ascii: UPj )1X!mv^taM*cl<\|?)B~Vw}woX\H>/sH#d^RUdytB5K#M,iQ&=6\|/E)oxmQQ>A0IT,=bUQglxu"3,nYsd;g>7vF2nfD1nubd\|7pS~
Oct 13, 2024 20:11:07.124866009 CEST	411	OUT	GET /icloud-archivos/myriad-set-pro_thin.woff HTTP/1.1 Host: mail.findmy-ld.help Connection: keep-alive Origin: http://mail.findmy-ld.help User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mail.findmy-ld.help/icloud-archivos/fonts.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:11:07.247687101 CEST	1236	IN	HTTP/1.1 404 Not Found Date: Sun, 13 Oct 2024 18:11:07 GMT Server: Apache Last-Modified: Wed, 24 May 2023 01:50:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4677 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 [TRUNCATED] Data Ascii: RmssgJ&av$NmRmHInM=_cpw~y3(\G(z}[832qQtjEl0;hQoAqK/^zPP`1PP%J^Vyg::<s}k9=v]Ivs8w>;]Np3xyvGe)e,v&FVIJqM3Hhp8(a{8jotEI.6q^>YZQH]rBis_4:Jar!c(j):{{d!5Dh4+k5yUD$wZ}YQO,5I>i6<]2XpCMe^Wh2.\|~l'\|v,sTWdG'8RFOE>8.V?\~[KJzp=4LB)YyuFMYb;Cd5[&TWRd{/_lyoY'+G;G\?zJL9*~"P,EO$}(OW<2X!SSQrxOx"#DJMAP!3-uH26?<gR;1<]9G$Vp0sBQ=f%afQmB<qMZq0&Vk
Oct 13, 2024 20:11:07.247699022 CEST	1236	IN	Data Raw: 49 26 3b f9 fa 41 83 05 ea 7d 2a 6d a5 44 33 d4 a4 71 b1 99 49 63 79 2b 21 45 66 c8 7d ce 7e f9 e5 e0 60 b1 69 91 ef a6 ab dd a3 c9 f3 17 2f 7e 5d ec ba 42 9a b5 cd c3 17 bf 26 87 2f 56 43 53 84 7b 98 88 e4 2e 37 54 eb b4 bf 38 87 cf fd bf 11 0b Data Ascii: I&;A}mD3qIcy+!Ef}~`i/~]B&/VCS{.7T81),)VRCx{k_hT!dnD3bxixqTHr2=-c/7UtoGc-'9_e$'(e66FANz=86CG]__^g
Oct 13, 2024 20:11:07.247720957 CEST	1236	IN	Data Raw: 7f 5f 9a cc 0f 7c 7e cc 8d 47 d3 16 aa a5 c0 11 77 9c 06 70 2d f3 c2 71 9d 65 72 e7 67 b7 4d f9 97 a6 78 33 93 82 c8 22 5c 19 aa d0 38 89 76 00 b7 8c 58 2d df 59 8d 52 e0 90 bf bc 76 3f ae 12 5e 1f 5f 0e 51 fa 28 da aa 25 42 fb 6a 70 ac 19 d5 3a Data Ascii: _\|~Gwp-qergMx3"\8vX-YRv?^_Q(%Bjp:}P[_0uBTg0+\|~@('H{3jsrTMsMDk={j-o\|m4aG+.<W6CYkGm^jTRm=9tMj=;
Oct 13, 2024 20:11:07.247966051 CEST	1236	IN	Data Raw: 14 ae c5 80 4c 2a 8c 23 31 8e 23 06 59 f2 f0 d3 3a 38 d6 e1 50 bb de 46 46 b7 2c 79 13 c3 eb 75 2c de 42 97 c2 94 0d 7e ca ef ce d4 fc 46 da 3e 63 a3 84 03 87 6c 70 70 13 cd 94 f3 29 5a 76 13 0c 5e b2 55 09 1a 0f 04 36 41 2d 8c a4 36 a7 16 95 33 Data Ascii: L#1#Y:8PFF,yu,B~F>clpp)Zv^U6A-63YZ2Zsc]1Z [SiXCY^WQCbK~+n:)@UP7RpWO~b!/r@l-ElQK$gYzKoF
Oct 13, 2024 20:11:07.247978926 CEST	29	IN	Data Raw: b7 fe ec 9e d9 f5 30 98 c9 c5 d1 84 d2 26 3c 14 ae 64 4b ff 17 cc cb 70 7c 28 2e 00 00 Data Ascii: 0&<dKp\|(.
Oct 13, 2024 20:11:07.257539988 CEST	410	OUT	GET /icloud-archivos/myriad-set-pro_text.ttf HTTP/1.1 Host: mail.findmy-ld.help Connection: keep-alive Origin: http://mail.findmy-ld.help User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mail.findmy-ld.help/icloud-archivos/fonts.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:11:07.379955053 CEST	1236	IN	HTTP/1.1 404 Not Found Date: Sun, 13 Oct 2024 18:11:07 GMT Server: Apache Last-Modified: Wed, 24 May 2023 01:50:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4677 Keep-Alive: timeout=5, max=73 Connection: Keep-Alive Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 [TRUNCATED] Data Ascii: RmssgJ&av$NmRmHInM=_cpw~y3(\G(z}[832qQtjEl0;hQoAqK/^zPP`1PP%J^Vyg::<s}k9=v]Ivs8w>;]Np3xyvGe)e,v&FVIJqM3Hhp8(a{8jotEI.6q^>YZQH]rBis_4:Jar!c(j):{{d!5Dh4+k5yUD$wZ}YQO,5I>i6<]2XpCMe^Wh2.\|~l'\|v,sTWdG'8RFOE>8.V?\~[KJzp=4LB)YyuFMYb;Cd5[&TWRd{/_lyoY'+G;G\?zJL9*~"P,EO$}(OW<2X!SSQrxOx"#DJMAP!3-uH26?<gR;1<]9G$Vp0sBQ=f%afQmB<qMZq0&Vk
Oct 13, 2024 20:11:07.380049944 CEST	224	IN	Data Raw: 49 26 3b f9 fa 41 83 05 ea 7d 2a 6d a5 44 33 d4 a4 71 b1 99 49 63 79 2b 21 45 66 c8 7d ce 7e f9 e5 e0 60 b1 69 91 ef a6 ab dd a3 c9 f3 17 2f 7e 5d ec ba 42 9a b5 cd c3 17 bf 26 87 2f 56 43 53 84 7b 98 88 e4 2e 37 54 eb b4 bf 38 87 cf fd bf 11 0b Data Ascii: I&;A}mD3qIcy+!Ef}~`i/~]B&/VCS{.7T81),)VRCx{k_hT!dnD3bxixqTHr2=-c/7UtoGc-'9_e$'(e66FANz=8
Oct 13, 2024 20:11:07.380063057 CEST	1236	IN	Data Raw: a4 e5 36 1a 43 c6 47 d8 1b 9f 5d 5f 5f 5e 83 af 67 1f ae 5e fe 76 06 ef 2f 6f e1 fc f2 c3 fb d7 5b d8 5b 10 99 f8 fc 69 dd 8b 47 fe b3 da 5e 36 7c b9 f5 68 b9 37 2b 9a c5 2a df 28 8e c6 b1 80 44 09 6b 99 d8 bc 12 9a 33 ee 41 61 30 3b d9 1b 7f 2c Data Ascii: 6CG]__^g^v/o[[iG^6\|h7+*(Dk3Aa0;,%\Errk;Y,Qh0TA3SdR$RLWwA7-JR40im%d@:,5Hea2<DAUq\/Y+'<Tm^cx)<7$`%
Oct 13, 2024 20:11:07.380152941 CEST	1236	IN	Data Raw: fc 54 b8 52 6d cf d9 8e e4 3d 39 99 74 f1 b5 4d 6a 3d 3b 15 37 b8 34 d0 d7 4f 96 15 19 27 b4 f3 03 d6 79 0c e0 92 27 2a e1 32 32 a5 6d 91 90 3d 33 0c 9b 08 8b 7d 8b da 4a 27 a7 d2 35 4b f8 a0 73 81 ee bd 5d 6c 54 3a 5f db 30 18 1a e1 89 59 df 32 Data Ascii: TRm=9tMj=;74O'y'*22m=3}J'5Ks]lT:_0Y26F8InG.6_dzUZq4"s5R4=(f'{c83C\|$^J}gHplI[j[/G56#Bq$pN5-N60047a[a9ya4B0(
Oct 13, 2024 20:11:07.380168915 CEST	1041	IN	Data Raw: b5 db 67 c9 06 a6 de f8 da b2 59 c2 7a 4b 6f 0b 46 b7 18 66 b3 4b 6c 96 5d 04 b7 44 0d 58 3e bf 2b a1 91 35 4f 6a 07 9a 1c cc 3c 97 75 1e 13 2e 4b 21 74 8e e9 e0 e9 ef 5b 1c b9 45 b6 56 0e 88 11 0d 87 e3 64 a2 70 11 9c e5 bc 93 10 8a 69 15 4a cd Data Ascii: gYzKoFfKl]DX>+5Oj<u.K!t[EVdpiJ<8)3~(9szG\|o(X\v#S3fuHpi"S)f.Tr#'eR7as UT[7-6-Y-BE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.9	49752	50.6.138.164	80	5736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:11:06.745023012 CEST	409	OUT	GET /sep.png HTTP/1.1 Host: mail.findmy-ld.help Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://mail.findmy-ld.help/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:11:07.277262926 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:07 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Sun, 07 May 2023 06:36:54 GMT Accept-Ranges: bytes Content-Length: 1240 Keep-Alive: timeout=5, max=75 Content-Type: image/png Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 7e 00 00 00 32 04 03 00 00 00 a9 19 ad 6c 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 0f 50 4c 54 45 e8 e8 e8 e1 e1 e1 e1 e1 e1 e0 e0 e0 b6 b6 b6 d7 b9 84 90 00 00 00 05 74 52 4e 53 01 06 0c 12 39 f4 8b 71 62 00 00 04 5e 49 44 41 54 68 de ed 59 eb 99 e2 30 0c b4 3a 90 dd 81 ed 0e cc 75 c0 f5 5f d3 59 23 f9 91 dd 00 d9 bd 38 fc 41 b0 f9 f8 58 88 35 a3 d1 c3 c6 39 35 f6 62 c1 a7 6a b7 66 f7 3f b0 fb df b7 d8 fd 2f 56 bf dd bb 3f a5 3a 17 e0 a8 27 b7 67 4c 86 23 a4 94 6f a5 5e 53 29 25 27 79 91 ca ed 2a cb e2 68 ca 75 c5 fa a2 04 78 1e a3 fa 5d 5d dc 77 dd 51 75 bf 9a e2 f3 f5 0b 09 56 04 c2 75 be 37 aa 4b ba 55 04 b0 18 a3 b1 ce 62 8e e1 ee 57 23 fc 79 8b 40 f4 31 85 20 10 72 ae cf 7c 2d 82 ba 5a be 25 89 7c 82 1b 06 a0 ba 46 24 ae f3 ae fb a0 bf f1 1f e5 6b 16 01 09 c1 2d e7 eb f4 93 eb 13 0a 4a 0a 20 f8 68 fc 7b 08 c5 ed b2 0f 04 35 40 96 02 35 09 a2 ea b0 de 4c f8 bf 0a 01 96 92 a0 9b 7c 44 40 2a fe 8a a0 32 bc 0b [TRUNCATED] Data Ascii: PNGIHDR~2lpHYs~PLTEtRNS9qb^IDAThY0:u_Y#8AX595bjf?/V?:'gL#o^S)%'yhux]]wQuVu7KUbW#y@1 r\|-Z%\|F$k-J h{5@5L\|D@2.(\OW+:QB4/ ?K(x+ =)r/P;.UX-t&THD[aA0gzF^@OSvk,4V~Ac0 ;jo A(?:R8\|Em\|~SR!MBki>\|\|@h=Jc-??9h:K19PmF$4%) 0<nY$z2^uET;qdPjyQ,UydDm`!nlTx?TC[i$:MCm`WQctZfkz%, 20:3{6JXmDXiv?!p{46uW=kyLB_9{1>Fhq~z4=:{7o:1>1=}+<<Y',Pk$$J"V#f{
Oct 13, 2024 20:11:07.277362108 CEST	272	IN	Data Raw: 09 ad a7 dd 5b e9 23 94 10 a5 93 8f 57 4e 85 49 86 57 fb b6 0c 74 88 83 95 a4 45 17 70 c4 aa d7 76 20 3e 6f 0f e9 30 f9 3c cd a3 7a e8 a5 c9 2c 83 a9 c6 76 c1 05 69 a6 aa 1f d4 b5 5a fe 83 00 68 fd 99 e7 6c b6 16 82 21 70 95 fb 9e db 16 cb ba cf Data Ascii: [#WNIWtEpv >o0<z,viZhl!pf(swp^ M[smKK?~+q]c2<wmk_OS+Kcg515eYr?zv}N>fc,^hCTss!bIEbQU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.9	49759	50.6.138.164	80	5736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:11:07.160012007 CEST	298	OUT	GET /assets/img/ajax-loader.gif HTTP/1.1 Host: mail.findmy-ld.help Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:11:07.932344913 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:07 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Sun, 07 May 2023 06:35:50 GMT Accept-Ranges: bytes Content-Length: 4178 Keep-Alive: timeout=5, max=75 Content-Type: image/gif Data Raw: 47 49 46 38 39 61 20 00 20 00 f5 00 00 ff ff ff 00 00 00 fa fa fa c4 c4 c4 e8 e8 e8 f0 f0 f0 d0 d0 d0 7e 7e 7e 9a 9a 9a f6 f6 f6 e6 e6 e6 fc fc fc 92 92 92 86 86 86 e2 e2 e2 b8 b8 b8 a0 a0 a0 ec ec ec ae ae ae dc dc dc 3e 3e 3e 56 56 56 60 60 60 7c 7c 7c a8 a8 a8 ee ee ee 4a 4a 4a 6c 6c 6c 0c 0c 0c 00 00 00 ce ce ce c8 c8 c8 d8 d8 d8 2c 2c 2c 5e 5e 5e 1e 1e 1e 4c 4c 4c b0 b0 b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 09 0a 00 00 00 2c 00 00 00 00 20 00 20 00 00 06 ff 40 80 70 48 24 16 38 1c 47 71 c9 24 4e 12 c4 41 a7 33 28 0a 9a 4c 09 c5 12 9d 56 87 05 05 14 4b 7c 50 28 8f a1 94 3a 14 28 14 05 72 b1 42 d1 8c d7 5f 40 58 21 2f 1a ce 0c 42 78 42 6e 62 7d 45 [TRUNCATED] Data Ascii: GIF89a ~~~>>>VVV```\|\|\|JJJlll,,,^^^LLL!NETSCAPE2.0!Created with ajaxload.info!, @pH$8Gq$NA3(LVK\|P(:(rB_@X!/BxBnb}EgorEg^oWDcJCgoqmoE{p~rD}MdKro\|]q` 9Cf)$'=}C^u-H.!OK"15.&{jT BBoe6<@B?1)GbK !, @pH$&4Bq$Db(V[4_:t:"rqh@a)gBk_oEg~#rJDgxloWFC~mgoDBwK!CwE dXrs'xM&T$$\|MC ABldKdV?oFl-X L[J*6!"5\@poImN!QXm@%2u:uH2\R#a!, @pH$Bq$&D(LV[$:4
Oct 13, 2024 20:11:07.932421923 CEST	1236	IN	Data Raw: 50 28 0d 72 f1 73 86 02 d6 5f 80 85 a2 49 c8 89 05 67 13 42 78 42 0f 6f 10 7f 45 20 67 02 77 5e 00 09 1a 14 15 72 02 8e 46 67 57 85 10 6f 57 44 0c 63 42 0b 0a 0a 11 98 84 67 09 02 0e 0e 02 04 6f 1b 44 25 23 1d 1d 9f 00 19 a5 0a 05 76 0b 20 4a 45 Data Ascii: P(rs_IgBxBoE gw^rFgWoWDcBgoD%#v JEinE~"#Ld$LX"yrvEd)xWO<2I&1a"UJ(qz+kQ\" tRjO}C7":sdE& R"#-
Oct 13, 2024 20:11:07.932434082 CEST	1236	IN	Data Raw: a2 d0 a1 44 d3 56 f8 ce 0e e1 e3 2e 08 00 21 f9 04 09 0a 00 00 00 2c 00 00 00 00 20 00 20 00 00 06 ff 40 80 70 48 2c 2a 14 8b a2 72 49 4c 12 05 47 41 51 ca 54 26 14 99 67 94 58 50 24 aa d3 ad 10 aa a0 02 c8 05 70 31 72 1c 92 cd 99 b6 5a eb 1d 8b Data Ascii: DV.!, @pH,*rILGAQT&gXP$p1rZ9\|jfBGi~WeEy}RinlHCqNN]aGuzC`Ljz`dLKUWDcjs0R%+q"lQbw
Oct 13, 2024 20:11:07.932598114 CEST	738	IN	Data Raw: 43 0a 6c 94 56 60 58 9a 53 a2 1a a9 81 b0 f1 a5 cb 3f 58 90 09 71 b0 91 21 a8 2b 9b 00 14 bd 02 c3 e0 40 03 2a 2d 07 cc d2 84 cc c0 46 78 42 92 ce c2 f3 0b c4 01 04 5c 80 46 e5 a7 33 aa d6 ae b7 86 0d 5d 12 04 00 21 f9 04 09 0a 00 00 00 2c 00 00 Data Ascii: ClV`XS?Xq!+@-FxB\F3]!, @pH,rILGAQT&gXP$p1rZ9\|jEGi~WeEy#D}RinlHB!$CfCN]Ej$sLjNszEg
Oct 13, 2024 20:11:07.935148954 CEST	738	IN	Data Raw: 43 0a 6c 94 56 60 58 9a 53 a2 1a a9 81 b0 f1 a5 cb 3f 58 90 09 71 b0 91 21 a8 2b 9b 00 14 bd 02 c3 e0 40 03 2a 2d 07 cc d2 84 cc c0 46 78 42 92 ce c2 f3 0b c4 01 04 5c 80 46 e5 a7 33 aa d6 ae b7 86 0d 5d 12 04 00 21 f9 04 09 0a 00 00 00 2c 00 00 Data Ascii: ClV`XS?Xq!+@-FxB\F3]!, @pH,rILGAQT&gXP$p1rZ9\|jEGi~WeEy#D}RinlHB!$CfCN]Ej$sLjNszEg
