Edit tour

Windows Analysis Report
http://mail.w-iphon.sa.com/icloud-archivos/code2022esp.php

Overview

General Information

Sample URL:	http://mail.w-iphon.sa.com/icloud-archivos/code2022esp.php
Analysis ID:	1532679
Tags:	openphish
Infos:

Detection

Score:	21
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Phishing site detected (based on favicon image match)

Detected non-DNS traffic on DNS port

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6852 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6672 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2552 --field-trial-handle=2520,i,299039247589719325,9255678577870922180,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 480 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://mail.w-iphon.sa.com/icloud-archivos/code2022esp.php" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

ET PHISHING Possible Phish - Saved Website Comment Observed

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-13T20:11:08.780825+0200	2018334	2	Potentially Bad Traffic	50.6.138.164	80	192.168.2.10	49722	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Phishing site detected (based on favicon image match)

Source: http://w-iphon.sa.com

Matcher: Template: apple matched with high similarity

Source: http://mail.w-iphon.sa.com/icloud-archivos/code2022esp.php

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 13.107.246.67:443 -> 192.168.2.10:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.10:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.10:49755 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.10:50835 -> 162.159.36.2:53

Source: Network traffic

Suricata IDS: 2018334 - Severity 2 - ET PHISHING Possible Phish - Saved Website Comment Observed : 50.6.138.164:80 -> 192.168.2.10:49722

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 13 Oct 2024 18:11:08 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, Keep-AliveVary: Accept-EncodingContent-Encoding: gzipAccept-Ranges: noneContent-Length: 2876Keep-Alive: timeout=5, max=75Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 52 61 73 db 36 12 fd ee 5f 81 30 9d 8c d4 0b 49 cb 72 dc c4 16 d5 49 1c e7 ea 99 e4 d2 26 ce 75 6e 6e ae 19 08 58 89 48 40 80 01 40 c9 8a eb 9f d4 4f f9 09 f9 63 b7 00 29 8a b2 9d da bd f1 64 ae 73 47 7b 44 62 b1 fb f6 ed db 37 ba f3 f4 e5 e1 c9 3f 7e 3c 22 b9 2b 24 f9 f1 cd 93 e7 c7 87 24 8a d3 f4 e7 e1 61 9a 3e 3d 79 4a 7e 38 79 f1 9c ec 26 db 03 72 62 a8 b2 c2 09 ad a8 4c d3 a3 bf 45 24 ca 9d 2b f7 d3 74 b1 58 24 8b 61 a2 cd 2c 3d 79 95 7a a8 dd 54 6a 6d 21 e1 8e 47 e3 ad d1 9d 38 26 96 ce 81 93 a9 d1 05 a9 8c cc 7a db db 0f b6 fb 1e c0 36 08 82 49 5d f1 84 e9 22 56 36 a9 6c 4a df 0c ff 3e 48 0b 3d 11 12 52 a6 39 24 65 5e 92 38 46 40 df 63 3c ca 81 f2 f1 a8 00 47 89 07 8a e1 43 25 e6 59 74 a8 95 03 e5 e2 93 65 09 11 61 f5 29 8b 1c 9c ba 40 ee 80 b0 9c 1a 0b 2e 7b 73 f2 2c 7e 88 04 09 3e e1 a7 06 53 b4 80 2c 9a 0b 58 94 da b8 0e c4 42 70 97 67 1c e6 82 41 1c 0e f7 89 50 a8 09 95 b1 65 54 42 36 b8 4f 0a 7a 2a 8a aa 58 05 1a f8 91 14 ea 3d 31 20 b3 a8 34 30 05 c7 72 62 dd 52 82 cd 01 b0 47 8e c1 2c 4a d2 29 f6 b2 09 b3 36 22 0e f9 37 b4 fd f9 12 4e b7 fc 42 2e 29 80 0b 8a 29 cc 00 a8 35 3a 2d cb e4 b6 b0 42 49 83 16 e0 ba cf d6 95 87 5a e8 51 a8 bc 34 de a8 46 c4 77 d8 eb d6 68 a2 f9 12 5f 5c cc 09 93 d4 5a a4 20 62 1f 24 f8 f6 3b a1 42 81 21 ed 57 3c 95 95 e0 11 11 3c 8b 9a 95 45 84 53 47 63 97 83 df a8 14 0e b0 0f 8a 20 21 a6 95 cb c7 41 85 70 16 3c 96 7a a6 49 81 3e cb a2 33 ff 3a 8f 9a ee 1e b0 2e 6a b2 a2 15 a1 8d 28 c9 05 47 5c b9 a0 cb 56 61 b1 ca 14 c8 88 f8 9f b7 a1 c6 8f 2b 10 3e 45 7c 94 6f 94 76 49 6c 0e 8d 3e 9b 81 eb 0c 3c a5 d8 46 28 82 9b b3 ce 08 e6 62 b4 5c bc c8 c9 ea a6 99 ba 1e 05 8a 09 f0 d5 8a da 71 ac 83 32 ea c8 ea cf a4 21 7d 29 f1 48 b6 a9 04 93 46 56 cc 14 b6 d9 a4 39 07 23 a6 cb b8 cc b5 82 96 c8 b8 ed da 81 ce 07 9d c6 eb ed 39 e1 bc 2b de 63 9d 33 28 b1 a3 13 a1 38 9c 66 51 3c 88 48 f0 46 16 4d 31 3d b6 e2 23 ec 0f 1e 96 a7 07 4c 4b 6d f6 ef ee 3e f2 7f 07 1d fe fe 39 56 33 54 08 08 48 c2 3e 7f e2 02 37 c4 01 ff ed 44 ea 0f 15 f8 93 24 5c d8 52 5b e1 c4 5c b7 04 d3 7c 30 be e4 e8 56 95 15 77 60 48 1e c7 5c 18 dc 1d 98 0b cd 47 78 5f 19 e1 96 21 89 48 50 33 97 a3 b1 fc e9 79 38 9c e3 88 cb 12 67 72 80 fa 5a 13 a4 80 53 97 45 35 71 7a 81 78 10 58 30 ca c4 e7 4f b8 62 a9 19 95 c2 02 8f 31 41 60 d5 d3 cf bf e1 1b 85 03 63 b4 89 0b b0 96 ce 10 fe f0 0b 10 44 28 a6 8d 01 e6 74 82 4b dd 1c 6d 4d 3d cc 35 12 bc b0 71 0d dc cc 4b ce 50 3a 3a 91 de f1 b2 be b2 e7 59 94 53 7b e4 bf 9f d3 89 1f eb ec 97 ba c8 4f 8a b7 e1 70 82 df 11 29 75 a9 91 4f 4c 2b a7 63 26 b5 f5 db a5 d2 82 2f ba dc 2e 0e dc c0 b7 f0 97 a1 c7 cf f5 d5 61 7d 83 75 d8 bc 61 12 53 c5 e3 a9 66 55 97 93 7d ac f8 33 1f c3 54 9b eb 45 9d fb 85
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 13 Oct 2024 18:11:08 GMTServer: ApacheLast-Modified: Sat, 26 Nov 2022 14:31:26 GMTAccept-Ranges: noneVary: Accept-EncodingContent-Encoding: gzipContent-Length: 478Keep-Alive: timeout=5, max=74Connection: Keep-AliveContent-Type: text/cssData Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 92 4f 4e 83 40 14 87 d7 f6 14 2f 6c 68 1b 69 6b e3 9f b4 6e 34 ae 5c 98 98 f6 00 66 0a 0f 3b 71 60 c8 cc ab 4a 8c 57 70 ed 51 8c c7 f1 02 5e 41 a0 b4 d1 49 83 0e e9 c2 b2 9c 07 bf 07 bf 6f be b3 50 c6 e4 85 cc 47 78 6a ed 95 87 88 8b 74 ec 5e a5 8a b3 00 a6 48 70 ad a4 7b 5a 3e d6 94 0a 1c c7 52 45 4c ac 66 0f c8 6f e7 34 1e 0e 06 d9 44 2b 7f 2c a4 cf 44 db fd 78 7d ff 7c 7b 71 3b fb b0 50 a2 ed f4 fa 51 b1 d3 d3 48 5e a2 e4 0d cd 79 dc 7b 90 61 e8 74 20 cc 37 52 db 59 1e 2b 13 44 df 03 a4 16 48 69 82 4e 27 fb 78 bf 0b 17 32 c9 32 d9 ff 40 db ef c0 c1 68 34 84 f3 40 ce 10 a6 a9 26 8c 34 5c c6 be 54 89 54 8c 30 e8 c1 b9 10 30 c9 5f d7 30 41 8d ea 3e 1f 96 dd b9 06 06 a4 58 80 11 53 77 20 c3 ca 4d dd 7e eb b9 d5 3a ab 49 94 13 13 dc df 06 51 6f b9 ca 1e ec 2a d8 0c be 90 c1 73 4b 7a 15 32 a1 a4 5d 6b f6 17 73 0e ad cd c1 47 aa 67 ce b7 60 33 cc 31 f8 c6 79 1d 61 f0 3d b2 e5 1b 61 c0 17 91 1d da 32 d3 48 aa 1b ad ad 49 b5 96 b7 3f a3 cd 60 0c 19 40 b7 24 58 a9 14 4a da b5 6e 86 3f 71 7e 55 c2 f0 e7 d8 d6 1f 8d 11 9f 49 11 d8 a9 b3 4e 35 c3 1a 83 2c 27 26 b8 bf 2d b2 de 72 5d 3d c0 ab 70 33 38 43 06 d1 2d 29 fe 22 16 4a da b5 76 86 45 71 7e 59 c2 b0 e8 c4 d6 a2 02 86 95 3a 45 a2 19 be 18 44 39 31 c1 fd 6d 10 f5 96 ab ec c1 ae 82 cd e0 0b 19 3c b7 a4 57 21 13 4a da b5 66 86 39 71 7e 51 c2 30 e7 70 6d ce e6 ee 84 8f b4 ee 6e 21 58 91 b3 32 ab 48 fc 6b a5 be 00 9b 6e d4 da 27 11 00 00 Data Ascii: ON@/lhikn4\f;q`JWpQ^AIoPGxjt^Hp{Z>RELfo4D+,Dx}\|{q;PQH^y{at 7RY+DHiN'x22@h4@&4\TT00_0A>XSw M~:IQo*sKz2]ksGg`31ya=a2HI?`@$XJn?q~UIN5,'&-r]=p38C-)"JvEq~Y:ED91m<W!Jf9q~Q0pmn!X2Hkn'
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 13 Oct 2024 18:11:09 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, Keep-AliveLast-Modified: Sat, 26 Nov 2022 14:31:26 GMTAccept-Ranges: noneVary: Accept-EncodingContent-Encoding: gzipContent-Length: 286Keep-Alive: timeout=5, max=75Content-Type: text/cssData Raw: 1f 8b 08 00 00 00 00 00 00 03 55 50 dd 6a c3 20 14 be f7 29 84 31 58 21 06 6d 92 76 d5 ab 5e 74 ef 61 a2 4d 0e b3 2a c6 92 ac 63 ef be 93 8c 6c 0c 11 3c e7 7c 3f e7 b3 b4 29 85 e4 42 0f 9e 7e 92 56 77 ef 7d 0a 77 6f 58 17 5c 48 92 3e bd 9d 2f a7 73 a5 48 0c 23 64 08 5e 52 dd 8e c1 dd b3 55 64 02 93 07 79 e4 cf 8a dc 74 42 09 e6 ec 35 4b ca aa 23 b6 da 90 8c 4d 2c 69 03 f7 51 d2 26 ce 8a fc cc 9b 3d 8e a3 36 06 7c 2f a9 b0 b7 0d 8c 45 9c 29 ca 83 a1 a9 6f f5 8b 78 6d 0a 51 9f 0a 51 f0 b2 3e ee 16 dc cc c6 41 9b 30 49 ca 11 8b aa 54 2c 8f 3d de 95 c2 8b f5 94 62 f7 bb 55 0e 51 d2 d3 e2 ff 67 ba ae b3 85 6c 78 75 a9 b8 22 d7 e0 33 9b 2c f4 03 6e 59 73 ec 64 3b 67 a6 1d f4 18 bc b3 3e db a4 c8 83 81 37 76 46 91 8d 32 c2 c3 6e 9a ce 66 44 b1 31 ea 6e 75 62 bc e4 e2 b0 64 fc a7 de f0 8d 7c d5 37 70 1f f8 af 09 b4 53 e4 8b 7e 03 1b d6 07 a2 94 01 00 00 Data Ascii: UPj )1X!mv^taM*cl<\|?)B~Vw}woX\H>/sH#d^RUdytB5K#M,iQ&=6\|/E)oxmQQ>A0IT,=bUQglxu"3,nYsd;g>7vF2nfD1nubd\|7pS~

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/code2022esp.php HTTP/1.1Host: mail.w-iphon.sa.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/fonts.css HTTP/1.1Host: mail.w-iphon.sa.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://mail.w-iphon.sa.com/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/app.css HTTP/1.1Host: mail.w-iphon.sa.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://mail.w-iphon.sa.com/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/style.css HTTP/1.1Host: mail.w-iphon.sa.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://mail.w-iphon.sa.com/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/ajax-loader.gif HTTP/1.1Host: mail.w-iphon.sa.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://mail.w-iphon.sa.com/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sep.png HTTP/1.1Host: mail.w-iphon.sa.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://mail.w-iphon.sa.com/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/myriad-set-pro_thin.woff HTTP/1.1Host: mail.w-iphon.sa.comConnection: keep-aliveOrigin: http://mail.w-iphon.sa.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://mail.w-iphon.sa.com/icloud-archivos/fonts.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/myriad-set-pro_text.woff HTTP/1.1Host: mail.w-iphon.sa.comConnection: keep-aliveOrigin: http://mail.w-iphon.sa.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://mail.w-iphon.sa.com/icloud-archivos/fonts.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/myriad-set-pro_text.ttf HTTP/1.1Host: mail.w-iphon.sa.comConnection: keep-aliveOrigin: http://mail.w-iphon.sa.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://mail.w-iphon.sa.com/icloud-archivos/fonts.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/myriad-set-pro_thin.ttf HTTP/1.1Host: mail.w-iphon.sa.comConnection: keep-aliveOrigin: http://mail.w-iphon.sa.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://mail.w-iphon.sa.com/icloud-archivos/fonts.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/ajax-loader.gif HTTP/1.1Host: mail.w-iphon.sa.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sep.png HTTP/1.1Host: mail.w-iphon.sa.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: mail.w-iphon.sa.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://mail.w-iphon.sa.com/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: mail.w-iphon.sa.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: mail.w-iphon.sa.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: 206.23.85.13.in-addr.arpa

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 13 Oct 2024 18:11:09 GMTServer: ApacheLast-Modified: Wed, 24 May 2023 01:50:54 GMTAccept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 4677Keep-Alive: timeout=5, max=74Connection: Keep-AliveContent-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 28 a5 1e fc 61 7b e3 38 6a 6f 8e 17 74 1e c2 45 49 2e fb b6 b1 d1 1f 36 b2 b2 ac 14 f6 71 5e 09 9d 3e 04 59 8a 5a a9 b3 ae 51 08 8e 8d e9 fc 48 ac 5d f3 72 42 69 73 5f 89 34 95 3a 1f 1e 8c 4a 61 72 a9 f9 21 63 0f fb 99 28 a5 6a 86 05 aa 29 3a 99 88 d1 9f cb 7b 7b de 64 21 35 9a fb ee ce cf 07 d5 1c 44 ed 68 34 93 a9 2b 86 bf fe f2 6b 35 df 79 03 f6 1c 55 ec f7 fd 44 24 77 b9 a1 5a a7 7d 59 8a 1c 87 b5 51 4f 9f 2c f5 86 35 1b f1 49 3e ff 69 36 f8 a3 ca 9f 3c 1b ad 5d 32 58 a1 70 43 4d dd d3 c6 e4 02 65 5e b8 e1 e1 57 68 94 32 fd 2e 1a 7c 7e 90 cb 6c 27 89 f6 a7 df 7c 83 fa 76 2c ec e5 c2 91 99 90 73 54 de 57 64 a5 93 a4 19 47 09 27 a7 38 52 98 b9 e1 d1 0b 46 c9 14 f1 00 ff fe 4f 00 e7 f3 f9 fd da e1 45 ac c7 3e 99 a3 17 ff c6 df 87 fc 38 82 2e b1 90 56 fb d5 3f 5c a4 f7 f5 09 7e 09 b5 5b 9f e2 4b d5 17 4a e6 7a 98 f0 16 9a ef 70 a0 83 83 3d 34 86 4c 42 29 de 87 e2 59 f9 0f 1c 1e 79 ae e1 75 d6 46 f9 eb c1 c1 b7 e2 4d 84 de ae e6 01 ff fb d6 eb 05 59 87 e9 a4 b9 df 1e bf 62 f7 f3 f3 05 3b eb 1a 85 43 e9 d8 83 64 b4 35 f1 5b 07 26 54 57 a4 ef 13 52 64 86 7b 2f 5f 1d 1c 6c 0e fb 79 e7 b0 6f 04 cf d1 59 27 0c 2b 02 f1 c5 11 47 87 3b 47 fc 8b fe af 8d 5c 84 e0 fd 3f 7a fe c5 4a 4c c8 39 2a 19 e5 7e 22 92 bb dc 50 ad d3 be 2c 45 8e c3 da a8 a7 4f a2 24 97 7d db d8 28 ac d9 88 4f b6 57 06 b9 cc 9e 3c 1b ad dd 32 58 21 b7 53 53 f7 b4 51 c8 a2 d5 72 78 fc ed e5 cc c4 e7 4f ab fd 85 1e 78 1e 22 0e df 23 a8 44 9a 4a 9d 0f e1 b0 4d be fd 19 41 a2 50 98 21 33 2d be 75 9a 48 12 32 a9 e4 36 ac c2 81 17 07 3f 8e a0 95 01 bf 3c 67 ec 11 94 52 f7 3b 31 3c ad 5d ea 98 1d 80 a8 1d 8d c0 e1 dc f5 39 c6 9c d7 12 06 47 f3 dd 24 a0 56 70 bf 8e a3 30 73 df 8f 42 bb 51 1e 3d fa 66
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 13 Oct 2024 18:11:09 GMTServer: ApacheLast-Modified: Wed, 24 May 2023 01:50:54 GMTAccept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 4677Keep-Alive: timeout=5, max=74Connection: Keep-AliveContent-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 28 a5 1e fc 61 7b e3 38 6a 6f 8e 17 74 1e c2 45 49 2e fb b6 b1 d1 1f 36 b2 b2 ac 14 f6 71 5e 09 9d 3e 04 59 8a 5a a9 b3 ae 51 08 8e 8d e9 fc 48 ac 5d f3 72 42 69 73 5f 89 34 95 3a 1f 1e 8c 4a 61 72 a9 f9 21 63 0f fb 99 28 a5 6a 86 05 aa 29 3a 99 88 d1 9f cb 7b 7b de 64 21 35 9a fb ee ce cf 07 d5 1c 44 ed 68 34 93 a9 2b 86 bf fe f2 6b 35 df 79 03 f6 1c 55 ec f7 fd 44 24 77 b9 a1 5a a7 7d 59 8a 1c 87 b5 51 4f 9f 2c f5 86 35 1b f1 49 3e ff 69 36 f8 a3 ca 9f 3c 1b ad 5d 32 58 a1 70 43 4d dd d3 c6 e4 02 65 5e b8 e1 e1 57 68 94 32 fd 2e 1a 7c 7e 90 cb 6c 27 89 f6 a7 df 7c 83 fa 76 2c ec e5 c2 91 99 90 73 54 de 57 64 a5 93 a4 19 47 09 27 a7 38 52 98 b9 e1 d1 0b 46 c9 14 f1 00 ff fe 4f 00 e7 f3 f9 fd da e1 45 ac c7 3e 99 a3 17 ff c6 df 87 fc 38 82 2e b1 90 56 fb d5 3f 5c a4 f7 f5 09 7e 09 b5 5b 9f e2 4b d5 17 4a e6 7a 98 f0 16 9a ef 70 a0 83 83 3d 34 86 4c 42 29 de 87 e2 59 f9 0f 1c 1e 79 ae e1 75 d6 46 f9 eb c1 c1 b7 e2 4d 84 de ae e6 01 ff fb d6 eb 05 59 87 e9 a4 b9 df 1e bf 62 f7 f3 f3 05 3b eb 1a 85 43 e9 d8 83 64 b4 35 f1 5b 07 26 54 57 a4 ef 13 52 64 86 7b 2f 5f 1d 1c 6c 0e fb 79 e7 b0 6f 04 cf d1 59 27 0c 2b 02 f1 c5 11 47 87 3b 47 fc 8b fe af 8d 5c 84 e0 fd 3f 7a fe c5 4a 4c c8 39 2a 19 e5 7e 22 92 bb dc 50 ad d3 be 2c 45 8e c3 da a8 a7 4f a2 24 97 7d db d8 28 ac d9 88 4f b6 57 06 b9 cc 9e 3c 1b ad dd 32 58 21 b7 53 53 f7 b4 51 c8 a2 d5 72 78 fc ed e5 cc c4 e7 4f ab fd 85 1e 78 1e 22 0e df 23 a8 44 9a 4a 9d 0f e1 b0 4d be fd 19 41 a2 50 98 21 33 2d be 75 9a 48 12 32 a9 e4 36 ac c2 81 17 07 3f 8e a0 95 01 bf 3c 67 ec 11 94 52 f7 3b 31 3c ad 5d ea 98 1d 80 a8 1d 8d c0 e1 dc f5 39 c6 9c d7 12 06 47 f3 dd 24 a0 56 70 bf 8e a3 30 73 df 8f 42 bb 51 1e 3d fa 66
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 13 Oct 2024 18:11:09 GMTServer: ApacheLast-Modified: Wed, 24 May 2023 01:50:54 GMTAccept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 4677Keep-Alive: timeout=5, max=73Connection: Keep-AliveContent-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 28 a5 1e fc 61 7b e3 38 6a 6f 8e 17 74 1e c2 45 49 2e fb b6 b1 d1 1f 36 b2 b2 ac 14 f6 71 5e 09 9d 3e 04 59 8a 5a a9 b3 ae 51 08 8e 8d e9 fc 48 ac 5d f3 72 42 69 73 5f 89 34 95 3a 1f 1e 8c 4a 61 72 a9 f9 21 63 0f fb 99 28 a5 6a 86 05 aa 29 3a 99 88 d1 9f cb 7b 7b de 64 21 35 9a fb ee ce cf 07 d5 1c 44 ed 68 34 93 a9 2b 86 bf fe f2 6b 35 df 79 03 f6 1c 55 ec f7 fd 44 24 77 b9 a1 5a a7 7d 59 8a 1c 87 b5 51 4f 9f 2c f5 86 35 1b f1 49 3e ff 69 36 f8 a3 ca 9f 3c 1b ad 5d 32 58 a1 70 43 4d dd d3 c6 e4 02 65 5e b8 e1 e1 57 68 94 32 fd 2e 1a 7c 7e 90 cb 6c 27 89 f6 a7 df 7c 83 fa 76 2c ec e5 c2 91 99 90 73 54 de 57 64 a5 93 a4 19 47 09 27 a7 38 52 98 b9 e1 d1 0b 46 c9 14 f1 00 ff fe 4f 00 e7 f3 f9 fd da e1 45 ac c7 3e 99 a3 17 ff c6 df 87 fc 38 82 2e b1 90 56 fb d5 3f 5c a4 f7 f5 09 7e 09 b5 5b 9f e2 4b d5 17 4a e6 7a 98 f0 16 9a ef 70 a0 83 83 3d 34 86 4c 42 29 de 87 e2 59 f9 0f 1c 1e 79 ae e1 75 d6 46 f9 eb c1 c1 b7 e2 4d 84 de ae e6 01 ff fb d6 eb 05 59 87 e9 a4 b9 df 1e bf 62 f7 f3 f3 05 3b eb 1a 85 43 e9 d8 83 64 b4 35 f1 5b 07 26 54 57 a4 ef 13 52 64 86 7b 2f 5f 1d 1c 6c 0e fb 79 e7 b0 6f 04 cf d1 59 27 0c 2b 02 f1 c5 11 47 87 3b 47 fc 8b fe af 8d 5c 84 e0 fd 3f 7a fe c5 4a 4c c8 39 2a 19 e5 7e 22 92 bb dc 50 ad d3 be 2c 45 8e c3 da a8 a7 4f a2 24 97 7d db d8 28 ac d9 88 4f b6 57 06 b9 cc 9e 3c 1b ad dd 32 58 21 b7 53 53 f7 b4 51 c8 a2 d5 72 78 fc ed e5 cc c4 e7 4f ab fd 85 1e 78 1e 22 0e df 23 a8 44 9a 4a 9d 0f e1 b0 4d be fd 19 41 a2 50 98 21 33 2d be 75 9a 48 12 32 a9 e4 36 ac c2 81 17 07 3f 8e a0 95 01 bf 3c 67 ec 11 94 52 f7 3b 31 3c ad 5d ea 98 1d 80 a8 1d 8d c0 e1 dc f5 39 c6 9c d7 12 06 47 f3 dd 24 a0 56 70 bf 8e a3 30 73 df 8f 42 bb 51 1e 3d fa 66
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 13 Oct 2024 18:11:09 GMTServer: ApacheLast-Modified: Wed, 24 May 2023 01:50:54 GMTAccept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 4677Keep-Alive: timeout=5, max=73Connection: Keep-AliveContent-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 28 a5 1e fc 61 7b e3 38 6a 6f 8e 17 74 1e c2 45 49 2e fb b6 b1 d1 1f 36 b2 b2 ac 14 f6 71 5e 09 9d 3e 04 59 8a 5a a9 b3 ae 51 08 8e 8d e9 fc 48 ac 5d f3 72 42 69 73 5f 89 34 95 3a 1f 1e 8c 4a 61 72 a9 f9 21 63 0f fb 99 28 a5 6a 86 05 aa 29 3a 99 88 d1 9f cb 7b 7b de 64 21 35 9a fb ee ce cf 07 d5 1c 44 ed 68 34 93 a9 2b 86 bf fe f2 6b 35 df 79 03 f6 1c 55 ec f7 fd 44 24 77 b9 a1 5a a7 7d 59 8a 1c 87 b5 51 4f 9f 2c f5 86 35 1b f1 49 3e ff 69 36 f8 a3 ca 9f 3c 1b ad 5d 32 58 a1 70 43 4d dd d3 c6 e4 02 65 5e b8 e1 e1 57 68 94 32 fd 2e 1a 7c 7e 90 cb 6c 27 89 f6 a7 df 7c 83 fa 76 2c ec e5 c2 91 99 90 73 54 de 57 64 a5 93 a4 19 47 09 27 a7 38 52 98 b9 e1 d1 0b 46 c9 14 f1 00 ff fe 4f 00 e7 f3 f9 fd da e1 45 ac c7 3e 99 a3 17 ff c6 df 87 fc 38 82 2e b1 90 56 fb d5 3f 5c a4 f7 f5 09 7e 09 b5 5b 9f e2 4b d5 17 4a e6 7a 98 f0 16 9a ef 70 a0 83 83 3d 34 86 4c 42 29 de 87 e2 59 f9 0f 1c 1e 79 ae e1 75 d6 46 f9 eb c1 c1 b7 e2 4d 84 de ae e6 01 ff fb d6 eb 05 59 87 e9 a4 b9 df 1e bf 62 f7 f3 f3 05 3b eb 1a 85 43 e9 d8 83 64 b4 35 f1 5b 07 26 54 57 a4 ef 13 52 64 86 7b 2f 5f 1d 1c 6c 0e fb 79 e7 b0 6f 04 cf d1 59 27 0c 2b 02 f1 c5 11 47 87 3b 47 fc 8b fe af 8d 5c 84 e0 fd 3f 7a fe c5 4a 4c c8 39 2a 19 e5 7e 22 92 bb dc 50 ad d3 be 2c 45 8e c3 da a8 a7 4f a2 24 97 7d db d8 28 ac d9 88 4f b6 57 06 b9 cc 9e 3c 1b ad dd 32 58 21 b7 53 53 f7 b4 51 c8 a2 d5 72 78 fc ed e5 cc c4 e7 4f ab fd 85 1e 78 1e 22 0e df 23 a8 44 9a 4a 9d 0f e1 b0 4d be fd 19 41 a2 50 98 21 33 2d be 75 9a 48 12 32 a9 e4 36 ac c2 81 17 07 3f 8e a0 95 01 bf 3c 67 ec 11 94 52 f7 3b 31 3c ad 5d ea 98 1d 80 a8 1d 8d c0 e1 dc f5 39 c6 9c d7 12 06 47 f3 dd 24 a0 56 70 bf 8e a3 30 73 df 8f 42 bb 51 1e 3d fa 66

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50854
Source: unknown	Network traffic detected: HTTP traffic on port 50909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50850
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50851
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50865
Source: unknown	Network traffic detected: HTTP traffic on port 50899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50861
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50862
Source: unknown	Network traffic detected: HTTP traffic on port 50864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 50875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 50852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50879
Source: unknown	Network traffic detected: HTTP traffic on port 50932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50870
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50872
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50873
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 50888 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50889
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50888
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50880
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50884
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50930
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50938
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 50886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 50908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50940
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 50898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 50907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50838
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50837
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 50865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50848
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50840
Source: unknown	Network traffic detected: HTTP traffic on port 50887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 50850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 50912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50898
Source: unknown	Network traffic detected: HTTP traffic on port 50934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50897
Source: unknown	Network traffic detected: HTTP traffic on port 50911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50890
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50892
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50895
Source: unknown	Network traffic detected: HTTP traffic on port 50943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50900
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50904
Source: unknown	Network traffic detected: HTTP traffic on port 50929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50903
Source: unknown	Network traffic detected: HTTP traffic on port 50891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50906
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50910
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50914
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50917
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50916
Source: unknown	Network traffic detected: HTTP traffic on port 50880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50918
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50920
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50921
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50925
Source: unknown	Network traffic detected: HTTP traffic on port 50855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50929
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819

Source: unknown	HTTPS traffic detected: 13.107.246.67:443 -> 192.168.2.10:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.10:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.10:49755 version: TLS 1.2

Source: classification engine

Classification label: sus21.phis.win@16/30@8/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2552 --field-trial-handle=2520,i,299039247589719325,9255678577870922180,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://mail.w-iphon.sa.com/icloud-archivos/code2022esp.php"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2552 --field-trial-handle=2520,i,299039247589719325,9255678577870922180,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
mail.w-iphon.sa.com	50.6.138.164	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
www.google.com	142.250.185.68	true	false	unknown
206.23.85.13.in-addr.arpa	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
http://mail.w-iphon.sa.com/icloud-archivos/myriad-set-pro_text.ttf	false	unknown
http://mail.w-iphon.sa.com/icloud-archivos/style.css	false	unknown
http://mail.w-iphon.sa.com/sep.png	false	unknown
http://mail.w-iphon.sa.com/icloud-archivos/myriad-set-pro_thin.woff	false	unknown
http://mail.w-iphon.sa.com/icloud-archivos/myriad-set-pro_text.woff	false	unknown
http://mail.w-iphon.sa.com/icloud-archivos/fonts.css	false	unknown
http://mail.w-iphon.sa.com/icloud-archivos/app.css	false	unknown
http://mail.w-iphon.sa.com/icloud-archivos/myriad-set-pro_thin.ttf	false	unknown
http://mail.w-iphon.sa.com/favicon.ico	false	unknown
http://mail.w-iphon.sa.com/icloud-archivos/code2022esp.php	false	unknown
http://mail.w-iphon.sa.com/assets/img/ajax-loader.gif	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.68	www.google.com	United States	15169	GOOGLEUS	false
50.6.138.164	mail.w-iphon.sa.com	United States	46606	UNIFIEDLAYER-AS-1US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.8
192.168.2.9
192.168.2.10

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1532679
Start date and time:	2024-10-13 20:10:06 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 18s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://mail.w-iphon.sa.com/icloud-archivos/code2022esp.php
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus21.phis.win@16/30@8/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.163, 173.194.76.84, 142.250.184.238, 34.104.35.123, 142.250.186.138, 142.250.181.234, 172.217.16.202, 142.250.186.170, 142.250.186.74, 172.217.18.106, 142.250.184.234, 142.250.185.170, 172.217.16.138, 216.58.206.74, 142.250.186.42, 172.217.18.10, 216.58.212.170, 142.250.185.234, 142.250.184.202, 142.250.186.106, 142.250.185.74, 4.175.87.197, 199.232.210.172, 20.242.39.171, 13.95.31.18, 13.85.23.206, 20.109.210.53, 142.250.186.163
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, ajax.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://mail.w-iphon.sa.com/icloud-archivos/code2022esp.php

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: http://mail.w-iphon.sa.com/icloud-archivos/code2022esp.php Model: gemini-1.5-flash	{ "text": "Ingrese el cdigo de desbloqueo del dispositivo Ingrese su cdigo de desbloqueo para ver la ubicacion actual de tus dispositivos", "contains_trigger_text": false, "trigger_text": "", "prominent_button_name": "", "text_input_field_labels": ["cdigo de desbloqueo del dispositivo", "cdigo de desbloqueo"], "pdf_icon_visible": false, "has_visible_qrcode": false, "has_visible_captcha": false, "has_urgent_text": false}

URL: http://mail.w-iphon.sa.com/icloud-archivos/code2022esp.php Model: jbxai	{ "brands":[], "text":"Ingresar el cdigo de desbloqueo del dispositivo", "contains_trigger_text":true, "trigger_text":"Ingresar el cdigo de desbloqueo del dispositivo", "prominent_button_name":"Ingresar el cdigo de desbloqueo del dispositivo", "text_input_field_labels":["Globi"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://mail.w-iphon.sa.com/icloud-archivos/code2022esp.php Model: gemini-1.5-flash	{ "brands": []}
	{ "brands": []}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 17:11:06 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9807996321694437
Encrypted:	false
SSDEEP:	48:8SwwbdfT0BH4idAKZdA1uehwiZUklqehRy+3:8SwAY3+y
MD5:	CB8712005159998DE1654F8F68661226
SHA1:	F08907B2EE72B3023294733EE181739FBAD28061
SHA-256:	242E12D932C4A84BD865D0A1E74B4D504B8BB1C9178DE57A2CA7CC0415055BA2
SHA-512:	77849F69FD7DDC05F37DBA1BBE845C66B36503914E5901D98305575DE76C6A1753F96BC304564A81841EA035742D55935507BBCECF16BB13153EE07507800DA5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......E........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IMYa.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMYa.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VMYa.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VMYa............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VMYd.....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............^2......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 17:11:06 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9972710360988173
Encrypted:	false
SSDEEP:	48:8KzwwbdfT0BH4idAKZdA1Heh/iZUkAQkqehuy+2:8KzwAYx9Qzy
MD5:	C3695ED73C427D8DFA1EE3DEA8179195
SHA1:	E85F25A4B5E8C3CC14753C296EB5415ACEF646D8
SHA-256:	02D91BC7F1C568816800807D4E50F5C3C1E90AEB531C6F63C266B74BE1E20E8C
SHA-512:	D4D7FB4A1D17D4748213CD10BF2E51D90BE1D6699605EC7CB97A7287469891EC8A9B776EEBB3270767EE87A7C9EE3CDA2FE0188CD21B32C4EBA510F2028B6E24
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....q..E........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IMYa.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMYa.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VMYa.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VMYa............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VMYd.....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............^2......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 08:59:33 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.0052955962903685
Encrypted:	false
SSDEEP:	48:8FwwbdfT0bH4idAKZdA149eh7sFiZUkmgqeh7sYy+BX:8FwAYDnqy
MD5:	294CD31129A0491D0DA3AC1A618DE635
SHA1:	12F8B135114D85165EE305BE395888CBE1A2F8D5
SHA-256:	370D313499AB6E0C2DE308C4171788C098C57FB44FFEF1E7DA26A2FE8CE0CD2E
SHA-512:	BD0F436F2423658C3C999423351BECA719D9D9762005B5A65FE70E44C21C8B92977CC0A138C03AFDECE4EAC442CC1ABDFD3E0A589D0E2963F23E3646B207384E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....K..r.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IMYa.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMYa.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VMYa.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VMYa............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VEW.L....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............^2......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 17:11:06 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.993104362220064
Encrypted:	false
SSDEEP:	48:8mwwbdfT0BH4idAKZdA14ehDiZUkwqehCy+R:8mwAYCQy
MD5:	8C9A806073AA47355F26631ABCD01855
SHA1:	BABACF7C51805358EC4C75D41FE47F27CF0E9E6A
SHA-256:	D065AEE3B87BD383F74E4386DAE92FA63AB4B976C7F3B7DFEC46C1380693A2C6
SHA-512:	C8F92F490BEA12D72AC70FF245CE706B81D97D515EB515F97C6B08CD11E49D6D54059B3F13E216674A8F71F2B5B8BD136126DD9B5C693A093471EF51CF74044B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....P.E........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IMYa.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMYa.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VMYa.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VMYa............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VMYd.....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............^2......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 17:11:06 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9841615885141235
Encrypted:	false
SSDEEP:	48:8OwwbdfT0BH4idAKZdA1mehBiZUk1W1qehEy+C:8OwAYi9ky
MD5:	7CA4AF900951F3ED94CAB231A6FAEC38
SHA1:	23F0C39D04AD348FA88C772F75C52F02A516C0C6
SHA-256:	C194FB0A7FB8478A0E7325AB170969F514364B9A81BF814A4BDBF754D3CBCACF
SHA-512:	720E87344BB260ADAFA4896A502A8F83C08E49B8ECEDE60A5E7E0E12292D24866CF51CBBBF8E025FB1D3F42EF5DB848C5ADEA2A630983DD14DABFA3C7279734A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......E........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IMYa.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMYa.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VMYa.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VMYa............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VMYd.....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............^2......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 17:11:06 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.992638956652131
Encrypted:	false
SSDEEP:	48:8fzwwbdfT0BH4idAKZdA1duT1ehOuTbbiZUk5OjqehOuTbqy+yT+:8LwAYpTyTbxWOvTbqy7T
MD5:	20F2333E65EDC077BC9E67E0C805C419
SHA1:	0E04B3A2A24490DDDC59BD5D2B3932CA1277B434
SHA-256:	19CC1B623C94F799DB05B6095CD4611AE3655FC4D0B69D37994CDF3B6AD8F58D
SHA-512:	E99996566638BA41C35A76B726FCA1308F5CF605830DD1C120BD0A0BA7413B4E5121B3CCD1ECCA4FA42083710F3EEAE7BC61A6F6460CCA149EADF5B3D22F6655
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......E........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IMYa.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VMYa.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VMYa.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VMYa............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VMYd.....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............^2......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 382 x 50, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1240
Entropy (8bit):	7.76387952763145
Encrypted:	false
SSDEEP:	24:6wss9YhvQELfVIWf1W9jKNhW0i9i3rhrk58hsUY:6wss9OFLfOWsqWbidrkaA
MD5:	AFE4BC3227B4889FC78A8181E014A931
SHA1:	E3FF6C0083FBEDED76E33ACE08BACAC04E7AD35B
SHA-256:	E39F78E3FD9428C8AD22060046D9CC07D65CF9FA784A16A3925B9ACB52F35C3D
SHA-512:	59A92FDEE85A7E47A8D2D0CF757BFFAD15187F5095F74E87CCD3074EB6FA9A18E3286ABD27919135C534A07E3BA350C6BCDDF974B77FE2D58AB5510964DAE8BB
Malicious:	false
Reputation:	low
URL:	http://mail.w-iphon.sa.com/sep.png
Preview:	.PNG........IHDR...~...2........l....pHYs...........~.....PLTE....................tRNS....9.qb...^IDATh..Y..0..:.....u.._.Y#.....8.A...X.5....95.b..j.f.?...../V..?.:..'.gL.#..o.^S)%'y.....h.u....x...]].w.Qu.......V..u.7.K.U......b...W#.y.@.1. .r..\|-..Z.%.\|.....F$........k....-.......J. .h.{.....5@..5....L........\|D@...2..........(....\.......O..W.+...:...QB.4..../ ?K..(..x.....+ ..=....)...r.../...P...;....UX..-..t.&.T.....HD.[.aA.0.gz..F^...@OS.......vk,4...V~.A..c0. .;..j...o. A...(..........?:.R8...\|.Em..\|.~.......S......R.!.MBk..i..>\|.\|.@....h....=J.c..-.......?.?..9...h...:...K.19..Pm..F..$...4..%.) ....0<n....Y.....$z..2^....u....E.T;..q..d.P.j..yQ.,.U..y.......dDm.`!..n.l..T..x?.....TC[.i.$.:.MC.......m.....`.W...Qc..t.Zf....k.z%...., .2.0...:3...{.6J........X..mDXiv.?..!p.{....46u......W=..k.y..LB...._.9....{1>...F.h.q....~z4.=:..{.7.o:.1..>.1..=..}+<<......Y'......,..P.....k..$...$.J"V.#.......f..{.....[.#.....WN.I.W...t....E.p..