Oct 13, 2024 20:11:07.935933113 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:07 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Sun, 07 May 2023 06:35:50 GMT Accept-Ranges: bytes Content-Length: 4178 Keep-Alive: timeout=5, max=75 Content-Type: image/gif Data Raw: 47 49 46 38 39 61 20 00 20 00 f5 00 00 ff ff ff 00 00 00 fa fa fa c4 c4 c4 e8 e8 e8 f0 f0 f0 d0 d0 d0 7e 7e 7e 9a 9a 9a f6 f6 f6 e6 e6 e6 fc fc fc 92 92 92 86 86 86 e2 e2 e2 b8 b8 b8 a0 a0 a0 ec ec ec ae ae ae dc dc dc 3e 3e 3e 56 56 56 60 60 60 7c 7c 7c a8 a8 a8 ee ee ee 4a 4a 4a 6c 6c 6c 0c 0c 0c 00 00 00 ce ce ce c8 c8 c8 d8 d8 d8 2c 2c 2c 5e 5e 5e 1e 1e 1e 4c 4c 4c b0 b0 b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 09 0a 00 00 00 2c 00 00 00 00 20 00 20 00 00 06 ff 40 80 70 48 24 16 38 1c 47 71 c9 24 4e 12 c4 41 a7 33 28 0a 9a 4c 09 c5 12 9d 56 87 05 05 14 4b 7c 50 28 8f a1 94 3a 14 28 14 05 72 b1 42 d1 8c d7 5f 40 58 21 2f 1a ce 0c 42 78 42 6e 62 7d 45 [TRUNCATED] Data Ascii: GIF89a ~~~>>>VVV```\|\|\|JJJlll,,,^^^LLL!NETSCAPE2.0!Created with ajaxload.info!, @pH$8Gq$NA3(LVK\|P(:(rB_@X!/BxBnb}EgorEg^oWDcJCgoqmoE{p~rD}MdKro\|]q` 9Cf)$'=}C^u-H.!OK"15.&{jT BBoe6<@B?1)GbK !, @pH$&4Bq$Db(V[4_:t:"rqh@a)gBk_oEg~#rJDgxloWFC~mgoDBwK!CwE dXrs'xM&T$$\|MC ABldKdV?oFl-X L[J*6!"5\@poImN!QXm@%2u:uH2\R#a!, @pH$Bq$&D(LV[$:4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.9	49760	50.6.138.164	80	5736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:11:07.288650036 CEST	279	OUT	GET /sep.png HTTP/1.1 Host: mail.findmy-ld.help Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:11:07.935235023 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:07 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Sun, 07 May 2023 06:36:54 GMT Accept-Ranges: bytes Content-Length: 1240 Keep-Alive: timeout=5, max=75 Content-Type: image/png Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 7e 00 00 00 32 04 03 00 00 00 a9 19 ad 6c 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 0f 50 4c 54 45 e8 e8 e8 e1 e1 e1 e1 e1 e1 e0 e0 e0 b6 b6 b6 d7 b9 84 90 00 00 00 05 74 52 4e 53 01 06 0c 12 39 f4 8b 71 62 00 00 04 5e 49 44 41 54 68 de ed 59 eb 99 e2 30 0c b4 3a 90 dd 81 ed 0e cc 75 c0 f5 5f d3 59 23 f9 91 dd 00 d9 bd 38 fc 41 b0 f9 f8 58 88 35 a3 d1 c3 c6 39 35 f6 62 c1 a7 6a b7 66 f7 3f b0 fb df b7 d8 fd 2f 56 bf dd bb 3f a5 3a 17 e0 a8 27 b7 67 4c 86 23 a4 94 6f a5 5e 53 29 25 27 79 91 ca ed 2a cb e2 68 ca 75 c5 fa a2 04 78 1e a3 fa 5d 5d dc 77 dd 51 75 bf 9a e2 f3 f5 0b 09 56 04 c2 75 be 37 aa 4b ba 55 04 b0 18 a3 b1 ce 62 8e e1 ee 57 23 fc 79 8b 40 f4 31 85 20 10 72 ae cf 7c 2d 82 ba 5a be 25 89 7c 82 1b 06 a0 ba 46 24 ae f3 ae fb a0 bf f1 1f e5 6b 16 01 09 c1 2d e7 eb f4 93 eb 13 0a 4a 0a 20 f8 68 fc 7b 08 c5 ed b2 0f 04 35 40 96 02 35 09 a2 ea b0 de 4c f8 bf 0a 01 96 92 a0 9b 7c 44 40 2a fe 8a a0 32 bc 0b [TRUNCATED] Data Ascii: PNGIHDR~2lpHYs~PLTEtRNS9qb^IDAThY0:u_Y#8AX595bjf?/V?:'gL#o^S)%'yhux]]wQuVu7KUbW#y@1 r\|-Z%\|F$k-J h{5@5L\|D@2.(\OW+:QB4/ ?K(x+ =)r/P;.UX-t&THD[aA0gzF^@OSvk,4V~Ac0 ;jo A(?:R8\|Em\|~SR!MBki>\|\|@h=Jc-??9h:K19PmF$4%) 0<nY$z2^uET;qdPjyQ,UydDm`!nlTx?TC[i$:MCm`WQctZfkz%, 20:3{6JXmDXiv?!p{46uW=kyLB_9{1>Fhq~z4=:{7o:1>1=}+<<Y',Pk$$J"V#f{
Oct 13, 2024 20:11:07.935254097 CEST	272	IN	Data Raw: 09 ad a7 dd 5b e9 23 94 10 a5 93 8f 57 4e 85 49 86 57 fb b6 0c 74 88 83 95 a4 45 17 70 c4 aa d7 76 20 3e 6f 0f e9 30 f9 3c cd a3 7a e8 a5 c9 2c 83 a9 c6 76 c1 05 69 a6 aa 1f d4 b5 5a fe 83 00 68 fd 99 e7 6c b6 16 82 21 70 95 fb 9e db 16 cb ba cf Data Ascii: [#WNIWtEpv >o0<z,viZhl!pf(swp^ M[smKK?~+q]c2<wmk_OS+Kcg515eYr?zv}N>fc,^hCTss!bIEbQU
Oct 13, 2024 20:11:07.935899019 CEST	272	IN	Data Raw: 09 ad a7 dd 5b e9 23 94 10 a5 93 8f 57 4e 85 49 86 57 fb b6 0c 74 88 83 95 a4 45 17 70 c4 aa d7 76 20 3e 6f 0f e9 30 f9 3c cd a3 7a e8 a5 c9 2c 83 a9 c6 76 c1 05 69 a6 aa 1f d4 b5 5a fe 83 00 68 fd 99 e7 6c b6 16 82 21 70 95 fb 9e db 16 cb ba cf Data Ascii: [#WNIWtEpv >o0<z,viZhl!pf(swp^ M[smKK?~+q]c2<wmk_OS+Kcg515eYr?zv}N>fc,^hCTss!bIEbQU
Oct 13, 2024 20:11:08.234350920 CEST	283	OUT	GET /favicon.ico HTTP/1.1 Host: mail.findmy-ld.help Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:11:08.352123022 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:08 GMT Server: Apache Last-Modified: Thu, 15 Apr 2021 20:52:24 GMT Accept-Ranges: bytes Content-Length: 9062 Cache-Control: max-age=604800 Expires: Sun, 20 Oct 2024 18:11:08 GMT Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: image/x-icon Data Raw: 00 00 01 00 04 00 20 20 00 00 01 00 08 00 a8 08 00 00 46 00 00 00 10 10 00 00 01 00 08 00 68 05 00 00 ee 08 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 56 0e 00 00 10 10 00 00 01 00 20 00 68 04 00 00 fe 1e 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 42 42 42 00 9e 9e 9e 00 72 72 72 00 ce ce ce 00 5a 5a 5a 00 b6 b6 b6 00 e6 e6 e6 00 92 92 92 00 4e 4e 4e 00 7e 7e 7e 00 66 66 66 00 aa aa aa 00 da da da 00 c2 c2 c2 00 f2 f2 f2 00 4a 4a 4a 00 a6 a6 a6 00 7a 7a 7a 00 62 62 62 00 56 56 56 00 86 86 86 00 6e 6e 6e 00 e2 e2 e2 00 ca ca ca 00 46 46 46 00 a2 a2 a2 00 76 76 76 00 d2 d2 d2 00 5e 5e 5e 00 ba ba ba 00 ea ea ea 00 9a 9a 9a 00 52 52 52 00 82 82 82 00 6a 6a 6a 00 ae ae ae 00 de de de 00 c6 c6 c6 00 f6 f6 f6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: Fh V h( @BBBrrrZZZNNN~~~fffJJJzzzbbbVVVnnnFFFvvv^^^RRRjjj
Oct 13, 2024 20:11:08.352138042 CEST	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ''''''''''
Oct 13, 2024 20:11:08.352148056 CEST	1236	IN	Data Raw: 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 Data Ascii: '''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' #'''''''''''''''''' ''''''''''''''''''''
Oct 13, 2024 20:11:08.352258921 CEST	1236	IN	Data Raw: be 00 4e 4e 4e 00 aa aa aa 00 7a 7a 7a 00 d2 d2 d2 00 66 66 66 00 92 92 92 00 5a 5a 5a 00 4a 4a 4a 00 a6 a6 a6 00 76 76 76 00 ce ce ce 00 62 62 62 00 ba ba ba 00 ea ea ea 00 56 56 56 00 da da da 00 6e 6e 6e 00 c2 c2 c2 00 96 96 96 00 00 00 00 00 Data Ascii: NNNzzzfffZZZJJJvvvbbbVVVnnn
Oct 13, 2024 20:11:08.352271080 CEST	1236	IN	Data Raw: f9 df e0 07 f0 0f e0 03 e0 07 c0 03 e0 03 c0 07 c0 03 c0 0f c0 07 c0 0f c0 0f c0 07 c0 0f e0 07 c0 07 e0 07 e0 07 fe 3f e0 07 ff 1f fe 3f ff 1f ff 1f ff df ff 1f 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ??( @
Oct 13, 2024 20:11:08.352633953 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3a 3a 3a 30 4c 4c 4c ff 5e 5e 5e ff 63 63 63 ff 63 63 63 ff 63 63 63 ff 63 63 63 ff 63 63 63 ff 63 63 63 ff 63 63 63 ff 63 63 63 ff Data Ascii: :::0LLL^^^ccccccccccccccccccccccccccccccccccccccccccccc```???VVVccceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeebbbYYY
Oct 13, 2024 20:11:08.352644920 CEST	1236	IN	Data Raw: 72 ff 72 72 72 ff 72 72 72 ff 72 72 72 ff 72 72 72 ff 72 72 72 af 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: rrrrrrrrrrrrrrrr===NNNcccpppssssssssssssssssssrrrsssssssssssssssssspppp:::0BBBRRRcccmmmpppqqqpppl
Oct 13, 2024 20:11:08.352838039 CEST	552	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 40 40 60 44 44 44 af 45 45 45 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: @@@`DDDEEE0
Oct 13, 2024 20:11:08.441319942 CEST	1186	IN	Data Raw: 00 ff fc 00 00 ff fe 00 00 7f fe 00 00 3f ff 00 00 7f ff 81 80 ff ff ff 1f ff ff ff 0f ff ff ff 07 ff ff ff 87 ff ff ff 83 ff ff ff e3 ff ff ff ff ff ff ff ff ff ff ff ff ff 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 Data Ascii: ?( 3[[[8PPP0=

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.9	49706	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:10:56 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:10:56 UTC	540	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:10:56 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Sun, 13 Oct 2024 10:59:53 GMT ETag: "0x8DCEB762AD2C54E" x-ms-request-id: 88bd8b3f-d01e-0049-5d65-1de7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181056Z-17db6f7c8cf96l6t7bwyfgbkhw00000004bg000000001vtm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:10:56 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-13 18:10:56 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-13 18:10:56 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-13 18:10:56 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-13 18:10:56 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-13 18:10:56 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-13 18:10:56 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-13 18:10:56 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-13 18:10:56 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-13 18:10:56 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.9	49711	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:10:57 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:10:58 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:10:57 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: b913ea27-a01e-0002-1718-1c5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181057Z-17db6f7c8cfqxt4wrzg7st2fm800000005a000000000df9f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:10:58 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.9	49708	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:10:57 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:10:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:10:57 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 1c7a9c3a-e01e-001f-4b80-1b1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181057Z-17db6f7c8cfq2j6f03aq9y8dns00000004gg000000003ck3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:10:58 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.9	49709	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:10:57 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:10:58 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:10:57 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 3735e006-a01e-006f-3de4-1a13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181057Z-17db6f7c8cfnqpbkckdefmqa44000000056000000000ebex x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:10:58 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.9	49707	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:10:57 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:10:58 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:10:58 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: c1f175ba-101e-0028-7611-1c8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181058Z-17db6f7c8cf8rgvlb86c9c0098000000039000000000f5v8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:10:58 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.9	49710	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:10:57 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:10:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:10:58 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 2cf7c92e-401e-0015-4117-1c0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181058Z-17db6f7c8cf8rgvlb86c9c009800000003eg000000001tz3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:10:58 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.9	49716	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:10:59 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:10:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:10:59 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 7bd6ade2-501e-008f-3ee2-1b9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181059Z-17db6f7c8cf96l6t7bwyfgbkhw00000004bg000000001vxz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:10:59 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.9	49714	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:10:59 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:10:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:10:59 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 52965a57-601e-000d-5970-1c2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181059Z-17db6f7c8cfmhggkx889x958tc000000029g00000000kxz8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:10:59 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.9	49713	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:10:59 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:10:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:10:59 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 6c20420a-501e-008f-0947-1c9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181059Z-17db6f7c8cf6f7vv3recfp4a6w00000002a0000000008vfr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:10:59 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.9	49712	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:10:59 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:10:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:10:59 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: c05b1842-801e-0048-291c-1cf3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181059Z-17db6f7c8cfcrfgzd01a8emnyg00000002r000000000c714 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:10:59 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.9	49715	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:10:59 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:10:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:10:59 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: c77ee0be-a01e-0032-0c24-1b1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181059Z-17db6f7c8cfbd7pgux3k6qfa60000000045g000000006uuh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:10:59 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.9	49718	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:02 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:02 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 05423beb-901e-0067-5347-1cb5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181102Z-17db6f7c8cf9c22xp43k2gbqvn00000002w000000000aba6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:02 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.9	49719	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:02 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:02 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 0f9ac3ff-201e-0003-4016-1cf85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181102Z-17db6f7c8cfmhggkx889x958tc00000002bg00000000enwf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:02 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.9	49717	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:02 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:02 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: c03f5215-301e-005d-4a1d-1ce448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181102Z-17db6f7c8cfjxfnba42c5rukwg000000023g00000000gb4b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:02 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.9	49721	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:02 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:02 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 6fbaa347-101e-0034-2f47-1c96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181102Z-17db6f7c8cfpm9w8b1ybgtytds000000034g00000000c5bm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:02 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.9	49720	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:02 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:02 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: bef1d05a-c01e-0034-2ea3-1b2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181102Z-17db6f7c8cf6qp7g7r97wxgbqc00000004gg00000000dv89 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:02 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.9	49726	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:03 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:03 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 0c32318b-701e-0098-6762-1c395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181103Z-17db6f7c8cfspvtq2pgqb2w5k0000000052g00000000e2qn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:03 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.9	49723	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:03 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:03 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: eb753988-701e-0021-591f-1c3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181103Z-17db6f7c8cf9wwz8ehu7c5p33g00000002g000000000bbe9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:03 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.9	49724	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:03 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:03 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5355bdce-701e-0021-10ea-1a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181103Z-17db6f7c8cf96l6t7bwyfgbkhw00000004c0000000000krd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:03 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.9	49725	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:03 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:03 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 77080ea6-601e-003e-13e1-1a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181103Z-17db6f7c8cfp6mfve0htepzbps00000004m000000000etay x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:03 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.9	49722	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:03 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:03 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 23cc8f65-401e-0048-2a25-1c0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181103Z-17db6f7c8cf9c22xp43k2gbqvn00000002sg00000000kp7p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:03 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.9	49727	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:04 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:04 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 94304cac-901e-0048-809f-1bb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181104Z-17db6f7c8cfhrxld7punfw920n00000004200000000040e2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:04 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.9	49729	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:05 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:05 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: b910d997-a01e-0002-0816-1c5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181105Z-17db6f7c8cf8rgvlb86c9c009800000003d0000000005mgs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:05 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.9	49730	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:05 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:05 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6ca0adc2-b01e-0021-19e3-1acab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181105Z-17db6f7c8cfbr2wt66emzt78g400000004ug000000005pgm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:05 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.9	49731	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:05 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:05 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: b59689ad-601e-005c-3fe1-1af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181105Z-17db6f7c8cfqxt4wrzg7st2fm800000005f0000000000b4w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:05 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.9	49728	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:05 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:05 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: a5b27f46-b01e-003d-5a47-1cd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181105Z-17db6f7c8cfcl4jvqfdxaxz9w800000002r0000000003mr3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:05 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.9	49737	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:05 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:05 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: b009cb16-301e-0051-17aa-1b38bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181105Z-17db6f7c8cfwtn5x6ye8p8q9m000000003w000000000650s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:05 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.9	49739	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:05 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:05 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 7708100b-601e-003e-5be1-1a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181105Z-17db6f7c8cfvtw4hh2496wp8p800000003s0000000004fps x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:05 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.9	49738	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:05 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:05 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: f7492d67-a01e-000d-0ae4-1ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181105Z-17db6f7c8cf5mtxmr1c51513n000000005ag00000000hsk4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:05 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.9	49741	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:05 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:05 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 1507c9f1-d01e-007a-72eb-1af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181105Z-17db6f7c8cfvzwz27u5rnq9kpc00000005hg00000000a45y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:05 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.9	49740	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:05 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:05 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: f30ac50d-201e-0033-27d7-1ab167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181105Z-17db6f7c8cf5mtxmr1c51513n000000005hg000000000kcx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:05 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.9	49742	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:06 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:06 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: a0484e99-b01e-00ab-3354-1cdafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181106Z-17db6f7c8cf9c22xp43k2gbqvn00000002y0000000005sbp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:06 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.9	