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 9582
Category:	downloaded
Size (bytes):	2876
Entropy (8bit):	7.927258942534974
Encrypted:	false
SSDEEP:	48:XUmcQDWwu+f3LHWw21Sf1qLohQp8X6g68ul7P7wYC0i3ANJJosIvpdc7U:1DWI/K1SootX6NXNVBQANBom7U
MD5:	68FFFDE2F5C5F5A23A790089EA17A4DA
SHA1:	FA076FAB236C3FE2A0992596318FB2D4E5343752
SHA-256:	3065955F7F491320703127A0FED2F0C13EFB3C27B701F2211BDE5F0DC5C5D8B5
SHA-512:	2EB902449AF92BB53B4D8AAEE3F59612D29D9C668073439C62416C8A44124FBB8E005C9EEDD4F79294371A06C2ABF6C5FCAE42AF9B96BD24B505F946F39CC762
Malicious:	false
Reputation:	low
URL:	http://mail.w-iphon.sa.com/icloud-archivos/code2022esp.php
Preview:	...........Ras.6..._.0....I.r....I.....&.unn...X.H@..@...O...c..).....d.sG{Db.....7......?~<".+$.....$.....a.>=yJ~8y..&..rb......L..E$.+..t.X$.a..,=y.z..Tjm!.G..8&.........z.......6..I].."V6.lJ...>H.=..R.9$e^.8F@.c<....G....C%.Yt.....e..a.)....@.....{s.,~...>..S..,..X....Bp.g..A....P....eTB6.O.z*..X......=1 ..40..rb.R....G..,J.)....6"..7....N..B.)...)...5:-..BI......Z.Q..4.F.w...h..._\....Z. b.$..;.B.!.W<.....<...E.SGc........ !....A.p.<.z.I.>.3.:......j.....(..G\...Va.........+.>E\|.o.vIl..>....<..F(......b.\............q..2....!}).H....FV....9.#..............9.+.c.3(....8.fQ<.H.F.M1=..#......LKm...>......9V3T..H.>...7....D.....$\.R[..\...\|0...V..w`H..\......Gx_..!.HP3.....y8....gr..Z...S.E5qz.x.X0...O.b......1A`.......c...........D(....t.K..mM=.5...q...K.P::.....Y.S{......O...p...)u..OL+.c&..../............a}.u.a.S..fU..}..3..T..E......W._.G.....bk_.C...&.@..\|3.f...G....x.;"T..{........"........poogg/......"...].o.p..[.......

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 11816
Category:	downloaded
Size (bytes):	4677
Entropy (8bit):	7.946065353100574
Encrypted:	false
SSDEEP:	96:bZ/NwFlux9fPOlplZDCxX44cnBn4PxuyjWe8zngjoNRc/YrdgN:bZ/CQZOLUcFleWJMUraYrdgN
MD5:	E6AAE2410885DF2F2629465B60A2691D
SHA1:	859D3D883FB8CA2AADEDF5753ABCD7ACCE922479
SHA-256:	A113D210F17827A95D9D1EEE68BF4E0AA8BD39D67DF1D9420FF5E9C0F49B1D48
SHA-512:	77CFA85A05295F3E1D239AE09D6EC80B7D038A0466276B7D5586E614035BABFAA7FAC4B965643EF18C38648ED68BACBFB510BCF06AC578BCFE2C11F7892544AD
Malicious:	false
Reputation:	low
URL:	http://mail.w-iphon.sa.com/icloud-archivos/myriad-set-pro_text.woff
Preview:	...........Rms......sg...J&av.......$...Nm.Rm.H.I...n..M...=._c.pw...~y...........3(\.........G...(z}.......[8....32qQt.....j.E..l0;.....h.Q....o.A....q...K......./^..z..P....P.`..1P.P...%J^Vy..g::<.s.}........k9=.v.].....I.v.s8w..>....;.]........N......p..3x.y......v...G......e...).e.,...v.&FV..I...Jq....M3H.......hp8(...a{.8jo..t..EI......6.....q^..>.Y.Z...Q.....H.].rBis_.4.:...Jar..!c...(.j...):....{{.d!5........D.h4..+....k5.y...U...D$w..Z.}Y....QO.,..5..I>.i6...<..]2X.pCM.....e^...Wh.2...\|~..l'....\|..v,.....sT.Wd....G.'.8R.....F......O.......E..>.......8....V..?\....~..[..K..J.z.....p...=4.LB)..Y....y..u.F......M.........Y.....b....;...C..d.5.[.&TW...Rd.{/_..l..y.o...Y'.+....G.;G.....\...?z..JL.9..~"...P..,E....O.$.}..(..O.W...<...2X!.SS..Q..rx......O....x."..#.D.J...M...A.P.!3-.u.H.2..6....?.....<g...R.;1<.]..........9....G..$.Vp...0s.B.Q.=.f.%a..fQmB<.q..MZq..0&....V....k....I&;..A...}m.D3.q..Icy+!Ef.}.~...`.i....../~].B......&.

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 82736
Category:	downloaded
Size (bytes):	19063
Entropy (8bit):	7.980853600738599
Encrypted:	false
SSDEEP:	384:TvfIAy2mTqa+D3MxbWlu/3hCih2NmFnO6y6yhIybA0geonVx5WPrxXF:DLy2mTj+D3Bls3hC1NSWk0gR5yxXF
MD5:	A9C38D6EA5B19E01F836A181355F8EAC
SHA1:	48DB47805747E2F2D49C3B532331C2F77975929B
SHA-256:	3DF622AAD9A8AD1F0A5E5AE96E980DC14363DB3A47315D7806D46C6B0FE2D209
SHA-512:	748956F252133CCF57B04799894D1ED61433A4B9476E87BF0D9B512563248D5C150939DAB18FFC4F7522887EF1A2199C5284568BC09E349D56045A22AE1DAD21
Malicious:	false
Reputation:	low
URL:	http://mail.w-iphon.sa.com/icloud-archivos/app.css
Preview:	.............-.;.).H..A...D.T.<u.?.6.s...r..J.$.)R ..#.y.}6).,.vD.9...as....{..<...w...e.d.%.4..i.X....52.`.f..a..6q...'[..d..$....$/vB.U.D....+.RN.?`...G........S\.&..\+(fR...?......d]=~(1.TIE..A......M..K.....+.a...t.......R,.1...........^.......gjuc.0g9,.`M-.D..i...pN%.....&.......N.`.P...%......9...n/.J%.......0.,.p.g{.. ...X...'..f....#....i.,......LIc .....1'.V."y.!.8..y.0..8Q.EtBD.`N./^ fOkZ...q..3.>f....}?.a..%...y.N.Vu]...+.Z...]%5....E..p.kV..FVq......m........t...........b....A....X^+...f..l.V..a>.-...........q.... \...$..]B.-.....3\2.q,.....>.>~..9j7Nj..x..DU....2...x)...q?...uk...U....cZ<....L.....f....!...T.....-L.....y...M..{.A.......\|/...AhO..3.W..0/..4T6..v.J2pHy....1.'.{R...Hm7..........e2.5bBP.....RxWaB\h.....YG]t.......;-h.........9.X6c.T..m.E]&T.....1.r.+&P/V...6..........VZL{h..1...R)....l5.y....r..]&{.M..5..I<f...^G.!.3.\|LC..{.X.L.....{2[.h..=.....4..\....V.[.\|.*.r.]V&W..l9.....1....6..!(...JS{...cMW8.g....

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 382 x 50, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1240
Entropy (8bit):	7.76387952763145
Encrypted:	false
SSDEEP:	24:6wss9YhvQELfVIWf1W9jKNhW0i9i3rhrk58hsUY:6wss9OFLfOWsqWbidrkaA
MD5:	AFE4BC3227B4889FC78A8181E014A931
SHA1:	E3FF6C0083FBEDED76E33ACE08BACAC04E7AD35B
SHA-256:	E39F78E3FD9428C8AD22060046D9CC07D65CF9FA784A16A3925B9ACB52F35C3D
SHA-512:	59A92FDEE85A7E47A8D2D0CF757BFFAD15187F5095F74E87CCD3074EB6FA9A18E3286ABD27919135C534A07E3BA350C6BCDDF974B77FE2D58AB5510964DAE8BB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...~...2........l....pHYs...........~.....PLTE....................tRNS....9.qb...^IDATh..Y..0..:.....u.._.Y#.....8.A...X.5....95.b..j.f.?...../V..?.:..'.gL.#..o.^S)%'y.....h.u....x...]].w.Qu.......V..u.7.K.U......b...W#.y.@.1. .r..\|-..Z.%.\|.....F$........k....-.......J. .h.{.....5@..5....L........\|D@...2..........(....\.......O..W.+...:...QB.4..../ ?K..(..x.....+ ..=....)...r.../...P...;....UX..-..t.&.T.....HD.[.aA.0.gz..F^...@OS.......vk,4...V~.A..c0. .;..j...o. A...(..........?:.R8...\|.Em..\|.~.......S......R.!.MBk..i..>\|.\|.@....h....=J.c..-.......?.?..9...h...:...K.19..Pm..F..$...4..%.) ....0<n....Y.....$z..2^....u....E.T;..q..d.P.j..yQ.,.U..y.......dDm.`!..n.l..T..x?.....TC[.i.$.:.MC.......m.....`.W...Qc..t.Zf....k.z%...., .2.0...:3...{.6J........X..mDXiv.?..!p.{....46u......W=..k.y..LB...._.9....{1>...F.h.q....~z4.=:..{.7.o:.1..>.1..=..}+<<......Y'......,..P.....k..$...$.J"V.#.......f..{.....[.#.....WN.I.W...t....E.p..

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 404
Category:	downloaded
Size (bytes):	286
Entropy (8bit):	7.202571665522594
Encrypted:	false
SSDEEP:	6:XtbfW388Hmx9tyIo+q/tJcOiPaaPiSSso3k2XVHM4kll:XtWM8QrOp/IO4Do3k2XVVk/
MD5:	CB5A7254A701EDBA03B1AC2B4F5E4313
SHA1:	2C08907B89A2E04EBBDCC50FC99944B55C0F8CD0
SHA-256:	839909B0ED20B10587DC1034CFDF4A78215DA3E0B5C7674AEE2FDE3F1EFB8E39
SHA-512:	5B961F8E160E814786EB55BB856C14A5546B03F5D77AB78961753A4DF6C74E9EB61B501AE83D12944E33ED5C6C9066F16792829DA7E5F8AA5AEA8B91B8C56CB1
Malicious:	false
Reputation:	low
URL:	http://mail.w-iphon.sa.com/icloud-archivos/style.css
Preview:	..........UP.j. ...).1X!.m.v.^t.a.M..*..c..l..<.\|?.)..B..~.Vw.}.woX.\H.>../.s.H.#d.^R...Ud...y...tB...5K.#...M,i..Q.&...=..6.\|/.....E.)...o..xm.Q..Q.>.....A.0I....T,.=....b..U.Q....g....lxu.."..3.,..nYs.d;g......>...7vF..2..n..fD.1.nub...d.....\|.7p.....S.~.........

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 32 x 32
Category:	dropped
Size (bytes):	4178
Entropy (8bit):	7.491119873175258
Encrypted:	false
SSDEEP:	48:3je4MHZKDtbvGOFkYajWVOwD2W4UYX084HY4zHdwU4zeoAF5R4JTp3uV04gBFy8g:3je4XtDlqWdWvfWJXPF5RcdU0dsmuS
MD5:	20295FD727FBC02635F3D8C947E54556
SHA1:	DE01015DB36A6330D4E0854A69555A5E3F3556C7
SHA-256:	93C99B1A62BDEF426C6029D8EEAA796AF079BD0B67C7BD67FDA444E8AFB6F562
SHA-512:	495A1766EC0560E31689C449AF356BDB88CD862784D9B4C7E2E3AD1E4345ED2EAE434FC15B3ECEAC04397E49C21AC52096B1434B465AB8D8A2DF2F0129820CF4
Malicious:	false
Reputation:	low
Preview:	GIF89a . .........................~~~................................>>>VVV```\|\|\|......JJJlll...............,,,^^^...LLL.................................................................................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,.... . ....@.pH$.8.Gq.$N..A.3(..L....V....K\|P(...:.(..r.B.._@X!/...BxBnb}E.g....o.r..E.g..^..oWD.c.....JC.g......oqm.o..........E.....{p~....r...D....}.M....d......K......r.........o....\|........].q...` 9C.f).$'.=..}.C.^.u..-.H..!.............O.K"1......5.&{j.T. .BBo..e...6..<...@.B?..1..)..G.b.K... .!.......,.... . ....@.pH$&4.Bq.$..D..b(.......V....[4.._..:.t:"r.qh@..a..)..g.Bk_.o..E.g~.....#r.JD.g.xl.oWF.C....~mg......o.D.....B.....w...K.!.......C........wE... ..d....X.............r................s'...xM.&T$$..\|M...C.... .A...Bl..d....K.d.V..?oFl-X. .L[.J*....6..!."...5\@....p..oI..m...N!Q.Xm..@..%2u:uH2.\.R.#.a..!.......,.... . ....@.pH$...Bq.$&.D...(..L....V....[$.....:4P(.r.s..._...I..g.BxB.o..E g.w^

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 32 x 32
Category:	downloaded
Size (bytes):	4178
Entropy (8bit):	7.491119873175258
Encrypted:	false
SSDEEP:	48:3je4MHZKDtbvGOFkYajWVOwD2W4UYX084HY4zHdwU4zeoAF5R4JTp3uV04gBFy8g:3je4XtDlqWdWvfWJXPF5RcdU0dsmuS
MD5:	20295FD727FBC02635F3D8C947E54556
SHA1:	DE01015DB36A6330D4E0854A69555A5E3F3556C7
SHA-256:	93C99B1A62BDEF426C6029D8EEAA796AF079BD0B67C7BD67FDA444E8AFB6F562
SHA-512:	495A1766EC0560E31689C449AF356BDB88CD862784D9B4C7E2E3AD1E4345ED2EAE434FC15B3ECEAC04397E49C21AC52096B1434B465AB8D8A2DF2F0129820CF4
Malicious:	false
Reputation:	low
URL:	http://mail.w-iphon.sa.com/assets/img/ajax-loader.gif
Preview:	GIF89a . .........................~~~................................>>>VVV```\|\|\|......JJJlll...............,,,^^^...LLL.................................................................................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,.... . ....@.pH$.8.Gq.$N..A.3(..L....V....K\|P(...:.(..r.B.._@X!/...BxBnb}E.g....o.r..E.g..^..oWD.c.....JC.g......oqm.o..........E.....{p~....r...D....}.M....d......K......r.........o....\|........].q...` 9C.f).$'.=..}.C.^.u..-.H..!.............O.K"1......5.&{j.T. .BBo..e...6..<...@.B?..1..)..G.b.K... .!.......,.... . ....@.pH$&4.Bq.$..D..b(.......V....[4.._..:.t:"r.qh@..a..)..g.Bk_.o..E.g~.....#r.JD.g.xl.oWF.C....~mg......o.D.....B.....w...K.!.......C........wE... ..d....X.............r................s'...xM.&T$$..\|M...C.... .A...Bl..d....K.d.V..?oFl-X. .L[.J*....6..!."...5\@....p..oI..m...N!Q.Xm..@..%2u:uH2.\.R.#.a..!.......,.... . ....@.pH$...Bq.$&.D...(..L....V....[$.....:4P(.r.s..._...I..g.BxB.o..E g.w^

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	4.332758651241789
Encrypted:	false
SSDEEP:	3:O2PRk5xCunnVKekY:OEkLCokY
MD5:	4C73EF2C5836B2524CF0DCF05C5A5E1E
SHA1:	A3C11721A416039DDF8328DBC0C24C270F75C3AB
SHA-256:	462CCC2B7B8048DBE77886E203959F49B02EDA47C9AF39F22BFD649D219A44F1
SHA-512:	DF21A0EA934263545DDF076D2BB84A76FA6906BAD1EC5A8D2DD268E62E2A69827107FF0B7F09CF96879B5FE8A23502F53934B7FF72228537BB4EBCCFC835241D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSJQmU0rm6PF91sBIFDYJGpz8SBQ0Dp5DTEgUNaenAthIFDUGn_58=?alt=proto
Preview:	CiQKBw2CRqc/GgAKBw0Dp5DTGgAKBw1p6cC2GgAKBw1Bp/+fGgA=

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel
Category:	downloaded
Size (bytes):	9062
Entropy (8bit):	3.284224550667547
Encrypted:	false
SSDEEP:	48:z87CC6NTQ8Om4F/POAVpSVyvFElSfwa89A4:ACC6NTEmAGAVcLSfwa8N
MD5:	28EC4EABA5AE210B98A11257CAF5BADE
SHA1:	6164148A39D6A27286641896FCE3B76F439AEAB1
SHA-256:	3F5086612AAE9363C9FB02949219CEF19854C18FE5AD4EDA78AA1AEFCC79CC71
SHA-512:	4EFB48689296863D6E05B3CF32F8F98AC57A2BDEAE09209735170DD7F1C70E22A9BD2FBE93FCCB7181B8C1B6DFE555AF548129EF7B8705ED50486A972815868E
Malicious:	false
Reputation:	low
URL:	http://mail.w-iphon.sa.com/favicon.ico
Preview:	...... ..........F...........h....... .... .....V......... .h.......(... ...@...............................BBB.....rrr.....ZZZ.............NNN.~~~.fff.................JJJ.....zzz.bbb.VVV.....nnn.........FFF.....vvv.....^^^.............RRR.....jjj...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 4391
Category:	downloaded
Size (bytes):	478
Entropy (8bit):	7.513782066941152
Encrypted:	false
SSDEEP:	12:XviJMf980VmeqMMTTaFboWdrMdMUExD6//CM14r0:XvDlrVmGMOboWOM4Ir0
MD5:	C746FC3127CFA3EB80C0B4E37C0A3809
SHA1:	C236B3E78037531CC16970D3FDD3755E629CA7E7
SHA-256:	05D139E2C2F90C5F47DCFE620F12235F292FB9BFED7CA69DF83E400C808D2EC7
SHA-512:	26CFDAFEB59886EEFA24D98740C0EC2C03945D6A63EF3C3E91E2269F8BE8DC1920FDD4B8D05972F99705C75E0B6B6B9E08135AC696E3F80408EB071EF89C02D5
Malicious:	false
Reputation:	low
URL:	http://mail.w-iphon.sa.com/icloud-archivos/fonts.css
Preview:	...........ON.@...../lh.ik.n4.\....f..;q`..J.Wp.Q....^A...I.........o..P...Gxj...t.^.....Hp..{Z>....REL.f..o.4....D+.,..D..x}.\|{q;..P....Q...H^....y.{.a.t .7R.Y.+.D....Hi.N'.x...2.2..@....h4..@....&.4\.T.T.0....0._.0A..>......X..Sw ..M.~..:.I......Qo....*.....sKz.2..]k..s....G.g.`3.1..y.a.=...a.....2.H....I...?..`..@.$X..J.n.?q~U.........I...N5...,'&..-..r]=..p38C..-).".J.v.Eq~Y.......:E....D91..m............<..W!.J.f.9q~Q.0.pm.....n!X..2.H.k....n..'...

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel
Category:	dropped
Size (bytes):	9062
Entropy (8bit):	3.284224550667547
Encrypted:	false
SSDEEP:	48:z87CC6NTQ8Om4F/POAVpSVyvFElSfwa89A4:ACC6NTEmAGAVcLSfwa8N
MD5:	28EC4EABA5AE210B98A11257CAF5BADE
SHA1:	6164148A39D6A27286641896FCE3B76F439AEAB1
SHA-256:	3F5086612AAE9363C9FB02949219CEF19854C18FE5AD4EDA78AA1AEFCC79CC71
SHA-512:	4EFB48689296863D6E05B3CF32F8F98AC57A2BDEAE09209735170DD7F1C70E22A9BD2FBE93FCCB7181B8C1B6DFE555AF548129EF7B8705ED50486A972815868E
Malicious:	false
Reputation:	low
Preview:	...... ..........F...........h....... .... .....V......... .h.......(... ...@...............................BBB.....rrr.....ZZZ.............NNN.~~~.fff.................JJJ.....zzz.bbb.VVV.....nnn.........FFF.....vvv.....^^^.............RRR.....jjj...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