49743	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:06 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:06 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 69483ed4-001e-0034-56df-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181106Z-17db6f7c8cfgqlr45m385mnngs00000003ug0000000079ks x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:06 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.9	49745	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:06 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:06 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: b8f0ecbf-701e-005c-16e0-1abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181106Z-17db6f7c8cf4g2pjavqhm24vp400000005h0000000003uta x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:06 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.9	49744	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:06 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:06 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 32d0e64a-701e-001e-0918-1cf5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181106Z-17db6f7c8cfpm9w8b1ybgtytds000000037g0000000054sx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:06 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.9	49746	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:06 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:06 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: d28b635f-001e-0079-686d-1c12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181106Z-17db6f7c8cf6f7vv3recfp4a6w00000002c00000000041sb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:06 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.9	49750	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:07 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:07 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: fbd0b5f8-a01e-0053-6218-1c8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181107Z-17db6f7c8cfvtw4hh2496wp8p800000003r00000000061pn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:07 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.9	49751	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:07 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:07 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: e8d3a0af-c01e-0014-0c1c-1ca6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181107Z-17db6f7c8cfvtw4hh2496wp8p800000003s0000000004frb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:07 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.9	49755	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:07 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:07 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: e9bc8845-c01e-008d-06d9-1a2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181107Z-17db6f7c8cfnqpbkckdefmqa4400000005a0000000005dzf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:07 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.9	49754	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:07 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:07 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 7c051060-401e-008c-630d-1c86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181107Z-17db6f7c8cfq2j6f03aq9y8dns00000004e000000000995d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:07 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.9	49757	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:07 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:07 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: eba22146-701e-0021-1f31-1c3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181107Z-17db6f7c8cfmhggkx889x958tc00000002b000000000f8wa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:07 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.9	49762	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:08 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:08 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: b2260943-f01e-0052-0b1c-1c9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181108Z-17db6f7c8cfvzwz27u5rnq9kpc00000005mg000000004y4s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:08 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.9	49761	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:08 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:08 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 72dafb48-001e-0079-44ea-1a12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181108Z-17db6f7c8cfhrxld7punfw920n00000003wg00000000gp77 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:08 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.9	49764	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:08 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:08 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 9ba87e07-d01e-008e-2ae9-1a387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181108Z-17db6f7c8cfhrxld7punfw920n00000003zg00000000auxc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:08 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.9	49763	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:08 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:08 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 95529de3-401e-0064-4a25-1b54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181108Z-17db6f7c8cfwtn5x6ye8p8q9m000000003s000000000fp8u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:08 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.9	49766	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:08 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:08 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: f06d7d54-001e-0066-1c31-1c561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181108Z-17db6f7c8cfvq8pt2ak3arkg6n000000036000000000f15e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:08 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.9	49771	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:08 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:08 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 77f86656-001e-000b-08e7-1a15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181108Z-17db6f7c8cfnqpbkckdefmqa440000000580000000009p3y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:09 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.9	49770	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:08 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:08 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 4508f1f3-f01e-0096-78e2-1a10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181108Z-17db6f7c8cf96l6t7bwyfgbkhw000000047g00000000bexk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:09 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.9	49773	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:09 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:09 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 1a8c6729-d01e-0014-7547-1ced58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181109Z-17db6f7c8cf6f7vv3recfp4a6w000000026000000000gxr5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:09 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.9	49772	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:09 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:09 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 01727dbb-701e-0032-7b9f-1ba540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181109Z-17db6f7c8cfbd7pgux3k6qfa6000000004700000000032uw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:09 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.9	49774	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:09 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:09 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 24993946-c01e-008e-55d7-1a7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181109Z-17db6f7c8cfqxt4wrzg7st2fm800000005cg00000000750x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:09 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.9	49776	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:09 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:09 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: ec734971-401e-0035-389c-1b82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181109Z-17db6f7c8cfwtn5x6ye8p8q9m000000003x00000000036tq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:09 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.9	49775	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:09 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:09 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: c0284108-301e-005d-6416-1ce448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181109Z-17db6f7c8cf6f7vv3recfp4a6w00000002bg000000005myc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:09 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.9	49777	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:09 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-13 18:11:10 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=167665 Date: Sun, 13 Oct 2024 18:11:10 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.9	49780	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:10 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:10 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: fed7985d-c01e-0034-3cd8-1a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181110Z-17db6f7c8cf5mtxmr1c51513n000000005ag00000000hssk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:11 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.9	49781	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:10 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:10 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: ebcfca05-e01e-0051-5418-1c84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181110Z-17db6f7c8cf8rgvlb86c9c009800000003e0000000002u1g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:11 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.9	49778	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:10 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:10 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: b0fa5ee8-501e-0047-295e-1cce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181110Z-17db6f7c8cfpm9w8b1ybgtytds000000033g00000000f8uk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:11 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.9	49782	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:10 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:10 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: d286cfb1-001e-0079-076b-1c12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181110Z-17db6f7c8cf9wwz8ehu7c5p33g00000002cg00000000n15p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:11 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.9	49779	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:10 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:11 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 90f8132d-901e-002a-0d47-1c7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181111Z-17db6f7c8cffhvbz3mt0ydz7x400000003h00000000023d4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:11 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.9	49783	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:11 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-13 18:11:11 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=167605 Date: Sun, 13 Oct 2024 18:11:11 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-13 18:11:11 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.9	49787	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:11 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:11 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: fa8e6f2c-a01e-0021-6514-1c814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181111Z-17db6f7c8cfvtw4hh2496wp8p800000003m000000000g810 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:11 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.9	49785	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:11 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:11 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 23e49b38-a01e-001e-1147-1c49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181111Z-17db6f7c8cfmhggkx889x958tc00000002b000000000f90n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:11 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.9	49784	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:11 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:11 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: b92a0ccf-a01e-0002-4a21-1c5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181111Z-17db6f7c8cf5mtxmr1c51513n000000005g0000000004x9d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:11 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.9	49786	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:11 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:11 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 640ec2fa-901e-0083-59e1-1abb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181111Z-17db6f7c8cfnqpbkckdefmqa44000000056g00000000cg1g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:11 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.9	49788	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:11 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:11 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 90b8fb57-901e-002a-182e-1c7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181111Z-17db6f7c8cf9wwz8ehu7c5p33g00000002hg000000007pga x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:11 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.9	49789	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:12 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:12 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: fe1a2dd9-a01e-0053-57d8-1a8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181112Z-17db6f7c8cfp6mfve0htepzbps00000004n000000000btu2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:12 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.9	49790	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:12 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:12 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 1bfa4875-a01e-0084-0b1c-1c9ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181112Z-17db6f7c8cfjxfnba42c5rukwg000000028g000000005ds0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:12 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.9	49791	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:12 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:12 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: beeeb270-f01e-003f-4fe2-1ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181112Z-17db6f7c8cfvzwz27u5rnq9kpc00000005n0000000003zpx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:12 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.9	49792	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:12 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:12 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 9542a535-401e-0064-601f-1b54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181112Z-17db6f7c8cfqkqk8bn4ck6f72000000004z000000000dsst x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:12 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.9	49793	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:12 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:12 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 581fb33a-501e-00a0-339b-1b9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181112Z-17db6f7c8cfbr2wt66emzt78g400000004rg00000000d51c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:12 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.9	49794	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:13 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:13 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 69457385-001e-0034-42de-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181113Z-17db6f7c8cf4g2pjavqhm24vp400000005dg00000000c91n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:13 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.9	49795	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:13 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:13 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 4a3f7a17-001e-0017-5de5-1a0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181113Z-17db6f7c8cf4g2pjavqhm24vp400000005k0000000000wmk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:13 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.9	49796	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:13 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:13 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: ca6815b7-a01e-0053-63aa-1c8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181113Z-17db6f7c8cfpm9w8b1ybgtytds000000037g00000000554p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:13 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.9	49797	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:13 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:13 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 959f4817-801e-0078-5157-1cbac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181113Z-17db6f7c8cfcl4jvqfdxaxz9w800000002sg0000000002x9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:13 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.9	49798	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:13 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:13 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 284a1447-301e-0000-211b-1ceecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181113Z-17db6f7c8cf8rgvlb86c9c0098000000038000000000gcyk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:13 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.9	49802	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:14 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:14 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:14 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 94afa4f1-501e-0047-0aca-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181114Z-17db6f7c8cfnqpbkckdefmqa44000000057g00000000b9b5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:14 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.9	49801	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:14 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:14 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 9ad66ff1-501e-00a0-38ec-1a9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181114Z-17db6f7c8cfgqlr45m385mnngs00000003x00000000014r4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:14 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.9	49800	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:14 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:14 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 38d12744-701e-0050-7297-1b6767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181114Z-17db6f7c8cf9c22xp43k2gbqvn00000002x000000000720e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:14 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.9	49799	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:14 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:14 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 67a092be-301e-0099-76e2-1a6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181114Z-17db6f7c8cf6qp7g7r97wxgbqc00000004n0000000006kf8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:14 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.9	49803	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:14 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:14 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 1a8c6bd5-d01e-0014-0747-1ced58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181114Z-17db6f7c8cf9c22xp43k2gbqvn00000002v000000000cbng x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:14 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.9	49807	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:15 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:15 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:15 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: c59d95fd-201e-000c-3c07-1c79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181115Z-17db6f7c8cf8rgvlb86c9c009800000003dg000000004p4f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:15 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.9	49808	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:15 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:15 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:15 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 46e4659a-701e-000d-2947-1c6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181115Z-17db6f7c8cfmhggkx889x958tc00000002bg00000000epk5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:15 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.9	49804	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:15 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:15 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:15 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 8957210b-901e-005b-0df7-1a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181115Z-17db6f7c8cfnqpbkckdefmqa4400000005ag0000000041e0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:15 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.9	49805	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:15 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:15 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f76b9983-801e-0047-0eec-1a7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181115Z-17db6f7c8cfq2j6f03aq9y8dns00000004gg000000003d6x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:15 