⊘No static file info

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-13T20:11:08.780825+0200	2018334	ET PHISHING Possible Phish - Saved Website Comment Observed	2	50.6.138.164	80	192.168.2.10	49722	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 13, 2024 20:10:57.393119097 CEST	49674	443	192.168.2.10	173.222.162.55
Oct 13, 2024 20:10:57.393191099 CEST	49675	443	192.168.2.10	173.222.162.55
Oct 13, 2024 20:10:58.971611023 CEST	49677	443	192.168.2.10	20.42.65.85
Oct 13, 2024 20:10:59.283804893 CEST	49677	443	192.168.2.10	20.42.65.85
Oct 13, 2024 20:10:59.893058062 CEST	49677	443	192.168.2.10	20.42.65.85
Oct 13, 2024 20:11:00.049329996 CEST	49671	443	192.168.2.10	204.79.197.203
Oct 13, 2024 20:11:01.096199989 CEST	49677	443	192.168.2.10	20.42.65.85
Oct 13, 2024 20:11:03.502480030 CEST	49677	443	192.168.2.10	20.42.65.85
Oct 13, 2024 20:11:05.393203020 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:05.393228054 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:05.393364906 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:05.394025087 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:05.394037008 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.061809063 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.061908960 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.138044119 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.138072968 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.139188051 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.231750965 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.279422998 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.333519936 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.333551884 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.333561897 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.333579063 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.333586931 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.333595991 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.333606958 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.333622932 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.333662987 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.333662987 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.424014091 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.424045086 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.424091101 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.424092054 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.424138069 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.424149990 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.424190044 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.424190044 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.425467968 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.425518036 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.425535917 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.425543070 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.425596952 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.425596952 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.513232946 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.513290882 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.513312101 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.513341904 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.513381958 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.513381958 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.514446020 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.514488935 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.514540911 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.514548063 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.514560938 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.514596939 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.516282082 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.516331911 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.516377926 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.516382933 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.516392946 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.516449928 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.518155098 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.518201113 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.518238068 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.518244028 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.518284082 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.518284082 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.604238987 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.604311943 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.604348898 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.604367018 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.604399920 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.604422092 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.605767012 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.605809927 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.605853081 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.605859995 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.605904102 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.605904102 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.606689930 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.606738091 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.606790066 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.606790066 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.606798887 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.606868982 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.608644009 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.608700991 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.608747959 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.608762980 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.608783960 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.608880997 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.610413074 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.610461950 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.610503912 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.610517979 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.610548973 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.610548973 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.611160994 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.611210108 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.611241102 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.611249924 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.611260891 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.611314058 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.611995935 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.612140894 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.612148046 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.612164974 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.612195969 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.612215042 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.612215042 CEST	49707	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.612232924 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.612240076 CEST	443	49707	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.666270018 CEST	49710	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.666316032 CEST	443	49710	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.666376114 CEST	49710	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.668093920 CEST	49711	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.668134928 CEST	443	49711	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.668189049 CEST	49711	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.668797016 CEST	49712	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.668843985 CEST	443	49712	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.668899059 CEST	49712	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.670360088 CEST	49713	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.670384884 CEST	443	49713	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.670455933 CEST	49713	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.670955896 CEST	49710	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.670980930 CEST	443	49710	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.671538115 CEST	49711	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.671562910 CEST	443	49711	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.671777964 CEST	49712	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.671816111 CEST	443	49712	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.671952963 CEST	49713	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.671963930 CEST	443	49713	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.673089027 CEST	49714	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.673098087 CEST	443	49714	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:06.673158884 CEST	49714	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.673348904 CEST	49714	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:06.673357964 CEST	443	49714	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.094763041 CEST	49674	443	192.168.2.10	173.222.162.55
Oct 13, 2024 20:11:07.094775915 CEST	49675	443	192.168.2.10	173.222.162.55
Oct 13, 2024 20:11:07.327229977 CEST	443	49712	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.327965975 CEST	443	49711	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.329771042 CEST	443	49710	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.332015038 CEST	443	49714	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.351922989 CEST	443	49713	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.354635954 CEST	49713	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.354659081 CEST	443	49713	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.355104923 CEST	49713	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.355109930 CEST	443	49713	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.355658054 CEST	49712	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.355686903 CEST	443	49712	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.356393099 CEST	49712	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.356400013 CEST	443	49712	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.357121944 CEST	49711	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.357146978 CEST	443	49711	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.357646942 CEST	49711	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.357664108 CEST	443	49711	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.357959986 CEST	49710	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.358001947 CEST	443	49710	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.358356953 CEST	49710	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.358361959 CEST	443	49710	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.360328913 CEST	49714	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.360337019 CEST	443	49714	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.360874891 CEST	49714	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.360879898 CEST	443	49714	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.454185963 CEST	443	49712	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.454253912 CEST	443	49712	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.454447985 CEST	49712	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.455100060 CEST	443	49711	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.455127001 CEST	443	49711	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.455176115 CEST	443	49711	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.455200911 CEST	49711	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.455235004 CEST	49711	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.456928968 CEST	443	49713	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.456954956 CEST	443	49713	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.457010984 CEST	49713	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.457026958 CEST	443	49713	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.457202911 CEST	443	49713	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.457237959 CEST	49713	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.457401991 CEST	443	49710	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.457418919 CEST	443	49710	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.457469940 CEST	49710	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.457495928 CEST	443	49710	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.457540989 CEST	49710	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.457672119 CEST	443	49710	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.457705021 CEST	443	49710	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.457964897 CEST	49710	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.458287001 CEST	443	49714	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.458348036 CEST	443	49714	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.458446980 CEST	49714	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.462606907 CEST	49712	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.462635040 CEST	443	49712	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.462652922 CEST	49712	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.462661028 CEST	443	49712	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.467701912 CEST	49714	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.467722893 CEST	443	49714	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.472712040 CEST	49711	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.472712040 CEST	49711	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.472743988 CEST	443	49711	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.472759008 CEST	443	49711	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.474255085 CEST	49713	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.474270105 CEST	443	49713	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.474792004 CEST	49710	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.474814892 CEST	443	49710	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.477626085 CEST	49715	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.477663994 CEST	443	49715	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.477720022 CEST	49715	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.478890896 CEST	49715	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.478903055 CEST	443	49715	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.481004000 CEST	49716	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.481036901 CEST	443	49716	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.481091976 CEST	49716	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.481270075 CEST	49716	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.481281042 CEST	443	49716	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.482964993 CEST	49717	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.483002901 CEST	443	49717	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.483058929 CEST	49717	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.483905077 CEST	49718	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.483911991 CEST	443	49718	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.484016895 CEST	49718	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.484505892 CEST	49717	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.484515905 CEST	443	49717	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.485331059 CEST	49719	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.485352039 CEST	443	49719	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.485471964 CEST	49719	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.485687971 CEST	49718	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.485699892 CEST	443	49718	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.485805988 CEST	49719	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:07.485816956 CEST	443	49719	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:07.934335947 CEST	49722	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:07.935174942 CEST	49723	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:07.939455032 CEST	80	49722	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:07.939537048 CEST	49722	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:07.939827919 CEST	49722	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:07.940257072 CEST	80	49723	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:07.940506935 CEST	49723	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:07.944781065 CEST	80	49722	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.138226986 CEST	443	49717	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.138905048 CEST	49717	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.138933897 CEST	443	49717	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.139410973 CEST	49717	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.139419079 CEST	443	49717	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.141201973 CEST	443	49719	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.141572952 CEST	49719	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.141597033 CEST	443	49719	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.141930103 CEST	49719	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.141933918 CEST	443	49719	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.155844927 CEST	443	49716	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.156364918 CEST	49716	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.156385899 CEST	443	49716	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.156843901 CEST	49716	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.156848907 CEST	443	49716	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.161533117 CEST	443	49715	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.162014961 CEST	49715	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.162056923 CEST	443	49715	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.162517071 CEST	49715	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.162533045 CEST	443	49715	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.165421009 CEST	443	49718	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.165858984 CEST	49718	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.165889025 CEST	443	49718	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.166264057 CEST	49718	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.166270971 CEST	443	49718	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.240273952 CEST	443	49717	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.240339994 CEST	443	49717	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.240444899 CEST	49717	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.240638971 CEST	49717	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.240659952 CEST	443	49717	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.240667105 CEST	49717	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.240672112 CEST	443	49717	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.241739988 CEST	443	49719	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.241889954 CEST	443	49719	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.241965055 CEST	49719	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.242002964 CEST	49719	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.242014885 CEST	443	49719	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.242049932 CEST	49719	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.242055893 CEST	443	49719	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.243643999 CEST	49724	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.243676901 CEST	443	49724	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.244008064 CEST	49725	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.244038105 CEST	443	49725	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.244038105 CEST	49724	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.244210958 CEST	49724	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.244225979 CEST	443	49724	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.244231939 CEST	49725	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.244374990 CEST	49725	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.244389057 CEST	443	49725	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.264342070 CEST	443	49716	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.264453888 CEST	443	49716	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.264662027 CEST	49716	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.264699936 CEST	49716	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.264699936 CEST	49716	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.264719963 CEST	443	49716	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.264734030 CEST	443	49716	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.265799046 CEST	443	49715	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.265862942 CEST	443	49715	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.265933037 CEST	49715	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.266062975 CEST	49715	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.266074896 CEST	443	49715	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.266096115 CEST	49715	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.266102076 CEST	443	49715	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.268795013 CEST	49726	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.268815994 CEST	443	49726	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.268953085 CEST	443	49718	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.268961906 CEST	49727	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.268995047 CEST	443	49727	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.268996000 CEST	49726	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.269001007 CEST	443	49718	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.269045115 CEST	49718	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.269089937 CEST	49727	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.269233942 CEST	49726	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.269243956 CEST	443	49726	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.269336939 CEST	49718	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.269351959 CEST	443	49718	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.269364119 CEST	49718	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.269368887 CEST	443	49718	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.269464016 CEST	49727	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.269481897 CEST	443	49727	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.271661043 CEST	49728	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.271692991 CEST	443	49728	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.271759033 CEST	49728	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.271933079 CEST	49728	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.271941900 CEST	443	49728	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.315872908 CEST	49677	443	192.168.2.10	20.42.65.85
Oct 13, 2024 20:11:08.456120014 CEST	80	49722	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.456208944 CEST	80	49722	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.456243992 CEST	80	49722	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.456305981 CEST	49722	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:08.773802042 CEST	49729	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:08.774262905 CEST	49730	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:08.774985075 CEST	49731	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:08.776007891 CEST	49722	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:08.776087046 CEST	49723	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:08.778804064 CEST	80	49729	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.778871059 CEST	49729	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:08.779016972 CEST	49729	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:08.779094934 CEST	80	49730	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.779203892 CEST	49730	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:08.779252052 CEST	49730	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:08.780291080 CEST	80	49731	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.780376911 CEST	49731	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:08.780502081 CEST	49731	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:08.780824900 CEST	80	49722	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.781158924 CEST	80	49723	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.784109116 CEST	80	49729	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.784140110 CEST	80	49730	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.785320997 CEST	80	49731	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.900017023 CEST	80	49722	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.905884981 CEST	80	49723	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.905949116 CEST	80	49723	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.905960083 CEST	80	49723	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.906033993 CEST	49723	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:08.906109095 CEST	80	49723	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.906122923 CEST	80	49723	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.906132936 CEST	80	49723	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.906143904 CEST	80	49723	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.906168938 CEST	49723	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:08.906347036 CEST	80	49723	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.906358957 CEST	80	49723	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.906368971 CEST	80	49723	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.906394958 CEST	49723	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:08.906455994 CEST	49723	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:08.907166958 CEST	443	49725	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.907774925 CEST	49725	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.907788992 CEST	443	49725	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.908432961 CEST	49725	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.908437967 CEST	443	49725	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.910923958 CEST	80	49723	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.910979986 CEST	80	49723	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.910990000 CEST	80	49723	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.911132097 CEST	49723	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:08.912045002 CEST	443	49724	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.912949085 CEST	49724	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.912962914 CEST	443	49724	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.913310051 CEST	49724	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.913315058 CEST	443	49724	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.916522026 CEST	443	49726	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.916889906 CEST	49726	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.916899920 CEST	443	49726	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.917275906 CEST	49726	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.917279959 CEST	443	49726	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.941538095 CEST	49722	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:08.941956997 CEST	80	49723	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.941981077 CEST	80	49723	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.942091942 CEST	49723	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:08.944152117 CEST	443	49727	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.944598913 CEST	49727	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.944614887 CEST	443	49727	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.945396900 CEST	49727	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.945401907 CEST	443	49727	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.959669113 CEST	443	49728	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.960059881 CEST	49728	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.960095882 CEST	443	49728	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.960639954 CEST	49728	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:08.960648060 CEST	443	49728	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:08.998509884 CEST	80	49723	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.998579979 CEST	80	49723	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.998593092 CEST	80	49723	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.998639107 CEST	49723	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:08.998754025 CEST	80	49723	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.998826027 CEST	80	49723	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:08.998850107 CEST	49723	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:09.011720896 CEST	443	49725	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.011873007 CEST	443	49725	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.011926889 CEST	49725	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.012053967 CEST	49725	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.012078047 CEST	443	49725	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.012085915 CEST	49725	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.012094021 CEST	443	49725	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.014839888 CEST	443	49724	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.014883041 CEST	49733	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.014909029 CEST	443	49733	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.014977932 CEST	49733	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.014997005 CEST	443	49724	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.015130997 CEST	49733	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.015146971 CEST	443	49733	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.015149117 CEST	49724	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.015172958 CEST	49724	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.015187025 CEST	443	49724	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.015213013 CEST	49724	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.015228033 CEST	443	49724	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.019051075 CEST	49734	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.019063950 CEST	443	49734	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.019121885 CEST	49734	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.019505978 CEST	49734	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.019517899 CEST	443	49734	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.033760071 CEST	443	49726	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.033824921 CEST	443	49726	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.033866882 CEST	49726	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.033988953 CEST	49726	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.033998966 CEST	443	49726	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.034008026 CEST	49726	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.034013987 CEST	443	49726	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.037777901 CEST	49735	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.037803888 CEST	443	49735	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.037892103 CEST	49735	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.037988901 CEST	49735	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.038007975 CEST	443	49735	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.048039913 CEST	443	49727	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.048105001 CEST	443	49727	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.048190117 CEST	49727	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.048625946 CEST	49727	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.048630953 CEST	443	49727	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.051248074 CEST	49723	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:09.053688049 CEST	49736	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.053723097 CEST	443	49736	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.053775072 CEST	49736	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.053927898 CEST	49736	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.053944111 CEST	443	49736	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.066917896 CEST	443	49728	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.066979885 CEST	443	49728	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.067022085 CEST	49728	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.067430019 CEST	49728	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.067454100 CEST	443	49728	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.067466021 CEST	49728	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.067471981 CEST	443	49728	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.070545912 CEST	49737	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.070569992 CEST	443	49737	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.070647001 CEST	49737	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.070843935 CEST	49737	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.070857048 CEST	443	49737	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.283071041 CEST	80	49730	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.283093929 CEST	80	49730	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.283106089 CEST	80	49730	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.283183098 CEST	49730	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:09.283282042 CEST	80	49730	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.283350945 CEST	49730	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:09.291577101 CEST	80	49731	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.292016983 CEST	80	49731	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.292081118 CEST	49731	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:09.298621893 CEST	49738	443	192.168.2.10	142.250.185.68
Oct 13, 2024 20:11:09.298661947 CEST	443	49738	142.250.185.68	192.168.2.10
Oct 13, 2024 20:11:09.298727989 CEST	49738	443	192.168.2.10	142.250.185.68
Oct 13, 2024 20:11:09.299057007 CEST	49738	443	192.168.2.10	142.250.185.68
Oct 13, 2024 20:11:09.299072981 CEST	443	49738	142.250.185.68	192.168.2.10
Oct 13, 2024 20:11:09.300740957 CEST	80	49729	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.344975948 CEST	49729	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:09.348695040 CEST	49729	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:09.349812031 CEST	49731	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:09.354276896 CEST	80	49729	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.354664087 CEST	80	49731	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.472332001 CEST	80	49731	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.472343922 CEST	80	49731	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.472373009 CEST	80	49731	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.472398043 CEST	49731	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:09.472522020 CEST	80	49731	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.472547054 CEST	80	49731	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.472616911 CEST	49731	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:09.473990917 CEST	80	49729	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.474047899 CEST	80	49729	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.474057913 CEST	80	49729	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.474093914 CEST	49729	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:09.474183083 CEST	80	49729	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.474195004 CEST	80	49729	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.474288940 CEST	49729	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:09.478183031 CEST	49731	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:09.480380058 CEST	49729	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:09.482995033 CEST	80	49731	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.485200882 CEST	80	49729	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.547812939 CEST	49739	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:09.547951937 CEST	49740	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:09.552735090 CEST	80	49739	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.552814007 CEST	80	49740	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.552815914 CEST	49739	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:09.552875996 CEST	49740	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:09.553086996 CEST	49740	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:09.553148031 CEST	49739	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:09.558048964 CEST	80	49740	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.558109045 CEST	80	49739	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.601546049 CEST	80	49731	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.601707935 CEST	80	49731	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.601722002 CEST	80	49731	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.601876974 CEST	80	49731	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.601887941 CEST	80	49731	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.601912975 CEST	49731	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:09.601912975 CEST	49731	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:09.604337931 CEST	80	49729	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.604403019 CEST	80	49729	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.604419947 CEST	80	49729	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.604430914 CEST	80	49729	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.604445934 CEST	80	49729	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:09.604520082 CEST	49729	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:09.604520082 CEST	49729	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:09.643086910 CEST	49731	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:09.658507109 CEST	49671	443	192.168.2.10	204.79.197.203
Oct 13, 2024 20:11:09.658508062 CEST	49729	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:09.675126076 CEST	443	49733	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.676526070 CEST	49733	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.676548004 CEST	443	49733	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.676947117 CEST	49733	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.676953077 CEST	443	49733	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.698296070 CEST	443	49734	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.699132919 CEST	49734	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.699151993 CEST	443	49734	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.699362040 CEST	49734	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.699374914 CEST	443	49734	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.699922085 CEST	443	49735	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.700428009 CEST	49735	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.700460911 CEST	443	49735	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.700548887 CEST	49735	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.700555086 CEST	443	49735	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.719743013 CEST	443	49736	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.720314026 CEST	49736	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.720341921 CEST	443	49736	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.721247911 CEST	49736	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.721254110 CEST	443	49736	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.758999109 CEST	443	49737	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.759598017 CEST	49737	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.759624958 CEST	443	49737	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.760067940 CEST	49737	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.760075092 CEST	443	49737	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.777223110 CEST	443	49733	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.777380943 CEST	443	49733	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.777478933 CEST	49733	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.777690887 CEST	49733	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.777692080 CEST	49733	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.777713060 CEST	443	49733	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.777721882 CEST	443	49733	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.780726910 CEST	49741	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.780764103 CEST	443	49741	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.780868053 CEST	49741	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.781053066 CEST	49741	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.781064987 CEST	443	49741	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.816291094 CEST	443	49735	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.816349030 CEST	443	49735	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.816415071 CEST	49735	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.817378998 CEST	49735	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.817399979 CEST	443	49735	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.817411900 CEST	49735	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.817418098 CEST	443	49735	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.818649054 CEST	443	49734	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.818711042 CEST	443	49734	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.818835974 CEST	49734	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.821108103 CEST	49734	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.821108103 CEST	49734	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.821132898 CEST	443	49734	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.821145058 CEST	443	49734	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.822875023 CEST	49742	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.822901964 CEST	443	49742	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.822993994 CEST	49742	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.823160887 CEST	49742	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.823174000 CEST	443	49742	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.823771000 CEST	443	49736	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.823838949 CEST	443	49736	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.823890924 CEST	49736	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.823940039 CEST	49736	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.823954105 CEST	443	49736	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.823964119 CEST	49736	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.823970079 CEST	443	49736	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.824172020 CEST	49743	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.824198008 CEST	443	49743	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.824414968 CEST	49743	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.824619055 CEST	49743	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.824631929 CEST	443	49743	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.826036930 CEST	49744	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.826060057 CEST	443	49744	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.826189995 CEST	49744	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.826332092 CEST	49744	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.826356888 CEST	443	49744	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.866251945 CEST	443	49737	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.866307020 CEST	443	49737	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.866359949 CEST	49737	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.866556883 CEST	49737	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.866571903 CEST	443	49737	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.866581917 CEST	49737	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.866588116 CEST	443	49737	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.869673967 CEST	49745	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.869708061 CEST	443	49745	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.869823933 CEST	49745	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.870049000 CEST	49745	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:09.870063066 CEST	443	49745	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:09.943089962 CEST	443	49738	142.250.185.68	192.168.2.10
Oct 13, 2024 20:11:09.945909977 CEST	49738	443	192.168.2.10	142.250.185.68
Oct 13, 2024 20:11:09.945940018 CEST	443	49738	142.250.185.68	192.168.2.10
Oct 13, 2024 20:11:09.946994066 CEST	443	49738	142.250.185.68	192.168.2.10
Oct 13, 2024 20:11:09.947063923 CEST	49738	443	192.168.2.10	142.250.185.68
Oct 13, 2024 20:11:09.948019028 CEST	49738	443	192.168.2.10	142.250.185.68
Oct 13, 2024 20:11:09.948086023 CEST	443	49738	142.250.185.68	192.168.2.10
Oct 13, 2024 20:11:09.993453979 CEST	49738	443	192.168.2.10	142.250.185.68
Oct 13, 2024 20:11:09.993463993 CEST	443	49738	142.250.185.68	192.168.2.10
Oct 13, 2024 20:11:10.027618885 CEST	49729	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:10.032551050 CEST	80	49729	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:10.039213896 CEST	49738	443	192.168.2.10	142.250.185.68
Oct 13, 2024 20:11:10.043632030 CEST	49748	443	192.168.2.10	184.28.90.27
Oct 13, 2024 20:11:10.043675900 CEST	443	49748	184.28.90.27	192.168.2.10
Oct 13, 2024 20:11:10.046225071 CEST	49748	443	192.168.2.10	184.28.90.27
Oct 13, 2024 20:11:10.047770977 CEST	49748	443	192.168.2.10	184.28.90.27
Oct 13, 2024 20:11:10.047785044 CEST	443	49748	184.28.90.27	192.168.2.10
Oct 13, 2024 20:11:10.067171097 CEST	80	49739	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:10.067183971 CEST	80	49739	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:10.067244053 CEST	49739	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:10.076070070 CEST	80	49740	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:10.076128960 CEST	80	49740	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:10.076141119 CEST	80	49740	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:10.076194048 CEST	49740	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:10.076316118 CEST	80	49740	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:10.078197956 CEST	49740	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:10.564112902 CEST	80	49729	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:10.564169884 CEST	80	49729	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:10.564182043 CEST	80	49729	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:10.564193010 CEST	80	49729	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:10.564228058 CEST	49729	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:10.564265013 CEST	49729	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:10.564429998 CEST	80	49729	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:10.564441919 CEST	80	49729	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:10.564452887 CEST	80	49729	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:10.564461946 CEST	80	49729	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:10.564481020 CEST	49729	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:10.564507961 CEST	49729	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:10.564783096 CEST	80	49729	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:10.564860106 CEST	49729	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:10.564882994 CEST	80	49729	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:10.565112114 CEST	80	49729	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:10.565155983 CEST	49729	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:10.577785015 CEST	49740	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:10.582551003 CEST	80	49740	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:10.700447083 CEST	80	49740	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:10.700489998 CEST	80	49740	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:10.700501919 CEST	80	49740	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:10.700558901 CEST	49740	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:10.700716019 CEST	80	49740	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:10.700728893 CEST	80	49740	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:10.700740099 CEST	80	49740	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:10.700772047 CEST	49740	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:10.700802088 CEST	49740	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:10.701004028 CEST	80	49740	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:10.751420975 CEST	49740	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:10.752325058 CEST	443	49743	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:10.753235102 CEST	49743	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:10.753271103 CEST	443	49743	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:10.753386021 CEST	443	49745	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:10.753982067 CEST	49743	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:10.753992081 CEST	443	49743	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:10.754564047 CEST	49745	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:10.754590988 CEST	443	49745	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:10.755002022 CEST	49745	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:10.755012989 CEST	443	49745	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:10.755522966 CEST	443	49744	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:10.755827904 CEST	49744	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:10.755841970 CEST	443	49744	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:10.756203890 CEST	49744	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:10.756210089 CEST	443	49744	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:10.761085987 CEST	443	49748	184.28.90.27	192.168.2.10
Oct 13, 2024 20:11:10.761147022 CEST	49748	443	192.168.2.10	184.28.90.27
Oct 13, 2024 20:11:10.764610052 CEST	49748	443	192.168.2.10	184.28.90.27
Oct 13, 2024 20:11:10.764616966 CEST	443	49748	184.28.90.27	192.168.2.10
Oct 13, 2024 20:11:10.764851093 CEST	443	49748	184.28.90.27	192.168.2.10
Oct 13, 2024 20:11:10.765077114 CEST	443	49741	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:10.765296936 CEST	443	49742	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:10.774514914 CEST	49741	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:10.774545908 CEST	443	49741	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:10.775129080 CEST	49741	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:10.775135040 CEST	443	49741	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:10.775305033 CEST	49742	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:10.775319099 CEST	443	49742	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:10.775729895 CEST	49742	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:10.775736094 CEST	443	49742	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:10.819420099 CEST	49748	443	192.168.2.10	184.28.90.27
Oct 13, 2024 20:11:10.867403030 CEST	443	49748	184.28.90.27	192.168.2.10
Oct 13, 2024 20:11:11.037468910 CEST	80	49740	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:11.038198948 CEST	443	49743	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.038265944 CEST	443	49743	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.038328886 CEST	49743	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.038424969 CEST	443	49745	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.038480997 CEST	443	49745	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.038566113 CEST	49745	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.040457010 CEST	80	49740	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:11.040539026 CEST	49740	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:11.043648958 CEST	49743	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.043664932 CEST	443	49743	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.047457933 CEST	49745	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.047476053 CEST	443	49745	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.047487974 CEST	49745	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.047493935 CEST	443	49745	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.060563087 CEST	443	49744	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.060697079 CEST	443	49744	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.063153982 CEST	49744	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.077053070 CEST	49744	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.077080011 CEST	443	49744	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.077092886 CEST	49744	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.077099085 CEST	443	49744	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.119183064 CEST	49750	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.119232893 CEST	443	49750	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.119290113 CEST	49750	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.120143890 CEST	49750	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.120160103 CEST	443	49750	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.122306108 CEST	49751	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.122353077 CEST	443	49751	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.122560978 CEST	49751	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.123538971 CEST	49752	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.123574972 CEST	443	49752	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.123584986 CEST	49751	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.123600960 CEST	443	49751	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.123651028 CEST	49752	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.124125957 CEST	49752	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.124147892 CEST	443	49752	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.134809017 CEST	443	49741	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.135442019 CEST	443	49741	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.135510921 CEST	49741	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.135873079 CEST	49741	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.135890961 CEST	443	49741	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.141051054 CEST	443	49742	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.141087055 CEST	443	49742	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.141206980 CEST	49742	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.145664930 CEST	49753	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.145715952 CEST	443	49753	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.145797014 CEST	49753	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.146164894 CEST	49742	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.146176100 CEST	443	49742	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.146195889 CEST	49742	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.146202087 CEST	443	49742	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.154429913 CEST	49753	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.154448986 CEST	443	49753	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.235285044 CEST	49754	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.235336065 CEST	443	49754	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.235476971 CEST	49754	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.247688055 CEST	443	49748	184.28.90.27	192.168.2.10
Oct 13, 2024 20:11:11.247766972 CEST	443	49748	184.28.90.27	192.168.2.10
Oct 13, 2024 20:11:11.247900963 CEST	49748	443	192.168.2.10	184.28.90.27
Oct 13, 2024 20:11:11.296344042 CEST	49754	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.296367884 CEST	443	49754	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.296827078 CEST	49748	443	192.168.2.10	184.28.90.27
Oct 13, 2024 20:11:11.296858072 CEST	443	49748	184.28.90.27	192.168.2.10
Oct 13, 2024 20:11:11.296879053 CEST	49748	443	192.168.2.10	184.28.90.27
Oct 13, 2024 20:11:11.296885967 CEST	443	49748	184.28.90.27	192.168.2.10
Oct 13, 2024 20:11:11.337601900 CEST	49755	443	192.168.2.10	184.28.90.27
Oct 13, 2024 20:11:11.337646008 CEST	443	49755	184.28.90.27	192.168.2.10
Oct 13, 2024 20:11:11.338032961 CEST	49755	443	192.168.2.10	184.28.90.27
Oct 13, 2024 20:11:11.338114023 CEST	49755	443	192.168.2.10	184.28.90.27
Oct 13, 2024 20:11:11.338121891 CEST	443	49755	184.28.90.27	192.168.2.10
Oct 13, 2024 20:11:11.813201904 CEST	443	49750	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.813824892 CEST	49750	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.813867092 CEST	443	49750	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.814553976 CEST	49750	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.814568043 CEST	443	49750	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.816828966 CEST	443	49751	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.817210913 CEST	49751	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.817231894 CEST	443	49751	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.817609072 CEST	49751	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.817617893 CEST	443	49751	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.821552992 CEST	443	49752	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.822033882 CEST	49752	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.822067976 CEST	443	49752	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.822473049 CEST	49752	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.822484016 CEST	443	49752	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.831417084 CEST	443	49753	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.831847906 CEST	49753	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.831875086 CEST	443	49753	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.832282066 CEST	49753	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.832287073 CEST	443	49753	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.914969921 CEST	443	49750	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.915038109 CEST	443	49750	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.915214062 CEST	49750	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.915318012 CEST	49750	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.915344000 CEST	443	49750	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.915359020 CEST	49750	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.915365934 CEST	443	49750	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.918339968 CEST	49757	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.918387890 CEST	443	49757	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.918472052 CEST	49757	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.918694973 CEST	49757	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.918708086 CEST	443	49757	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.919756889 CEST	443	49751	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.919819117 CEST	443	49751	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.919949055 CEST	49751	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.920007944 CEST	49751	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.920032024 CEST	443	49751	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.920047998 CEST	49751	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.920053959 CEST	443	49751	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.922311068 CEST	49758	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.922329903 CEST	443	49758	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.922414064 CEST	49758	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.922550917 CEST	49758	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.922561884 CEST	443	49758	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.935029030 CEST	443	49752	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.935092926 CEST	443	49752	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.935359955 CEST	49752	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.935404062 CEST	49752	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.935404062 CEST	49752	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.935425043 CEST	443	49752	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.935436010 CEST	443	49752	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.937426090 CEST	443	49753	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.937484026 CEST	443	49753	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.937549114 CEST	49753	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.937802076 CEST	49753	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.937815905 CEST	443	49753	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.937827110 CEST	49753	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.937833071 CEST	443	49753	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.938584089 CEST	49759	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.938633919 CEST	443	49759	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.938811064 CEST	49759	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.939013958 CEST	49759	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.939027071 CEST	443	49759	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.940946102 CEST	49760	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.940963984 CEST	443	49760	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.941112041 CEST	49760	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.941338062 CEST	49760	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.941359043 CEST	443	49760	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.997442007 CEST	443	49754	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.997975111 CEST	49754	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.997996092 CEST	443	49754	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:11.998447895 CEST	49754	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:11.998456001 CEST	443	49754	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.049026012 CEST	443	49755	184.28.90.27	192.168.2.10
Oct 13, 2024 20:11:12.049190998 CEST	49755	443	192.168.2.10	184.28.90.27
Oct 13, 2024 20:11:12.052376032 CEST	49755	443	192.168.2.10	184.28.90.27
Oct 13, 2024 20:11:12.052397013 CEST	443	49755	184.28.90.27	192.168.2.10
Oct 13, 2024 20:11:12.052640915 CEST	443	49755	184.28.90.27	192.168.2.10
Oct 13, 2024 20:11:12.057569027 CEST	49755	443	192.168.2.10	184.28.90.27
Oct 13, 2024 20:11:12.099687099 CEST	443	49754	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.099867105 CEST	443	49754	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.099925995 CEST	49754	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.100140095 CEST	49754	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.100161076 CEST	443	49754	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.100173950 CEST	49754	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.100179911 CEST	443	49754	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.103033066 CEST	49761	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.103079081 CEST	443	49761	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.103151083 CEST	49761	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.103295088 CEST	49761	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.103307962 CEST	443	49761	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.103401899 CEST	443	49755	184.28.90.27	192.168.2.10
Oct 13, 2024 20:11:12.381529093 CEST	443	49755	184.28.90.27	192.168.2.10
Oct 13, 2024 20:11:12.381613016 CEST	443	49755	184.28.90.27	192.168.2.10
Oct 13, 2024 20:11:12.381671906 CEST	49755	443	192.168.2.10	184.28.90.27
Oct 13, 2024 20:11:12.383290052 CEST	49755	443	192.168.2.10	184.28.90.27
Oct 13, 2024 20:11:12.383311033 CEST	443	49755	184.28.90.27	192.168.2.10
Oct 13, 2024 20:11:12.571980000 CEST	443	49757	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.572777033 CEST	49757	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.572803974 CEST	443	49757	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.573227882 CEST	49757	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.573232889 CEST	443	49757	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.578413963 CEST	443	49758	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.578839064 CEST	49758	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.578866005 CEST	443	49758	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.579334974 CEST	49758	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.579339981 CEST	443	49758	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.593838930 CEST	443	49759	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.594347954 CEST	49759	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.594410896 CEST	443	49759	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.594786882 CEST	49759	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.594798088 CEST	443	49759	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.601797104 CEST	443	49760	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.602251053 CEST	49760	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.602318048 CEST	443	49760	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.602716923 CEST	49760	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.602745056 CEST	443	49760	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.673011065 CEST	443	49757	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.673094034 CEST	443	49757	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.673218012 CEST	49757	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.673367977 CEST	49757	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.673388004 CEST	443	49757	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.673408985 CEST	49757	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.673414946 CEST	443	49757	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.676346064 CEST	49762	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.676386118 CEST	443	49762	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.676727057 CEST	49762	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.676898003 CEST	49762	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.676908016 CEST	443	49762	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.681737900 CEST	443	49758	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.681818962 CEST	443	49758	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.681884050 CEST	49758	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.682055950 CEST	49758	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.682064056 CEST	443	49758	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.682084084 CEST	49758	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.682089090 CEST	443	49758	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.684885979 CEST	49763	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.685055971 CEST	443	49763	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.685154915 CEST	49763	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.685302973 CEST	49763	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.685364962 CEST	443	49763	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.698478937 CEST	443	49759	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.698695898 CEST	443	49759	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.698769093 CEST	49759	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.698884964 CEST	49759	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.698884964 CEST	49759	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.698951006 CEST	443	49759	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.699027061 CEST	443	49759	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.701566935 CEST	49764	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.701622963 CEST	443	49764	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.701822042 CEST	49764	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.701992035 CEST	49764	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.702008009 CEST	443	49764	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.705518961 CEST	443	49760	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.705591917 CEST	443	49760	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.705708027 CEST	49760	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.705806017 CEST	49760	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.705806017 CEST	49760	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.705832958 CEST	443	49760	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.705873013 CEST	443	49760	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.710237026 CEST	49765	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.710264921 CEST	443	49765	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.710364103 CEST	49765	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.710510969 CEST	49765	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.710527897 CEST	443	49765	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.793675900 CEST	443	49761	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.794228077 CEST	49761	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.794258118 CEST	443	49761	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.794729948 CEST	49761	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.794735909 CEST	443	49761	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.905258894 CEST	443	49761	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.905445099 CEST	443	49761	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.905548096 CEST	49761	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.905653000 CEST	49761	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.905678034 CEST	443	49761	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.905692101 CEST	49761	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.905699968 CEST	443	49761	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.908807039 CEST	49766	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.908850908 CEST	443	49766	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:12.908911943 CEST	49766	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.909204960 CEST	49766	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:12.909220934 CEST	443	49766	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.321767092 CEST	443	49762	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.322345972 CEST	49762	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.322379112 CEST	443	49762	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.322817087 CEST	49762	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.322822094 CEST	443	49762	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.346240044 CEST	443	49763	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.347279072 CEST	49763	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.347304106 CEST	443	49763	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.347733974 CEST	49763	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.347743034 CEST	443	49763	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.359469891 CEST	443	49765	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.359918118 CEST	49765	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.359945059 CEST	443	49765	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.360382080 CEST	49765	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.360398054 CEST	443	49765	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.378499985 CEST	443	49764	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.378969908 CEST	49764	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.378994942 CEST	443	49764	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.379429102 CEST	49764	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.379435062 CEST	443	49764	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.424082041 CEST	443	49762	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.424186945 CEST	443	49762	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.424277067 CEST	49762	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.424454927 CEST	49762	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.424475908 CEST	443	49762	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.424493074 CEST	49762	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.424499035 CEST	443	49762	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.433265924 CEST	49767	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.433314085 CEST	443	49767	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.433382034 CEST	49767	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.433779001 CEST	49767	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.433795929 CEST	443	49767	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.449785948 CEST	443	49763	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.449852943 CEST	443	49763	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.449915886 CEST	49763	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.450176954 CEST	49763	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.450201035 CEST	443	49763	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.450217009 CEST	49763	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.450223923 CEST	443	49763	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.453170061 CEST	49768	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.453233957 CEST	443	49768	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.453310966 CEST	49768	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.453607082 CEST	49768	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.453623056 CEST	443	49768	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.461489916 CEST	443	49765	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.461656094 CEST	443	49765	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.461749077 CEST	49765	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.461796045 CEST	49765	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.461815119 CEST	443	49765	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.461827993 CEST	49765	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.461834908 CEST	443	49765	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.464792967 CEST	49769	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.464840889 CEST	443	49769	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.464901924 CEST	49769	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.465040922 CEST	49769	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.465053082 CEST	443	49769	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.484179020 CEST	443	49764	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.484256983 CEST	443	49764	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.484553099 CEST	49764	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.484553099 CEST	49764	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.484553099 CEST	49764	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.487591028 CEST	49770	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.487637997 CEST	443	49770	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.487701893 CEST	49770	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.487854958 CEST	49770	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.487865925 CEST	443	49770	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.620019913 CEST	443	49766	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.620920897 CEST	49766	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.620951891 CEST	443	49766	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.621392012 CEST	49766	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.621401072 CEST	443	49766	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:13.705991983 CEST	49764	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:13.706032991 CEST	443	49764	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.062150955 CEST	443	49766	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.062263012 CEST	80	49722	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:14.062278032 CEST	80	49723	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:14.062321901 CEST	443	49766	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.062356949 CEST	49722	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:14.062357903 CEST	49723	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:14.062391043 CEST	49766	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.062589884 CEST	49766	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.062608957 CEST	443	49766	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.062623978 CEST	49766	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.062630892 CEST	443	49766	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.065474033 CEST	49771	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.065520048 CEST	443	49771	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.065754890 CEST	49771	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.065754890 CEST	49771	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.065800905 CEST	443	49771	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.250129938 CEST	443	49769	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.253915071 CEST	49769	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.253950119 CEST	443	49769	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.254612923 CEST	49769	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.254621029 CEST	443	49769	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.259171963 CEST	443	49767	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.259501934 CEST	443	49770	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.259527922 CEST	443	49768	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.259980917 CEST	49767	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.260016918 CEST	443	49767	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.261976004 CEST	49767	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.261981010 CEST	443	49767	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.264204025 CEST	49770	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.264219046 CEST	443	49770	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.265094042 CEST	49770	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.265100002 CEST	443	49770	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.266043901 CEST	49768	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.266062021 CEST	443	49768	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.267384052 CEST	49768	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.267389059 CEST	443	49768	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.283910990 CEST	80	49730	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:14.285315990 CEST	49730	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:14.351650000 CEST	443	49769	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.351722002 CEST	443	49769	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.351840973 CEST	49769	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.352060080 CEST	49769	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.352082014 CEST	443	49769	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.352096081 CEST	49769	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.352102041 CEST	443	49769	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.355978966 CEST	49772	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.356020927 CEST	443	49772	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.356092930 CEST	49772	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.356365919 CEST	49772	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.356381893 CEST	443	49772	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.364814997 CEST	443	49767	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.364878893 CEST	443	49767	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.364965916 CEST	49767	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.365269899 CEST	49767	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.365282059 CEST	443	49767	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.365325928 CEST	49767	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.365331888 CEST	443	49767	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.365986109 CEST	443	49770	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.366050959 CEST	443	49770	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.366112947 CEST	49770	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.367368937 CEST	49770	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.367374897 CEST	443	49770	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.367412090 CEST	49770	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.367424011 CEST	443	49770	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.371154070 CEST	49773	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.371185064 CEST	443	49773	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.371246099 CEST	49773	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.371252060 CEST	443	49768	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.371315956 CEST	443	49768	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.371387959 CEST	49768	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.371886015 CEST	49773	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.371903896 CEST	443	49773	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.372318983 CEST	49774	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.372332096 CEST	443	49774	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.372385025 CEST	49774	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.372453928 CEST	49768	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.372473001 CEST	443	49768	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.372520924 CEST	49768	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.372526884 CEST	443	49768	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.372706890 CEST	49774	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.372720003 CEST	443	49774	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.375247955 CEST	49775	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.375266075 CEST	443	49775	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.375371933 CEST	49775	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.375463009 CEST	49775	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.375473022 CEST	443	49775	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.602483988 CEST	80	49731	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:14.602550030 CEST	49731	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:14.719654083 CEST	443	49771	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.720264912 CEST	49771	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.720293045 CEST	443	49771	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.721198082 CEST	49771	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.721205950 CEST	443	49771	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.821463108 CEST	443	49771	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.821628094 CEST	443	49771	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.821718931 CEST	49771	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.822829008 CEST	49771	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.822858095 CEST	443	49771	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.827980995 CEST	49776	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.828023911 CEST	443	49776	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:14.828270912 CEST	49776	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.828588963 CEST	49776	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:14.828603983 CEST	443	49776	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.010459900 CEST	443	49772	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.011449099 CEST	49772	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.011476994 CEST	443	49772	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.012753963 CEST	49772	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.012764931 CEST	443	49772	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.026580095 CEST	443	49773	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.027525902 CEST	49773	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.027544022 CEST	443	49773	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.028330088 CEST	443	49774	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.028537989 CEST	49773	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.028553963 CEST	443	49773	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.029046059 CEST	49774	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.029067993 CEST	443	49774	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.030272961 CEST	49774	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.030283928 CEST	443	49774	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.037798882 CEST	443	49775	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.038570881 CEST	49775	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.038585901 CEST	443	49775	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.039650917 CEST	49775	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.039664030 CEST	443	49775	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.068355083 CEST	80	49739	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:15.068413973 CEST	49739	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:15.112529993 CEST	443	49772	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.112607002 CEST	443	49772	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.112651110 CEST	49772	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.114717960 CEST	49772	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.114743948 CEST	443	49772	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.114751101 CEST	49772	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.114758968 CEST	443	49772	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.120330095 CEST	49777	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.120392084 CEST	443	49777	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.120469093 CEST	49777	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.120867014 CEST	49777	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.120881081 CEST	443	49777	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.131710052 CEST	443	49773	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.131722927 CEST	443	49774	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.131789923 CEST	443	49774	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.131797075 CEST	443	49773	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.131889105 CEST	49774	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.131925106 CEST	49773	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.136830091 CEST	49773	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.136856079 CEST	443	49773	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.136872053 CEST	49773	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.136878014 CEST	443	49773	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.137419939 CEST	49774	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.137419939 CEST	49774	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.137429953 CEST	443	49774	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.137439966 CEST	443	49774	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.139838934 CEST	443	49775	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.139898062 CEST	443	49775	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.139992952 CEST	49775	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.140218973 CEST	49775	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.140255928 CEST	443	49775	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.140269995 CEST	49775	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.140278101 CEST	443	49775	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.145632982 CEST	49778	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.145669937 CEST	443	49778	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.145848036 CEST	49778	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.150182962 CEST	80	49729	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:15.150238037 CEST	49729	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:15.150707006 CEST	49779	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.150718927 CEST	443	49779	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.150752068 CEST	49778	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.150768995 CEST	443	49778	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.150774002 CEST	49779	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.150983095 CEST	49779	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.150995016 CEST	443	49779	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.151422977 CEST	49780	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.151438951 CEST	443	49780	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.151509047 CEST	49780	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.151609898 CEST	49780	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.151618958 CEST	443	49780	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.486865997 CEST	443	49776	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.487473011 CEST	49776	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.487509012 CEST	443	49776	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.488168955 CEST	49776	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.488174915 CEST	443	49776	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.590075016 CEST	443	49776	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.590142012 CEST	443	49776	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.590188026 CEST	49776	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.590993881 CEST	49776	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.591017008 CEST	443	49776	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.591027975 CEST	49776	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.591033936 CEST	443	49776	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.600389004 CEST	49781	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.600431919 CEST	443	49781	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.600497961 CEST	49781	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.601069927 CEST	49781	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.601084948 CEST	443	49781	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.608412981 CEST	49739	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:15.608603001 CEST	49722	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:15.608732939 CEST	49723	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:15.608915091 CEST	49730	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:15.608954906 CEST	49731	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:15.609009981 CEST	49729	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:15.613264084 CEST	80	49739	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:15.613565922 CEST	80	49722	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:15.613626003 CEST	80	49723	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:15.613790989 CEST	80	49730	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:15.613877058 CEST	80	49731	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:15.613888025 CEST	80	49729	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:15.701478958 CEST	80	49740	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:15.701548100 CEST	49740	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:15.812122107 CEST	443	49779	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.812679052 CEST	443	49778	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.813250065 CEST	443	49780	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.813452959 CEST	49779	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.813478947 CEST	443	49779	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.814229012 CEST	49779	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.814234972 CEST	443	49779	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.816169977 CEST	443	49777	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.840754032 CEST	49777	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.840770006 CEST	443	49777	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.842299938 CEST	49777	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.842304945 CEST	443	49777	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.843005896 CEST	49778	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.843014002 CEST	443	49778	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.844038963 CEST	49778	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.844046116 CEST	443	49778	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.844855070 CEST	49780	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.844882965 CEST	443	49780	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.845752001 CEST	49780	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.845758915 CEST	443	49780	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.919014931 CEST	443	49779	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.919070005 CEST	443	49779	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.919112921 CEST	49779	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.919370890 CEST	49779	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.919393063 CEST	443	49779	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.919409990 CEST	49779	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.919416904 CEST	443	49779	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.924500942 CEST	49782	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.924529076 CEST	443	49782	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.924592972 CEST	49782	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.925323009 CEST	49782	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.925337076 CEST	443	49782	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.941051960 CEST	443	49778	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.941128969 CEST	443	49778	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.941181898 CEST	49778	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.941781044 CEST	49778	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.941792965 CEST	443	49778	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.941803932 CEST	49778	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.941809893 CEST	443	49778	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.943006039 CEST	443	49777	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.943080902 CEST	443	49777	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.943154097 CEST	49777	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.943584919 CEST	49777	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.943595886 CEST	443	49777	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.943617105 CEST	49777	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.943622112 CEST	443	49777	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.943732977 CEST	443	49780	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.943783045 CEST	443	49780	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.943836927 CEST	49780	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.944236994 CEST	49780	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.944247007 CEST	443	49780	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.956828117 CEST	49783	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.956859112 CEST	443	49783	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.956909895 CEST	49783	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.957526922 CEST	49784	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.957560062 CEST	443	49784	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.957700014 CEST	49784	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.960481882 CEST	49785	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.960521936 CEST	443	49785	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.960572004 CEST	49785	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.961246967 CEST	49784	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.961275101 CEST	443	49784	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.961530924 CEST	49783	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.961546898 CEST	443	49783	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:15.962004900 CEST	49785	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:15.962023020 CEST	443	49785	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.280219078 CEST	443	49781	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.287950993 CEST	49781	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.287971020 CEST	443	49781	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.289283037 CEST	49781	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.289288044 CEST	443	49781	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.388015032 CEST	443	49781	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.388179064 CEST	443	49781	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.388844967 CEST	49781	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.388885021 CEST	49781	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.388885021 CEST	49781	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.388906002 CEST	443	49781	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.388916016 CEST	443	49781	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.395164013 CEST	49786	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.395219088 CEST	443	49786	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.395325899 CEST	49786	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.399166107 CEST	49786	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.399208069 CEST	443	49786	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.575752974 CEST	443	49782	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.576693058 CEST	49782	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.576719999 CEST	443	49782	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.577796936 CEST	49782	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.577804089 CEST	443	49782	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.615746021 CEST	443	49784	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.616451025 CEST	443	49785	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.616776943 CEST	49784	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.616807938 CEST	443	49784	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.618741989 CEST	49785	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.618741989 CEST	49785	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.618774891 CEST	443	49785	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.618786097 CEST	443	49785	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.618891954 CEST	49784	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.618906021 CEST	443	49784	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.627456903 CEST	443	49783	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.628104925 CEST	49783	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.628138065 CEST	443	49783	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.629226923 CEST	49783	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.629231930 CEST	443	49783	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.679517031 CEST	443	49782	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.679590940 CEST	443	49782	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.679877996 CEST	49782	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.679877996 CEST	49782	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.679912090 CEST	49782	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.679934978 CEST	443	49782	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.682877064 CEST	49787	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.682929993 CEST	443	49787	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.683278084 CEST	49787	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.683340073 CEST	49787	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.683345079 CEST	443	49787	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.716567993 CEST	443	49784	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.716703892 CEST	443	49784	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.716900110 CEST	49784	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.716901064 CEST	49784	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.717046976 CEST	49784	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.717061043 CEST	443	49784	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.717591047 CEST	443	49785	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.717757940 CEST	443	49785	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.717936993 CEST	49785	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.717936993 CEST	49785	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.717964888 CEST	49785	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.717988014 CEST	443	49785	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.719858885 CEST	49788	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.719887972 CEST	443	49788	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.719937086 CEST	49789	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.719959974 CEST	443	49789	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.719989061 CEST	49788	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.720138073 CEST	49788	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.720153093 CEST	443	49788	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.720176935 CEST	49789	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.720307112 CEST	49789	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.720315933 CEST	443	49789	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.730412960 CEST	443	49783	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.730472088 CEST	443	49783	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.730696917 CEST	49783	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.730698109 CEST	49783	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.730792999 CEST	49783	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.730849981 CEST	443	49783	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.732985973 CEST	49790	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.733000994 CEST	443	49790	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:16.733208895 CEST	49790	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.733208895 CEST	49790	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:16.733244896 CEST	443	49790	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.066735983 CEST	443	49786	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.067282915 CEST	49786	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:17.067302942 CEST	443	49786	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.067743063 CEST	49786	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:17.067749023 CEST	443	49786	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.169040918 CEST	443	49786	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.169112921 CEST	443	49786	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.169173002 CEST	49786	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:17.178186893 CEST	49786	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:17.178210020 CEST	443	49786	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.178236961 CEST	49786	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:17.178244114 CEST	443	49786	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.183079958 CEST	49791	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:17.183130026 CEST	443	49791	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.183191061 CEST	49791	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:17.183526993 CEST	49791	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:17.183540106 CEST	443	49791	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.333317995 CEST	443	49787	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.335426092 CEST	49787	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:17.335455894 CEST	443	49787	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.337305069 CEST	49787	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:17.337326050 CEST	443	49787	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.374191046 CEST	443	49789	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.375370979 CEST	49789	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:17.375401974 CEST	443	49789	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.377031088 CEST	49789	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:17.377049923 CEST	443	49789	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.378602982 CEST	443	49788	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.379929066 CEST	49788	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:17.379956961 CEST	443	49788	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.381314993 CEST	49788	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:17.381321907 CEST	443	49788	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.401479006 CEST	443	49790	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.402009964 CEST	49790	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:17.402050972 CEST	443	49790	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.403414965 CEST	49790	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:17.403431892 CEST	443	49790	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.739376068 CEST	49740	80	192.168.2.10	50.6.138.164
Oct 13, 2024 20:11:17.855910063 CEST	443	49787	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.855973005 CEST	443	49787	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.856015921 CEST	49787	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:17.856578112 CEST	443	49789	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.856627941 CEST	443	49788	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.856648922 CEST	443	49789	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.856719971 CEST	443	49788	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.856736898 CEST	49789	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:17.856753111 CEST	49788	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:17.857309103 CEST	443	49790	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.857362032 CEST	443	49790	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.857595921 CEST	49790	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:17.861989975 CEST	80	49740	50.6.138.164	192.168.2.10
Oct 13, 2024 20:11:17.889369965 CEST	49787	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:17.889399052 CEST	443	49787	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.889415026 CEST	49787	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:17.889421940 CEST	443	49787	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.923217058 CEST	49677	443	192.168.2.10	20.42.65.85
Oct 13, 2024 20:11:17.947554111 CEST	49789	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:17.947554111 CEST	49789	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:17.947582960 CEST	443	49789	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.947593927 CEST	443	49789	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.949103117 CEST	49788	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:17.949116945 CEST	443	49788	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.949136019 CEST	49788	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:17.949140072 CEST	443	49788	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.949455023 CEST	49790	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:17.949455023 CEST	49790	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:17.949472904 CEST	443	49790	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:17.949481010 CEST	443	49790	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.008913040 CEST	49792	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.008949995 CEST	443	49792	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.009135008 CEST	49792	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.010791063 CEST	49793	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.010832071 CEST	443	49793	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.010895967 CEST	49793	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.013883114 CEST	49794	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.013892889 CEST	443	49794	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.014143944 CEST	49794	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.014339924 CEST	49792	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.014354944 CEST	443	49792	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.015127897 CEST	49793	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.015145063 CEST	443	49793	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.016653061 CEST	49795	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.016680956 CEST	443	49795	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.016798019 CEST	49795	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.017009020 CEST	49795	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.017021894 CEST	443	49795	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.017134905 CEST	49794	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.017143965 CEST	443	49794	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.055553913 CEST	443	49791	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.058415890 CEST	49791	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.058429003 CEST	443	49791	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.059696913 CEST	49791	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.059701920 CEST	443	49791	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.164043903 CEST	443	49791	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.164112091 CEST	443	49791	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.164294958 CEST	49791	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.164536953 CEST	49791	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.164555073 CEST	443	49791	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.164565086 CEST	49791	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.164571047 CEST	443	49791	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.168061018 CEST	49797	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.168104887 CEST	443	49797	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.168448925 CEST	49797	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.169009924 CEST	49797	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.169022083 CEST	443	49797	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.798991919 CEST	443	49793	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.799302101 CEST	443	49795	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.799690008 CEST	49793	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.799711943 CEST	443	49793	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.799778938 CEST	49795	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.799793005 CEST	443	49795	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.799841881 CEST	443	49794	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.800338984 CEST	49793	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.800343990 CEST	443	49793	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.800471067 CEST	49795	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.800477028 CEST	443	49795	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.800719023 CEST	49794	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.800724983 CEST	443	49794	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.800882101 CEST	443	49792	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.801172972 CEST	49794	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.801177025 CEST	443	49794	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.801311970 CEST	49792	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.801337004 CEST	443	49792	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.801832914 CEST	49792	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.801839113 CEST	443	49792	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.834060907 CEST	443	49797	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.834789991 CEST	49797	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.834817886 CEST	443	49797	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.835339069 CEST	49797	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.835359097 CEST	443	49797	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.901655912 CEST	443	49795	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.901730061 CEST	443	49795	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.901793957 CEST	49795	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.902102947 CEST	49795	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.902102947 CEST	49795	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.902118921 CEST	443	49795	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.902127981 CEST	443	49795	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.902312994 CEST	443	49792	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.902422905 CEST	443	49792	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.902478933 CEST	49792	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.903098106 CEST	443	49794	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.903147936 CEST	443	49794	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.903244019 CEST	49794	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.903646946 CEST	49792	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.903656006 CEST	443	49792	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.903781891 CEST	49792	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.903798103 CEST	443	49792	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.904230118 CEST	443	49793	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.904288054 CEST	443	49793	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.904366016 CEST	49794	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.904381990 CEST	443	49794	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.904396057 CEST	49794	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.904396057 CEST	49793	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.904402971 CEST	443	49794	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.906456947 CEST	49793	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.906462908 CEST	443	49793	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.906483889 CEST	49793	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.906487942 CEST	443	49793	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.910125971 CEST	49798	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.910180092 CEST	443	49798	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.910325050 CEST	49798	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.911540985 CEST	49799	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.911562920 CEST	443	49799	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.911669016 CEST	49799	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.912024021 CEST	49798	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.912044048 CEST	443	49798	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.912336111 CEST	49799	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.912348986 CEST	443	49799	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.914483070 CEST	49800	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.914525032 CEST	443	49800	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.914616108 CEST	49800	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.915173054 CEST	49800	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.915203094 CEST	443	49800	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.915524006 CEST	49801	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.915549040 CEST	443	49801	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.915838957 CEST	49801	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.915966034 CEST	49801	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.915977001 CEST	443	49801	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.940371990 CEST	443	49797	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.940460920 CEST	443	49797	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.940588951 CEST	49797	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.952781916 CEST	49797	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.952826023 CEST	443	49797	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.955836058 CEST	49802	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.955872059 CEST	443	49802	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:18.956037045 CEST	49802	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.956202030 CEST	49802	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:18.956209898 CEST	443	49802	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.671549082 CEST	443	49799	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.671678066 CEST	443	49798	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.672190905 CEST	49799	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.672204018 CEST	443	49799	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.672297001 CEST	49798	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.672327995 CEST	443	49798	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.672756910 CEST	49798	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.672763109 CEST	443	49798	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.672939062 CEST	49799	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.672944069 CEST	443	49799	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.674118996 CEST	443	49801	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.674442053 CEST	49801	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.674469948 CEST	443	49801	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.674799919 CEST	49801	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.674809933 CEST	443	49801	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.676505089 CEST	443	49800	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.676798105 CEST	49800	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.676816940 CEST	443	49800	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.677258968 CEST	49800	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.677265882 CEST	443	49800	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.678281069 CEST	443	49802	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.678597927 CEST	49802	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.678605080 CEST	443	49802	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.678962946 CEST	49802	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.678966999 CEST	443	49802	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.774190903 CEST	443	49798	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.774621964 CEST	443	49798	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.774684906 CEST	49798	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.774724007 CEST	49798	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.774739027 CEST	443	49798	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.774749994 CEST	49798	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.774755955 CEST	443	49798	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.774810076 CEST	443	49799	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.774864912 CEST	443	49799	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.774899960 CEST	49799	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.775039911 CEST	49799	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.775044918 CEST	443	49799	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.775059938 CEST	49799	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.775063992 CEST	443	49799	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.778466940 CEST	49805	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.778495073 CEST	443	49805	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.778562069 CEST	49806	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.778563023 CEST	49805	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.778572083 CEST	443	49806	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.778744936 CEST	49806	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.778923035 CEST	49805	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.778934002 CEST	443	49805	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.778966904 CEST	49806	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.778975010 CEST	443	49806	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.780998945 CEST	443	49801	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.781063080 CEST	443	49801	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.781100988 CEST	49801	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.781289101 CEST	49801	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.781305075 CEST	443	49801	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.781317949 CEST	49801	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.781322956 CEST	443	49801	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.782391071 CEST	443	49802	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.782552004 CEST	443	49802	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.782605886 CEST	49802	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.782733917 CEST	49802	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.782737970 CEST	443	49802	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.782749891 CEST	49802	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.782754898 CEST	443	49802	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.784007072 CEST	49807	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.784035921 CEST	443	49807	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.784159899 CEST	49807	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.784333944 CEST	49807	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.784347057 CEST	443	49807	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.784668922 CEST	443	49800	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.784733057 CEST	443	49800	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.784801960 CEST	49800	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.785130978 CEST	49800	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.785160065 CEST	443	49800	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.785171986 CEST	49800	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.785181999 CEST	443	49800	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.785366058 CEST	49808	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.785393953 CEST	443	49808	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.785463095 CEST	49808	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.785599947 CEST	49808	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.785613060 CEST	443	49808	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.787589073 CEST	49809	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.787609100 CEST	443	49809	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.787656069 CEST	49809	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.788079023 CEST	49809	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:19.788089037 CEST	443	49809	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:19.854099035 CEST	443	49738	142.250.185.68	192.168.2.10
Oct 13, 2024 20:11:19.854165077 CEST	443	49738	142.250.185.68	192.168.2.10
Oct 13, 2024 20:11:19.854212046 CEST	49738	443	192.168.2.10	142.250.185.68
Oct 13, 2024 20:11:21.106332064 CEST	443	49806	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.106914043 CEST	49806	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.106934071 CEST	443	49806	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.108678102 CEST	49806	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.108685970 CEST	443	49806	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.114234924 CEST	443	49808	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.114664078 CEST	49808	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.114691973 CEST	443	49808	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.115284920 CEST	49808	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.115291119 CEST	443	49808	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.116846085 CEST	443	49805	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.117261887 CEST	49805	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.117281914 CEST	443	49805	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.117813110 CEST	49805	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.117819071 CEST	443	49805	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.124393940 CEST	443	49809	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.124798059 CEST	49809	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.124814987 CEST	443	49809	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.125257969 CEST	49809	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.125262976 CEST	443	49809	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.128993988 CEST	443	49807	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.129360914 CEST	49807	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.129376888 CEST	443	49807	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.129796028 CEST	49807	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.129807949 CEST	443	49807	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.207390070 CEST	443	49806	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.207426071 CEST	443	49806	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.207484961 CEST	443	49806	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.207565069 CEST	49806	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.207756996 CEST	49806	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.207756996 CEST	49806	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.207775116 CEST	443	49806	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.207787037 CEST	443	49806	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.211270094 CEST	49811	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.211309910 CEST	443	49811	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.211463928 CEST	49811	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.211612940 CEST	49811	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.211628914 CEST	443	49811	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.216943026 CEST	443	49805	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.216945887 CEST	443	49808	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.216999054 CEST	443	49808	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.217011929 CEST	443	49805	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.217056990 CEST	49808	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.217065096 CEST	49805	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.217072964 CEST	443	49808	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.217298985 CEST	49805	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.217305899 CEST	443	49805	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.217314959 CEST	443	49808	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.217358112 CEST	49805	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.217361927 CEST	49808	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.217363119 CEST	443	49805	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.217540026 CEST	49808	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.217552900 CEST	443	49808	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.217565060 CEST	49808	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.217571020 CEST	443	49808	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.220361948 CEST	49812	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.220429897 CEST	443	49812	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.220503092 CEST	49812	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.220547915 CEST	49813	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.220571995 CEST	443	49813	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.220617056 CEST	49813	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.220827103 CEST	49812	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.220856905 CEST	443	49812	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.220941067 CEST	49813	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.220957041 CEST	443	49813	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.227744102 CEST	443	49809	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.227782965 CEST	443	49809	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.227835894 CEST	49809	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.227853060 CEST	443	49809	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.227912903 CEST	49809	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.227919102 CEST	443	49809	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.227952957 CEST	443	49809	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.228004932 CEST	49809	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.228023052 CEST	443	49809	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.228035927 CEST	49809	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.228041887 CEST	443	49809	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.228059053 CEST	49809	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.228063107 CEST	443	49809	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.230652094 CEST	49814	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.230665922 CEST	443	49814	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.230771065 CEST	49814	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.230866909 CEST	49814	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.230875015 CEST	443	49814	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.236378908 CEST	443	49807	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.236444950 CEST	443	49807	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.236547947 CEST	49807	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.236567974 CEST	49807	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.236567974 CEST	49807	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.236577034 CEST	443	49807	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.236584902 CEST	443	49807	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.238528967 CEST	49815	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.238559008 CEST	443	49815	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.238621950 CEST	49815	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.238749981 CEST	49815	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.238775969 CEST	443	49815	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.597397089 CEST	49738	443	192.168.2.10	142.250.185.68
Oct 13, 2024 20:11:21.597435951 CEST	443	49738	142.250.185.68	192.168.2.10
Oct 13, 2024 20:11:21.905612946 CEST	443	49811	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.906124115 CEST	49811	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.906148911 CEST	443	49811	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.906668901 CEST	49811	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.906673908 CEST	443	49811	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.908834934 CEST	443	49813	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.909219027 CEST	49813	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.909238100 CEST	443	49813	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.909622908 CEST	49813	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.909640074 CEST	443	49813	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.909957886 CEST	443	49815	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.910279036 CEST	49815	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.910301924 CEST	443	49815	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.910717010 CEST	49815	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.910723925 CEST	443	49815	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.914661884 CEST	443	49814	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.915235996 CEST	49814	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.915255070 CEST	443	49814	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.915412903 CEST	49814	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.915416956 CEST	443	49814	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.917393923 CEST	443	49812	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.917723894 CEST	49812	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.917736053 CEST	443	49812	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:21.918123960 CEST	49812	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:21.918128967 CEST	443	49812	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.007002115 CEST	443	49811	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.007033110 CEST	443	49811	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.007090092 CEST	49811	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.007112026 CEST	443	49811	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.007407904 CEST	49811	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.007411003 CEST	443	49811	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.007431984 CEST	443	49811	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.007431984 CEST	49811	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.007446051 CEST	443	49811	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.007457018 CEST	49811	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.007460117 CEST	443	49811	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.010341883 CEST	49816	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.010390043 CEST	443	49816	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.010529041 CEST	443	49813	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.010610104 CEST	49816	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.010627031 CEST	443	49813	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.010672092 CEST	49813	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.010672092 CEST	49816	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.010687113 CEST	443	49816	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.010822058 CEST	443	49815	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.011024952 CEST	49813	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.011054039 CEST	443	49813	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.011091948 CEST	49813	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.011097908 CEST	443	49813	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.011425018 CEST	443	49815	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.011542082 CEST	49815	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.012383938 CEST	49815	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.012397051 CEST	443	49815	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.012409925 CEST	49815	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.012414932 CEST	443	49815	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.015048027 CEST	49817	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.015093088 CEST	443	49817	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.015321016 CEST	49817	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.016411066 CEST	49818	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.016421080 CEST	443	49818	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.016495943 CEST	49818	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.016654015 CEST	49817	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.016673088 CEST	443	49817	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.016824961 CEST	49818	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.016838074 CEST	443	49818	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.017169952 CEST	443	49814	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.017349958 CEST	443	49814	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.017474890 CEST	49814	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.018002033 CEST	49814	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.018002033 CEST	49814	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.018012047 CEST	443	49814	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.018014908 CEST	443	49814	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.020998955 CEST	49819	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.021008968 CEST	443	49819	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.021469116 CEST	49819	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.025365114 CEST	49819	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.025373936 CEST	443	49819	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.036612988 CEST	443	49812	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.036925077 CEST	443	49812	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.036995888 CEST	49812	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.037039995 CEST	49812	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.037045956 CEST	443	49812	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.037055016 CEST	49812	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.037060022 CEST	443	49812	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.039674997 CEST	49820	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.039701939 CEST	443	49820	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.039809942 CEST	49820	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.039972067 CEST	49820	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.039979935 CEST	443	49820	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.631316900 CEST	443	49819	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.632162094 CEST	49819	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.632194042 CEST	443	49819	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.632664919 CEST	49819	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.632672071 CEST	443	49819	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.668287039 CEST	443	49816	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.668865919 CEST	49816	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.668886900 CEST	443	49816	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.669329882 CEST	49816	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.669337988 CEST	443	49816	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.677357912 CEST	443	49817	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.677887917 CEST	49817	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.677900076 CEST	443	49817	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.678319931 CEST	49817	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.678325891 CEST	443	49817	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.690536976 CEST	443	49818	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.690956116 CEST	49818	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.690973997 CEST	443	49818	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.691319942 CEST	49818	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.691329002 CEST	443	49818	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.733172894 CEST	443	49820	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.733650923 CEST	49820	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.733674049 CEST	443	49820	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.734114885 CEST	49820	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.734121084 CEST	443	49820	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.735301018 CEST	443	49819	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.735764027 CEST	443	49819	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.735887051 CEST	49819	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.735970020 CEST	49819	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.735970020 CEST	49819	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.735995054 CEST	443	49819	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.736007929 CEST	443	49819	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.738712072 CEST	49821	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.738749981 CEST	443	49821	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.738904953 CEST	49821	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.739072084 CEST	49821	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.739094973 CEST	443	49821	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.770117044 CEST	443	49816	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.770376921 CEST	443	49816	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.770482063 CEST	49816	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.770576954 CEST	49816	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.770598888 CEST	443	49816	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.770611048 CEST	49816	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.770617008 CEST	443	49816	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.773518085 CEST	49822	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.773561954 CEST	443	49822	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.773910999 CEST	49822	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.774074078 CEST	49822	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.774089098 CEST	443	49822	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.778533936 CEST	443	49817	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.778599024 CEST	443	49817	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.778728962 CEST	49817	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.778754950 CEST	49817	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.778769016 CEST	443	49817	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.778778076 CEST	49817	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.778785944 CEST	443	49817	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.781039953 CEST	49823	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.781075001 CEST	443	49823	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.781140089 CEST	49823	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.781287909 CEST	49823	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.781299114 CEST	443	49823	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.796772957 CEST	443	49818	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.797182083 CEST	443	49818	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.797240973 CEST	49818	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.797270060 CEST	49818	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.797287941 CEST	443	49818	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.797312021 CEST	49818	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.797319889 CEST	443	49818	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.799897909 CEST	49824	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.799921036 CEST	443	49824	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.800033092 CEST	49824	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.800185919 CEST	49824	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.800193071 CEST	443	49824	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.853142977 CEST	443	49820	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.853461981 CEST	443	49820	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.853535891 CEST	49820	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.853607893 CEST	49820	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.853624105 CEST	443	49820	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.853635073 CEST	49820	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.853640079 CEST	443	49820	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.856348038 CEST	49825	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.856379986 CEST	443	49825	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:22.856643915 CEST	49825	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.856643915 CEST	49825	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:22.856674910 CEST	443	49825	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.416915894 CEST	443	49821	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.417406082 CEST	49821	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.417424917 CEST	443	49821	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.418041945 CEST	49821	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.418049097 CEST	443	49821	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.429205894 CEST	443	49822	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.429596901 CEST	49822	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.429610968 CEST	443	49822	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.430016041 CEST	49822	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.430022001 CEST	443	49822	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.474952936 CEST	443	49823	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.475460052 CEST	49823	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.475481033 CEST	443	49823	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.475893974 CEST	49823	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.475904942 CEST	443	49823	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.477152109 CEST	443	49824	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.477475882 CEST	49824	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.477484941 CEST	443	49824	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.477826118 CEST	49824	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.477829933 CEST	443	49824	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.505882978 CEST	443	49825	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.506346941 CEST	49825	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.506362915 CEST	443	49825	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.506901026 CEST	49825	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.506912947 CEST	443	49825	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.521497011 CEST	443	49821	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.522308111 CEST	443	49821	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.522404909 CEST	49821	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.522404909 CEST	49821	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.522438049 CEST	49821	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.522454023 CEST	443	49821	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.525085926 CEST	49826	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.525118113 CEST	443	49826	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.525243044 CEST	49826	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.525379896 CEST	49826	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.525389910 CEST	443	49826	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.529849052 CEST	443	49822	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.529920101 CEST	443	49822	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.529964924 CEST	443	49822	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.530015945 CEST	49822	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.530139923 CEST	49822	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.530147076 CEST	443	49822	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.530210018 CEST	49822	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.530216932 CEST	443	49822	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.532783031 CEST	49827	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.532819033 CEST	443	49827	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.532907963 CEST	49827	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.533056974 CEST	49827	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.533066988 CEST	443	49827	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.580370903 CEST	443	49823	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.580492020 CEST	443	49823	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.580634117 CEST	49823	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.580780029 CEST	49823	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.580790997 CEST	443	49823	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.580802917 CEST	49823	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.580806971 CEST	443	49823	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.582321882 CEST	443	49824	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.582350969 CEST	443	49824	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.582396030 CEST	443	49824	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.582397938 CEST	49824	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.582432032 CEST	49824	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.582593918 CEST	49824	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.582597971 CEST	443	49824	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.582637072 CEST	49824	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.582640886 CEST	443	49824	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.585098982 CEST	49828	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.585128069 CEST	443	49828	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.585212946 CEST	49828	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.585593939 CEST	49828	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.585607052 CEST	443	49828	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.586388111 CEST	49829	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.586425066 CEST	443	49829	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.586503983 CEST	49829	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.586606026 CEST	49829	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.586622000 CEST	443	49829	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.606251955 CEST	443	49825	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.606363058 CEST	443	49825	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.606467962 CEST	49825	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.606534004 CEST	49825	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.606534004 CEST	49825	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.606553078 CEST	443	49825	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.606564045 CEST	443	49825	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.609272003 CEST	49830	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.609311104 CEST	443	49830	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:23.609441996 CEST	49830	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.609623909 CEST	49830	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:23.609637022 CEST	443	49830	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.230895996 CEST	443	49827	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.231559992 CEST	49827	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.231601954 CEST	443	49827	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.231861115 CEST	443	49826	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.232789040 CEST	49827	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.232795954 CEST	443	49827	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.233450890 CEST	49826	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.233469009 CEST	443	49826	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.234107018 CEST	49826	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.234113932 CEST	443	49826	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.306211948 CEST	443	49830	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.306768894 CEST	49830	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.306790113 CEST	443	49830	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.307637930 CEST	49830	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.307646990 CEST	443	49830	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.309201002 CEST	443	49829	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.310023069 CEST	49829	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.310031891 CEST	443	49829	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.310904026 CEST	49829	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.310909033 CEST	443	49829	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.313684940 CEST	443	49828	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.314357996 CEST	49828	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.314371109 CEST	443	49828	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.314874887 CEST	49828	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.314879894 CEST	443	49828	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.335438967 CEST	443	49827	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.335854053 CEST	443	49827	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.335925102 CEST	49827	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.335958004 CEST	49827	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.335984945 CEST	443	49827	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.335995913 CEST	49827	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.336000919 CEST	443	49827	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.341193914 CEST	49831	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.341228008 CEST	443	49831	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.341351986 CEST	49831	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.341504097 CEST	49831	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.341515064 CEST	443	49831	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.344996929 CEST	443	49826	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.345385075 CEST	443	49826	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.345469952 CEST	49826	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.345530033 CEST	49826	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.345547915 CEST	443	49826	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.345696926 CEST	49826	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.345705032 CEST	443	49826	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.349404097 CEST	49832	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.349447966 CEST	443	49832	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.349673033 CEST	49832	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.349869967 CEST	49832	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.349884987 CEST	443	49832	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.415621996 CEST	443	49829	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.416085005 CEST	443	49829	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.416152954 CEST	49829	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.416228056 CEST	49829	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.416244030 CEST	443	49829	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.416255951 CEST	49829	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.416260958 CEST	443	49829	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.420137882 CEST	443	49828	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.420165062 CEST	443	49828	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.420191050 CEST	49833	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.420202017 CEST	443	49828	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.420213938 CEST	49828	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.420214891 CEST	443	49833	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.420289040 CEST	49833	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.420317888 CEST	49828	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.420376062 CEST	49828	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.420376062 CEST	49828	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.420387030 CEST	443	49828	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.420396090 CEST	443	49828	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.421672106 CEST	49833	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.421684980 CEST	443	49833	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.425924063 CEST	443	49830	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.427371979 CEST	443	49830	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.427428961 CEST	49830	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.446851969 CEST	49830	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.446851969 CEST	49830	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.446871042 CEST	443	49830	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.446875095 CEST	443	49830	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.447628975 CEST	49834	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.447654963 CEST	443	49834	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.447746038 CEST	49834	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.448081970 CEST	49834	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.448097944 CEST	443	49834	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.452500105 CEST	49835	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.452549934 CEST	443	49835	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.452604055 CEST	49835	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.452920914 CEST	49835	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.452934980 CEST	443	49835	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.998153925 CEST	443	49832	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.998672009 CEST	49832	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.998706102 CEST	443	49832	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:24.999342918 CEST	49832	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:24.999351978 CEST	443	49832	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.006408930 CEST	443	49831	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.006943941 CEST	49831	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.006970882 CEST	443	49831	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.007379055 CEST	49831	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.007411003 CEST	443	49831	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.075676918 CEST	443	49833	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.076253891 CEST	49833	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.076280117 CEST	443	49833	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.076873064 CEST	49833	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.076890945 CEST	443	49833	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.098241091 CEST	443	49834	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.098984957 CEST	49834	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.099011898 CEST	443	49834	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.099634886 CEST	49834	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.099648952 CEST	443	49834	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.100972891 CEST	443	49832	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.101001978 CEST	443	49832	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.101048946 CEST	443	49832	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.101075888 CEST	49832	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.101123095 CEST	49832	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.101346016 CEST	49832	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.101365089 CEST	443	49832	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.101411104 CEST	49832	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.101417065 CEST	443	49832	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.104652882 CEST	49836	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.104701996 CEST	443	49836	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.104788065 CEST	49836	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.105026960 CEST	49836	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.105040073 CEST	443	49836	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.109261990 CEST	443	49831	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.109587908 CEST	443	49831	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.109642982 CEST	49831	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.109730005 CEST	49831	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.109730005 CEST	49831	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.109750032 CEST	443	49831	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.109761953 CEST	443	49831	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.114001989 CEST	49837	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.114037037 CEST	443	49837	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.114104033 CEST	49837	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.114269018 CEST	49837	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.114279032 CEST	443	49837	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.143212080 CEST	443	49835	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.143785954 CEST	49835	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.143805981 CEST	443	49835	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.144264936 CEST	49835	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.144269943 CEST	443	49835	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.177701950 CEST	443	49833	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.178284883 CEST	443	49833	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.178340912 CEST	49833	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.181680918 CEST	49833	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.181700945 CEST	443	49833	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.195316076 CEST	49838	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.195342064 CEST	443	49838	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.195404053 CEST	49838	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.195698023 CEST	49838	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.195710897 CEST	443	49838	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.199974060 CEST	443	49834	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.200014114 CEST	443	49834	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.200052023 CEST	49834	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.200061083 CEST	443	49834	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.200074911 CEST	443	49834	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.200126886 CEST	49834	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.200484037 CEST	49834	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.200495005 CEST	443	49834	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.200504065 CEST	49834	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.200509071 CEST	443	49834	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.205724001 CEST	49839	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.205765009 CEST	443	49839	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.205823898 CEST	49839	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.206206083 CEST	49839	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.206221104 CEST	443	49839	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.249293089 CEST	443	49835	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.249389887 CEST	443	49835	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.249550104 CEST	49835	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.250121117 CEST	49835	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.250148058 CEST	443	49835	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.250160933 CEST	49835	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.250168085 CEST	443	49835	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.257870913 CEST	49840	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.257916927 CEST	443	49840	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.258153915 CEST	49840	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.258472919 CEST	49840	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.258487940 CEST	443	49840	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.767605066 CEST	443	49836	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.779268026 CEST	443	49837	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.813844919 CEST	49836	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.819969893 CEST	49836	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.819988012 CEST	443	49836	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.829488039 CEST	49837	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.832340002 CEST	49836	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.832364082 CEST	443	49836	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.857099056 CEST	443	49839	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.875725031 CEST	49839	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.875746012 CEST	443	49839	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.876434088 CEST	49839	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.876439095 CEST	443	49839	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.878577948 CEST	443	49838	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.886581898 CEST	49837	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.886598110 CEST	443	49837	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.887639999 CEST	49837	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.887646914 CEST	443	49837	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.888962984 CEST	49838	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.888982058 CEST	443	49838	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.889858961 CEST	49838	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.889866114 CEST	443	49838	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.908746004 CEST	443	49840	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.909795046 CEST	49840	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.909828901 CEST	443	49840	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.910751104 CEST	49840	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.910764933 CEST	443	49840	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.936697006 CEST	443	49836	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.936867952 CEST	443	49836	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.936927080 CEST	49836	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.937520981 CEST	49836	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.937541008 CEST	443	49836	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.937551022 CEST	49836	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.937556982 CEST	443	49836	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.946436882 CEST	49841	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.946489096 CEST	443	49841	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.946562052 CEST	49841	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.946907043 CEST	49841	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.946923018 CEST	443	49841	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.972659111 CEST	443	49839	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.972985983 CEST	443	49839	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.973043919 CEST	49839	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.973181963 CEST	49839	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.973190069 CEST	443	49839	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.973200083 CEST	49839	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.973203897 CEST	443	49839	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.979406118 CEST	49842	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.979434967 CEST	443	49842	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.979574919 CEST	49842	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.979779005 CEST	49842	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.979785919 CEST	443	49842	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.986877918 CEST	443	49837	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.986947060 CEST	443	49837	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.987004995 CEST	49837	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.987050056 CEST	49837	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.988909006 CEST	49837	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.988926888 CEST	443	49837	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.988936901 CEST	49837	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.988943100 CEST	443	49837	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.991755009 CEST	443	49838	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.992186069 CEST	443	49838	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.992230892 CEST	443	49838	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.992237091 CEST	49838	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.992280006 CEST	49838	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.994569063 CEST	49843	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.994611025 CEST	443	49843	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.994692087 CEST	49843	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.995471954 CEST	49838	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.995471954 CEST	49838	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.995488882 CEST	443	49838	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.995497942 CEST	443	49838	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:25.997699976 CEST	49843	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:25.997723103 CEST	443	49843	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.002948999 CEST	49844	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.002979994 CEST	443	49844	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.003042936 CEST	49844	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.003312111 CEST	49844	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.003326893 CEST	443	49844	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.011565924 CEST	443	49840	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.011635065 CEST	443	49840	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.011934042 CEST	49840	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.017584085 CEST	49840	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.017601967 CEST	443	49840	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.017631054 CEST	49840	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.017636061 CEST	443	49840	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.036602020 CEST	49845	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.036638021 CEST	443	49845	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.036703110 CEST	49845	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.038054943 CEST	49845	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.038069963 CEST	443	49845	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.600272894 CEST	443	49841	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.600836039 CEST	49841	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.600856066 CEST	443	49841	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.601325989 CEST	49841	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.601332903 CEST	443	49841	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.660037041 CEST	443	49843	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.660548925 CEST	49843	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.660558939 CEST	443	49843	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.660970926 CEST	49843	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.660974979 CEST	443	49843	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.664063931 CEST	443	49844	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.664427996 CEST	49844	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.664438963 CEST	443	49844	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.664752960 CEST	49844	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.664757967 CEST	443	49844	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.682523966 CEST	443	49842	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.683033943 CEST	49842	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.683063030 CEST	443	49842	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.683502913 CEST	49842	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.683511972 CEST	443	49842	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.702646971 CEST	443	49841	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.702709913 CEST	443	49841	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.702840090 CEST	49841	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.702981949 CEST	49841	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.702982903 CEST	49841	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.703000069 CEST	443	49841	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.703008890 CEST	443	49841	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.705800056 CEST	49846	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.705830097 CEST	443	49846	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.705894947 CEST	49846	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.706037045 CEST	49846	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.706048012 CEST	443	49846	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.713402987 CEST	443	49845	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.713871956 CEST	49845	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.713885069 CEST	443	49845	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.714394093 CEST	49845	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.714399099 CEST	443	49845	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.802630901 CEST	443	49844	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.802725077 CEST	443	49844	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.802891970 CEST	49844	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.803121090 CEST	49844	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.803142071 CEST	443	49844	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.803546906 CEST	443	49843	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.803607941 CEST	443	49843	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.803694010 CEST	49843	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.805062056 CEST	49843	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.805068016 CEST	443	49843	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.805119991 CEST	49843	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.805125952 CEST	443	49843	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.807894945 CEST	443	49842	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.807925940 CEST	443	49842	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.807974100 CEST	443	49842	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.808027029 CEST	49842	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.808053017 CEST	49842	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.808146954 CEST	49847	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.808170080 CEST	443	49847	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.808242083 CEST	49847	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.808811903 CEST	49848	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.808835983 CEST	443	49848	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.809084892 CEST	49848	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.809210062 CEST	49842	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.809238911 CEST	443	49842	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.809283972 CEST	49842	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.809289932 CEST	443	49842	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.812591076 CEST	49849	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.812628984 CEST	443	49849	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.812697887 CEST	49849	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.812942982 CEST	49849	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.812954903 CEST	443	49849	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.813113928 CEST	49847	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.813127995 CEST	443	49847	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.813173056 CEST	49848	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.813186884 CEST	443	49848	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.818159103 CEST	443	49845	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.818835974 CEST	443	49845	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.818902969 CEST	49845	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.836888075 CEST	49845	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.836909056 CEST	443	49845	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.840856075 CEST	49850	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.840913057 CEST	443	49850	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:26.841000080 CEST	49850	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.841131926 CEST	49850	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:26.841145992 CEST	443	49850	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.356158972 CEST	443	49846	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.356745958 CEST	49846	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.356776953 CEST	443	49846	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.357454062 CEST	49846	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.357460022 CEST	443	49846	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.461776972 CEST	443	49846	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.461848974 CEST	443	49846	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.461910963 CEST	49846	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.461935043 CEST	443	49846	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.461962938 CEST	443	49846	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.462238073 CEST	49846	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.462238073 CEST	49846	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.462263107 CEST	443	49846	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.462275982 CEST	49846	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.462282896 CEST	443	49846	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.466633081 CEST	49851	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.466666937 CEST	443	49851	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.466728926 CEST	49851	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.466770887 CEST	443	49848	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.466964006 CEST	49851	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.466975927 CEST	443	49851	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.467710018 CEST	49848	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.467717886 CEST	443	49848	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.468856096 CEST	49848	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.468861103 CEST	443	49848	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.482759953 CEST	443	49847	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.483367920 CEST	49847	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.483383894 CEST	443	49847	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.484224081 CEST	49847	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.484240055 CEST	443	49847	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.507946968 CEST	443	49849	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.521815062 CEST	443	49850	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.526556015 CEST	49849	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.526581049 CEST	443	49849	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.527759075 CEST	49849	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.527765989 CEST	443	49849	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.528367043 CEST	49850	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.528373957 CEST	443	49850	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.529447079 CEST	49850	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.529452085 CEST	443	49850	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.570316076 CEST	443	49848	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.570398092 CEST	443	49848	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.570717096 CEST	49848	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.570900917 CEST	49848	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.570919037 CEST	443	49848	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.575113058 CEST	49852	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.575141907 CEST	443	49852	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.575206041 CEST	49852	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.575529099 CEST	49852	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.575542927 CEST	443	49852	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.587119102 CEST	443	49847	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.587323904 CEST	443	49847	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.587407112 CEST	49847	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.587620020 CEST	49847	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.587644100 CEST	443	49847	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.587654114 CEST	49847	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.587662935 CEST	443	49847	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.592953920 CEST	49853	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.592994928 CEST	443	49853	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.593056917 CEST	49853	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.593483925 CEST	49853	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.593498945 CEST	443	49853	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.629920959 CEST	443	49850	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.630089045 CEST	443	49850	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.630141973 CEST	443	49850	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.630140066 CEST	49850	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.630175114 CEST	443	49849	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.630187988 CEST	49850	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.630573988 CEST	443	49849	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.630608082 CEST	49850	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.630624056 CEST	443	49850	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.630630016 CEST	49850	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.630636930 CEST	443	49850	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.630640984 CEST	49849	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.634433031 CEST	49849	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.634439945 CEST	443	49849	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.634458065 CEST	49849	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.634462118 CEST	443	49849	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.637202978 CEST	49854	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.637237072 CEST	443	49854	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.637393951 CEST	49854	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.638012886 CEST	49854	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.638025045 CEST	443	49854	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.639946938 CEST	49855	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.639986038 CEST	443	49855	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:27.640228033 CEST	49855	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.640378952 CEST	49855	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:27.640393019 CEST	443	49855	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:28.962296963 CEST	443	49855	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:28.962833881 CEST	49855	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:28.962848902 CEST	443	49855	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:28.963469982 CEST	49855	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:28.963475943 CEST	443	49855	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:28.965493917 CEST	443	49851	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:28.965872049 CEST	49851	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:28.965895891 CEST	443	49851	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:28.966345072 CEST	49851	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:28.966352940 CEST	443	49851	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:28.967505932 CEST	443	49852	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:28.967854023 CEST	49852	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:28.967863083 CEST	443	49852	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:28.968347073 CEST	49852	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:28.968354940 CEST	443	49852	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:28.969939947 CEST	443	49853	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:28.970341921 CEST	49853	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:28.970374107 CEST	443	49853	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:28.970815897 CEST	49853	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:28.970823050 CEST	443	49853	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:28.973191023 CEST	443	49854	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:28.973531961 CEST	49854	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:28.973547935 CEST	443	49854	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:28.974016905 CEST	49854	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:28.974021912 CEST	443	49854	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.063371897 CEST	443	49855	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.063569069 CEST	443	49855	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.063632011 CEST	49855	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.063788891 CEST	49855	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.063808918 CEST	443	49855	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.063821077 CEST	49855	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.063827038 CEST	443	49855	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.066859007 CEST	49856	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.066901922 CEST	443	49856	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.067090988 CEST	49856	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.067229033 CEST	49856	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.067241907 CEST	443	49856	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.068722010 CEST	443	49852	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.068947077 CEST	443	49852	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.068991899 CEST	443	49852	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.069045067 CEST	49852	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.069103956 CEST	49852	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.069114923 CEST	443	49852	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.069129944 CEST	49852	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.069137096 CEST	443	49852	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.071631908 CEST	49857	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.071655989 CEST	443	49857	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.071739912 CEST	49857	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.071868896 CEST	49857	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.071875095 CEST	443	49857	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.074758053 CEST	443	49853	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.074947119 CEST	443	49853	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.075036049 CEST	49853	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.075090885 CEST	49853	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.075113058 CEST	443	49853	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.075144053 CEST	49853	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.075150967 CEST	443	49853	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.077496052 