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.9	49806	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:15 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:15 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:15 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 2551f31e-501e-00a3-36a9-1cc0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181115Z-17db6f7c8cfmhggkx889x958tc00000002h00000000016ut x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:15 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.9	49812	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:15 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:15 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:15 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 07ebf894-801e-008c-19d8-1a7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181115Z-17db6f7c8cfp6mfve0htepzbps00000004t000000000010a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:15 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.9	49809	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:15 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:15 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:15 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 4dc67717-001e-005a-3747-1cc3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181115Z-17db6f7c8cfcl4jvqfdxaxz9w800000002hg00000000frne x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:15 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.9	49811	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:15 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:15 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:15 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 7d81a33d-101e-00a2-42e1-1a9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181115Z-17db6f7c8cf96l6t7bwyfgbkhw000000045g00000000gdbq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:15 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.9	49810	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:15 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:15 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:15 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: defb5908-e01e-0033-2de2-1a4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181115Z-17db6f7c8cfhrxld7punfw920n0000000400000000009man x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:15 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.9	49813	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:15 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:15 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:15 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 07f85e87-a01e-003d-78df-1a98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181115Z-17db6f7c8cfvzwz27u5rnq9kpc00000005g000000000d3cx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:15 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.9	49814	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:16 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=6TPyw8RKrSf8tzY&MD=d1V6kW9s HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-13 18:11:16 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 14f88336-f509-4795-9142-dc4fa46a0e0b MS-RequestId: e45c2722-6622-4147-a2ac-551dd1a29f13 MS-CV: 8R5ChsuYd0aOZ6By.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sun, 13 Oct 2024 18:11:15 GMT Connection: close Content-Length: 24490
2024-10-13 18:11:16 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-13 18:11:16 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.9	49816	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:16 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:16 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:16 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: e6504dd7-401e-0015-6cce-1a0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181116Z-17db6f7c8cfspvtq2pgqb2w5k0000000053g00000000d0v6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:16 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.9	49817	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:16 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:16 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:16 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: f0eac77b-f01e-00aa-541b-1c8521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181116Z-17db6f7c8cfvtw4hh2496wp8p800000003qg000000008bbr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:16 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.9	49815	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:16 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:16 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:16 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: d1236033-501e-008f-33ea-1a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181116Z-17db6f7c8cfp6mfve0htepzbps00000004qg000000006hcd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:16 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.9	49818	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:16 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:16 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:16 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 0b054cf6-001e-00a2-745b-1cd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181116Z-17db6f7c8cfpm9w8b1ybgtytds000000038g000000002c80 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:16 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.9	49819	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:16 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:16 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:16 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: f659b87d-a01e-0002-04d9-1a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181116Z-17db6f7c8cfqxt4wrzg7st2fm800000005b000000000a3mr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:16 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.9	49823	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:17 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:17 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:17 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 234b0266-801e-0035-5da3-1b752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181117Z-17db6f7c8cfcrfgzd01a8emnyg00000002rg00000000br9c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:17 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.9	49821	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:17 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:17 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:17 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: a2b1ec5b-001e-002b-54a3-1b99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181117Z-17db6f7c8cfbd7pgux3k6qfa60000000042g00000000ewwy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:17 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.9	49822	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:17 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:17 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:17 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 37770a76-901e-0048-046f-1cb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181117Z-17db6f7c8cf9c22xp43k2gbqvn00000002tg00000000f4cv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:17 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.9	49825	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:17 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:17 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:17 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: fe1a38a0-a01e-0053-6ad8-1a8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181117Z-17db6f7c8cfcrfgzd01a8emnyg00000002qg00000000c9k6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:17 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.9	49824	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:17 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:17 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:17 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: e8fbd797-601e-005c-7ee6-1af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181117Z-17db6f7c8cfhrxld7punfw920n00000003y000000000dw2v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:17 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.9	49826	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:18 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:18 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:18 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 73142df5-301e-0052-1d1f-1b65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181118Z-17db6f7c8cfvq8pt2ak3arkg6n00000003a0000000002v8n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:18 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.9	49827	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:18 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:18 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:18 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 35289574-d01e-00ad-2923-1be942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181118Z-17db6f7c8cfspvtq2pgqb2w5k0000000053g00000000d0xe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:18 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.9	49829	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:18 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:18 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:18 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: fa68fd7e-e01e-0099-0ae2-1ada8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181118Z-17db6f7c8cfhrxld7punfw920n000000040g000000007pfd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:18 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.9	49830	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:18 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:18 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:18 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 824149a8-601e-003e-2114-1c3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181118Z-17db6f7c8cfvzwz27u5rnq9kpc00000005m00000000068mn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:18 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.9	49828	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:18 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:18 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:18 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 44110a29-201e-00aa-4c81-1a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181118Z-17db6f7c8cfqxt4wrzg7st2fm8000000058000000000kmmq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:18 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.9	49831	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:19 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:19 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:19 