CEST	49858	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.077514887 CEST	443	49858	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.077564955 CEST	49858	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.077722073 CEST	49858	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.077733040 CEST	443	49858	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.079566002 CEST	443	49854	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.080038071 CEST	443	49854	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.080089092 CEST	443	49854	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.080096006 CEST	49854	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.080148935 CEST	49854	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.080204964 CEST	49854	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.080213070 CEST	443	49854	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.080236912 CEST	49854	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.080240965 CEST	443	49854	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.082428932 CEST	49859	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.082456112 CEST	443	49859	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.082540989 CEST	49859	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.082750082 CEST	49859	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.082767963 CEST	443	49859	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.095148087 CEST	443	49851	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.095299006 CEST	443	49851	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.095721960 CEST	49851	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.095721960 CEST	49851	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.095769882 CEST	49851	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.095777988 CEST	443	49851	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.098103046 CEST	49860	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.098135948 CEST	443	49860	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.098284006 CEST	49860	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.098448992 CEST	49860	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.098481894 CEST	443	49860	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.714298010 CEST	443	49856	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.714926958 CEST	49856	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.714946032 CEST	443	49856	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.715403080 CEST	49856	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.715406895 CEST	443	49856	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.724615097 CEST	443	49858	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.725089073 CEST	49858	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.725123882 CEST	443	49858	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.725522995 CEST	49858	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.725529909 CEST	443	49858	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.731240988 CEST	443	49859	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.731686115 CEST	49859	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.731694937 CEST	443	49859	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.732053995 CEST	49859	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.732059956 CEST	443	49859	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.770040989 CEST	443	49857	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.770492077 CEST	49857	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.770510912 CEST	443	49857	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.770977020 CEST	49857	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.770982981 CEST	443	49857	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.774301052 CEST	443	49860	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.774710894 CEST	49860	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.774735928 CEST	443	49860	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.775223017 CEST	49860	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.775229931 CEST	443	49860	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.815146923 CEST	443	49856	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.815236092 CEST	443	49856	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.815284967 CEST	443	49856	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.815289974 CEST	49856	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.815329075 CEST	49856	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.815450907 CEST	49856	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.815471888 CEST	443	49856	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.815479040 CEST	49856	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.815484047 CEST	443	49856	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.818433046 CEST	49861	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.818483114 CEST	443	49861	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.818553925 CEST	49861	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.818752050 CEST	49861	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.818764925 CEST	443	49861	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.825509071 CEST	443	49858	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.825596094 CEST	443	49858	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.825643063 CEST	49858	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.825654030 CEST	443	49858	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.825668097 CEST	443	49858	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.825716972 CEST	49858	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.825742960 CEST	49858	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.825747013 CEST	443	49858	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.825759888 CEST	49858	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.825763941 CEST	443	49858	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.828324080 CEST	49862	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.828337908 CEST	443	49862	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.828401089 CEST	49862	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.828617096 CEST	49862	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.828627110 CEST	443	49862	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.832060099 CEST	443	49859	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.832315922 CEST	443	49859	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.832439899 CEST	49859	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.832475901 CEST	49859	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.832484007 CEST	443	49859	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.832495928 CEST	49859	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.832500935 CEST	443	49859	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.834773064 CEST	49863	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.834811926 CEST	443	49863	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.834875107 CEST	49863	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.835043907 CEST	49863	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.835056067 CEST	443	49863	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.873764038 CEST	443	49860	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.873869896 CEST	443	49860	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.874037981 CEST	49860	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.874124050 CEST	49860	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.874147892 CEST	443	49860	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.874157906 CEST	49860	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.874162912 CEST	443	49860	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.875269890 CEST	443	49857	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.875329971 CEST	443	49857	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.875477076 CEST	49857	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.875590086 CEST	49857	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.875602961 CEST	443	49857	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.875617981 CEST	49857	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.875623941 CEST	443	49857	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.877583027 CEST	49864	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.877615929 CEST	443	49864	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.877665043 CEST	49864	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.877965927 CEST	49864	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.877976894 CEST	443	49864	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.879223108 CEST	49865	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.879252911 CEST	443	49865	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:29.879401922 CEST	49865	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.879683971 CEST	49865	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:29.879697084 CEST	443	49865	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.467539072 CEST	443	49861	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.468715906 CEST	49861	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.468715906 CEST	49861	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.468802929 CEST	443	49861	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.468836069 CEST	443	49861	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.495198965 CEST	443	49862	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.496220112 CEST	49862	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.496220112 CEST	49862	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.496242046 CEST	443	49862	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.496246099 CEST	443	49862	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.499270916 CEST	443	49863	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.499654055 CEST	49863	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.499676943 CEST	443	49863	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.500030041 CEST	49863	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.500042915 CEST	443	49863	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.527584076 CEST	443	49864	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.528587103 CEST	49864	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.528587103 CEST	49864	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.528619051 CEST	443	49864	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.528630018 CEST	443	49864	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.530853033 CEST	443	49865	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.531305075 CEST	49865	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.531313896 CEST	443	49865	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.531896114 CEST	49865	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.531902075 CEST	443	49865	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.568151951 CEST	443	49861	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.568231106 CEST	443	49861	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.568500996 CEST	49861	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.568500996 CEST	49861	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.568500996 CEST	49861	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.571170092 CEST	49866	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.571203947 CEST	443	49866	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.571643114 CEST	49866	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.571643114 CEST	49866	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.571677923 CEST	443	49866	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.599750996 CEST	443	49862	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.599771023 CEST	443	49862	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.599811077 CEST	443	49862	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.599843025 CEST	49862	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.599967957 CEST	49862	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.600178957 CEST	49862	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.600178957 CEST	49862	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.600188971 CEST	443	49862	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.600197077 CEST	443	49862	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.600554943 CEST	443	49863	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.600820065 CEST	443	49863	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.602972031 CEST	49867	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.603012085 CEST	443	49867	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.603085995 CEST	49867	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.603090048 CEST	49863	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.603090048 CEST	49863	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.603090048 CEST	49863	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.603317976 CEST	49867	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.603332996 CEST	443	49867	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.605439901 CEST	49868	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.605469942 CEST	443	49868	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.605783939 CEST	49868	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.605783939 CEST	49868	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.605812073 CEST	443	49868	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.628582954 CEST	443	49864	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.629517078 CEST	443	49864	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.629568100 CEST	443	49864	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.629654884 CEST	49864	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.631184101 CEST	49864	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.632936954 CEST	443	49865	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.633018970 CEST	443	49865	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.633176088 CEST	49865	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.633383036 CEST	49864	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.633410931 CEST	443	49864	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.633493900 CEST	49864	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.633502007 CEST	443	49864	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.633573055 CEST	49865	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.633573055 CEST	49865	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.633589983 CEST	443	49865	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.633594990 CEST	443	49865	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.636694908 CEST	49869	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.636694908 CEST	49870	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.636720896 CEST	443	49869	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.636758089 CEST	443	49870	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.636945009 CEST	49869	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.636945009 CEST	49870	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.636945009 CEST	49869	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.636976004 CEST	443	49869	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.637074947 CEST	49870	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.637088060 CEST	443	49870	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.876399994 CEST	49861	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.876430035 CEST	443	49861	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:30.907803059 CEST	49863	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:30.907823086 CEST	443	49863	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.233112097 CEST	443	49866	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.233668089 CEST	49866	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.233680964 CEST	443	49866	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.234143019 CEST	49866	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.234155893 CEST	443	49866	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.253349066 CEST	443	49867	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.253906012 CEST	49867	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.253921032 CEST	443	49867	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.254381895 CEST	49867	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.254388094 CEST	443	49867	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.283457041 CEST	443	49868	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.283921003 CEST	49868	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.283936977 CEST	443	49868	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.284392118 CEST	49868	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.284395933 CEST	443	49868	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.291188955 CEST	443	49870	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.291799068 CEST	49870	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.291821003 CEST	443	49870	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.292433977 CEST	49870	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.292442083 CEST	443	49870	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.301568985 CEST	443	49869	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.305955887 CEST	49869	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.305963993 CEST	443	49869	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.306489944 CEST	49869	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.306494951 CEST	443	49869	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.337686062 CEST	443	49866	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.337754965 CEST	443	49866	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.337878942 CEST	49866	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.338121891 CEST	49866	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.338121891 CEST	49866	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.338140965 CEST	443	49866	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.338145971 CEST	443	49866	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.341049910 CEST	49871	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.341098070 CEST	443	49871	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.341305971 CEST	49871	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.341500998 CEST	49871	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.341512918 CEST	443	49871	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.355660915 CEST	443	49867	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.355721951 CEST	443	49867	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.355820894 CEST	49867	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.356106043 CEST	49867	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.356106043 CEST	49867	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.356127024 CEST	443	49867	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.356159925 CEST	443	49867	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.358954906 CEST	49872	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.358982086 CEST	443	49872	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.359117031 CEST	49872	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.359293938 CEST	49872	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.359308004 CEST	443	49872	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.389524937 CEST	443	49868	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.389563084 CEST	443	49868	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.389611006 CEST	443	49868	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.389659882 CEST	49868	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.389659882 CEST	49868	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.389898062 CEST	49868	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.389911890 CEST	443	49868	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.389964104 CEST	49868	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.389971972 CEST	443	49868	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.392891884 CEST	49873	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.392923117 CEST	443	49873	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.393021107 CEST	49873	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.393147945 CEST	49873	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.393162012 CEST	443	49873	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.393173933 CEST	443	49870	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.393225908 CEST	443	49870	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.393269062 CEST	443	49870	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.393323898 CEST	49870	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.393374920 CEST	49870	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.393389940 CEST	443	49870	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.393414021 CEST	49870	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.393419027 CEST	443	49870	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.395502090 CEST	49874	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.395524025 CEST	443	49874	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.395694971 CEST	49874	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.395847082 CEST	49874	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.395859003 CEST	443	49874	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.405860901 CEST	443	49869	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.406272888 CEST	443	49869	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.406338930 CEST	49869	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.406408072 CEST	49869	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.406419039 CEST	443	49869	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.406433105 CEST	49869	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.406436920 CEST	443	49869	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.408981085 CEST	49875	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.409029961 CEST	443	49875	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:31.409101963 CEST	49875	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.409246922 CEST	49875	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:31.409276962 CEST	443	49875	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.007755041 CEST	443	49871	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.026959896 CEST	49871	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.026988029 CEST	443	49871	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.027462006 CEST	49871	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.027467966 CEST	443	49871	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.032805920 CEST	443	49872	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.037563086 CEST	49872	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.037563086 CEST	49872	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.037621975 CEST	443	49872	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.037678957 CEST	443	49872	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.050779104 CEST	443	49874	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.051889896 CEST	49874	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.051901102 CEST	443	49874	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.052802086 CEST	49874	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.052808046 CEST	443	49874	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.089986086 CEST	443	49873	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.102210045 CEST	443	49875	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.108839989 CEST	49873	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.108863115 CEST	443	49873	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.109750032 CEST	49873	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.109756947 CEST	443	49873	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.116702080 CEST	49875	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.116734982 CEST	443	49875	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.117347956 CEST	49875	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.117358923 CEST	443	49875	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.124948978 CEST	443	49871	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.125127077 CEST	443	49871	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.125300884 CEST	49871	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.127645016 CEST	49871	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.127660990 CEST	443	49871	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.127671957 CEST	49871	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.127677917 CEST	443	49871	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.133569002 CEST	49876	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.133611917 CEST	443	49876	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.133724928 CEST	49876	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.133930922 CEST	49876	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.133948088 CEST	443	49876	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.136327028 CEST	443	49872	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.136432886 CEST	443	49872	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.136482000 CEST	49872	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.141282082 CEST	49872	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.141299009 CEST	443	49872	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.151041031 CEST	49877	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.151078939 CEST	443	49877	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.151146889 CEST	49877	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.151586056 CEST	49877	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.151604891 CEST	443	49877	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.154359102 CEST	443	49874	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.154408932 CEST	443	49874	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.154694080 CEST	49874	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.154829025 CEST	49874	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.154829025 CEST	49874	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.154844999 CEST	443	49874	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.154854059 CEST	443	49874	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.160320044 CEST	49878	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.160360098 CEST	443	49878	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.160476923 CEST	49878	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.160653114 CEST	49878	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.160674095 CEST	443	49878	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.214246035 CEST	443	49873	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.214410067 CEST	443	49873	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.214476109 CEST	49873	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.219505072 CEST	443	49875	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.219638109 CEST	443	49875	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.219849110 CEST	49875	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.227848053 CEST	49873	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.227861881 CEST	443	49873	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.230184078 CEST	49875	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.230216980 CEST	443	49875	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.230225086 CEST	49875	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.230232000 CEST	443	49875	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.253247023 CEST	49879	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.253287077 CEST	443	49879	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.253344059 CEST	49879	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.254302979 CEST	49880	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.254322052 CEST	443	49880	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.254465103 CEST	49880	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.255408049 CEST	49879	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.255418062 CEST	443	49879	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.255676985 CEST	49880	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.255688906 CEST	443	49880	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.810198069 CEST	443	49876	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.811039925 CEST	49876	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.811067104 CEST	443	49876	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.811557055 CEST	49876	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.811563015 CEST	443	49876	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.814610004 CEST	443	49877	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.815320015 CEST	49877	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.815351009 CEST	443	49877	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.816221952 CEST	49877	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.816229105 CEST	443	49877	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.837316990 CEST	443	49878	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.837908983 CEST	49878	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.837918997 CEST	443	49878	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.838428974 CEST	49878	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.838433027 CEST	443	49878	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.900687933 CEST	443	49879	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.901202917 CEST	49879	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.901235104 CEST	443	49879	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.902446985 CEST	49879	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.902453899 CEST	443	49879	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.914706945 CEST	443	49876	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.915585995 CEST	443	49876	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.915695906 CEST	49876	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.915755987 CEST	49876	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.915755987 CEST	49876	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.915774107 CEST	443	49876	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.915782928 CEST	443	49876	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.917820930 CEST	443	49877	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.917892933 CEST	443	49877	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.918303013 CEST	49877	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.918950081 CEST	49877	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.918967962 CEST	443	49877	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.918987989 CEST	49877	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.918993950 CEST	443	49877	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.919891119 CEST	443	49880	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.920591116 CEST	49880	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.920625925 CEST	443	49880	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.921566010 CEST	49880	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.921578884 CEST	443	49880	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.925002098 CEST	49881	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.925035954 CEST	443	49881	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.925132990 CEST	49881	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.925487041 CEST	49881	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.925499916 CEST	443	49881	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.930003881 CEST	49882	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.930016041 CEST	443	49882	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.930077076 CEST	49882	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.930440903 CEST	49882	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.930455923 CEST	443	49882	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.944045067 CEST	443	49878	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.944442034 CEST	443	49878	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.944500923 CEST	443	49878	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.944504976 CEST	49878	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.944547892 CEST	49878	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.944660902 CEST	49878	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.944673061 CEST	443	49878	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.944683075 CEST	49878	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.944688082 CEST	443	49878	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.949933052 CEST	49883	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.949991941 CEST	443	49883	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:32.950072050 CEST	49883	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.950381041 CEST	49883	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:32.950397968 CEST	443	49883	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.001888990 CEST	443	49879	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.001977921 CEST	443	49879	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.002454996 CEST	49879	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.002454996 CEST	49879	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.002732038 CEST	49879	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.002741098 CEST	443	49879	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.007364035 CEST	49884	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.007405996 CEST	443	49884	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.007580042 CEST	49884	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.007945061 CEST	49884	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.007957935 CEST	443	49884	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.030570984 CEST	443	49880	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.031011105 CEST	443	49880	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.031107903 CEST	49880	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.040541887 CEST	49880	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.040591955 CEST	443	49880	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.040602922 CEST	49880	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.040611029 CEST	443	49880	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.044807911 CEST	49885	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.044842005 CEST	443	49885	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.044924021 CEST	49885	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.045134068 CEST	49885	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.045145035 CEST	443	49885	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.714495897 CEST	443	49881	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.714670897 CEST	443	49885	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.715629101 CEST	49881	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.715642929 CEST	443	49881	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.716634989 CEST	443	49884	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.716942072 CEST	49881	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.716948032 CEST	443	49881	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.717379093 CEST	49885	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.717394114 CEST	443	49885	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.717864037 CEST	49885	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.717870951 CEST	443	49885	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.718346119 CEST	49884	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.718364000 CEST	443	49884	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.718863964 CEST	443	49883	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.719204903 CEST	443	49882	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.719371080 CEST	49884	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.719377041 CEST	443	49884	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.720582962 CEST	49883	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.720613003 CEST	443	49883	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.721831083 CEST	49883	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.721837044 CEST	443	49883	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.722223043 CEST	49882	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.722239971 CEST	443	49882	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.723270893 CEST	49882	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.723274946 CEST	443	49882	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.816065073 CEST	443	49885	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.816176891 CEST	443	49885	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.816225052 CEST	443	49881	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.816232920 CEST	49885	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.816804886 CEST	443	49881	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.816910028 CEST	49881	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.817500114 CEST	443	49884	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.817529917 CEST	443	49884	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.817573071 CEST	443	49884	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.817591906 CEST	49884	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.817656994 CEST	49884	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.817747116 CEST	49885	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.817763090 CEST	443	49885	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.817776918 CEST	49885	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.817783117 CEST	443	49885	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.818182945 CEST	49881	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.818202019 CEST	443	49881	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.822304010 CEST	443	49882	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.822333097 CEST	443	49882	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.822338104 CEST	443	49883	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.822398901 CEST	443	49882	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.822468042 CEST	49882	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.822468042 CEST	49882	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.822489977 CEST	443	49883	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.822535992 CEST	443	49883	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.822586060 CEST	49883	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.823024988 CEST	49884	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.823024988 CEST	49884	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.823040962 CEST	443	49884	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.823045015 CEST	443	49884	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.825345039 CEST	49886	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.825370073 CEST	443	49886	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.825469971 CEST	49886	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.825591087 CEST	49882	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.825597048 CEST	443	49882	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.828691006 CEST	49883	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.828715086 CEST	443	49883	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.850229025 CEST	49886	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.850249052 CEST	443	49886	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.853878975 CEST	49887	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.853909969 CEST	443	49887	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.853969097 CEST	49887	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.854533911 CEST	49887	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.854548931 CEST	443	49887	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.855787992 CEST	49888	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.855798960 CEST	443	49888	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.856050014 CEST	49888	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.856225014 CEST	49888	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.856237888 CEST	443	49888	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.859585047 CEST	49889	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.859615088 CEST	443	49889	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.859767914 CEST	49889	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.860374928 CEST	49889	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.860388994 CEST	443	49889	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.860881090 CEST	49890	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.860891104 CEST	443	49890	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:33.861036062 CEST	49890	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.861139059 CEST	49890	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:33.861150026 CEST	443	49890	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.429841042 CEST	50835	53	192.168.2.10	162.159.36.2
Oct 13, 2024 20:11:34.434762001 CEST	53	50835	162.159.36.2	192.168.2.10
Oct 13, 2024 20:11:34.434847116 CEST	50835	53	192.168.2.10	162.159.36.2
Oct 13, 2024 20:11:34.479518890 CEST	50835	53	192.168.2.10	162.159.36.2
Oct 13, 2024 20:11:34.485995054 CEST	53	50835	162.159.36.2	192.168.2.10
Oct 13, 2024 20:11:34.499165058 CEST	443	49886	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.500360012 CEST	49886	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.500376940 CEST	443	49886	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.501375914 CEST	49886	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.501394033 CEST	443	49886	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.504041910 CEST	443	49887	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.504951000 CEST	49887	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.504976988 CEST	443	49887	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.505470991 CEST	49887	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.505476952 CEST	443	49887	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.511394978 CEST	443	49889	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.511595011 CEST	443	49890	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.512542963 CEST	49889	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.512564898 CEST	443	49889	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.513277054 CEST	49889	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.513288975 CEST	443	49889	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.513758898 CEST	49890	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.513777018 CEST	443	49890	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.514605999 CEST	49890	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.514611959 CEST	443	49890	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.514811039 CEST	443	49888	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.515914917 CEST	49888	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.515933990 CEST	443	49888	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.516376972 CEST	49888	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.516382933 CEST	443	49888	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.604698896 CEST	443	49886	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.605281115 CEST	443	49886	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.605334044 CEST	443	49886	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.605350018 CEST	49886	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.605418921 CEST	49886	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.606134892 CEST	443	49887	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.606316090 CEST	49886	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.606316090 CEST	49886	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.606340885 CEST	443	49886	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.606353045 CEST	443	49887	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.606353998 CEST	443	49886	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.606456995 CEST	49887	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.609467983 CEST	49887	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.609489918 CEST	443	49887	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.609497070 CEST	49887	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.609503031 CEST	443	49887	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.612746954 CEST	443	49889	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.612776041 CEST	443	49889	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.612870932 CEST	49889	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.612891912 CEST	443	49889	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.613110065 CEST	443	49889	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.613234997 CEST	49889	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.613248110 CEST	443	49890	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.613841057 CEST	49889	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.613841057 CEST	49889	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.613861084 CEST	443	49889	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.613873005 CEST	443	49889	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.613990068 CEST	443	49890	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.614044905 CEST	443	49890	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.614079952 CEST	49890	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.614173889 CEST	49890	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.616081953 CEST	443	49888	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.616179943 CEST	443	49888	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.616219997 CEST	443	49888	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.616276979 CEST	49888	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.616295099 CEST	49888	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.616525888 CEST	49890	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.616525888 CEST	49890	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.616545916 CEST	443	49890	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.616555929 CEST	443	49890	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.619188070 CEST	49888	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.619188070 CEST	49888	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.619198084 CEST	443	49888	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.619210958 CEST	443	49888	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.621722937 CEST	50836	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.621746063 CEST	443	50836	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.621824026 CEST	50836	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.623794079 CEST	50837	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.623830080 CEST	443	50837	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.623909950 CEST	50837	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.625538111 CEST	50838	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.625546932 CEST	443	50838	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.625715971 CEST	50838	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.625899076 CEST	50836	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.625910997 CEST	443	50836	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.628587008 CEST	50837	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.628597975 CEST	443	50837	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.629998922 CEST	50838	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.630009890 CEST	443	50838	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.631897926 CEST	50840	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.631936073 CEST	443	50840	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.632030010 CEST	50840	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.632208109 CEST	50840	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.632225990 CEST	443	50840	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.632364988 CEST	50839	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.632378101 CEST	443	50839	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.632457972 CEST	50839	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.633691072 CEST	50839	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:34.633702040 CEST	443	50839	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:34.908761024 CEST	53	50835	162.159.36.2	192.168.2.10
Oct 13, 2024 20:11:34.909619093 CEST	50835	53	192.168.2.10	162.159.36.2
Oct 13, 2024 20:11:34.915093899 CEST	53	50835	162.159.36.2	192.168.2.10
Oct 13, 2024 20:11:34.915203094 CEST	50835	53	192.168.2.10	162.159.36.2
Oct 13, 2024 20:11:35.280399084 CEST	443	50840	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.281223059 CEST	50840	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.281236887 CEST	443	50840	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.282075882 CEST	50840	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.282083035 CEST	443	50840	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.297192097 CEST	443	50837	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.297640085 CEST	50837	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.297667980 CEST	443	50837	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.298522949 CEST	50837	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.298537970 CEST	443	50837	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.299130917 CEST	443	50836	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.299628019 CEST	443	50839	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.299632072 CEST	50836	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.299642086 CEST	443	50836	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.300395012 CEST	50836	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.300400019 CEST	443	50836	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.300407887 CEST	443	50838	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.300828934 CEST	50839	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.300838947 CEST	443	50839	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.301918983 CEST	50839	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.301923990 CEST	443	50839	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.302094936 CEST	50838	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.302119017 CEST	443	50838	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.302591085 CEST	50838	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.302598000 CEST	443	50838	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.430198908 CEST	443	50840	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.430275917 CEST	443	50840	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.430358887 CEST	50840	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.432533979 CEST	50840	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.432533979 CEST	50840	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.432555914 CEST	443	50840	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.432566881 CEST	443	50840	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.432619095 CEST	443	50836	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.432678938 CEST	443	50836	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.432768106 CEST	50836	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.432773113 CEST	443	50839	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.432804108 CEST	443	50839	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.432852030 CEST	443	50839	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.432862997 CEST	50836	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.432862997 CEST	50839	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.432874918 CEST	443	50836	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.432876110 CEST	443	50838	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.432933092 CEST	50839	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.432949066 CEST	443	50838	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.432993889 CEST	50838	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.433593988 CEST	50839	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.433593988 CEST	50839	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.433619022 CEST	443	50839	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.433634996 CEST	443	50839	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.434672117 CEST	50838	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.434688091 CEST	443	50838	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.434710979 CEST	50838	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.434717894 CEST	443	50838	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.436732054 CEST	50842	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.436777115 CEST	443	50842	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.436918974 CEST	50843	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.436928034 CEST	50842	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.436950922 CEST	443	50843	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.437047005 CEST	50843	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.437690973 CEST	50844	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.437716961 CEST	443	50844	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.437772036 CEST	50845	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.437796116 CEST	443	50845	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.437874079 CEST	50844	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.437874079 CEST	50845	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.437901020 CEST	50843	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.437911034 CEST	443	50843	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.437975883 CEST	50842	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.438009024 CEST	443	50842	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.438050032 CEST	50844	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.438060999 CEST	443	50844	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.438213110 CEST	50845	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.438226938 CEST	443	50845	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.441123962 CEST	443	50837	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.441190958 CEST	443	50837	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.441251040 CEST	50837	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.441394091 CEST	50837	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.441401958 CEST	443	50837	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.441411972 CEST	50837	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.441417933 CEST	443	50837	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.443958998 CEST	50846	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.443978071 CEST	443	50846	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:35.444096088 CEST	50846	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.444231033 CEST	50846	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:35.444253922 CEST	443	50846	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.088434935 CEST	443	50845	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.088946104 CEST	50845	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.088960886 CEST	443	50845	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.089462996 CEST	50845	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.089468002 CEST	443	50845	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.093874931 CEST	443	50842	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.094270945 CEST	50842	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.094290018 CEST	443	50842	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.094691038 CEST	50842	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.094697952 CEST	443	50842	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.100246906 CEST	443	50844	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.100622892 CEST	50844	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.100646019 CEST	443	50844	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.101047993 CEST	50844	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.101052999 CEST	443	50844	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.107422113 CEST	443	50846	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.107975960 CEST	50846	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.107988119 CEST	443	50846	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.108584881 CEST	50846	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.108589888 CEST	443	50846	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.146883965 CEST	443	50843	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.147418976 CEST	50843	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.147429943 CEST	443	50843	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.148041964 CEST	50843	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.148046970 CEST	443	50843	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.190402031 CEST	443	50845	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.190789938 CEST	443	50845	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.190880060 CEST	50845	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.190972090 CEST	50845	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.190972090 CEST	50845	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.190994024 CEST	443	50845	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.191010952 CEST	443	50845	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.194144011 CEST	50848	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.194185972 CEST	443	50848	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.194252014 CEST	50848	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.194514036 CEST	50848	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.194530964 CEST	443	50848	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.196614027 CEST	443	50842	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.197565079 CEST	443	50842	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.197617054 CEST	443	50842	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.197624922 CEST	50842	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.197686911 CEST	50842	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.197736025 CEST	50842	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.197752953 CEST	443	50842	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.197762966 CEST	50842	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.197767973 CEST	443	50842	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.200648069 CEST	50849	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.200674057 CEST	443	50849	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.200767994 CEST	50849	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.201059103 CEST	50849	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.201072931 CEST	443	50849	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.202881098 CEST	443	50844	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.203596115 CEST	443	50844	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.203666925 CEST	50844	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.203713894 CEST	50844	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.203713894 CEST	50844	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.203731060 CEST	443	50844	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.203741074 CEST	443	50844	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.206427097 CEST	50850	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.206450939 CEST	443	50850	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.206612110 CEST	50850	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.206681967 CEST	50850	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.206691980 CEST	443	50850	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.211153030 CEST	443	50846	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.211222887 CEST	443	50846	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.211397886 CEST	50846	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.211493969 CEST	50846	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.211494923 CEST	50846	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.211507082 CEST	443	50846	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.211524963 CEST	443	50846	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.213785887 CEST	50851	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.213818073 CEST	443	50851	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.213968992 CEST	50851	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.214133978 CEST	50851	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.214144945 CEST	443	50851	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.253973961 CEST	443	50843	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.254003048 CEST	443	50843	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.254050970 CEST	443	50843	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.254071951 CEST	50843	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.254122019 CEST	50843	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.254364014 CEST	50843	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.254364014 CEST	50843	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.254379988 CEST	443	50843	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.254395008 CEST	443	50843	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.257394075 CEST	50852	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.257438898 CEST	443	50852	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.257556915 CEST	50852	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.257754087 CEST	50852	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.257775068 CEST	443	50852	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.813446999 CEST	443	50850	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.814112902 CEST	50850	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.814127922 CEST	443	50850	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.814606905 CEST	50850	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.814611912 CEST	443	50850	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.896852970 CEST	443	50851	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.897495031 CEST	50851	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.897511959 CEST	443	50851	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.897954941 CEST	50851	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.897962093 CEST	443	50851	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.901700020 CEST	443	50849	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.902272940 CEST	50849	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.902282953 CEST	443	50849	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.902463913 CEST	50849	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.902468920 CEST	443	50849	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.907428026 CEST	443	50848	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.907916069 CEST	50848	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.907938957 CEST	443	50848	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.908291101 CEST	50848	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.908298016 CEST	443	50848	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.920344114 CEST	443	50850	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.920456886 CEST	443	50850	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.920661926 CEST	50850	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.920661926 CEST	50850	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.920752048 CEST	50850	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.920767069 CEST	443	50850	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.923690081 CEST	50853	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.923726082 CEST	443	50853	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.923795938 CEST	50853	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.923966885 CEST	50853	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.923974991 CEST	443	50853	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.949184895 CEST	443	50852	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.949728012 CEST	50852	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.949742079 CEST	443	50852	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.950145006 CEST	50852	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.950154066 CEST	443	50852	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.998919010 CEST	443	50851	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.998958111 CEST	443	50851	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.999011040 CEST	443	50851	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.999057055 CEST	50851	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.999129057 CEST	50851	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.999486923 CEST	50851	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.999486923 CEST	50851	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:36.999507904 CEST	443	50851	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:36.999516964 CEST	443	50851	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.002576113 CEST	50854	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.002614021 CEST	443	50854	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.002707958 CEST	50854	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.002798080 CEST	443	50849	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.002856016 CEST	443	50849	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.002960920 CEST	50854	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.002978086 CEST	443	50854	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.003005981 CEST	50849	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.003180981 CEST	50849	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.003200054 CEST	443	50849	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.003216028 CEST	50849	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.003222942 CEST	443	50849	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.005326033 CEST	50855	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.005371094 CEST	443	50855	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.005597115 CEST	50855	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.005800009 CEST	50855	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.005812883 CEST	443	50855	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.018338919 CEST	443	50848	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.018405914 CEST	443	50848	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.018486023 CEST	50848	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.018687010 CEST	50848	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.018687010 CEST	50848	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.018709898 CEST	443	50848	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.018719912 CEST	443	50848	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.021636009 CEST	50856	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.021683931 CEST	443	50856	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.021761894 CEST	50856	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.022013903 CEST	50856	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.022028923 CEST	443	50856	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.056395054 CEST	443	50852	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.056540012 CEST	443	50852	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.056664944 CEST	50852	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.056941032 CEST	50852	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.056941032 CEST	50852	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.056956053 CEST	443	50852	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.056967974 CEST	443	50852	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.059906960 CEST	50857	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.059957027 CEST	443	50857	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.060146093 CEST	50857	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.060306072 CEST	50857	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.060323000 CEST	443	50857	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.578321934 CEST	443	50853	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.578857899 CEST	50853	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.578882933 CEST	443	50853	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.579456091 CEST	50853	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.579461098 CEST	443	50853	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.653676033 CEST	443	50854	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.654227972 CEST	50854	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.654252052 CEST	443	50854	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.654844999 CEST	50854	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.654850006 CEST	443	50854	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.679107904 CEST	443	50853	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.679548025 CEST	443	50853	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.679605961 CEST	443	50853	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.679678917 CEST	50853	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.679708958 CEST	50853	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.679708958 CEST	50853	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.679723024 CEST	443	50853	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.679733038 CEST	443	50853	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.682461977 CEST	50858	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.682498932 CEST	443	50858	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.682776928 CEST	50858	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.682827950 CEST	50858	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.682833910 CEST	443	50858	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.684431076 CEST	443	50855	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.684926987 CEST	50855	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.684941053 CEST	443	50855	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.685404062 CEST	50855	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.685410023 CEST	443	50855	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.689555883 CEST	443	50856	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.689898014 CEST	50856	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.689919949 CEST	443	50856	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.690284967 CEST	50856	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.690289974 CEST	443	50856	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.738379955 CEST	443	50857	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.739147902 CEST	50857	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.739176989 CEST	443	50857	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.739548922 CEST	50857	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.739553928 CEST	443	50857	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.755578041 CEST	443	50854	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.755650043 CEST	443	50854	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.755814075 CEST	50854	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.755862951 CEST	50854	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.755883932 CEST	443	50854	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.755897045 CEST	50854	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.755904913 CEST	443	50854	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.758600950 CEST	50859	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.758645058 CEST	443	50859	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.758737087 CEST	50859	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.758846045 CEST	50859	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.758857965 CEST	443	50859	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.789594889 CEST	443	50855	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.790096045 CEST	443	50855	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.790141106 CEST	443	50855	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.790147066 CEST	50855	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.790231943 CEST	50855	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.790231943 CEST	50855	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.790293932 CEST	50855	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.790309906 CEST	443	50855	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.791677952 CEST	443	50856	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.792531967 CEST	443	50856	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.792598963 CEST	50856	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.792630911 CEST	50856	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.792644978 CEST	443	50856	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.792660952 CEST	50856	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.792665958 CEST	443	50856	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.792946100 CEST	50860	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.792979002 CEST	443	50860	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.793067932 CEST	50860	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.793287992 CEST	50860	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.793299913 CEST	443	50860	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.794550896 CEST	50861	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.794584036 CEST	443	50861	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.794681072 CEST	50861	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.794874907 CEST	50861	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.794883013 CEST	443	50861	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.843272924 CEST	443	50857	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.843663931 CEST	443	50857	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.843708992 CEST	443	50857	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.843782902 CEST	50857	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.843782902 CEST	50857	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.844086885 CEST	50857	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.844088078 CEST	50857	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.844098091 CEST	443	50857	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.844101906 CEST	443	50857	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.847079039 CEST	50862	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.847105026 CEST	443	50862	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:37.847527027 CEST	50862	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.848241091 CEST	50862	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:37.848251104 CEST	443	50862	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.336756945 CEST	443	50858	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.337295055 CEST	50858	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.337313890 CEST	443	50858	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.337766886 CEST	50858	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.337771893 CEST	443	50858	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.419684887 CEST	443	50859	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.420226097 CEST	50859	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.420249939 CEST	443	50859	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.420706034 CEST	50859	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.420717001 CEST	443	50859	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.441437960 CEST	443	50860	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.441466093 CEST	443	50858	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.441598892 CEST	443	50858	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.441658974 CEST	50858	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.441845894 CEST	50858	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.441867113 CEST	443	50858	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.441880941 CEST	50858	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.441885948 CEST	443	50858	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.442090034 CEST	50860	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.442106962 CEST	443	50860	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.442514896 CEST	50860	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.442519903 CEST	443	50860	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.444785118 CEST	50864	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.444835901 CEST	443	50864	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.444956064 CEST	50864	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.445126057 CEST	50864	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.445146084 CEST	443	50864	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.475589037 CEST	443	50861	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.476124048 CEST	50861	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.476138115 CEST	443	50861	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.476582050 CEST	50861	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.476588011 CEST	443	50861	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.499315023 CEST	443	50862	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.499866962 CEST	50862	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.499887943 CEST	443	50862	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.500318050 CEST	50862	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.500324965 CEST	443	50862	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.523988008 CEST	443	50859	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.524063110 CEST	443	50859	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.524193048 CEST	50859	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.524195910 CEST	443	50859	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.524352074 CEST	50859	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.524739981 CEST	50859	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.524756908 CEST	443	50859	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.524766922 CEST	50859	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.524772882 CEST	443	50859	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.529386044 CEST	50865	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.529432058 CEST	443	50865	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.529515028 CEST	50865	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.529860973 CEST	50865	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.529876947 CEST	443	50865	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.543154955 CEST	443	50860	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.543178082 CEST	443	50860	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.543237925 CEST	50860	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.543239117 CEST	443	50860	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.543296099 CEST	50860	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.543492079 CEST	50860	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.543510914 CEST	443	50860	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.543531895 CEST	50860	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.543539047 CEST	443	50860	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.546221018 CEST	50866	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.546256065 CEST	443	50866	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.546334982 CEST	50866	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.546510935 CEST	50866	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.546521902 CEST	443	50866	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.578773022 CEST	443	50861	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.578804016 CEST	443	50861	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.578860998 CEST	443	50861	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.578871012 CEST	50861	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.578912020 CEST	50861	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.579133987 CEST	50861	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.579133987 CEST	50861	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.579155922 CEST	443	50861	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.579166889 CEST	443	50861	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.582281113 CEST	50867	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.582340002 CEST	443	50867	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.582672119 CEST	50867	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.582845926 CEST	50867	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.582865953 CEST	443	50867	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.603517056 CEST	443	50862	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.603607893 CEST	443	50862	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.603828907 CEST	50862	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.603857994 CEST	50862	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.603869915 CEST	443	50862	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.603883982 CEST	50862	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.603888988 CEST	443	50862	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.606563091 CEST	50868	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.606615067 CEST	443	50868	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:38.606908083 CEST	50868	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.606908083 CEST	50868	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:38.606950998 CEST	443	50868	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.099185944 CEST	443	50864	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.099706888 CEST	50864	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.099726915 CEST	443	50864	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.100748062 CEST	50864	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.100756884 CEST	443	50864	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.180973053 CEST	443	50865	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.203136921 CEST	443	50864	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.203170061 CEST	443	50864	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.203229904 CEST	50864	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.203242064 CEST	443	50864	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.204062939 CEST	50864	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.219409943 CEST	50865	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.219425917 CEST	443	50865	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.220047951 CEST	50865	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.220061064 CEST	443	50865	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.220434904 CEST	50864	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.220463991 CEST	443	50864	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.220470905 CEST	50864	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.220479012 CEST	443	50864	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.224817038 CEST	50869	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.224854946 CEST	443	50869	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.224946976 CEST	50869	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.225120068 CEST	50869	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.225135088 CEST	443	50869	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.244339943 CEST	443	50866	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.245124102 CEST	50866	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.245156050 CEST	443	50866	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.246114969 CEST	50866	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.246129990 CEST	443	50866	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.255470037 CEST	443	50868	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.257982969 CEST	443	50867	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.269843102 CEST	50868	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.269856930 CEST	443	50868	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.270854950 CEST	50868	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.270879030 CEST	443	50868	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.282382011 CEST	50867	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.282392025 CEST	443	50867	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.283035994 CEST	50867	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.283042908 CEST	443	50867	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.317341089 CEST	443	50865	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.317609072 CEST	443	50865	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.318293095 CEST	50865	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.323986053 CEST	50865	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.324004889 CEST	443	50865	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.351043940 CEST	443	50866	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.351174116 CEST	443	50866	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.351244926 CEST	443	50866	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.351341009 CEST	50866	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.355206013 CEST	50866	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.359873056 CEST	50866	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.359873056 CEST	50866	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.359894037 CEST	443	50866	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.359903097 CEST	443	50866	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.367583036 CEST	443	50868	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.367609024 CEST	443	50868	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.367661953 CEST	443	50868	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.367734909 CEST	50868	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.367734909 CEST	50868	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.369406939 CEST	50868	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.369430065 CEST	443	50868	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.369534016 CEST	50868	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.369541883 CEST	443	50868	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.382148981 CEST	443	50867	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.382344007 CEST	443	50867	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.382388115 CEST	50867	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.396789074 CEST	50867	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.396805048 CEST	443	50867	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.401216984 CEST	50870	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.401252985 CEST	443	50870	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.401333094 CEST	50870	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.403508902 CEST	50871	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.403551102 CEST	443	50871	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.403700113 CEST	50871	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.406507969 CEST	50870	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.406527996 CEST	443	50870	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.407397985 CEST	50872	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.407432079 CEST	443	50872	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.407481909 CEST	50872	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.407716990 CEST	50872	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.407730103 CEST	443	50872	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.407979965 CEST	50871	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.408001900 CEST	443	50871	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.410720110 CEST	50873	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.410758018 CEST	443	50873	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.410825014 CEST	50873	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.411331892 CEST	50873	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.411345005 CEST	443	50873	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.878964901 CEST	443	50869	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.901396990 CEST	50869	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.901412964 CEST	443	50869	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.902100086 CEST	50869	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:39.902105093 CEST	443	50869	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:39.999483109 CEST	443	50869	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.000478029 CEST	443	50869	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.000576019 CEST	50869	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.000648975 CEST	50869	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.000669003 CEST	443	50869	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.000680923 CEST	50869	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.000688076 CEST	443	50869	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.003341913 CEST	50875	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.003396034 CEST	443	50875	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.003921032 CEST	50875	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.004103899 CEST	50875	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.004116058 CEST	443	50875	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.088428974 CEST	443	50870	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.088903904 CEST	50870	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.088912964 CEST	443	50870	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.088957071 CEST	443	50872	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.089399099 CEST	50870	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.089404106 CEST	443	50870	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.089482069 CEST	50872	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.089508057 CEST	443	50872	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.089978933 CEST	50872	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.089984894 CEST	443	50872	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.105642080 CEST	443	50871	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.106065035 CEST	50871	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.106084108 CEST	443	50871	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.106520891 CEST	50871	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.106528044 CEST	443	50871	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.118904114 CEST	443	50873	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.119738102 CEST	50873	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.119760036 CEST	443	50873	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.120202065 CEST	50873	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.120214939 CEST	443	50873	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.189585924 CEST	443	50870	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.190243959 CEST	443	50870	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.190289974 CEST	50870	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.190295935 CEST	443	50870	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.190367937 CEST	50870	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.190450907 CEST	50870	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.190466881 CEST	443	50870	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.190617085 CEST	50870	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.190623999 CEST	443	50870	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.191893101 CEST	443	50872	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.193236113 CEST	50876	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.193269014 CEST	443	50876	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.193337917 CEST	50876	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.193521023 CEST	50876	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.193531036 CEST	443	50876	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.193963051 CEST	443	50872	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.194005013 CEST	50872	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.194060087 CEST	50872	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.194076061 CEST	443	50872	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.194088936 CEST	50872	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.194094896 CEST	443	50872	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.196118116 CEST	50877	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.196154118 CEST	443	50877	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.196212053 CEST	50877	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.196346998 CEST	50877	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.196367025 CEST	443	50877	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.210670948 CEST	443	50871	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.211117983 CEST	443	50871	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.211215019 CEST	50871	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.211215019 CEST	50871	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.211239100 CEST	50871	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.211251974 CEST	443	50871	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.213110924 CEST	50878	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.213119984 CEST	443	50878	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.213179111 CEST	50878	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.213334084 CEST	50878	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.213346958 CEST	443	50878	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.225723028 CEST	443	50873	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.226083994 CEST	443	50873	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.226130009 CEST	443	50873	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.226161003 CEST	50873	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.226202011 CEST	50873	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.226277113 CEST	50873	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.226277113 CEST	50873	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.226289988 CEST	443	50873	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.226294041 CEST	443	50873	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.229722977 CEST	50879	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.229744911 CEST	443	50879	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.229792118 CEST	50879	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.230050087 CEST	50879	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.230057001 CEST	443	50879	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.660063028 CEST	443	50875	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.660844088 CEST	50875	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.660927057 CEST	443	50875	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.661726952 CEST	50875	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.661744118 CEST	443	50875	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.761759996 CEST	443	50875	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.763031006 CEST	443	50875	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.763103962 CEST	50875	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.775207043 CEST	50875	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.775207043 CEST	50875	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.775258064 CEST	443	50875	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.775271893 CEST	443	50875	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.814802885 CEST	50880	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.814882994 CEST	443	50880	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.814964056 CEST	50880	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.816287994 CEST	50880	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.816298008 CEST	443	50880	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.857546091 CEST	443	50877	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.859826088 CEST	50877	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.859843016 CEST	443	50877	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.860886097 CEST	50877	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.860894918 CEST	443	50877	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.864396095 CEST	443	50878	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.865530014 CEST	50878	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.865545988 CEST	443	50878	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.866477013 CEST	50878	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.866485119 CEST	443	50878	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.870373011 CEST	443	50876	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.871834993 CEST	50876	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.871845961 CEST	443	50876	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.872756004 CEST	50876	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.872761011 CEST	443	50876	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.879937887 CEST	443	50879	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.884661913 CEST	50879	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.884675026 CEST	443	50879	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.885459900 CEST	50879	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.885464907 CEST	443	50879	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.960436106 CEST	443	50877	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.960464954 CEST	443	50877	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.960515022 CEST	443	50877	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.960531950 CEST	50877	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.960562944 CEST	50877	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.966245890 CEST	443	50878	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.966430902 CEST	443	50878	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.966486931 CEST	50878	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.971121073 CEST	50877	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.971138000 CEST	443	50877	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.971179962 CEST	50877	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.971187115 CEST	443	50877	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.974360943 CEST	50878	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.974371910 CEST	443	50878	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.975954056 CEST	443	50876	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.976021051 CEST	443	50876	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.976077080 CEST	50876	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.980156898 CEST	50881	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.980196953 CEST	443	50881	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.980331898 CEST	50881	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.980503082 CEST	50876	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.980523109 CEST	443	50876	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.980532885 CEST	50876	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.980539083 CEST	443	50876	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.982606888 CEST	443	50879	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.982678890 CEST	443	50879	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.982728004 CEST	50879	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.982737064 CEST	443	50879	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.982791901 CEST	443	50879	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.982834101 CEST	50879	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.984745026 CEST	50882	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.984761000 CEST	443	50882	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.984848022 CEST	50882	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.986052990 CEST	50881	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.986073971 CEST	443	50881	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.986879110 CEST	50879	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.986888885 CEST	443	50879	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.986898899 CEST	50879	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.986902952 CEST	443	50879	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.988923073 CEST	50882	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.988935947 CEST	443	50882	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.992614031 CEST	50883	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.992661953 CEST	443	50883	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.992731094 CEST	50883	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.992949009 CEST	50883	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.992964029 CEST	443	50883	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.996917009 CEST	50884	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.996937990 CEST	443	50884	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:40.996995926 CEST	50884	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.997930050 CEST	50884	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:40.997939110 CEST	443	50884	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.487312078 CEST	443	50880	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.487891912 CEST	50880	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.487927914 CEST	443	50880	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.488368034 CEST	50880	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.488373995 CEST	443	50880	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.590020895 CEST	443	50880	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.590156078 CEST	443	50880	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.590240002 CEST	50880	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.590358019 CEST	50880	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.590379953 CEST	443	50880	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.590392113 CEST	50880	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.590400934 CEST	443	50880	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.593250990 CEST	50885	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.593307018 CEST	443	50885	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.593415976 CEST	50885	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.593605995 CEST	50885	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.593621016 CEST	443	50885	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.634526014 CEST	443	50881	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.635103941 CEST	50881	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.635118008 CEST	443	50881	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.635616064 CEST	50881	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.635624886 CEST	443	50881	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.647001028 CEST	443	50882	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.647461891 CEST	50882	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.647480011 CEST	443	50882	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.647888899 CEST	50882	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.647895098 CEST	443	50882	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.660689116 CEST	443	50884	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.661257029 CEST	50884	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.661271095 CEST	443	50884	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.661607981 CEST	50884	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.661612988 CEST	443	50884	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.672511101 CEST	443	50883	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.672946930 CEST	50883	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.672971964 CEST	443	50883	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.673477888 CEST	50883	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.673484087 CEST	443	50883	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.751843929 CEST	443	50881	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.752798080 CEST	443	50881	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.752850056 CEST	50881	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.752964020 CEST	50881	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.752964020 CEST	50881	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.752980947 CEST	443	50881	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.752990961 CEST	443	50881	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.756021023 CEST	50886	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.756064892 CEST	443	50886	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.756184101 CEST	50886	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.756377935 CEST	50886	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.756395102 CEST	443	50886	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.903258085 CEST	443	50882	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.903289080 CEST	443	50882	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.903333902 CEST	443	50882	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.903382063 CEST	50882	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.903455973 CEST	50882	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.903779030 CEST	50882	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.903795958 CEST	443	50882	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.903824091 CEST	50882	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.903830051 CEST	443	50882	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.907639980 CEST	50887	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.907670021 CEST	443	50887	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.907735109 CEST	50887	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.908117056 CEST	50887	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.908127069 CEST	443	50887	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.920156002 CEST	443	50884	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.920233965 CEST	443	50884	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.920427084 CEST	50884	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.920605898 CEST	50884	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.920617104 CEST	443	50884	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.920686007 CEST	50884	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.920691013 CEST	443	50884	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.922929049 CEST	443	50883	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.923640966 CEST	443	50883	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.923702955 CEST	50883	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.923752069 CEST	50888	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.923795938 CEST	443	50888	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.923888922 CEST	50888	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.927067995 CEST	50888	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.927083015 CEST	443	50888	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.927227020 CEST	50883	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.927243948 CEST	443	50883	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.927258968 CEST	50883	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.927263975 CEST	443	50883	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.931406021 CEST	50889	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.931442022 CEST	443	50889	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:41.932116985 CEST	50889	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.932116985 CEST	50889	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:41.932140112 CEST	443	50889	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:42.330622911 CEST	443	50885	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:42.342530966 CEST	50885	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:42.342556000 CEST	443	50885	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:42.343470097 CEST	50885	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:42.343489885 CEST	443	50885	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:42.440507889 CEST	443	50885	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:42.440541983 CEST	443	50885	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:42.440593004 CEST	443	50885	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:42.440604925 CEST	50885	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:42.440656900 CEST	50885	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:42.453767061 CEST	50885	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:42.453799009 CEST	443	50885	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:42.453814983 CEST	50885	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:42.453821898 CEST	443	50885	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:42.480241060 CEST	443	50886	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:42.493494987 CEST	50890	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:42.493537903 CEST	443	50890	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:42.493607998 CEST	50890	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:42.501406908 CEST	50886	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:42.501430035 CEST	443	50886	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:42.501868010 CEST	50886	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:42.501873970 CEST	443	50886	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:42.502044916 CEST	50890	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:42.502060890 CEST	443	50890	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:42.925287962 CEST	443	50886	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:42.925348997 CEST	443	50886	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:42.925426006 CEST	50886	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:42.925678015 CEST	50886	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:42.925702095 CEST	443	50886	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:42.925721884 CEST	50886	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:42.925728083 CEST	443	50886	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:42.928634882 CEST	50891	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:42.928678036 CEST	443	50891	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:42.928808928 CEST	50891	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:42.929003954 CEST	50891	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:42.929016113 CEST	443	50891	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:42.930104971 CEST	443	50888	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:42.930362940 CEST	443	50887	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:42.930469036 CEST	50888	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:42.930485010 CEST	443	50888	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:42.930730104 CEST	443	50889	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:42.930778980 CEST	50887	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:42.930798054 CEST	443	50887	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:42.930922031 CEST	50888	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:42.930927038 CEST	443	50888	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:42.931194067 CEST	50889	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:42.931210041 CEST	443	50889	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:42.931366920 CEST	50887	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:42.931371927 CEST	443	50887	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:42.931576014 CEST	50889	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:42.931581020 CEST	443	50889	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.034638882 CEST	443	50888	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.034715891 CEST	443	50888	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.034773111 CEST	50888	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.035058022 CEST	50888	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.035079956 CEST	443	50888	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.035090923 CEST	50888	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.035096884 CEST	443	50888	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.037945032 CEST	50892	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.037983894 CEST	443	50892	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.037993908 CEST	443	50889	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.038111925 CEST	50892	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.038228989 CEST	443	50889	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.038239002 CEST	50892	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.038250923 CEST	443	50892	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.038279057 CEST	50889	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.038311958 CEST	50889	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.038326979 CEST	443	50889	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.038336992 CEST	50889	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.038342953 CEST	443	50889	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.040421009 CEST	50893	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.040456057 CEST	443	50893	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.040513992 CEST	50893	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.040656090 CEST	50893	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.040668011 CEST	443	50893	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.040752888 CEST	443	50887	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.040786028 CEST	443	50887	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.040826082 CEST	443	50887	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.040827990 CEST	50887	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.040872097 CEST	50887	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.041013002 CEST	50887	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.041028976 CEST	443	50887	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.041038990 CEST	50887	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.041043997 CEST	443	50887	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.043129921 CEST	50894	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.043139935 CEST	443	50894	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.043199062 CEST	50894	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.043301105 CEST	50894	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.043311119 CEST	443	50894	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.156724930 CEST	443	50890	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.157236099 CEST	50890	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.157248020 CEST	443	50890	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.157690048 CEST	50890	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.157695055 CEST	443	50890	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.259583950 CEST	443	50890	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.259646893 CEST	443	50890	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.259706020 CEST	50890	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.259893894 CEST	50890	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.259908915 CEST	443	50890	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.259915113 CEST	50890	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.259921074 CEST	443	50890	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.262684107 CEST	50895	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.262716055 CEST	443	50895	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.262940884 CEST	50895	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.262940884 CEST	50895	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.262979984 CEST	443	50895	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.625760078 CEST	443	50891	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.626307011 CEST	50891	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.626324892 CEST	443	50891	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.626882076 CEST	50891	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.626887083 CEST	443	50891	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.692445993 CEST	443	50892	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.693197966 CEST	50892	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.693217039 CEST	443	50892	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.694519043 CEST	50892	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.694535017 CEST	443	50892	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.695852041 CEST	443	50893	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.699129105 CEST	50893	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.699156046 CEST	443	50893	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.699564934 CEST	50893	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.699580908 CEST	443	50893	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.730959892 CEST	443	50894	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.731528997 CEST	50894	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.731542110 CEST	443	50894	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.732115984 CEST	50894	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.732127905 CEST	443	50894	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.736706972 CEST	443	50891	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.736738920 CEST	443	50891	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.736783028 CEST	50891	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.736783981 CEST	443	50891	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.736851931 CEST	50891	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.737345934 CEST	50891	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.737360954 CEST	443	50891	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.737366915 CEST	50891	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.737373114 CEST	443	50891	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.740149021 CEST	50896	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.740185976 CEST	443	50896	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.740262032 CEST	50896	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.740448952 CEST	50896	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.740463018 CEST	443	50896	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.795249939 CEST	443	50892	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.795330048 CEST	443	50892	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.795399904 CEST	50892	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.795644999 CEST	50892	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.795644999 CEST	50892	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.795665979 CEST	443	50892	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.795676947 CEST	443	50892	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.796709061 CEST	443	50893	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.796947956 CEST	443	50893	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.797007084 CEST	50893	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.797033072 CEST	443	50893	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.797065973 CEST	443	50893	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.797127962 CEST	50893	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.797471046 CEST	50893	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.797471046 CEST	50893	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.797486067 CEST	443	50893	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.797513008 CEST	443	50893	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.805648088 CEST	50897	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.805684090 CEST	443	50897	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.805756092 CEST	50897	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.807718992 CEST	50898	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.807729959 CEST	443	50898	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.807993889 CEST	50898	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.808135033 CEST	50897	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.808146954 CEST	443	50897	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.808290005 CEST	50898	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.808299065 CEST	443	50898	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.837902069 CEST	443	50894	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.838551044 CEST	443	50894	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.838629007 CEST	50894	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.838655949 CEST	50894	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.838670969 CEST	443	50894	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.838722944 CEST	50894	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.838730097 CEST	443	50894	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.841232061 CEST	50899	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.841247082 CEST	443	50899	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.841311932 CEST	50899	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.841470957 CEST	50899	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.841485023 CEST	443	50899	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.950556993 CEST	443	50895	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.951098919 CEST	50895	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.951132059 CEST	443	50895	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:43.951562881 CEST	50895	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:43.951569080 CEST	443	50895	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.057231903 CEST	443	50895	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.057260990 CEST	443	50895	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.057298899 CEST	443	50895	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.057318926 CEST	50895	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.057439089 CEST	50895	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.057676077 CEST	50895	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.057676077 CEST	50895	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.057692051 CEST	443	50895	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.057701111 CEST	443	50895	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.060786963 CEST	50900	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.060811043 CEST	443	50900	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.060883999 CEST	50900	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.061053991 CEST	50900	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.061067104 CEST	443	50900	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.430098057 CEST	443	50896	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.430663109 CEST	50896	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.430691004 CEST	443	50896	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.431159973 CEST	50896	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.431169987 CEST	443	50896	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.454818964 CEST	443	50897	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.455452919 CEST	50897	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.455496073 CEST	443	50897	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.455931902 CEST	50897	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.455941916 CEST	443	50897	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.477137089 CEST	443	50898	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.477642059 CEST	50898	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.477683067 CEST	443	50898	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.478068113 CEST	50898	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.478076935 CEST	443	50898	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.529432058 CEST	443	50899	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.529967070 CEST	50899	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.530004978 CEST	443	50899	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.530529022 CEST	50899	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.530539989 CEST	443	50899	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.538521051 CEST	443	50896	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.538587093 CEST	443	50896	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.538908958 CEST	50896	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.538968086 CEST	50896	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.538984060 CEST	443	50896	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.539000988 CEST	50896	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.539006948 CEST	443	50896	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.541723967 CEST	50901	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.541769981 CEST	443	50901	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.541929960 CEST	50901	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.542068958 CEST	50901	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.542078972 CEST	443	50901	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.555860043 CEST	443	50897	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.557321072 CEST	443	50897	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.557375908 CEST	50897	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.557456970 CEST	50897	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.557456970 CEST	50897	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.557476997 CEST	443	50897	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.557490110 CEST	443	50897	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.560305119 CEST	50902	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.560326099 CEST	443	50902	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.560512066 CEST	50902	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.560667038 CEST	50902	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.560674906 CEST	443	50902	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.580298901 CEST	443	50898	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.580895901 CEST	443	50898	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.580996990 CEST	50898	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.580996990 CEST	50898	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.581036091 CEST	50898	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.581053972 CEST	443	50898	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.583611012 CEST	50903	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.583661079 CEST	443	50903	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.583728075 CEST	50903	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.583961964 CEST	50903	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.583972931 CEST	443	50903	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.636075974 CEST	443	50899	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.636161089 CEST	443	50899	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.636210918 CEST	443	50899	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.636228085 CEST	50899	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.636279106 CEST	50899	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.636531115 CEST	50899	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.636548996 CEST	443	50899	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.636563063 CEST	50899	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.636569023 CEST	443	50899	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.639640093 CEST	50904	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.639673948 CEST	443	50904	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.639735937 CEST	50904	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.639956951 CEST	50904	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.639966011 CEST	443	50904	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.710221052 CEST	443	50900	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.710715055 CEST	50900	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.710728884 CEST	443	50900	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.711396933 CEST	50900	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.711410999 CEST	443	50900	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.811991930 CEST	443	50900	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.812057972 CEST	443	50900	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.812129021 CEST	50900	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.812401056 CEST	50900	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.812401056 CEST	50900	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.812416077 CEST	443	50900	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.812429905 CEST	443	50900	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.815471888 CEST	50905	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.815483093 CEST	443	50905	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:44.815551996 CEST	50905	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.815716982 CEST	50905	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:44.815726042 CEST	443	50905	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.203732967 CEST	443	50901	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.204257965 CEST	50901	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.204287052 CEST	443	50901	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.204726934 CEST	50901	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.204732895 CEST	443	50901	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.219244957 CEST	443	50902	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.219732046 CEST	50902	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.219748974 CEST	443	50902	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.220132113 CEST	50902	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.220136881 CEST	443	50902	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.257724047 CEST	443	50903	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.258177996 CEST	50903	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.258189917 CEST	443	50903	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.258645058 CEST	50903	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.258649111 CEST	443	50903	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.288450003 CEST	443	50904	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.288949966 CEST	50904	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.288964033 CEST	443	50904	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.289508104 CEST	50904	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.289513111 CEST	443	50904	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.306541920 CEST	443	50901	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.307125092 CEST	443	50901	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.307180882 CEST	50901	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.307235003 CEST	50901	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.307260990 CEST	443	50901	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.307280064 CEST	50901	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.307286978 CEST	443	50901	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.309997082 CEST	50906	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.310033083 CEST	443	50906	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.310127974 CEST	50906	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.310298920 CEST	50906	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.310308933 CEST	443	50906	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.321010113 CEST	443	50902	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.321484089 CEST	443	50902	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.321594954 CEST	50902	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.321638107 CEST	50902	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.321638107 CEST	50902	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.321655989 CEST	443	50902	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.321666956 CEST	443	50902	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.324378967 CEST	50907	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.324414968 CEST	443	50907	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.324480057 CEST	50907	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.324655056 CEST	50907	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.324666977 CEST	443	50907	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.362530947 CEST	443	50903	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.362607002 CEST	443	50903	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.362709045 CEST	50903	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.363429070 CEST	50903	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.363440037 CEST	443	50903	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.363475084 CEST	50903	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.363480091 CEST	443	50903	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.366786003 CEST	50908	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.366816044 CEST	443	50908	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.366877079 CEST	50908	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.367037058 CEST	50908	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.367048979 CEST	443	50908	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.389031887 CEST	443	50904	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.389111996 CEST	443	50904	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.389194012 CEST	50904	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.389772892 CEST	50904	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.389796972 CEST	443	50904	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.389810085 CEST	50904	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.389816999 CEST	443	50904	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.395513058 CEST	50909	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.395570040 CEST	443	50909	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.395731926 CEST	50909	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.396023035 CEST	50909	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.396043062 CEST	443	50909	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.505784035 CEST	443	50905	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.506385088 CEST	50905	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.506403923 CEST	443	50905	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.506865978 CEST	50905	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.506871939 CEST	443	50905	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.613218069 CEST	443	50905	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.614208937 CEST	443	50905	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.614281893 CEST	50905	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.614356041 CEST	50905	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.614366055 CEST	443	50905	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.614434958 CEST	50905	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.614440918 CEST	443	50905	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.617389917 CEST	50910	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.617423058 CEST	443	50910	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.617502928 CEST	50910	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.617641926 CEST	50910	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.617657900 CEST	443	50910	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.958728075 CEST	443	50906	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.959249020 CEST	50906	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.959260941 CEST	443	50906	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.959705114 CEST	50906	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.959708929 CEST	443	50906	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.995965004 CEST	443	50907	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.996427059 CEST	50907	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.996450901 CEST	443	50907	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:45.996866941 CEST	50907	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:45.996871948 CEST	443	50907	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.045777082 CEST	443	50909	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.046272993 CEST	50909	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.046298981 CEST	443	50909	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.046684980 CEST	50909	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.046689987 CEST	443	50909	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.057210922 CEST	443	50908	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.057610989 CEST	50908	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.057627916 CEST	443	50908	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.057998896 CEST	50908	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.058003902 CEST	443	50908	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.059727907 CEST	443	50906	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.059798956 CEST	443	50906	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.059863091 CEST	50906	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.059969902 CEST	50906	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.059969902 CEST	50906	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.059988976 CEST	443	50906	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.059999943 CEST	443	50906	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.062789917 CEST	50911	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.062815905 CEST	443	50911	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.063088894 CEST	50911	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.063252926 CEST	50911	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.063261032 CEST	443	50911	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.099594116 CEST	443	50907	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.099899054 CEST	443	50907	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.099946022 CEST	50907	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.099951982 CEST	443	50907	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.100178003 CEST	50907	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.104279995 CEST	50907	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.104295969 CEST	443	50907	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.107320070 CEST	50912	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.107346058 CEST	443	50912	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.107402086 CEST	50912	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.107652903 CEST	50912	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.107661963 CEST	443	50912	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.148195028 CEST	443	50909	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.148221016 CEST	443	50909	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.148258924 CEST	443	50909	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.148260117 CEST	50909	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.148298979 CEST	50909	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.148582935 CEST	50909	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.148592949 CEST	443	50909	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.148617983 CEST	50909	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.148622990 CEST	443	50909	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.151441097 CEST	50913	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.151460886 CEST	443	50913	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.151531935 CEST	50913	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.151725054 CEST	50913	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.151735067 CEST	443	50913	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.164767981 CEST	443	50908	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.165268898 CEST	443	50908	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.165314913 CEST	50908	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.165368080 CEST	50908	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.165378094 CEST	443	50908	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.165386915 CEST	50908	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.165390968 CEST	443	50908	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.167602062 CEST	50914	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.167613983 CEST	443	50914	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.167676926 CEST	50914	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.167843103 CEST	50914	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.167853117 CEST	443	50914	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.266442060 CEST	443	50910	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.266942024 CEST	50910	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.266954899 CEST	443	50910	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.267491102 CEST	50910	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.267496109 CEST	443	50910	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.367857933 CEST	443	50910	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.368093014 CEST	443	50910	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.368158102 CEST	50910	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.368200064 CEST	50910	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.368215084 CEST	443	50910	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.368232965 CEST	50910	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.368238926 CEST	443	50910	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.371074915 CEST	50915	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.371104002 CEST	443	50915	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:46.371234894 CEST	50915	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.371428013 CEST	50915	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:46.371436119 CEST	443	50915	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.064318895 CEST	443	50911	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.064342976 CEST	443	50914	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.064829111 CEST	443	50912	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.064975023 CEST	50911	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.064986944 CEST	443	50911	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.065129995 CEST	443	50913	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.065602064 CEST	50911	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.065608025 CEST	443	50911	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.066340923 CEST	50914	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.066349983 CEST	443	50914	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.067354918 CEST	50914	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.067361116 CEST	443	50914	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.067881107 CEST	50912	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.067889929 CEST	443	50912	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.068638086 CEST	50912	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.068645954 CEST	443	50912	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.069251060 CEST	50913	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.069259882 CEST	443	50913	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.070101023 CEST	50913	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.070106030 CEST	443	50913	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.078593016 CEST	443	50915	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.079273939 CEST	50915	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.079287052 CEST	443	50915	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.080044031 CEST	50915	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.080050945 CEST	443	50915	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.164547920 CEST	443	50914	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.164721012 CEST	443	50914	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.164808035 CEST	50914	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.165118933 CEST	50914	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.165138006 CEST	443	50914	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.165148973 CEST	50914	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.165155888 CEST	443	50914	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.166421890 CEST	443	50911	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.166615963 CEST	443	50911	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.166672945 CEST	50911	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.166683912 CEST	443	50911	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.166733027 CEST	443	50911	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.166786909 CEST	50911	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.166857958 CEST	50911	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.166867971 CEST	443	50911	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.166878939 CEST	50911	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.166883945 CEST	443	50911	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.167833090 CEST	443	50912	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.167897940 CEST	443	50912	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.167954922 CEST	50912	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.169064045 CEST	50912	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.169069052 CEST	443	50912	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.169079065 CEST	50912	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.169083118 CEST	443	50912	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.170840025 CEST	443	50913	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.170980930 CEST	443	50913	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.171037912 CEST	50913	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.171299934 CEST	50913	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.171304941 CEST	443	50913	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.171351910 CEST	50913	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.171355963 CEST	443	50913	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.173363924 CEST	50916	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.173398972 CEST	443	50916	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.173451900 CEST	50916	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.174096107 CEST	50916	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.174114943 CEST	443	50916	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.175626993 CEST	50917	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.175662041 CEST	443	50917	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.175760984 CEST	50917	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.176167965 CEST	50917	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.176183939 CEST	443	50917	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.178879023 CEST	50918	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.178888083 CEST	443	50918	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.179306984 CEST	50918	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.180202007 CEST	50919	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.180233002 CEST	443	50919	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.180346966 CEST	50919	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.180347919 CEST	50918	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.180360079 CEST	443	50918	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.180516958 CEST	50919	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.180531025 CEST	443	50919	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.181204081 CEST	443	50915	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.181241035 CEST	443	50915	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.181283951 CEST	443	50915	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.181372881 CEST	50915	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.181372881 CEST	50915	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.181412935 CEST	50915	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.181423903 CEST	443	50915	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.184273958 CEST	50920	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.184297085 CEST	443	50920	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.184457064 CEST	50920	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.184808969 CEST	50920	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.184819937 CEST	443	50920	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.862277031 CEST	443	50916	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.862556934 CEST	443	50920	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.862903118 CEST	50916	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.862917900 CEST	443	50916	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.863195896 CEST	50920	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.863209009 CEST	443	50920	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.863590956 CEST	50916	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.863598108 CEST	443	50916	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.863624096 CEST	50920	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.863629103 CEST	443	50920	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.867141008 CEST	443	50918	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.867197990 CEST	443	50919	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.867744923 CEST	50919	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.867753029 CEST	443	50919	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.867779016 CEST	50918	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.867799997 CEST	443	50918	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.868561983 CEST	50918	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.868566990 CEST	443	50918	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.868567944 CEST	50919	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.868571997 CEST	443	50919	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.869955063 CEST	443	50917	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.870313883 CEST	50917	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.870330095 CEST	443	50917	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.870874882 CEST	50917	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.870879889 CEST	443	50917	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.963066101 CEST	443	50920	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.963083029 CEST	443	50920	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.963267088 CEST	50920	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.963278055 CEST	443	50920	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.963329077 CEST	443	50920	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.963413000 CEST	50920	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.963722944 CEST	50920	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.963745117 CEST	443	50920	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.963844061 CEST	50920	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.963850021 CEST	443	50920	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.965085030 CEST	443	50916	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.965403080 CEST	443	50916	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.965451956 CEST	50916	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.966029882 CEST	50916	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.966029882 CEST	50916	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.966048002 CEST	443	50916	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.966053009 CEST	443	50916	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.968787909 CEST	50921	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.968832970 CEST	443	50921	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.968969107 CEST	50921	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.969899893 CEST	50921	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.969916105 CEST	443	50921	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.971040964 CEST	50922	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.971050978 CEST	443	50922	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.971263885 CEST	50922	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.971316099 CEST	443	50918	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.971337080 CEST	443	50918	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.971643925 CEST	50918	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.971652985 CEST	443	50918	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.971760035 CEST	443	50918	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.971849918 CEST	50918	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.971915007 CEST	50922	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.971931934 CEST	443	50922	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.972047091 CEST	50918	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.972047091 CEST	50918	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.972059965 CEST	443	50918	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.972069025 CEST	443	50918	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.975092888 CEST	443	50917	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.975151062 CEST	443	50917	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.975214005 CEST	50917	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.976064920 CEST	50923	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.976088047 CEST	443	50923	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.976221085 CEST	50917	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.976221085 CEST	50917	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.976229906 CEST	443	50917	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.976238012 CEST	443	50917	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.976268053 CEST	50923	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.978641033 CEST	50924	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.978678942 CEST	443	50924	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.978928089 CEST	50924	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.979207039 CEST	50923	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.979223013 CEST	443	50923	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:47.979453087 CEST	50924	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:47.979475021 CEST	443	50924	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.002105951 CEST	443	50919	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.002163887 CEST	443	50919	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.002382040 CEST	50919	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.002672911 CEST	50919	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.002686024 CEST	443	50919	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.002732038 CEST	50919	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.002742052 CEST	443	50919	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.006208897 CEST	50925	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.006251097 CEST	443	50925	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.006458044 CEST	50925	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.006757021 CEST	50925	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.006769896 CEST	443	50925	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.617799044 CEST	443	50921	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.618830919 CEST	50921	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.618858099 CEST	443	50921	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.619800091 CEST	50921	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.619806051 CEST	443	50921	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.628030062 CEST	443	50923	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.628916025 CEST	50923	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.628932953 CEST	443	50923	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.629264116 CEST	443	50922	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.629789114 CEST	50923	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.629797935 CEST	443	50923	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.630244017 CEST	50922	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.630274057 CEST	443	50922	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.630851030 CEST	50922	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.630861044 CEST	443	50922	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.656773090 CEST	443	50925	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.657880068 CEST	50925	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.657906055 CEST	443	50925	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.659094095 CEST	50925	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.659101009 CEST	443	50925	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.668467999 CEST	443	50924	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.669297934 CEST	50924	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.669323921 CEST	443	50924	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.670491934 CEST	50924	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.670496941 CEST	443	50924	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.718518972 CEST	443	50921	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.718542099 CEST	443	50921	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.718617916 CEST	50921	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.718650103 CEST	443	50921	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.718894005 CEST	50921	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.718909979 CEST	443	50921	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.718920946 CEST	50921	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.719078064 CEST	443	50921	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.719111919 CEST	443	50921	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.719156027 CEST	50921	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.724981070 CEST	50926	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.725038052 CEST	443	50926	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.725122929 CEST	50926	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.725431919 CEST	50926	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.725451946 CEST	443	50926	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.728842974 CEST	443	50923	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.728877068 CEST	443	50923	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.729135990 CEST	50923	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.729155064 CEST	443	50923	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.729216099 CEST	443	50923	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.729258060 CEST	50923	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.729424953 CEST	50923	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.729444027 CEST	443	50923	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.730618954 CEST	443	50922	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.730643034 CEST	443	50922	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.730704069 CEST	50922	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.730727911 CEST	443	50922	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.730741978 CEST	443	50922	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.730798006 CEST	50922	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.731796026 CEST	50922	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.731813908 CEST	443	50922	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.731822968 CEST	50922	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.731831074 CEST	443	50922	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.735446930 CEST	50927	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.735483885 CEST	443	50927	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.735564947 CEST	50927	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.737544060 CEST	50928	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.737581968 CEST	443	50928	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.737709045 CEST	50928	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.738281965 CEST	50927	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.738298893 CEST	443	50927	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.738720894 CEST	50928	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.738734007 CEST	443	50928	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.758021116 CEST	443	50925	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.758097887 CEST	443	50925	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.758158922 CEST	50925	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.758425951 CEST	50925	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.758445024 CEST	443	50925	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.764693022 CEST	50929	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.764724016 CEST	443	50929	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.764792919 CEST	50929	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.765086889 CEST	50929	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.765098095 CEST	443	50929	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.790718079 CEST	443	50924	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.790796995 CEST	443	50924	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.790879965 CEST	50924	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.791163921 CEST	50924	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.791182995 CEST	443	50924	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.794997931 CEST	50930	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.795046091 CEST	443	50930	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:48.795218945 CEST	50930	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.795356989 CEST	50930	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:48.795378923 CEST	443	50930	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.375658989 CEST	443	50926	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.376250029 CEST	50926	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.376274109 CEST	443	50926	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.376842022 CEST	50926	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.376847982 CEST	443	50926	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.398521900 CEST	443	50928	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.399168968 CEST	50928	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.399179935 CEST	443	50928	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.400981903 CEST	50928	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.400986910 CEST	443	50928	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.401362896 CEST	443	50927	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.401808023 CEST	50927	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.401822090 CEST	443	50927	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.402370930 CEST	50927	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.402378082 CEST	443	50927	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.415608883 CEST	443	50929	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.416158915 CEST	50929	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.416182995 CEST	443	50929	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.416673899 CEST	50929	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.416690111 CEST	443	50929	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.456228018 CEST	443	50930	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.456851006 CEST	50930	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.456872940 CEST	443	50930	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.457307100 CEST	50930	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.457324028 CEST	443	50930	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.477437019 CEST	443	50926	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.477493048 CEST	443	50926	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.477600098 CEST	50926	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.477818012 CEST	50926	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.477818012 CEST	50926	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.477835894 CEST	443	50926	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.477847099 CEST	443	50926	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.485814095 CEST	50931	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.485848904 CEST	443	50931	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.485943079 CEST	50931	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.486255884 CEST	50931	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.486268044 CEST	443	50931	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.500020981 CEST	443	50928	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.500042915 CEST	443	50928	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.500107050 CEST	50928	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.500114918 CEST	443	50928	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.500449896 CEST	50928	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.500582933 CEST	50928	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.500587940 CEST	443	50928	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.500608921 CEST	50928	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.500731945 CEST	443	50928	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.500762939 CEST	443	50928	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.500833035 CEST	50928	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.504419088 CEST	443	50927	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.504576921 CEST	443	50927	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.504636049 CEST	50927	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.517694950 CEST	443	50929	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.517760992 CEST	443	50929	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.517891884 CEST	50929	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.517915010 CEST	443	50929	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.518448114 CEST	443	50929	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.518762112 CEST	50929	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.526659966 CEST	50927	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.526681900 CEST	443	50927	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.526696920 CEST	50927	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.526704073 CEST	443	50927	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.528053999 CEST	50929	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.528053999 CEST	50929	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.528093100 CEST	443	50929	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.528109074 CEST	443	50929	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.532191038 CEST	50932	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.532223940 CEST	443	50932	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.532336950 CEST	50932	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.532875061 CEST	50932	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.532891989 CEST	443	50932	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.534421921 CEST	50933	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.534461975 CEST	443	50933	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.534542084 CEST	50933	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.534708977 CEST	50933	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.534723997 CEST	443	50933	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.535811901 CEST	50934	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.535820961 CEST	443	50934	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.536155939 CEST	50934	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.536434889 CEST	50934	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.536444902 CEST	443	50934	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.562480927 CEST	443	50930	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.562505007 CEST	443	50930	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.562521935 CEST	443	50930	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.562617064 CEST	50930	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.562638044 CEST	443	50930	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.562746048 CEST	50930	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.650626898 CEST	443	50930	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.650706053 CEST	443	50930	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.650717020 CEST	50930	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.650770903 CEST	50930	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.650799036 CEST	50930	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.650815964 CEST	443	50930	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.650829077 CEST	50930	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.650836945 CEST	443	50930	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.656287909 CEST	50935	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.656316996 CEST	443	50935	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:49.656502962 CEST	50935	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.656795025 CEST	50935	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:49.656805992 CEST	443	50935	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.135682106 CEST	443	50931	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.137523890 CEST	50931	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.137536049 CEST	443	50931	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.137983084 CEST	50931	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.137986898 CEST	443	50931	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.197412968 CEST	443	50933	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.211112976 CEST	443	50932	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.214384079 CEST	50933	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.214405060 CEST	443	50933	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.215096951 CEST	50933	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.215101957 CEST	443	50933	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.215850115 CEST	50932	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.215878010 CEST	443	50932	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.216584921 CEST	50932	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.216592073 CEST	443	50932	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.236763000 CEST	443	50931	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.236794949 CEST	443	50931	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.237003088 CEST	443	50931	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.237052917 CEST	50931	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.237052917 CEST	50931	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.237354994 CEST	50931	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.237354994 CEST	50931	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.237371922 CEST	443	50931	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.237375975 CEST	443	50931	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.240617990 CEST	50936	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.240664005 CEST	443	50936	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.240735054 CEST	50936	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.241312027 CEST	50936	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.241322994 CEST	443	50936	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.265094995 CEST	443	50934	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.265727043 CEST	50934	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.265742064 CEST	443	50934	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.266604900 CEST	50934	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.266611099 CEST	443	50934	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.315236092 CEST	443	50933	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.315257072 CEST	443	50933	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.315335035 CEST	50933	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.315361023 CEST	443	50933	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.315397024 CEST	50933	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.315463066 CEST	443	50933	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.315519094 CEST	443	50933	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.315555096 CEST	50933	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.318000078 CEST	443	50935	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.320929050 CEST	443	50932	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.320961952 CEST	443	50932	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.321000099 CEST	443	50932	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.321024895 CEST	50932	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.321058989 CEST	443	50932	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.321079969 CEST	50932	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.321108103 CEST	50932	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.321319103 CEST	50933	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.321345091 CEST	443	50933	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.322032928 CEST	50935	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.322047949 CEST	443	50935	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.322890043 CEST	50935	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.322896957 CEST	443	50935	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.327414989 CEST	50937	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.327464104 CEST	443	50937	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.327554941 CEST	50937	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.327840090 CEST	50937	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.327853918 CEST	443	50937	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.370826006 CEST	443	50934	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.370857000 CEST	443	50934	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.370930910 CEST	50934	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.370949030 CEST	443	50934	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.370964050 CEST	443	50934	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.371020079 CEST	50934	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.371356964 CEST	50934	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.371375084 CEST	443	50934	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.371397972 CEST	50934	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.371404886 CEST	443	50934	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.375973940 CEST	50938	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.376022100 CEST	443	50938	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.376099110 CEST	50938	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.376591921 CEST	50938	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.376605034 CEST	443	50938	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.411701918 CEST	443	50932	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.411746025 CEST	443	50932	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.411797047 CEST	50932	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.411820889 CEST	443	50932	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.411853075 CEST	50932	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.411871910 CEST	50932	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.412575006 CEST	50932	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.412597895 CEST	443	50932	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.417593956 CEST	50939	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.417654991 CEST	443	50939	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.417749882 CEST	50939	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.418124914 CEST	50939	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.418134928 CEST	443	50939	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.420257092 CEST	443	50935	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.420507908 CEST	443	50935	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.420563936 CEST	50935	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.420737982 CEST	50935	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.420756102 CEST	443	50935	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.420767069 CEST	50935	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.420774937 CEST	443	50935	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.427242994 CEST	50940	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.427300930 CEST	443	50940	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.427537918 CEST	50940	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.427701950 CEST	50940	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.427719116 CEST	443	50940	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.893691063 CEST	443	50936	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.894520998 CEST	50936	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.894550085 CEST	443	50936	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.895184994 CEST	50936	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.895190954 CEST	443	50936	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.994287968 CEST	443	50936	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.994456053 CEST	443	50936	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.994579077 CEST	50936	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.994612932 CEST	50936	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.994612932 CEST	50936	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.994632959 CEST	443	50936	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.994643927 CEST	443	50936	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.997683048 CEST	50941	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.997742891 CEST	443	50941	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:50.997852087 CEST	50941	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.997993946 CEST	50941	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:50.998008013 CEST	443	50941	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.003504992 CEST	443	50937	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.003882885 CEST	50937	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:51.003902912 CEST	443	50937	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.004340887 CEST	50937	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:51.004348040 CEST	443	50937	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.033484936 CEST	443	50938	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.034063101 CEST	50938	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:51.034094095 CEST	443	50938	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.034595013 CEST	50938	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:51.034600973 CEST	443	50938	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.087960005 CEST	443	50940	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.088365078 CEST	50940	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:51.088407040 CEST	443	50940	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.089097023 CEST	50940	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:51.089103937 CEST	443	50940	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.095036983 CEST	443	50939	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.095413923 CEST	50939	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:51.095433950 CEST	443	50939	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.096179008 CEST	50939	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:51.096184015 CEST	443	50939	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.109016895 CEST	443	50937	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.109118938 CEST	443	50937	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.109189987 CEST	50937	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:51.109452963 CEST	50937	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:51.109469891 CEST	443	50937	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.113658905 CEST	50942	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:51.113694906 CEST	443	50942	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.113789082 CEST	50942	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:51.114164114 CEST	50942	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:51.114183903 CEST	443	50942	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.134331942 CEST	443	50938	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.134542942 CEST	443	50938	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.134624004 CEST	50938	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:51.135010004 CEST	50938	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:51.135025978 CEST	443	50938	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.135040045 CEST	50938	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:51.135046959 CEST	443	50938	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.138390064 CEST	50943	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:51.138433933 CEST	443	50943	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.138560057 CEST	50943	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:51.138797998 CEST	50943	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:51.138809919 CEST	443	50943	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.199743986 CEST	443	50939	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.199975967 CEST	443	50939	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.200023890 CEST	443	50939	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.200051069 CEST	50939	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:51.200167894 CEST	50939	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:51.200186014 CEST	50939	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:51.200186968 CEST	50939	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:51.200206041 CEST	443	50939	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.200218916 CEST	443	50939	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.235831976 CEST	443	50940	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.235918045 CEST	443	50940	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.236037970 CEST	50940	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:51.236373901 CEST	50940	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:51.236397982 CEST	443	50940	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.236416101 CEST	50940	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:51.236423016 CEST	443	50940	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.664932966 CEST	443	50941	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.665482998 CEST	50941	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:51.665499926 CEST	443	50941	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:51.665896893 CEST	50941	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:51.665915012 CEST	443	50941	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:52.073050022 CEST	443	50942	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:52.073640108 CEST	50942	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:52.073656082 CEST	443	50942	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:52.074215889 CEST	50942	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:52.074222088 CEST	443	50942	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:52.075177908 CEST	443	50943	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:52.075581074 CEST	50943	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:52.075606108 CEST	443	50943	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:52.076102972 CEST	50943	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:52.076111078 CEST	443	50943	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:52.171561003 CEST	443	50941	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:52.171844006 CEST	443	50941	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:52.171905041 CEST	50941	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:52.172080040 CEST	50941	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:52.172080040 CEST	50941	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:52.172101021 CEST	443	50941	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:52.172111034 CEST	443	50941	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:52.181617975 CEST	443	50942	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:52.181689024 CEST	443	50942	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:52.181931973 CEST	50942	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:52.181931973 CEST	50942	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:52.181974888 CEST	50942	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:52.181984901 CEST	443	50942	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:52.182409048 CEST	443	50943	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:52.182481050 CEST	443	50943	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:52.182533979 CEST	50943	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:52.182739019 CEST	50943	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:52.182749987 CEST	443	50943	13.107.246.67	192.168.2.10
Oct 13, 2024 20:11:52.182759047 CEST	50943	443	192.168.2.10	13.107.246.67
Oct 13, 2024 20:11:52.182765007 CEST	443	50943	13.107.246.67	192.168.2.10
Oct 13, 2024 20:12:09.356353045 CEST	50945	443	192.168.2.10	142.250.185.68
Oct 13, 2024 20:12:09.356432915 CEST	443	50945	142.250.185.68	192.168.2.10
Oct 13, 2024 20:12:09.356511116 CEST	50945	443	192.168.2.10	142.250.185.68
Oct 13, 2024 20:12:09.356770039 CEST	50945	443	192.168.2.10	142.250.185.68
Oct 13, 2024 20:12:09.356807947 CEST	443	50945	142.250.185.68	192.168.2.10
Oct 13, 2024 20:12:10.094512939 CEST	443	50945	142.250.185.68	192.168.2.10
Oct 13, 2024 20:12:10.094826937 CEST	50945	443	192.168.2.10	142.250.185.68
Oct 13, 2024 20:12:10.094836950 CEST	443	50945	142.250.185.68	192.168.2.10
Oct 13, 2024 20:12:10.095170975 CEST	443	50945	142.250.185.68	192.168.2.10
Oct 13, 2024 20:12:10.095499992 CEST	50945	443	192.168.2.10	142.250.185.68
Oct 13, 2024 20:12:10.095573902 CEST	443	50945	142.250.185.68	192.168.2.10
Oct 13, 2024 20:12:10.142702103 CEST	50945	443	192.168.2.10	142.250.185.68
Oct 13, 2024 20:12:19.921152115 CEST	443	50945	142.250.185.68	192.168.2.10
Oct 13, 2024 20:12:19.921250105 CEST	443	50945	142.250.185.68	192.168.2.10
Oct 13, 2024 20:12:19.921304941 CEST	50945	443	192.168.2.10	142.250.185.68
Oct 13, 2024 20:12:21.598921061 CEST	50945	443	192.168.2.10	142.250.185.68
Oct 13, 2024 20:12:21.598957062 CEST	443	50945	142.250.185.68	192.168.2.10

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 13, 2024 20:11:05.308501959 CEST	53	63586	1.1.1.1	192.168.2.10
Oct 13, 2024 20:11:05.378390074 CEST	53	60469	1.1.1.1	192.168.2.10
Oct 13, 2024 20:11:06.397403955 CEST	53	50059	1.1.1.1	192.168.2.10
Oct 13, 2024 20:11:07.330317974 CEST	59023	53	192.168.2.10	1.1.1.1
Oct 13, 2024 20:11:07.330785990 CEST	49282	53	192.168.2.10	1.1.1.1
Oct 13, 2024 20:11:07.931102991 CEST	53	49282	1.1.1.1	192.168.2.10
Oct 13, 2024 20:11:07.931186914 CEST	53	59023	1.1.1.1	192.168.2.10
Oct 13, 2024 20:11:08.782665014 CEST	53	50130	1.1.1.1	192.168.2.10
Oct 13, 2024 20:11:09.289403915 CEST	52764	53	192.168.2.10	1.1.1.1
Oct 13, 2024 20:11:09.289887905 CEST	50574	53	192.168.2.10	1.1.1.1
Oct 13, 2024 20:11:09.295973063 CEST	53	52764	1.1.1.1	192.168.2.10
Oct 13, 2024 20:11:09.297456980 CEST	53	50574	1.1.1.1	192.168.2.10
Oct 13, 2024 20:11:09.326824903 CEST	53685	53	192.168.2.10	1.1.1.1
Oct 13, 2024 20:11:09.327296019 CEST	57722	53	192.168.2.10	1.1.1.1
Oct 13, 2024 20:11:09.545066118 CEST	53	53685	1.1.1.1	192.168.2.10
Oct 13, 2024 20:11:09.547286987 CEST	53	57722	1.1.1.1	192.168.2.10
Oct 13, 2024 20:11:09.990652084 CEST	53	59358	1.1.1.1	192.168.2.10
Oct 13, 2024 20:11:10.038712978 CEST	53	61719	1.1.1.1	192.168.2.10
Oct 13, 2024 20:11:23.446930885 CEST	53	54396	1.1.1.1	192.168.2.10
Oct 13, 2024 20:11:34.378024101 CEST	53	53625	162.159.36.2	192.168.2.10
Oct 13, 2024 20:11:34.955530882 CEST	53636	53	192.168.2.10	1.1.1.1
Oct 13, 2024 20:11:34.963268042 CEST	53	53636	1.1.1.1	192.168.2.10
Oct 13, 2024 20:11:58.076128006 CEST	138	138	192.168.2.10	192.168.2.255
Oct 13, 2024 20:12:09.347412109 CEST	52653	53	192.168.2.10	1.1.1.1
Oct 13, 2024 20:12:09.355066061 CEST	53	52653	1.1.1.1	192.168.2.10