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: cec5e4df-e01e-001f-1c47-1c1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181119Z-17db6f7c8cf9c22xp43k2gbqvn00000002zg000000001ax2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:19 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.9	49832	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:19 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:19 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:19 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 4704ee26-501e-0047-65aa-1cce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181119Z-17db6f7c8cfvtw4hh2496wp8p800000003r00000000062tc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:19 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.9	49834	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:19 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:19 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:19 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 05046913-601e-000d-6fd8-1a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181119Z-17db6f7c8cfbr2wt66emzt78g400000004u0000000007pc0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:19 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.9	49833	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:19 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:19 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:19 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: aa10c15c-401e-0067-377e-1b09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181119Z-17db6f7c8cfp6mfve0htepzbps00000004kg00000000et42 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:19 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.9	49835	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:19 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:19 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:19 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 7536bc90-101e-005a-6b87-1c882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181119Z-17db6f7c8cfvzwz27u5rnq9kpc00000005e000000000hnn2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:19 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.9	49837	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:21 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:21 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:21 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 5c04d847-901e-007b-6354-1cac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181121Z-17db6f7c8cf6qp7g7r97wxgbqc00000004gg00000000dvzd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:21 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.9	49836	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:21 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:21 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:21 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 16892f44-001e-008d-0d14-1cd91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181121Z-17db6f7c8cf9c22xp43k2gbqvn00000002y0000000005svw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:21 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.9	49838	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:21 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:21 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:21 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 27ba3f1d-401e-00ac-3a62-1c0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181121Z-17db6f7c8cf6f7vv3recfp4a6w00000002c00000000042vk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:21 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.9	49840	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:21 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:21 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:21 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 6411c5a0-901e-0083-0ae3-1abb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181121Z-17db6f7c8cfnqpbkckdefmqa4400000005b0000000002zsy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:21 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.9	49839	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:21 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:21 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:21 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 1c06004d-d01e-005a-0ee5-1a7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181121Z-17db6f7c8cfqxt4wrzg7st2fm800000005dg000000004wd5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:21 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.9	49842	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:21 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:21 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: df344972-701e-001e-12cd-1af5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181121Z-17db6f7c8cfspvtq2pgqb2w5k0000000053g00000000d147 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:22 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.9	49844	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:21 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:21 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 0506fa48-b01e-001e-4cc1-1a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181121Z-17db6f7c8cfhzb2znbk0zyvf6n00000004y00000000095hg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:22 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.9	49841	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:21 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:21 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 842b74fa-501e-008c-2f04-1acd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181121Z-17db6f7c8cfvzwz27u5rnq9kpc00000005kg000000007t7v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:22 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.9	49845	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:21 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:21 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: c0003111-501e-0029-3e1c-1cd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181121Z-17db6f7c8cffhvbz3mt0ydz7x400000003h00000000023ud x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:22 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.9	49843	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:21 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:21 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 0c263a70-701e-0098-1b5d-1c395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181121Z-17db6f7c8cf9c22xp43k2gbqvn00000002t000000000h7n3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:22 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.9	49849	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:22 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:22 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 056f3a33-b01e-0097-671a-1c4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181122Z-17db6f7c8cfhrxld7punfw920n000000042g00000000309u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:22 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.9	49846	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:22 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:22 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: db50f49a-301e-000c-213b-1c323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181122Z-17db6f7c8cfmhggkx889x958tc000000029g00000000kzby x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:22 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.9	49848	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:22 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:22 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 08565fb3-401e-0029-27c4-1a9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181122Z-17db6f7c8cfbd7pgux3k6qfa60000000046g000000004b80 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:22 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.9	49847	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:22 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:22 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: c21fd998-001e-0014-4ce5-1a5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181122Z-17db6f7c8cf96l6t7bwyfgbkhw00000004bg000000001x92 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:22 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.9	49850	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:22 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:22 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 0d065d93-f01e-0096-29a3-1b10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181122Z-17db6f7c8cf96l6t7bwyfgbkhw000000048000000000asy6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:22 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.9	49852	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:23 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:23 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:23 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: bb1c3872-701e-0050-4447-1c6767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181123Z-17db6f7c8cfnqpbkckdefmqa44000000059g0000000071zu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:23 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.9	49851	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:23 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:23 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:23 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: d15b385d-801e-0047-591b-1c7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181123Z-17db6f7c8cf9wwz8ehu7c5p33g00000002hg000000007q65 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:23 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.9	49853	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:23 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:23 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:23 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 554118dd-201e-0033-7707-1cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181123Z-17db6f7c8cf8rgvlb86c9c009800000003b000000000anbu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:23 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.9	49855	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:23 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:23 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:23 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: b0bf752c-501e-0047-5047-1cce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181123Z-17db6f7c8cfjxfnba42c5rukwg00000002ag000000000d9h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:23 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.9	49854	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:23 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:23 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:23 