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 13, 2024 20:11:07.330317974 CEST	192.168.2.10	1.1.1.1	0x2ed6	Standard query (0)	mail.w-iphon.sa.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:11:07.330785990 CEST	192.168.2.10	1.1.1.1	0x4705	Standard query (0)	mail.w-iphon.sa.com	65	IN (0x0001)	false
Oct 13, 2024 20:11:09.289403915 CEST	192.168.2.10	1.1.1.1	0xe5c8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:11:09.289887905 CEST	192.168.2.10	1.1.1.1	0x421d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 13, 2024 20:11:09.326824903 CEST	192.168.2.10	1.1.1.1	0xce9	Standard query (0)	mail.w-iphon.sa.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:11:09.327296019 CEST	192.168.2.10	1.1.1.1	0xeebd	Standard query (0)	mail.w-iphon.sa.com	65	IN (0x0001)	false
Oct 13, 2024 20:11:34.955530882 CEST	192.168.2.10	1.1.1.1	0x8bbb	Standard query (0)	206.23.85.13.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Oct 13, 2024 20:12:09.347412109 CEST	192.168.2.10	1.1.1.1	0xdca6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 13, 2024 20:11:07.931186914 CEST	1.1.1.1	192.168.2.10	0x2ed6	No error (0)	mail.w-iphon.sa.com		50.6.138.164	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:11:09.295973063 CEST	1.1.1.1	192.168.2.10	0xe5c8	No error (0)	www.google.com		142.250.185.68	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:11:09.297456980 CEST	1.1.1.1	192.168.2.10	0x421d	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 13, 2024 20:11:09.545066118 CEST	1.1.1.1	192.168.2.10	0xce9	No error (0)	mail.w-iphon.sa.com		50.6.138.164	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:11:18.998965025 CEST	1.1.1.1	192.168.2.10	0x2066	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:11:18.998965025 CEST	1.1.1.1	192.168.2.10	0x2066	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:11:33.528654099 CEST	1.1.1.1	192.168.2.10	0x64e0	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:11:33.528654099 CEST	1.1.1.1	192.168.2.10	0x64e0	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:11:34.963268042 CEST	1.1.1.1	192.168.2.10	0x8bbb	Name error (3)	206.23.85.13.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Oct 13, 2024 20:12:09.355066061 CEST	1.1.1.1	192.168.2.10	0xdca6	No error (0)	www.google.com		142.250.185.68	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

fs.microsoft.com

mail.w-iphon.sa.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.10	49722	50.6.138.164	80	6672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:11:07.939827919 CEST	465	OUT	GET /icloud-archivos/code2022esp.php HTTP/1.1 Host: mail.w-iphon.sa.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:11:08.456120014 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:08 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Vary: Accept-Encoding Content-Encoding: gzip Accept-Ranges: none Content-Length: 2876 Keep-Alive: timeout=5, max=75 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 52 61 73 db 36 12 fd ee 5f 81 30 9d 8c d4 0b 49 cb 72 dc c4 16 d5 49 1c e7 ea 99 e4 d2 26 ce 75 6e 6e ae 19 08 58 89 48 40 80 01 40 c9 8a eb 9f d4 4f f9 09 f9 63 b7 00 29 8a b2 9d da bd f1 64 ae 73 47 7b 44 62 b1 fb f6 ed db 37 ba f3 f4 e5 e1 c9 3f 7e 3c 22 b9 2b 24 f9 f1 cd 93 e7 c7 87 24 8a d3 f4 e7 e1 61 9a 3e 3d 79 4a 7e 38 79 f1 9c ec 26 db 03 72 62 a8 b2 c2 09 ad a8 4c d3 a3 bf 45 24 ca 9d 2b f7 d3 74 b1 58 24 8b 61 a2 cd 2c 3d 79 95 7a a8 dd 54 6a 6d 21 e1 8e 47 e3 ad d1 9d 38 26 96 ce 81 93 a9 d1 05 a9 8c cc 7a db db 0f b6 fb 1e c0 36 08 82 49 5d f1 84 e9 22 56 36 a9 6c 4a df 0c ff 3e 48 0b 3d 11 12 52 a6 39 24 65 5e 92 38 46 40 df 63 3c ca 81 f2 f1 a8 00 47 89 07 8a e1 43 25 e6 59 74 a8 95 03 e5 e2 93 65 09 11 61 f5 29 8b 1c 9c ba 40 ee 80 b0 9c 1a 0b 2e 7b 73 f2 2c 7e 88 04 09 3e e1 a7 06 53 b4 80 2c 9a 0b 58 94 da b8 0e c4 42 70 97 67 1c e6 82 41 1c 0e f7 89 50 a8 09 95 b1 65 54 42 36 b8 4f 0a 7a 2a 8a aa 58 05 1a f8 91 14 ea 3d 31 20 b3 a8 34 30 05 c7 72 [TRUNCATED] Data Ascii: Ras6_0IrI&unnXH@@Oc)dsG{Db7?~<"+$$a>=yJ~8y&rbLE$+tX$a,=yzTjm!G8&z6I]"V6lJ>H=R9$e^8F@c<GC%Ytea)@.{s,~>S,XBpgAPeTB6Oz*X=1 40rbRG,J)6"7NB.))5:-BIZQ4Fwh_\Z b$;B!W<<ESGc !Ap<zI>3:.j(G\Va+>E\|ovIl><F(b\q2!})HFV9#9+c3(8fQ<HFM1=#LKm>9V3TH>7D$\R[\\|0Vw`H\Gx_!HP3y8grZSE5qzxX0Ob1A`cD(tKmM=5qKP::YS{Op)uOL+c&/.a}uaSfU}3TEW_G.bk_C&@\|3fGx;"T{
Oct 13, 2024 20:11:08.456208944 CEST	1236	IN	Data Raw: 81 b2 e8 ee c6 22 82 12 f1 e0 c1 e0 bb 87 83 c1 70 6f 6f 67 67 2f 1e d4 db e9 ec 2e 22 82 d7 12 5d d0 6f b3 70 1b 0b 5b bf 8e a6 da 14 a4 00 97 6b ac 2d b5 75 c8 85 39 a1 55 16 a5 b8 9a 8a fb fe 49 99 97 35 fa 07 e3 cf af 80 0b ef 9e 67 58 1c 11 Data Ascii: "poogg/."]op[k-u9UI5gXEQ3mO`=!l""5RX{~b+A,axl'M>S+GzA\EfxuHOHQJpR8ThKc-k>$>%,&
Oct 13, 2024 20:11:08.456243992 CEST	687	IN	Data Raw: aa dc 41 db 6f 65 c8 91 65 46 94 6e 4c b6 e6 d4 90 9c da c7 95 d3 53 cd 2a 9b 71 fc 2d d0 e4 c9 0c dc 91 04 ff f9 64 79 cc 7b 11 cb a9 d9 8e fa 09 5d a5 1e 4c 2b c5 9c 5f f0 9c 4a c1 a9 aa 8a 09 98 1e f4 cf 0c b8 ca 28 e2 00 f5 59 03 52 29 bf 87 Data Ascii: AoeeFnLS*q-dy{]L+_J(YR)=,Q}H`Y~WRgnS^;&SCzJX0w$AppMnsMm7^p^m7\|i5J-3tc<[hu%/:=t%uHI.
Oct 13, 2024 20:11:08.776007891 CEST	381	OUT	GET /icloud-archivos/fonts.css HTTP/1.1 Host: mail.w-iphon.sa.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://mail.w-iphon.sa.com/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:11:08.900017023 CEST	764	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:08 GMT Server: Apache Last-Modified: Sat, 26 Nov 2022 14:31:26 GMT Accept-Ranges: none Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 478 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: text/css Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 92 4f 4e 83 40 14 87 d7 f6 14 2f 6c 68 1b 69 6b e3 9f b4 6e 34 ae 5c 98 98 f6 00 66 0a 0f 3b 71 60 c8 cc ab 4a 8c 57 70 ed 51 8c c7 f1 02 5e 41 a0 b4 d1 49 83 0e e9 c2 b2 9c 07 bf 07 bf 6f be b3 50 c6 e4 85 cc 47 78 6a ed 95 87 88 8b 74 ec 5e a5 8a b3 00 a6 48 70 ad a4 7b 5a 3e d6 94 0a 1c c7 52 45 4c ac 66 0f c8 6f e7 34 1e 0e 06 d9 44 2b 7f 2c a4 cf 44 db fd 78 7d ff 7c 7b 71 3b fb b0 50 a2 ed f4 fa 51 b1 d3 d3 48 5e a2 e4 0d cd 79 dc 7b 90 61 e8 74 20 cc 37 52 db 59 1e 2b 13 44 df 03 a4 16 48 69 82 4e 27 fb 78 bf 0b 17 32 c9 32 d9 ff 40 db ef c0 c1 68 34 84 f3 40 ce 10 a6 a9 26 8c 34 5c c6 be 54 89 54 8c 30 e8 c1 b9 10 30 c9 5f d7 30 41 8d ea 3e 1f 96 dd b9 06 06 a4 58 80 11 53 77 20 c3 ca 4d dd 7e eb b9 d5 3a ab 49 94 13 13 dc df 06 51 6f b9 ca 1e ec 2a d8 0c be 90 c1 73 4b 7a 15 32 a1 a4 5d 6b f6 17 73 0e ad cd c1 47 aa 67 ce b7 60 33 cc 31 f8 c6 79 1d 61 f0 3d b2 e5 1b 61 c0 17 91 1d da 32 d3 48 aa 1b ad ad 49 b5 96 b7 3f a3 cd 60 0c 19 40 b7 24 58 a9 14 4a da [TRUNCATED] Data Ascii: ON@/lhikn4\f;q`JWpQ^AIoPGxjt^Hp{Z>RELfo4D+,Dx}\|{q;PQH^y{at 7RY+DHiN'x22@h4@&4\TT00_0A>XSw M~:IQo*sKz2]ksGg`31ya=a2HI?`@$XJn?q~UIN5,'&-r]=p38C-)"JvEq~Y:ED91m<W!Jf9q~Q0pmn!X2Hkn'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.10	49723	50.6.138.164	80	6672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:11:08.776087046 CEST	379	OUT	GET /icloud-archivos/app.css HTTP/1.1 Host: mail.w-iphon.sa.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://mail.w-iphon.sa.com/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:11:08.905884981 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:08 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Sat, 26 Nov 2022 14:31:26 GMT Accept-Ranges: none Vary: Accept-Encoding Content-Encoding: gzip Keep-Alive: timeout=5, max=75 Transfer-Encoding: chunked Content-Type: text/css Data Raw: 31 66 61 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cc b2 ed 8e e3 b8 96 2d f8 3b f2 29 d4 91 48 dc c8 be 41 97 e4 8f b0 ad 44 1d 54 df 3c 75 d0 3f e6 36 06 73 81 c1 0c 72 12 05 4a a4 24 b6 29 52 20 a9 b0 23 1a 79 9f 7d 36 29 c9 a6 2c c9 76 44 d6 39 dd 11 f9 61 73 af bd f6 da 7b ad c2 94 3c f8 8f 0f 77 99 14 06 65 b8 64 fc 25 0e 34 16 1a 69 aa 58 f6 e5 c3 1d 2a 35 32 f4 60 90 66 af 14 61 f2 ef b5 36 71 10 85 e1 27 5b dc d3 64 c7 cc 24 e0 c7 87 0f 89 24 2f 76 42 89 55 ce 44 1c 84 ee 15 2b c3 52 4e 1f 3f 60 cd 08 fc 47 a8 c1 8c eb c7 0f 19 cb 53 5c 19 26 85 fb 5c 2b 28 66 52 1a aa 1e 3f 14 14 13 f7 7f ae 64 5d 3d 7e 28 31 03 54 49 45 fd f8 41 e0 e7 c7 0f 9a a6 4d a7 ae 4b 98 e7 e6 12 a6 2b 8e 61 ab 84 cb 74 d7 0c af 09 93 8f 1f 52 2c 9e 31 8c ac 94 cc 15 d5 f0 e9 19 b4 c8 5e 13 13 9c 09 8a da de bb 67 6a 75 63 8e 30 67 39 2c 93 60 4d 2d e0 44 1b 0b 69 1e be a5 70 4e 25 b9 fe fe b9 c7 26 a4 85 de 15 94 e5 85 e9 4e f1 ad 60 84 50 f1 fd f1 83 a1 25 e0 0c 1d e9 b1 f4 f6 39 c1 e9 ce 6e 2f 08 4a 25 97 2a 0e 8c [TRUNCATED] Data Ascii: 1faa-;)HADT<u?6srJ$)R #y}6),vD9as{<wed%4iX52`fa6q'[d$$/vBUD+RN?`GS\&\+(fR?d]=~(1TIEAMK+atR,1^gjuc0g9,`M-DipN%&N`P%9n/J%0,pg{ X'f#i,LIc 1'V"y!8y08QEtBD`N/^ fOkZq3>f}?a%yNVu]+Z]%5EpkVFVq.mtbAX^+flVa>-q \$]B-3\2q,>>~9j7NjxDU2x)q?uk.UcZ<Lf!T-LyM{A\|/AhO3W0/4T6vJ2pHy1'{RHm7e25bBPRxWaB\h.YG]t;-h9X6cTmE]&T1r+&P/V6VZL{h1R)l5yr]&{M5I<f^G!3\|LC
Oct 13, 2024 20:11:08.905949116 CEST	224	IN	Data Raw: 7b 94 58 e5 4c 80 05 c1 bc ea 7b 32 5b ac 68 09 ff 3d cd 9b ff d7 f0 9f a3 e6 34 a7 82 5c 09 91 bd 15 56 14 5b 98 7c a6 2a e3 72 ef 9d 5d 56 26 57 b2 ae 6c 39 83 f3 c1 2e 8d 31 89 b4 e7 b5 04 36 f4 a7 21 28 95 9c e3 4a 53 7b ee e6 d3 97 63 4d 57 Data Ascii: {XL{2[h=4\V[\|r]V&Wl9.16!(JS{cMW8gg?d,Q)_SK'4>'ASBgb7pWnok/(,Q)HI$y9dd%gjX5(cX/bDp&(Z[rYUq~8
Oct 13, 2024 20:11:08.905960083 CEST	1236	IN	Data Raw: dd d9 2c 08 d2 29 fc 98 65 99 93 c6 44 55 9b c7 0f 49 6d 8c 14 8f 1f 34 e5 34 85 ef 7e b6 7a aa 99 28 40 8e e9 cb 39 3d f6 14 1d 9f 61 8e 63 3a 09 5b e3 c4 2a b5 63 10 a1 a9 54 d8 30 29 e2 40 48 41 1b 7c 5c d8 4c 3f c2 87 4c a6 b5 f6 db e7 8b d5 Data Ascii: ,)eDUIm44~z(@9=ac:[cT0)@HA\|\L?L\|TY-U>5P{^UF)Es,CIIZQ;g#ln[r!$P,!Q8RTWRh(ptrSX)m&qt0Se"0s0!.4v@
Oct 13, 2024 20:11:08.906109095 CEST	1236	IN	Data Raw: 3e c4 0b b2 8f 59 f8 18 97 5e bf ba f4 ab 5e 64 7d cc ca c7 78 39 f5 31 4f 3e c6 85 d3 af ae 7b d5 f1 5d 36 3e e6 69 7c 97 ad 8f 59 9f ef d2 a4 ee 78 b1 f1 65 a2 de 59 b7 e3 db 44 fd c3 86 e7 fb 54 35 e7 a8 99 a6 58 5e 80 7d b8 36 72 04 13 f9 98 Data Ascii: >Y^^d}x91O>{]6>i\|YxeYDT5X^}6rn&t K2a\|:N[8ndduZi6<@"2u=[xn&Mkqatp[7b=I-?3`2MMwUj
Oct 13, 2024 20:11:08.906122923 CEST	1236	IN	Data Raw: 4b ce 48 60 14 16 ba c2 0a 24 40 7d 5f 30 43 11 7c 4f 5d cf 5e e1 0a 5e 2b 4c 08 13 39 58 09 6d d1 bc 3a 74 5b 69 f6 0a b8 68 e9 5e dc 1d 8a 76 cf 68 b6 9c 6f 56 eb e3 48 a4 30 61 b5 86 68 3a 2c dc 23 d9 31 83 6a 0d 25 4d 39 4d cd 51 23 2a e5 eb Data Ascii: KH`$@}_0C\|O]^^+L9Xm:t[ih^vhoVH0ah:,#1j%M9MQ#*DANLk>3O>j6D\|;LD@vJx+]'RpNn#][uGE+BSpAezk&rL ]V~,>U<#LSh}
Oct 13, 2024 20:11:08.906132936 CEST	1236	IN	Data Raw: 6c 08 ee 27 08 38 31 c9 1d d3 b0 7d 48 9d 65 d9 a9 7f 8f 95 60 22 f7 7b 5d 7d b4 31 c4 64 39 a2 89 52 3c 5f 3c 0d 38 7b 31 68 df 9a eb dd 34 8d a6 db 75 94 0d a7 6d 37 ab 2c 24 c3 69 ce df 9f 62 26 ab cd 2a 9a 0f 99 7b c1 ec 16 39 3e ca 8a 8a bf Data Ascii: l'81}He`"{]}1d9R<_<8{1h4um7,$ib&*{9>JD@F9GM]J#oK1cg38_GLu5SVF8<?s,YG>vnxl~z=ZQN45Rw\t\bf[rbSA
Oct 13, 2024 20:11:08.906143904 CEST	496	IN	Data Raw: cd c3 f0 7c 00 cf df 1e a3 f3 9e ab 31 1a 6d b8 16 23 9e f7 63 34 4e 72 6b 8c c6 77 ff a9 c0 4c 50 fe 5c 34 2e 92 fe 44 08 8e 29 5b 3f ad 3b fe 82 11 42 05 3a e8 3e a3 90 b7 49 5d 3f 6d 46 52 bc dd 46 67 fc ba 7c 1f ff 76 3b 1f e1 8f a2 ed f6 6c Data Ascii: \|1m#c4NrkwLP\4.D)[?;B:>I]?mFRFg\|v;l@I7uKu5b_6=H=NR^}Qsss5h*BY-C&A@SwK8t+JKU_JsK,/JW
Oct 13, 2024 20:11:08.906347036 CEST	1236	IN	Data Raw: a7 d3 3a 36 03 70 89 d5 b4 96 ad 0f 27 f4 99 a5 d3 f7 c0 3d ac dc 3b fe 67 05 31 9b ea 48 fc 0e aa 94 54 7f 60 f8 77 3f d9 90 f6 1a 0e 29 c7 65 13 e4 a9 06 e2 37 e4 8a d2 6b c7 a7 7e 43 81 05 d1 74 3a 2c d9 08 78 bd fc 23 e1 78 7a 42 14 8e 37 e5 Data Ascii: :6p'=;g1HT`w?)e7k~Ct:,x#xzB7LD#=Lz/(&skEKl2Q/)zKCIf>\b2}l)}IIG{.F\|o43/QN6d+z=_\&{nL"{Ac^
Oct 13, 2024 20:11:08.906358957 CEST	1236	IN	Data Raw: 03 1e c8 9b 28 cc e1 af 6b 0b 01 dc fc 99 45 9f 4f 0a 8d ac 3a 29 a7 f1 d1 b8 51 a7 0b c5 09 cd a4 72 d7 ee f6 6e 38 3a af db af 97 ae 68 89 c1 91 38 b8 bf 9f ba 69 73 9c e5 7a 36 b7 e7 81 08 24 3b 66 90 51 58 68 18 5f c6 81 92 06 1b fa 10 2d 56 Data Ascii: (kEO:)Qrn8:h8isz6$;fQXh_-Vm>RO]=iD6]C#lC}a]z)h&]TD8GO~egpm!?Ix{rAFBdcw,/#[V*{?u
Oct 13, 2024 20:11:08.906368971 CEST	448	IN	Data Raw: c6 be c4 f5 ea 96 1b de 92 4b 74 43 30 d1 b5 64 a2 5e 34 b7 f3 1b c4 dd a2 ed 06 69 d7 94 f5 84 85 d6 d7 28 0c 6f 90 17 5e 15 17 5e 93 16 5e 14 16 1e 65 fd f8 f0 e1 37 e0 d8 d1 97 4c e1 92 ea 40 17 78 47 ad c4 8d d5 bb 8c 6e b1 fa a6 20 a2 5b 92 Data Ascii: KtC0d^4i(o^^^e7L@xGn [F8_Y2oRy[nxK$DBzow]SZ_0A^xU\xMZxQXx}.twjXoJ"%jQ? &/qdJt-qhA5e=a5
Oct 13, 2024 20:11:08.910923958 CEST	1236	IN	Data Raw: de 20 2f bc 2a 2e bc 26 2d bc 28 2c 3c ca fa f1 e1 c3 6f 25 25 0c 3f 94 f8 80 f6 8c 98 22 5e 46 cb ea f0 d9 ca 9c 69 86 52 29 0c 66 82 2a 64 98 e1 d4 a9 cf e0 0d 69 f6 4a e3 20 da 56 87 66 c1 59 25 ab 13 7a 46 95 92 ca a1 1b d6 60 b3 fa d4 8d 9c Data Ascii: /.&-(,<o%%?"^FiR)fdiJ VfY%zF`SNmqeyanVOOXLAHxfIxRc/q8{)_G{;ha9AHJamrZ^/M4x M<SeXyyT^k6>_RY_NV`a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.10	49729	50.6.138.164	80	6672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:11:08.779016972 CEST	381	OUT	GET /icloud-archivos/style.css HTTP/1.1 Host: mail.w-iphon.sa.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://mail.w-iphon.sa.com/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:11:09.300740957 CEST	598	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:09 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Sat, 26 Nov 2022 14:31:26 GMT Accept-Ranges: none Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 286 Keep-Alive: timeout=5, max=75 Content-Type: text/css Data Raw: 1f 8b 08 00 00 00 00 00 00 03 55 50 dd 6a c3 20 14 be f7 29 84 31 58 21 06 6d 92 76 d5 ab 5e 74 ef 61 a2 4d 0e b3 2a c6 92 ac 63 ef be 93 8c 6c 0c 11 3c e7 7c 3f e7 b3 b4 29 85 e4 42 0f 9e 7e 92 56 77 ef 7d 0a 77 6f 58 17 5c 48 92 3e bd 9d 2f a7 73 a5 48 0c 23 64 08 5e 52 dd 8e c1 dd b3 55 64 02 93 07 79 e4 cf 8a dc 74 42 09 e6 ec 35 4b ca aa 23 b6 da 90 8c 4d 2c 69 03 f7 51 d2 26 ce 8a fc cc 9b 3d 8e a3 36 06 7c 2f a9 b0 b7 0d 8c 45 9c 29 ca 83 a1 a9 6f f5 8b 78 6d 0a 51 9f 0a 51 f0 b2 3e ee 16 dc cc c6 41 9b 30 49 ca 11 8b aa 54 2c 8f 3d de 95 c2 8b f5 94 62 f7 bb 55 0e 51 d2 d3 e2 ff 67 ba ae b3 85 6c 78 75 a9 b8 22 d7 e0 33 9b 2c f4 03 6e 59 73 ec 64 3b 67 a6 1d f4 18 bc b3 3e db a4 c8 83 81 37 76 46 91 8d 32 c2 c3 6e 9a ce 66 44 b1 31 ea 6e 75 62 bc e4 e2 b0 64 fc a7 de f0 8d 7c d5 37 70 1f f8 af 09 b4 53 e4 8b 7e 03 1b d6 07 a2 94 01 00 00 Data Ascii: UPj )1X!mv^taM*cl<\|?)B~Vw}woX\H>/sH#d^RUdytB5K#M,iQ&=6\|/E)oxmQQ>A0IT,=bUQglxu"3,nYsd;g>7vF2nfD1nubd\|7pS~
Oct 13, 2024 20:11:09.348695040 CEST	411	OUT	GET /icloud-archivos/myriad-set-pro_thin.woff HTTP/1.1 Host: mail.w-iphon.sa.com Connection: keep-alive Origin: http://mail.w-iphon.sa.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mail.w-iphon.sa.com/icloud-archivos/fonts.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:11:09.473990917 CEST	1236	IN	HTTP/1.1 404 Not Found Date: Sun, 13 Oct 2024 18:11:09 GMT Server: Apache Last-Modified: Wed, 24 May 2023 01:50:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4677 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 [TRUNCATED] Data Ascii: RmssgJ&av$NmRmHInM=_cpw~y3(\G(z}[832qQtjEl0;hQoAqK/^zPP`1PP%J^Vyg::<s}k9=v]Ivs8w>;]Np3xyvGe)e,v&FVIJqM3Hhp8(a{8jotEI.6q^>YZQH]rBis_4:Jar!c(j):{{d!5Dh4+k5yUD$wZ}YQO,5I>i6<]2XpCMe^Wh2.\|~l'\|v,sTWdG'8RFOE>8.V?\~[KJzp=4LB)YyuFMYb;Cd5[&TWRd{/_lyoY'+G;G\?zJL9*~"P,EO$}(OW<2X!SSQrxOx"#DJMAP!3-uH26?<gR;1<]9G$Vp0sBQ=f%afQmB<qMZq0&Vk
Oct 13, 2024 20:11:09.474047899 CEST	224	IN	Data Raw: 49 26 3b f9 fa 41 83 05 ea 7d 2a 6d a5 44 33 d4 a4 71 b1 99 49 63 79 2b 21 45 66 c8 7d ce 7e f9 e5 e0 60 b1 69 91 ef a6 ab dd a3 c9 f3 17 2f 7e 5d ec ba 42 9a b5 cd c3 17 bf 26 87 2f 56 43 53 84 7b 98 88 e4 2e 37 54 eb b4 bf 38 87 cf fd bf 11 0b Data Ascii: I&;A}mD3qIcy+!Ef}~`i/~]B&/VCS{.7T81),)VRCx{k_hT!dnD3bxixqTHr2=-c/7UtoGc-'9_e$'(e66FANz=8
Oct 13, 2024 20:11:09.474057913 CEST	1236	IN	Data Raw: a4 e5 36 1a 43 c6 47 d8 1b 9f 5d 5f 5f 5e 83 af 67 1f ae 5e fe 76 06 ef 2f 6f e1 fc f2 c3 fb d7 5b d8 5b 10 99 f8 fc 69 dd 8b 47 fe b3 da 5e 36 7c b9 f5 68 b9 37 2b 9a c5 2a df 28 8e c6 b1 80 44 09 6b 99 d8 bc 12 9a 33 ee 41 61 30 3b d9 1b 7f 2c Data Ascii: 6CG]__^g^v/o[[iG^6\|h7+*(Dk3Aa0;,%\Errk;Y,Qh0TA3SdR$RLWwA7-JR40im%d@:,5Hea2<DAUq\/Y+'<Tm^cx)<7$`%
Oct 13, 2024 20:11:09.474183083 CEST	1236	IN	Data Raw: fc 54 b8 52 6d cf d9 8e e4 3d 39 99 74 f1 b5 4d 6a 3d 3b 15 37 b8 34 d0 d7 4f 96 15 19 27 b4 f3 03 d6 79 0c e0 92 27 2a e1 32 32 a5 6d 91 90 3d 33 0c 9b 08 8b 7d 8b da 4a 27 a7 d2 35 4b f8 a0 73 81 ee bd 5d 6c 54 3a 5f db 30 18 1a e1 89 59 df 32 Data Ascii: TRm=9tMj=;74O'y'*22m=3}J'5Ks]lT:_0Y26F8InG.6_dzUZq4"s5R4=(f'{c83C\|$^J}gHplI[j[/G56#Bq$pN5-N60047a[a9ya4B0(
Oct 13, 2024 20:11:09.474195004 CEST	1041	IN	Data Raw: b5 db 67 c9 06 a6 de f8 da b2 59 c2 7a 4b 6f 0b 46 b7 18 66 b3 4b 6c 96 5d 04 b7 44 0d 58 3e bf 2b a1 91 35 4f 6a 07 9a 1c cc 3c 97 75 1e 13 2e 4b 21 74 8e e9 e0 e9 ef 5b 1c b9 45 b6 56 0e 88 11 0d 87 e3 64 a2 70 11 9c e5 bc 93 10 8a 69 15 4a cd Data Ascii: gYzKoFfKl]DX>+5Oj<u.K!t[EVdpiJ<8)3~(9szG\|o(X\v#S3fuHpi"S)f.Tr#'eR7as UT[7-6-Y-BE
Oct 13, 2024 20:11:09.480380058 CEST	410	OUT	GET /icloud-archivos/myriad-set-pro_thin.ttf HTTP/1.1 Host: mail.w-iphon.sa.com Connection: keep-alive Origin: http://mail.w-iphon.sa.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mail.w-iphon.sa.com/icloud-archivos/fonts.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:11:09.604337931 CEST	1236	IN	HTTP/1.1 404 Not Found Date: Sun, 13 Oct 2024 18:11:09 GMT Server: Apache Last-Modified: Wed, 24 May 2023 01:50:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4677 Keep-Alive: timeout=5, max=73 Connection: Keep-Alive Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 [TRUNCATED] Data Ascii: RmssgJ&av$NmRmHInM=_cpw~y3(\G(z}[832qQtjEl0;hQoAqK/^zPP`1PP%J^Vyg::<s}k9=v]Ivs8w>;]Np3xyvGe)e,v&FVIJqM3Hhp8(a{8jotEI.6q^>YZQH]rBis_4:Jar!c(j):{{d!5Dh4+k5yUD$wZ}YQO,5I>i6<]2XpCMe^Wh2.\|~l'\|v,sTWdG'8RFOE>8.V?\~[KJzp=4LB)YyuFMYb;Cd5[&TWRd{/_lyoY'+G;G\?zJL9*~"P,EO$}(OW<2X!SSQrxOx"#DJMAP!3-uH26?<gR;1<]9G$Vp0sBQ=f%afQmB<qMZq0&Vk
Oct 13, 2024 20:11:09.604403019 CEST	224	IN	Data Raw: 49 26 3b f9 fa 41 83 05 ea 7d 2a 6d a5 44 33 d4 a4 71 b1 99 49 63 79 2b 21 45 66 c8 7d ce 7e f9 e5 e0 60 b1 69 91 ef a6 ab dd a3 c9 f3 17 2f 7e 5d ec ba 42 9a b5 cd c3 17 bf 26 87 2f 56 43 53 84 7b 98 88 e4 2e 37 54 eb b4 bf 38 87 cf fd bf 11 0b Data Ascii: I&;A}mD3qIcy+!Ef}~`i/~]B&/VCS{.7T81),)VRCx{k_hT!dnD3bxixqTHr2=-c/7UtoGc-'9_e$'(e66FANz=8
Oct 13, 2024 20:11:09.604419947 CEST	1236	IN	Data Raw: a4 e5 36 1a 43 c6 47 d8 1b 9f 5d 5f 5f 5e 83 af 67 1f ae 5e fe 76 06 ef 2f 6f e1 fc f2 c3 fb d7 5b d8 5b 10 99 f8 fc 69 dd 8b 47 fe b3 da 5e 36 7c b9 f5 68 b9 37 2b 9a c5 2a df 28 8e c6 b1 80 44 09 6b 99 d8 bc 12 9a 33 ee 41 61 30 3b d9 1b 7f 2c Data Ascii: 6CG]__^g^v/o[[iG^6\|h7+*(Dk3Aa0;,%\Errk;Y,Qh0TA3SdR$RLWwA7-JR40im%d@:,5Hea2<DAUq\/Y+'<Tm^cx)<7$`%
Oct 13, 2024 20:11:09.604430914 CEST	1236	IN	Data Raw: fc 54 b8 52 6d cf d9 8e e4 3d 39 99 74 f1 b5 4d 6a 3d 3b 15 37 b8 34 d0 d7 4f 96 15 19 27 b4 f3 03 d6 79 0c e0 92 27 2a e1 32 32 a5 6d 91 90 3d 33 0c 9b 08 8b 7d 8b da 4a 27 a7 d2 35 4b f8 a0 73 81 ee bd 5d 6c 54 3a 5f db 30 18 1a e1 89 59 df 32 Data Ascii: TRm=9tMj=;74O'y'*22m=3}J'5Ks]lT:_0Y26F8InG.6_dzUZq4"s5R4=(f'{c83C\|$^J}gHplI[j[/G56#Bq$pN5-N60047a[a9ya4B0(
Oct 13, 2024 20:11:09.604445934 CEST	1041	IN	Data Raw: b5 db 67 c9 06 a6 de f8 da b2 59 c2 7a 4b 6f 0b 46 b7 18 66 b3 4b 6c 96 5d 04 b7 44 0d 58 3e bf 2b a1 91 35 4f 6a 07 9a 1c cc 3c 97 75 1e 13 2e 4b 21 74 8e e9 e0 e9 ef 5b 1c b9 45 b6 56 0e 88 11 0d 87 e3 64 a2 70 11 9c e5 bc 93 10 8a 69 15 4a cd Data Ascii: gYzKoFfKl]DX>+5Oj<u.K!t[EVdpiJ<8)3~(9szG\|o(X\v#S3fuHpi"S)f.Tr#'eR7as UT[7-6-Y-BE
Oct 13, 2024 20:11:10.027618885 CEST	413	OUT	GET /favicon.ico HTTP/1.1 Host: mail.w-iphon.sa.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://mail.w-iphon.sa.com/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:11:10.564112902 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:10 GMT Server: Apache Last-Modified: Thu, 15 Apr 2021 20:52:24 GMT Accept-Ranges: bytes Content-Length: 9062 Cache-Control: max-age=604800 Expires: Sun, 20 Oct 2024 18:11:10 GMT Keep-Alive: timeout=5, max=72 Connection: Keep-Alive Content-Type: image/x-icon Data Raw: 00 00 01 00 04 00 20 20 00 00 01 00 08 00 a8 08 00 00 46 00 00 00 10 10 00 00 01 00 08 00 68 05 00 00 ee 08 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 56 0e 00 00 10 10 00 00 01 00 20 00 68 04 00 00 fe 1e 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 42 42 42 00 9e 9e 9e 00 72 72 72 00 ce ce ce 00 5a 5a 5a 00 b6 b6 b6 00 e6 e6 e6 00 92 92 92 00 4e 4e 4e 00 7e 7e 7e 00 66 66 66 00 aa aa aa 00 da da da 00 c2 c2 c2 00 f2 f2 f2 00 4a 4a 4a 00 a6 a6 a6 00 7a 7a 7a 00 62 62 62 00 56 56 56 00 86 86 86 00 6e 6e 6e 00 e2 e2 e2 00 ca ca ca 00 46 46 46 00 a2 a2 a2 00 76 76 76 00 d2 d2 d2 00 5e 5e 5e 00 ba ba ba 00 ea ea ea 00 9a 9a 9a 00 52 52 52 00 82 82 82 00 6a 6a 6a 00 ae ae ae 00 de de de 00 c6 c6 c6 00 f6 f6 f6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: Fh V h( @BBBrrrZZZNNN~~~fffJJJzzzbbbVVVnnnFFFvvv^^^RRRjjj
Oct 13, 2024 20:11:10.564169884 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: '''''''''''''''''''''''''''''
Oct 13, 2024 20:11:10.564182043 CEST	1236	IN	Data Raw: 27 27 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e3 e3 ff ff c0 01 ff ff 80 00 ff ff 00 00 7f ff 00 00 7f fe 00 00 3f fe 00 00 3f fe 00 00 3f fc 00 00 7f fc 00 00 ff fc 00 01 ff fc 00 01 ff fc 00 01 ff fc 00 00 ff fc 00 00 ff fe 00 00 7f Data Ascii: ''????( FFFrrr^^^RRRjjjNNNzzzf
Oct 13, 2024 20:11:10.565112114 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:10 GMT Server: Apache Last-Modified: Thu, 15 Apr 2021 20:52:24 GMT Accept-Ranges: bytes Content-Length: 9062 Cache-Control: max-age=604800 Expires: Sun, 20 Oct 2024 18:11:10 GMT Keep-Alive: timeout=5, max=72 Connection: Keep-Alive Content-Type: image/x-icon Data Raw: 00 00 01 00 04 00 20 20 00 00 01 00 08 00 a8 08 00 00 46 00 00 00 10 10 00 00 01 00 08 00 68 05 00 00 ee 08 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 56 0e 00 00 10 10 00 00 01 00 20 00 68 04 00 00 fe 1e 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 42 42 42 00 9e 9e 9e 00 72 72 72 00 ce ce ce 00 5a 5a 5a 00 b6 b6 b6 00 e6 e6 e6 00 92 92 92 00 4e 4e 4e 00 7e 7e 7e 00 66 66 66 00 aa aa aa 00 da da da 00 c2 c2 c2 00 f2 f2 f2 00 4a 4a 4a 00 a6 a6 a6 00 7a 7a 7a 00 62 62 62 00 56 56 56 00 86 86 86 00 6e 6e 6e 00 e2 e2 e2 00 ca ca ca 00 46 46 46 00 a2 a2 a2 00 76 76 76 00 d2 d2 d2 00 5e 5e 5e 00 ba ba ba 00 ea ea ea 00 9a 9a 9a 00 52 52 52 00 82 82 82 00 6a 6a 6a 00 ae ae ae 00 de de de 00 c6 c6 c6 00 f6 f6 f6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: Fh V h( @BBBrrrZZZNNN~~~fffJJJzzzbbbVVVnnnFFFvvv^^^RRRjjj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.10	49730	50.6.138.164	80	6672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:11:08.779252052 CEST	428	OUT	GET /assets/img/ajax-loader.gif HTTP/1.1 Host: mail.w-iphon.sa.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://mail.w-iphon.sa.com/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:11:09.283071041 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:09 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Sun, 07 May 2023 06:35:50 GMT Accept-Ranges: bytes Content-Length: 4178 Keep-Alive: timeout=5, max=75 Content-Type: image/gif Data Raw: 47 49 46 38 39 61 20 00 20 00 f5 00 00 ff ff ff 00 00 00 fa fa fa c4 c4 c4 e8 e8 e8 f0 f0 f0 d0 d0 d0 7e 7e 7e 9a 9a 9a f6 f6 f6 e6 e6 e6 fc fc fc 92 92 92 86 86 86 e2 e2 e2 b8 b8 b8 a0 a0 a0 ec ec ec ae ae ae dc dc dc 3e 3e 3e 56 56 56 60 60 60 7c 7c 7c a8 a8 a8 ee ee ee 4a 4a 4a 6c 6c 6c 0c 0c 0c 00 00 00 ce ce ce c8 c8 c8 d8 d8 d8 2c 2c 2c 5e 5e 5e 1e 1e 1e 4c 4c 4c b0 b0 b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 09 0a 00 00 00 2c 00 00 00 00 20 00 20 00 00 06 ff 40 80 70 48 24 16 38 1c 47 71 c9 24 4e 12 c4 41 a7 33 28 0a 9a 4c 09 c5 12 9d 56 87 05 05 14 4b 7c 50 28 8f a1 94 3a 14 28 14 05 72 b1 42 d1 8c d7 5f 40 58 21 2f 1a ce 0c 42 78 42 6e 62 7d 45 [TRUNCATED] Data Ascii: GIF89a ~~~>>>VVV```\|\|\|JJJlll,,,^^^LLL!NETSCAPE2.0!Created with ajaxload.info!, @pH$8Gq$NA3(LVK\|P(:(rB_@X!/BxBnb}EgorEg^oWDcJCgoqmoE{p~rD}MdKro\|]q` 9Cf)$'=}C^u-H.!OK"15.&{jT BBoe6<@B?1)GbK !, @pH$&4Bq$Db(V[4_:t:"rqh@a)gBk_oEg~#rJDgxloWFC~mgoDBwK!CwE dXrs'xM&T$$\|MC ABldKdV?oFl-X L[J*6!"5\@poImN!QXm@%2u:uH2\R#a!, @pH$Bq$&D(LV[$:4
Oct 13, 2024 20:11:09.283093929 CEST	1236	IN	Data Raw: 50 28 0d 72 f1 73 86 02 d6 5f 80 85 a2 49 c8 89 05 67 13 42 78 42 0f 6f 10 7f 45 20 67 02 77 5e 00 09 1a 14 15 72 02 8e 46 67 57 85 10 6f 57 44 0c 63 42 0b 0a 0a 11 98 84 67 09 02 0e 0e 02 04 6f 1b 44 25 23 1d 1d 9f 00 19 a5 0a 05 76 0b 20 4a 45 Data Ascii: P(rs_IgBxBoE gw^rFgWoWDcBgoD%#v JEinE~"#Ld$LX"yrvEd)xWO<2I&1a"UJ(qz+kQ\" tRjO}C7":sdE& R"#-
Oct 13, 2024 20:11:09.283106089 CEST	1236	IN	Data Raw: a2 d0 a1 44 d3 56 f8 ce 0e e1 e3 2e 08 00 21 f9 04 09 0a 00 00 00 2c 00 00 00 00 20 00 20 00 00 06 ff 40 80 70 48 2c 2a 14 8b a2 72 49 4c 12 05 47 41 51 ca 54 26 14 99 67 94 58 50 24 aa d3 ad 10 aa a0 02 c8 05 70 31 72 1c 92 cd 99 b6 5a eb 1d 8b Data Ascii: DV.!, @pH,*rILGAQT&gXP$p1rZ9\|jfBGi~WeEy}RinlHCqNN]aGuzC`Ljz`dLKUWDcjs0R%+q"lQbw
Oct 13, 2024 20:11:09.283282042 CEST	738	IN	Data Raw: 43 0a 6c 94 56 60 58 9a 53 a2 1a a9 81 b0 f1 a5 cb 3f 58 90 09 71 b0 91 21 a8 2b 9b 00 14 bd 02 c3 e0 40 03 2a 2d 07 cc d2 84 cc c0 46 78 42 92 ce c2 f3 0b c4 01 04 5c 80 46 e5 a7 33 aa d6 ae b7 86 0d 5d 12 04 00 21 f9 04 09 0a 00 00 00 2c 00 00 Data Ascii: ClV`XS?Xq!+@-FxB\F3]!, @pH,rILGAQT&gXP$p1rZ9\|jEGi~WeEy#D}RinlHB!$CfCN]Ej$sLjNszEg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.10	49731	50.6.138.164	80	6672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:11:08.780502081 CEST	409	OUT	GET /sep.png HTTP/1.1 Host: mail.w-iphon.sa.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://mail.w-iphon.sa.com/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:11:09.291577101 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:09 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Sun, 07 May 2023 06:36:54 GMT Accept-Ranges: bytes Content-Length: 1240 Keep-Alive: timeout=5, max=75 Content-Type: image/png Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 7e 00 00 00 32 04 03 00 00 00 a9 19 ad 6c 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 0f 50 4c 54 45 e8 e8 e8 e1 e1 e1 e1 e1 e1 e0 e0 e0 b6 b6 b6 d7 b9 84 90 00 00 00 05 74 52 4e 53 01 06 0c 12 39 f4 8b 71 62 00 00 04 5e 49 44 41 54 68 de ed 59 eb 99 e2 30 0c b4 3a 90 dd 81 ed 0e cc 75 c0 f5 5f d3 59 23 f9 91 dd 00 d9 bd 38 fc 41 b0 f9 f8 58 88 35 a3 d1 c3 c6 39 35 f6 62 c1 a7 6a b7 66 f7 3f b0 fb df b7 d8 fd 2f 56 bf dd bb 3f a5 3a 17 e0 a8 27 b7 67 4c 86 23 a4 94 6f a5 5e 53 29 25 27 79 91 ca ed 2a cb e2 68 ca 75 c5 fa a2 04 78 1e a3 fa 5d 5d dc 77 dd 51 75 bf 9a e2 f3 f5 0b 09 56 04 c2 75 be 37 aa 4b ba 55 04 b0 18 a3 b1 ce 62 8e e1 ee 57 23 fc 79 8b 40 f4 31 85 20 10 72 ae cf 7c 2d 82 ba 5a be 25 89 7c 82 1b 06 a0 ba 46 24 ae f3 ae fb a0 bf f1 1f e5 6b 16 01 09 c1 2d e7 eb f4 93 eb 13 0a 4a 0a 20 f8 68 fc 7b 08 c5 ed b2 0f 04 35 40 96 02 35 09 a2 ea b0 de 4c f8 bf 0a 01 96 92 a0 9b 7c 44 40 2a fe 8a a0 32 bc 0b [TRUNCATED] Data Ascii: PNGIHDR~2lpHYs~PLTEtRNS9qb^IDAThY0:u_Y#8AX595bjf?/V?:'gL#o^S)%'yhux]]wQuVu7KUbW#y@1 r\|-Z%\|F$k-J h{5@5L\|D@2.(\OW+:QB4/ ?K(x+ =)r/P;.UX-t&THD[aA0gzF^@OSvk,4V~Ac0 ;jo A(?:R8\|Em\|~SR!MBki>\|\|@h=Jc-??9h:K19PmF$4%) 0<nY$z2^uET;qdPjyQ,UydDm`!nlTx?TC[i$:MCm`WQctZfkz%, 20:3{6JXmDXiv?!p{46uW=kyLB_9{1>Fhq~z4=:{7o:1>1=}+<<Y',Pk$$J"V#f{
Oct 13, 2024 20:11:09.292016983 CEST	272	IN	Data Raw: 09 ad a7 dd 5b e9 23 94 10 a5 93 8f 57 4e 85 49 86 57 fb b6 0c 74 88 83 95 a4 45 17 70 c4 aa d7 76 20 3e 6f 0f e9 30 f9 3c cd a3 7a e8 a5 c9 2c 83 a9 c6 76 c1 05 69 a6 aa 1f d4 b5 5a fe 83 00 68 fd 99 e7 6c b6 16 82 21 70 95 fb 9e db 16 cb ba cf Data Ascii: [#WNIWtEpv >o0<z,viZhl!pf(swp^ M[smKK?~+q]c2<wmk_OS+Kcg515eYr?zv}N>fc,^hCTss!bIEbQU
Oct 13, 2024 20:11:09.349812031 CEST	411	OUT	GET /icloud-archivos/myriad-set-pro_text.woff HTTP/1.1 Host: mail.w-iphon.sa.com Connection: keep-alive Origin: http://mail.w-iphon.sa.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mail.w-iphon.sa.com/icloud-archivos/fonts.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:11:09.472332001 CEST	1236	IN	HTTP/1.1 404 Not Found Date: Sun, 13 Oct 2024 18:11:09 GMT Server: Apache Last-Modified: Wed, 24 May 2023 01:50:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4677 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 [TRUNCATED] Data Ascii: RmssgJ&av$NmRmHInM=_cpw~y3(\G(z}[832qQtjEl0;hQoAqK/^zPP`1PP%J^Vyg::<s}k9=v]Ivs8w>;]Np3xyvGe)e,v&FVIJqM3Hhp8(a{8jotEI.6q^>YZQH]rBis_4:Jar!c(j):{{d!5Dh4+k5yUD$wZ}YQO,5I>i6<]2XpCMe^Wh2.\|~l'\|v,sTWdG'8RFOE>8.V?\~[KJzp=4LB)YyuFMYb;Cd5[&TWRd{/_lyoY'+G;G\?zJL9*~"P,EO$}(OW<2X!SSQrxOx"#DJMAP!3-uH26?<gR;1<]9G$Vp0sBQ=f%afQmB<qMZq0&Vk
Oct 13, 2024 20:11:09.472343922 CEST	224	IN	Data Raw: 49 26 3b f9 fa 41 83 05 ea 7d 2a 6d a5 44 33 d4 a4 71 b1 99 49 63 79 2b 21 45 66 c8 7d ce 7e f9 e5 e0 60 b1 69 91 ef a6 ab dd a3 c9 f3 17 2f 7e 5d ec ba 42 9a b5 cd c3 17 bf 26 87 2f 56 43 53 84 7b 98 88 e4 2e 37 54 eb b4 bf 38 87 cf fd bf 11 0b Data Ascii: I&;A}mD3qIcy+!Ef}~`i/~]B&/VCS{.7T81),)VRCx{k_hT!dnD3bxixqTHr2=-c/7UtoGc-'9_e$'(e66FANz=8
Oct 13, 2024 20:11:09.472373009 CEST	1236	IN	Data Raw: a4 e5 36 1a 43 c6 47 d8 1b 9f 5d 5f 5f 5e 83 af 67 1f ae 5e fe 76 06 ef 2f 6f e1 fc f2 c3 fb d7 5b d8 5b 10 99 f8 fc 69 dd 8b 47 fe b3 da 5e 36 7c b9 f5 68 b9 37 2b 9a c5 2a df 28 8e c6 b1 80 44 09 6b 99 d8 bc 12 9a 33 ee 41 61 30 3b d9 1b 7f 2c Data Ascii: 6CG]__^g^v/o[[iG^6\|h7+*(Dk3Aa0;,%\Errk;Y,Qh0TA3SdR$RLWwA7-JR40im%d@:,5Hea2<DAUq\/Y+'<Tm^cx)<7$`%
Oct 13, 2024 20:11:09.472522020 CEST	1236	IN	Data Raw: fc 54 b8 52 6d cf d9 8e e4 3d 39 99 74 f1 b5 4d 6a 3d 3b 15 37 b8 34 d0 d7 4f 96 15 19 27 b4 f3 03 d6 79 0c e0 92 27 2a e1 32 32 a5 6d 91 90 3d 33 0c 9b 08 8b 7d 8b da 4a 27 a7 d2 35 4b f8 a0 73 81 ee bd 5d 6c 54 3a 5f db 30 18 1a e1 89 59 df 32 Data Ascii: TRm=9tMj=;74O'y'*22m=3}J'5Ks]lT:_0Y26F8InG.6_dzUZq4"s5R4=(f'{c83C\|$^J}gHplI[j[/G56#Bq$pN5-N60047a[a9ya4B0(
Oct 13, 2024 20:11:09.472547054 CEST	1041	IN	Data Raw: b5 db 67 c9 06 a6 de f8 da b2 59 c2 7a 4b 6f 0b 46 b7 18 66 b3 4b 6c 96 5d 04 b7 44 0d 58 3e bf 2b a1 91 35 4f 6a 07 9a 1c cc 3c 97 75 1e 13 2e 4b 21 74 8e e9 e0 e9 ef 5b 1c b9 45 b6 56 0e 88 11 0d 87 e3 64 a2 70 11 9c e5 bc 93 10 8a 69 15 4a cd Data Ascii: gYzKoFfKl]DX>+5Oj<u.K!t[EVdpiJ<8)3~(9szG\|o(X\v#S3fuHpi"S)f.Tr#'eR7as UT[7-6-Y-BE
Oct 13, 2024 20:11:09.478183031 CEST	410	OUT	GET /icloud-archivos/myriad-set-pro_text.ttf HTTP/1.1 Host: mail.w-iphon.sa.com Connection: keep-alive Origin: http://mail.w-iphon.sa.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mail.w-iphon.sa.com/icloud-archivos/fonts.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:11:09.601546049 CEST	1236	IN	HTTP/1.1 404 Not Found Date: Sun, 13 Oct 2024 18:11:09 GMT Server: Apache Last-Modified: Wed, 24 May 2023 01:50:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4677 Keep-Alive: timeout=5, max=73 Connection: Keep-Alive Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 [TRUNCATED] Data Ascii: RmssgJ&av$NmRmHInM=_cpw~y3(\G(z}[832qQtjEl0;hQoAqK/^zPP`1PP%J^Vyg::<s}k9=v]Ivs8w>;]Np3xyvGe)e,v&FVIJqM3Hhp8(a{8jotEI.6q^>YZQH]rBis_4:Jar!c(j):{{d!5Dh4+k5yUD$wZ}YQO,5I>i6<]2XpCMe^Wh2.\|~l'\|v,sTWdG'8RFOE>8.V?\~[KJzp=4LB)YyuFMYb;Cd5[&TWRd{/_lyoY'+G;G\?zJL9*~"P,EO$}(OW<2X!SSQrxOx"#DJMAP!3-uH26?<gR;1<]9G$Vp0sBQ=f%afQmB<qMZq0&Vk
Oct 13, 2024 20:11:09.601707935 CEST	1236	IN	Data Raw: 49 26 3b f9 fa 41 83 05 ea 7d 2a 6d a5 44 33 d4 a4 71 b1 99 49 63 79 2b 21 45 66 c8 7d ce 7e f9 e5 e0 60 b1 69 91 ef a6 ab dd a3 c9 f3 17 2f 7e 5d ec ba 42 9a b5 cd c3 17 bf 26 87 2f 56 43 53 84 7b 98 88 e4 2e 37 54 eb b4 bf 38 87 cf fd bf 11 0b Data Ascii: I&;A}mD3qIcy+!Ef}~`i/~]B&/VCS{.7T81),)VRCx{k_hT!dnD3bxixqTHr2=-c/7UtoGc-'9_e$'(e66FANz=86CG]__^g
Oct 13, 2024 20:11:09.601722002 CEST	1236	IN	Data Raw: 7f 5f 9a cc 0f 7c 7e cc 8d 47 d3 16 aa a5 c0 11 77 9c 06 70 2d f3 c2 71 9d 65 72 e7 67 b7 4d f9 97 a6 78 33 93 82 c8 22 5c 19 aa d0 38 89 76 00 b7 8c 58 2d df 59 8d 52 e0 90 bf bc 76 3f ae 12 5e 1f 5f 0e 51 fa 28 da aa 25 42 fb 6a 70 ac 19 d5 3a Data Ascii: _\|~Gwp-qergMx3"\8vX-YRv?^_Q(%Bjp:}P[_0uBTg0+\|~@('H{3jsrTMsMDk={j-o\|m4aG+.<W6CYkGm^jTRm=9tMj=;
Oct 13, 2024 20:11:09.601876974 CEST	1236	IN	Data Raw: 14 ae c5 80 4c 2a 8c 23 31 8e 23 06 59 f2 f0 d3 3a 38 d6 e1 50 bb de 46 46 b7 2c 79 13 c3 eb 75 2c de 42 97 c2 94 0d 7e ca ef ce d4 fc 46 da 3e 63 a3 84 03 87 6c 70 70 13 cd 94 f3 29 5a 76 13 0c 5e b2 55 09 1a 0f 04 36 41 2d 8c a4 36 a7 16 95 33 Data Ascii: L#1#Y:8PFF,yu,B~F>clpp)Zv^U6A-63YZ2Zsc]1Z [SiXCY^WQCbK~+n:)@UP7RpWO~b!/r@l-ElQK$gYzKoF
Oct 13, 2024 20:11:09.601887941 CEST	29	IN	Data Raw: b7 fe ec 9e d9 f5 30 98 c9 c5 d1 84 d2 26 3c 14 ae 64 4b ff 17 cc cb 70 7c 28 2e 00 00 Data Ascii: 0&<dKp\|(.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.10	49740	50.6.138.164	80	6672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:11:09.553086996 CEST	298	OUT	GET /assets/img/ajax-loader.gif HTTP/1.1 Host: mail.w-iphon.sa.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:11:10.076070070 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:10 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Sun, 07 May 2023 06:35:50 GMT Accept-Ranges: bytes Content-Length: 4178 Keep-Alive: timeout=5, max=75 Content-Type: image/gif Data Raw: 47 49 46 38 39 61 20 00 20 00 f5 00 00 ff ff ff 00 00 00 fa fa fa c4 c4 c4 e8 e8 e8 f0 f0 f0 d0 d0 d0 7e 7e 7e 9a 9a 9a f6 f6 f6 e6 e6 e6 fc fc fc 92 92 92 86 86 86 e2 e2 e2 b8 b8 b8 a0 a0 a0 ec ec ec ae ae ae dc dc dc 3e 3e 3e 56 56 56 60 60 60 7c 7c 7c a8 a8 a8 ee ee ee 4a 4a 4a 6c 6c 6c 0c 0c 0c 00 00 00 ce ce ce c8 c8 c8 d8 d8 d8 2c 2c 2c 5e 5e 5e 1e 1e 1e 4c 4c 4c b0 b0 b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 09 0a 00 00 00 2c 00 00 00 00 20 00 20 00 00 06 ff 40 80 70 48 24 16 38 1c 47 71 c9 24 4e 12 c4 41 a7 33 28 0a 9a 4c 09 c5 12 9d 56 87 05 05 14 4b 7c 50 28 8f a1 94 3a 14 28 14 05 72 b1 42 d1 8c d7 5f 40 58 21 2f 1a ce 0c 42 78 42 6e 62 7d 45 [TRUNCATED] Data Ascii: GIF89a ~~~>>>VVV```\|\|\|JJJlll,,,^^^LLL!NETSCAPE2.0!Created with ajaxload.info!, @pH$8Gq$NA3(LVK\|P(:(rB_@X!/BxBnb}EgorEg^oWDcJCgoqmoE{p~rD}MdKro\|]q` 9Cf)$'=}C^u-H.!OK"15.&{jT BBoe6<@B?1)GbK !, @pH$&4Bq$Db(V[4_:t:"rqh@a)gBk_oEg~#rJDgxloWFC~mgoDBwK!CwE dXrs'xM&T$$\|MC ABldKdV?oFl-X L[J*6!"5\@poImN!QXm@%2u:uH2\R#a!, @pH$Bq$&D(LV[$:4
Oct 13, 2024 20:11:10.076128960 CEST	1236	IN	Data Raw: 50 28 0d 72 f1 73 86 02 d6 5f 80 85 a2 49 c8 89 05 67 13 42 78 42 0f 6f 10 7f 45 20 67 02 77 5e 00 09 1a 14 15 72 02 8e 46 67 57 85 10 6f 57 44 0c 63 42 0b 0a 0a 11 98 84 67 09 02 0e 0e 02 04 6f 1b 44 25 23 1d 1d 9f 00 19 a5 0a 05 76 0b 20 4a 45 Data Ascii: P(rs_IgBxBoE gw^rFgWoWDcBgoD%#v JEinE~"#Ld$LX"yrvEd)xWO<2I&1a"UJ(qz+kQ\" tRjO}C7":sdE& R"#-
Oct 13, 2024 20:11:10.076141119 CEST	1236	IN	Data Raw: a2 d0 a1 44 d3 56 f8 ce 0e e1 e3 2e 08 00 21 f9 04 09 0a 00 00 00 2c 00 00 00 00 20 00 20 00 00 06 ff 40 80 70 48 2c 2a 14 8b a2 72 49 4c 12 05 47 41 51 ca 54 26 14 99 67 94 58 50 24 aa d3 ad 10 aa a0 02 c8 05 70 31 72 1c 92 cd 99 b6 5a eb 1d 8b Data Ascii: DV.!, @pH,*rILGAQT&gXP$p1rZ9\|jfBGi~WeEy}RinlHCqNN]aGuzC`Ljz`dLKUWDcjs0R%+q"lQbw
Oct 13, 2024 20:11:10.076316118 CEST	738	IN	Data Raw: 43 0a 6c 94 56 60 58 9a 53 a2 1a a9 81 b0 f1 a5 cb 3f 58 90 09 71 b0 91 21 a8 2b 9b 00 14 bd 02 c3 e0 40 03 2a 2d 07 cc d2 84 cc c0 46 78 42 92 ce c2 f3 0b c4 01 04 5c 80 46 e5 a7 33 aa d6 ae b7 86 0d 5d 12 04 00 21 f9 04 09 0a 00 00 00 2c 00 00 Data Ascii: ClV`XS?Xq!+@-FxB\F3]!, @pH,rILGAQT&gXP$p1rZ9\|jEGi~WeEy#D}RinlHB!$CfCN]Ej$sLjNszEg
Oct 13, 2024 20:11:10.577785015 CEST	283	OUT	GET /favicon.ico HTTP/1.1 Host: mail.w-iphon.sa.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:11:10.700447083 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:10 GMT Server: Apache Last-Modified: Thu, 15 Apr 2021 20:52:24 GMT Accept-Ranges: bytes Content-Length: 9062 Cache-Control: max-age=604800 Expires: Sun, 20 Oct 2024 18:11:10 GMT Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: image/x-icon Data Raw: 00 00 01 00 04 00 20 20 00 00 01 00 08 00 a8 08 00 00 46 00 00 00 10 10 00 00 01 00 08 00 68 05 00 00 ee 08 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 56 0e 00 00 10 10 00 00 01 00 20 00 68 04 00 00 fe 1e 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 42 42 42 00 9e 9e 9e 00 72 72 72 00 ce ce ce 00 5a 5a 5a 00 b6 b6 b6 00 e6 e6 e6 00 92 92 92 00 4e 4e 4e 00 7e 7e 7e 00 66 66 66 00 aa aa aa 00 da da da 00 c2 c2 c2 00 f2 f2 f2 00 4a 4a 4a 00 a6 a6 a6 00 7a 7a 7a 00 62 62 62 00 56 56 56 00 86 86 86 00 6e 6e 6e 00 e2 e2 e2 00 ca ca ca 00 46 46 46 00 a2 a2 a2 00 76 76 76 00 d2 d2 d2 00 5e 5e 5e 00 ba ba ba 00 ea ea ea 00 9a 9a 9a 00 52 52 52 00 82 82 82 00 6a 6a 6a 00 ae ae ae 00 de de de 00 c6 c6 c6 00 f6 f6 f6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: Fh V h( @BBBrrrZZZNNN~~~fffJJJzzzbbbVVVnnnFFFvvv^^^RRRjjj
Oct 13, 2024 20:11:10.700489998 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: '''''''''''''''''''''''''''''
Oct 13, 2024 20:11:10.700501919 CEST	1236	IN	Data Raw: 27 27 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e3 e3 ff ff c0 01 ff ff 80 00 ff ff 00 00 7f ff 00 00 7f fe 00 00 3f fe 00 00 3f fe 00 00 3f fc 00 00 7f fc 00 00 ff fc 00 01 ff fc 00 01 ff fc 00 01 ff fc 00 00 ff fc 00 00 ff fe 00 00 7f Data Ascii: ''????( FFFrrr^^^RRRjjjNNNzzzf
Oct 13, 2024 20:11:10.700716019 CEST	1236	IN	Data Raw: 04 10 21 21 21 21 21 21 21 09 08 14 04 04 04 04 04 04 16 21 21 21 21 21 21 06 04 19 19 19 19 19 19 19 19 1d 21 21 21 21 07 00 04 12 12 12 12 12 12 12 04 1a 21 21 21 21 1f 0e 19 0a 0a 0a 0a 0a 0a 12 03 21 21 21 21 21 20 0e 12 0a 0a 0a 0a 0a 0a 06 Data Ascii: !!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!{
Oct 13, 2024 20:11:10.700728893 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 38 38 38 20 4c 4c 4c ef 5c 5c 5c ff 61 61 61 ff 61 61 61 ff 61 61 61 ff 61 61 61 ff 61 61 61 ff 61 61 61 ff 61 61 61 ff 61 61 61 ff 61 61 61 ff 61 61 61 ff 61 61 61 ff 61 61 61 ff 61 61 61 ff 60 60 60 70 00 00 00 00 Data Ascii: 888 LLL\\\aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa```pBBBWWWaaabbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb```
Oct 13, 2024 20:11:10.700740099 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3c 3c 3c 80 4b 4b 4b ff 63 63 63 ff 6f 6f 6f ff 70 70 70 ff 70 70 70 ff 70 70 70 ff 70 70 70 ff 70 70 70 ff Data Ascii: <<<KKKcccooopppppppppppppppppppppppppppppppppppppppjjj0:::0DDD[[[mmmrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr
Oct 13, 2024 20:11:10.701004028 CEST	776	IN	Data Raw: 00 00 00 00 00 00 43 43 43 df 53 53 53 ff 65 65 65 ff 71 71 71 df 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: CCCSSSeeeqqq@@@0DDDMMMYYYxxx1
Oct 13, 2024 20:11:11.037468910 CEST	1186	IN	Data Raw: 00 ff fc 00 00 ff fe 00 00 7f fe 00 00 3f ff 00 00 7f ff 81 80 ff ff ff 1f ff ff ff 0f ff ff ff 07 ff ff ff 87 ff ff ff 83 ff ff ff e3 ff ff ff ff ff ff ff ff ff ff ff ff ff 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 Data Ascii: ?( 3[[[8PPP0=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.10	49739	50.6.138.164	80	6672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:11:09.553148031 CEST	279	OUT	GET /sep.png HTTP/1.1 Host: mail.w-iphon.sa.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:11:10.067171097 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:10 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Sun, 07 May 2023 06:36:54 GMT Accept-Ranges: bytes Content-Length: 1240 Keep-Alive: timeout=5, max=75 Content-Type: image/png Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 7e 00 00 00 32 04 03 00 00 00 a9 19 ad 6c 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 0f 50 4c 54 45 e8 e8 e8 e1 e1 e1 e1 e1 e1 e0 e0 e0 b6 b6 b6 d7 b9 84 90 00 00 00 05 74 52 4e 53 01 06 0c 12 39 f4 8b 71 62 00 00 04 5e 49 44 41 54 68 de ed 59 eb 99 e2 30 0c b4 3a 90 dd 81 ed 0e cc 75 c0 f5 5f d3 59 23 f9 91 dd 00 d9 bd 38 fc 41 b0 f9 f8 58 88 35 a3 d1 c3 c6 39 35 f6 62 c1 a7 6a b7 66 f7 3f b0 fb df b7 d8 fd 2f 56 bf dd bb 3f a5 3a 17 e0 a8 27 b7 67 4c 86 23 a4 94 6f a5 5e 53 29 25 27 79 91 ca ed 2a cb e2 68 ca 75 c5 fa a2 04 78 1e a3 fa 5d 5d dc 77 dd 51 75 bf 9a e2 f3 f5 0b 09 56 04 c2 75 be 37 aa 4b ba 55 04 b0 18 a3 b1 ce 62 8e e1 ee 57 23 fc 79 8b 40 f4 31 85 20 10 72 ae cf 7c 2d 82 ba 5a be 25 89 7c 82 1b 06 a0 ba 46 24 ae f3 ae fb a0 bf f1 1f e5 6b 16 01 09 c1 2d e7 eb f4 93 eb 13 0a 4a 0a 20 f8 68 fc 7b 08 c5 ed b2 0f 04 35 40 96 02 35 09 a2 ea b0 de 4c f8 bf 0a 01 96 92 a0 9b 7c 44 40 2a fe 8a a0 32 bc 0b [TRUNCATED] Data Ascii: PNGIHDR~2lpHYs~PLTEtRNS9qb^IDAThY0:u_Y#8AX595bjf?/V?:'gL#o^S)%'yhux]]wQuVu7KUbW#y@1 r\|-Z%\|F$k-J h{5@5L\|D@2.(\OW+:QB4/ ?K(x+ =)r/P;.UX-t&THD[aA0gzF^@OSvk,4V~Ac0 ;jo A(?:R8\|Em\|~SR!MBki>\|\|@h=Jc-??9h:K19PmF$4%) 0<nY$z2^uET;qdPjyQ,UydDm`!nlTx?TC[i$:MCm`WQctZfkz%, 20:3{6JXmDXiv?!p{46uW=kyLB_9{1>Fhq~z4=:{7o:1>1=}+<<Y',Pk$$J"V#f{
Oct 13, 2024 20:11:10.067183971 CEST	272	IN	Data Raw: 09 ad a7 dd 5b e9 23 94 10 a5 93 8f 57 4e 85 49 86 57 fb b6 0c 74 88 83 95 a4 45 17 70 c4 aa d7 76 20 3e 6f 0f e9 30 f9 3c cd a3 7a e8 a5 c9 2c 83 a9 c6 76 c1 05 69 a6 aa 1f d4 b5 5a fe 83 00 68 fd 99 e7 6c b6 16 82 21 70 95 fb 9e db 16 cb ba cf Data Ascii: [#WNIWtEpv >o0<z,viZhl!pf(swp^ M[smKK?~+q]c2<wmk_OS+Kcg515eYr?zv}N>fc,^hCTss!bIEbQU