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: b9726785-901e-00ac-76d7-1ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181123Z-17db6f7c8cfvzwz27u5rnq9kpc00000005e000000000hnsz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:23 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.9	49856	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:24 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:24 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:24 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 374dd3c9-a01e-006f-2dec-1a13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181124Z-17db6f7c8cfbr2wt66emzt78g400000004q000000000feca x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:24 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.9	49857	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:24 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:24 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:24 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 4ec1f56b-301e-006e-0147-1cf018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181124Z-17db6f7c8cfmhggkx889x958tc00000002dg00000000a54c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:24 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.9	49858	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:24 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:24 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:24 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 63590950-201e-0085-2bd8-1a34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181124Z-17db6f7c8cfnqpbkckdefmqa44000000058g000000009h0v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:24 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.9	49860	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:24 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:24 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:24 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 4eeac0e9-d01e-0066-085b-1cea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181124Z-17db6f7c8cf6qp7g7r97wxgbqc00000004mg000000007mxg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:24 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.9	49859	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:24 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:24 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:24 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 17ba822c-f01e-001f-0875-1a5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181124Z-17db6f7c8cf4g2pjavqhm24vp400000005eg000000009wtm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:24 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.9	49862	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:25 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:25 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:25 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: e4896758-501e-007b-0aba-1a5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181125Z-17db6f7c8cfqxt4wrzg7st2fm800000005f0000000000bud x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:25 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.9	49861	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:25 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:25 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:25 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 9754ce2f-b01e-003d-7f1e-1bd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181125Z-17db6f7c8cfp6mfve0htepzbps00000004pg000000009dnh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:25 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.9	49863	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:25 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:25 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:25 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 7dbe0e1e-c01e-007a-2997-1bb877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181125Z-17db6f7c8cfq2j6f03aq9y8dns00000004bg00000000fv24 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:25 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.9	49864	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:25 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:25 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:25 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 0eabca5c-a01e-0098-436f-1c8556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181125Z-17db6f7c8cfbd7pgux3k6qfa60000000041g00000000gd5n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:25 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.9	49865	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:25 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:25 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:25 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 1a04bf79-301e-000c-2cd7-1a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181125Z-17db6f7c8cf4g2pjavqhm24vp400000005c000000000g3cc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:25 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.9	49866	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:25 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:25 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:25 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 6a7281b4-d01e-008e-2ea3-1b387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181125Z-17db6f7c8cfp6mfve0htepzbps00000004m000000000etzz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:25 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.9	49867	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:25 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:25 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:25 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 83695c77-e01e-001f-80c4-1a1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181125Z-17db6f7c8cf6qp7g7r97wxgbqc00000004p0000000003x1x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:25 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.9	49868	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:25 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:26 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:25 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: b7844524-101e-0017-17eb-1a47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181125Z-17db6f7c8cfvzwz27u5rnq9kpc00000005kg000000007tc3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:26 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.9	49869	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:25 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:26 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:25 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: 1ff3ea1d-701e-003e-62ea-1b79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181125Z-17db6f7c8cf4g2pjavqhm24vp400000005k0000000000x3y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:26 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.9	49870	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:25 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:26 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:25 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: 054ff9cd-601e-000d-3cf3-1a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181125Z-17db6f7c8cfhrxld7punfw920n00000003x000000000g7ey x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:26 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.9	49871	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:26 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:26 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:26 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: f75af137-a01e-000d-5feb-1ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181126Z-17db6f7c8cfq2j6f03aq9y8dns00000004h0000000002r46 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:26 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.9	49872	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:26 UTC	192	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:26 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:26 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: c2ce770e-d01e-00ad-7c5e-1ce942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181126Z-17db6f7c8cf8rgvlb86c9c009800000003dg000000004phh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:26 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.9	49873	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:26 UTC	192	OUT	GET /rules/rule702650v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:26 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:26 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEA1B544" x-ms-request-id: b9110b4f-a01e-0002-4d16-1c5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181126Z-17db6f7c8cfvtw4hh2496wp8p800000003q0000000008yq1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:26 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 61 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702650" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedia" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.9	49874	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:26 UTC	192	OUT	GET /rules/rule703101v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:26 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:26 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F93037" x-ms-request-id: 75b430b7-701e-0001-55df-1ab110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181126Z-17db6f7c8cfqxt4wrzg7st2fm800000005bg00000000ak46 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:26 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 31 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 41 54 53 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 41 54 53 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703101" V="1" DC="SM" EN="Office.Telemetry.Event.Office.MATS.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMATS"

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5916, Parent PID: 5600

General

Target ID:	0
Start time:	14:10:58
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5736, Parent PID: 5916

General

Target ID:	2
Start time:	14:11:02
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2448 --field-trial-handle=2412,i,14578733095005110323,16163136755117033568,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5344, Parent PID: 5600

General

Target ID:	3
Start time:	14:11:04
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://mail.findmy-ld.help/icloud-archivos/code2022esp.php"
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://mail.findmy-ld.help/icloud-archivos/code2022esp.php

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Static File Info

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

Windows Analysis Report
http://mail.findmy-ld.help/icloud-archivos/code2022esp.php