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.10	49707	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:06 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:06 UTC	540	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:06 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 12 Oct 2024 04:31:01 GMT ETag: "0x8DCEA76AD821850" x-ms-request-id: 5e3cf53f-d01e-007a-3ba0-1cf38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181106Z-17db6f7c8cfq2j6f03aq9y8dns00000004gg000000003cwr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:06 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-13 18:11:06 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-13 18:11:06 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-13 18:11:06 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-13 18:11:06 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-13 18:11:06 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-13 18:11:06 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-13 18:11:06 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-13 18:11:06 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-13 18:11:06 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.10	49713	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:07 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:07 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 995dd301-801e-0035-24cd-1a752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181107Z-17db6f7c8cfqkqk8bn4ck6f72000000004x000000000ggh6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:07 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.10	49712	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:07 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:07 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 88c7ce87-b01e-0070-57eb-1a1cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181107Z-17db6f7c8cf4g2pjavqhm24vp400000005dg00000000c8ry x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:07 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.10	49711	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:07 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:07 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: c1f175ba-101e-0028-7611-1c8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181107Z-17db6f7c8cf9c22xp43k2gbqvn00000002zg000000001aeg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:07 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.10	49710	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:07 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:07 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: a7c7bcc3-d01e-005a-1c62-1c7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181107Z-17db6f7c8cf6f7vv3recfp4a6w00000002b00000000072k2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:07 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.10	49714	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:07 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:07 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 8bb3084a-701e-0053-175b-1c3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181107Z-17db6f7c8cfcrfgzd01a8emnyg00000002v0000000002nmd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:07 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.10	49717	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:08 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:08 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: a417ae39-101e-008e-1f1c-1bcf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181108Z-17db6f7c8cfbd7pgux3k6qfa6000000004700000000032t3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:08 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.10	49719	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:08 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:08 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: efaf982b-c01e-008e-2e47-1c7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181108Z-17db6f7c8cfjxfnba42c5rukwg000000026g00000000auct x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:08 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.10	49716	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:08 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:08 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: a9e1c981-f01e-003f-3a0f-1cd19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181108Z-17db6f7c8cf4g2pjavqhm24vp400000005bg00000000gfpt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:08 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.10	49715	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:08 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:08 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 6aeebda2-001e-008d-31ea-1ad91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181108Z-17db6f7c8cfqkqk8bn4ck6f72000000004wg00000000kuuh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:08 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.10	49718	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:08 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:08 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 0e59abf9-f01e-003c-2b47-1c8cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181108Z-17db6f7c8cf9c22xp43k2gbqvn00000002u000000000dyr8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:08 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.10	49725	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:08 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:08 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: aec2753b-d01e-007a-1ef5-1cf38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181108Z-17db6f7c8cfjxfnba42c5rukwg00000002ag000000000cb8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:09 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.10	49724	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:08 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:08 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: c9e2a668-e01e-001f-5fd7-1a1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181108Z-17db6f7c8cfvzwz27u5rnq9kpc00000005eg00000000h97c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:09 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.10	49726	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:08 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:08 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: cbdfa3b4-e01e-0051-2293-1c84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181108Z-17db6f7c8cf9wwz8ehu7c5p33g00000002e000000000fk9c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:09 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.10	49727	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:08 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:08 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 458f517b-301e-000c-2fe6-1a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181108Z-17db6f7c8cfhrxld7punfw920n00000003yg00000000crb7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:09 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.10	49728	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:08 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:08 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 6fbaa347-101e-0034-2f47-1c96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181108Z-17db6f7c8cfvq8pt2ak3arkg6n000000039g0000000050uw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:09 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.10	49733	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:09 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:09 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 23cc8f65-401e-0048-2a25-1c0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181109Z-17db6f7c8cffhvbz3mt0ydz7x400000003f0000000007fuc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:09 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.10	49734	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:09 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:09 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: eb753988-701e-0021-591f-1c3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181109Z-17db6f7c8cffhvbz3mt0ydz7x400000003bg00000000fc2e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:09 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.10	49735	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:09 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:09 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 69053910-001e-00ad-4022-1b554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181109Z-17db6f7c8cfp6mfve0htepzbps00000004hg00000000h36b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:09 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.10	49736	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:09 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:09 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5355bdce-701e-0021-10ea-1a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181109Z-17db6f7c8cfspvtq2pgqb2w5k00000000570000000001txn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:09 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.10	49737	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:09 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:09 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 55879866-201e-0033-5b1c-1cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181109Z-17db6f7c8cfcl4jvqfdxaxz9w800000002hg00000000fqea x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:09 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.10	49743	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:10 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:10 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 6fc17292-101e-0034-6b4a-1c96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181110Z-17db6f7c8cf9c22xp43k2gbqvn00000002sg00000000kpm1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:11 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.10	49745	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:10 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:10 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: ec733f58-401e-0035-529c-1b82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181110Z-17db6f7c8cf6qp7g7r97wxgbqc00000004g000000000ezs8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:11 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.10	49744	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:10 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:10 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 11c3f343-501e-0078-0139-1c06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181110Z-17db6f7c8cf96l6t7bwyfgbkhw00000004a0000000005445 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:11 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.10	49741	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:10 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:11 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 94304cac-901e-0048-809f-1bb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181111Z-17db6f7c8cfhrxld7punfw920n00000004200000000040sn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:11 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.10	49742	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:10 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:11 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: a5b27f46-b01e-003d-5a47-1cd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181111Z-17db6f7c8cffhvbz3mt0ydz7x400000003h00000000023d5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:11 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.10	49748	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:10 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-13 18:11:11 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=167664 Date: Sun, 13 Oct 2024 18:11:11 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.10	49750	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:11 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:11 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 5007ca28-801e-00a0-7d20-1b2196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181111Z-17db6f7c8cfbr2wt66emzt78g400000004p000000000hr8z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:11 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.10	49751	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:11 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:11 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 9dc98f41-601e-0097-4647-1cf33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181111Z-17db6f7c8cfcrfgzd01a8emnyg00000002ng00000000k0hc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:11 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.10	49752	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:11 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:11 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3776c2af-901e-0048-1a6f-1cb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181111Z-17db6f7c8cfhzb2znbk0zyvf6n00000004wg00000000d0su x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:11 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.10	49753	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:11 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:11 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 6ec52d65-901e-0083-299c-1bbb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181111Z-17db6f7c8cf4g2pjavqhm24vp400000005eg000000009w63 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:11 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.10	49754	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:11 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:12 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 1507c9f1-d01e-007a-72eb-1af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181112Z-17db6f7c8cfqkqk8bn4ck6f72000000005300000000035rx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:12 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.10	49755	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:12 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-13 18:11:12 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=167604 Date: Sun, 13 Oct 2024 18:11:12 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-13 18:11:12 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.10	49757	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:12 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:12 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: a0484e99-b01e-00ab-3354-1cdafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181112Z-17db6f7c8cf9wwz8ehu7c5p33g00000002hg000000007pk0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:12 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.10	49758	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:12 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:12 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 30f6abec-501e-005b-072b-1ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181112Z-17db6f7c8cf5mtxmr1c51513n000000005eg000000008cg1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:12 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.10	49759	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:12 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:12 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 0a475807-001e-00a2-0116-1cd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181112Z-17db6f7c8cfvq8pt2ak3arkg6n00000003ag000000001rfb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:12 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.10	49760	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:12 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:12 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 32ce2fe1-701e-001e-0917-1cf5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181112Z-17db6f7c8cf8rgvlb86c9c009800000003b000000000amy6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:12 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.10	49761	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:12 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:12 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f4abfb5c-001e-00a2-33e5-1ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181112Z-17db6f7c8cf5mtxmr1c51513n000000005eg000000008cg9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:12 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.10	49762	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:13 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:13 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 49fa3939-001e-0017-20cd-1a0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181113Z-17db6f7c8cf5mtxmr1c51513n000000005f0000000007u82 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:13 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.10	49763	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:13 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:13 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 65388d65-201e-0051-79ef-1a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181113Z-17db6f7c8cfqkqk8bn4ck6f720000000051g000000006pnr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:13 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.10	49765	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:13 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:13 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: e9bc8845-c01e-008d-06d9-1a2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181113Z-17db6f7c8cfwtn5x6ye8p8q9m000000003y00000000007ep x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:13 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.10	49764	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:13 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:13 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 7c051060-401e-008c-630d-1c86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181113Z-17db6f7c8cf9wwz8ehu7c5p33g00000002e000000000fkex x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:13 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.10	49766	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:13 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:13 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: c784ccc1-701e-0001-0116-1cb110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181113Z-17db6f7c8cfgqlr45m385mnngs00000003u00000000098ph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:14 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.10	49769	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:14 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:14 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 355a979e-401e-0064-3e4a-1c54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181114Z-17db6f7c8cfmhggkx889x958tc00000002d000000000c0cu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:14 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.10	49767	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:14 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:14 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 72dafb48-001e-0079-44ea-1a12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181114Z-17db6f7c8cf6qp7g7r97wxgbqc00000004h000000000cwhe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:14 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.10	49770	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:14 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:14 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 9ba87e07-d01e-008e-2ae9-1a387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181114Z-17db6f7c8cfhrxld7punfw920n00000004100000000075gn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:14 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.10	49768	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:14 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:14 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: b2260943-f01e-0052-0b1c-1c9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181114Z-17db6f7c8cfbr2wt66emzt78g400000004q000000000fdwb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:14 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.10	49771	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:14 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:14 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 06589d36-d01e-0065-18bf-1ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181114Z-17db6f7c8cfqxt4wrzg7st2fm8000000059g00000000e60w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:14 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.10	49772	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:15 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:15 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 4508f1f3-f01e-0096-78e2-1a10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181115Z-17db6f7c8cfp6mfve0htepzbps00000004rg0000000048zr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:15 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.10	49773	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:15 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:15 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 730a987f-601e-005c-0d16-1cf06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181115Z-17db6f7c8cfvtw4hh2496wp8p800000003t00000000014mz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:15 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.10	49774	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:15 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:15 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 24993946-c01e-008e-55d7-1a7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181115Z-17db6f7c8cfbr2wt66emzt78g400000004r000000000e3f4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:15 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.10	49775	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:15 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:15 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 01727dbb-701e-0032-7b9f-1ba540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181115Z-17db6f7c8cfp6mfve0htepzbps00000004k000000000gcgz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:15 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.10	49776	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:15 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:15 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 1a8c6729-d01e-0014-7547-1ced58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181115Z-17db6f7c8cfcrfgzd01a8emnyg00000002qg00000000c9ff x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:15 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.10	49779	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:15 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:15 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 5f60e048-c01e-00ad-7b18-1ca2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181115Z-17db6f7c8cf8rgvlb86c9c009800000003a000000000bs3n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:15 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.10	49777	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:15 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:15 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: c0284108-301e-005d-6416-1ce448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181115Z-17db6f7c8cfpm9w8b1ybgtytds000000038g000000002c6s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:15 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.10	49778	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:15 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:15 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 0e087f1c-801e-00ac-7d47-1cfd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181115Z-17db6f7c8cf6f7vv3recfp4a6w00000002d0000000001gkg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:15 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.10	49780	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:15 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:15 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 90f8132d-901e-002a-0d47-1c7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181115Z-17db6f7c8cfmhggkx889x958tc00000002cg00000000d3hu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:15 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.10	49781	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:16 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:16 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: fed7985d-c01e-0034-3cd8-1a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181116Z-17db6f7c8cfqkqk8bn4ck6f720000000052g0000000057n0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:16 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.10	49782	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:16 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:16 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 7a709d5d-301e-0099-436d-1c6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181116Z-17db6f7c8cffhvbz3mt0ydz7x400000003dg00000000c6t8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:16 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.10	49785	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:16 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:16 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: c9088ac8-401e-0015-21a8-1c0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181116Z-17db6f7c8cf6f7vv3recfp4a6w000000029g00000000apzk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:16 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.10	49784	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:16 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:16 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: d286cfb1-001e-0079-076b-1c12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181116Z-17db6f7c8cf9c22xp43k2gbqvn00000002y0000000005sqz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:16 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.10	49783	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:16 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:16 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 4b275f89-001e-0049-42aa-1c5bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181116Z-17db6f7c8cfqkqk8bn4ck6f72000000005300000000035wm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:16 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.10	49786	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:17 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:17 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 23e49b38-a01e-001e-1147-1c49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181117Z-17db6f7c8cfmhggkx889x958tc00000002a000000000hd6c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:17 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.10	49787	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:17 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:17 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 0dbfe92b-d01e-0082-7aa8-1ce489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181117Z-17db6f7c8cfcl4jvqfdxaxz9w800000002ng0000000097yf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:17 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.10	49789	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:17 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:17 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: f1390e2f-501e-005b-7fe2-1bd7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181117Z-17db6f7c8cfwtn5x6ye8p8q9m000000003tg00000000c73q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:17 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.10	49788	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:17 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:17 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 5dd409ef-301e-0099-0e1e-1b6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181117Z-17db6f7c8cfhzb2znbk0zyvf6n00000004wg00000000d0zg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:17 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.10	49790	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:17 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:17 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: cda1fd3a-301e-0096-2fde-1ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181117Z-17db6f7c8cfqkqk8bn4ck6f720000000052g0000000057qs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:17 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.10	49791	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:18 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:18 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: c0a86c07-d01e-007a-0a2f-1cf38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181118Z-17db6f7c8cf9c22xp43k2gbqvn000000030000000000021r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:18 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.10	49793	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:18 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:18 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 69457385-001e-0034-42de-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181118Z-17db6f7c8cfbd7pgux3k6qfa60000000046g000000004b1m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:18 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.10	49795	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:18 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:18 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 24028bf8-401e-00a3-4b1c-1c8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181118Z-17db6f7c8cfjxfnba42c5rukwg000000029000000000490p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:18 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.10	49794	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:18 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:18 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: ca6815b7-a01e-0053-63aa-1c8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181118Z-17db6f7c8cfqkqk8bn4ck6f72000000004xg00000000gxe5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:18 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.10	49792	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:18 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:18 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: a0500a35-c01e-002b-5eef-1a6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181118Z-17db6f7c8cfqxt4wrzg7st2fm8000000057g00000000h1vt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:18 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.10	49797	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:18 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:18 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: eb876971-601e-0001-084f-1cfaeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181118Z-17db6f7c8cf9c22xp43k2gbqvn00000002vg00000000bkny x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:18 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.10	49798	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:19 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:19 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 0588c624-801e-0048-72e0-1af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181119Z-17db6f7c8cfqkqk8bn4ck6f720000000051000000000816n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:19 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.10	49799	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:19 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:19 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 959f4817-801e-0078-5157-1cbac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181119Z-17db6f7c8cfjxfnba42c5rukwg000000027g000000008dar x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:19 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.10	49801	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:19 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:19 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: a41636a0-e01e-0051-20e2-1a84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181119Z-17db6f7c8cf5mtxmr1c51513n000000005e000000000ah8y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:19 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.10	49800	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:19 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:19 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 67a092be-301e-0099-76e2-1a6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181119Z-17db6f7c8cfvzwz27u5rnq9kpc00000005hg00000000a4ub x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:19 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.10	49802	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:19 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:19 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 9ad66ff1-501e-00a0-38ec-1a9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181119Z-17db6f7c8cfhrxld7punfw920n00000003x000000000g78f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:19 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.10	49806	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:21 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:21 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:21 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 745077d4-d01e-0082-7c4a-1ce489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181121Z-17db6f7c8cf6f7vv3recfp4a6w00000002bg000000005nkv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:21 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.10	49808	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:21 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:21 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:21 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 4988e983-001e-0082-750c-1c5880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181121Z-17db6f7c8cfvq8pt2ak3arkg6n000000035g00000000f7au x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:21 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.10	49805	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:21 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:21 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 1a8c6bd5-d01e-0014-0747-1ced58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181121Z-17db6f7c8cfjxfnba42c5rukwg000000027g000000008dc2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:21 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.10	49809	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:21 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:21 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:21 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 2eee43c6-d01e-0066-0203-1bea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181121Z-17db6f7c8cffhvbz3mt0ydz7x400000003b000000000k0tp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:21 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.10	49807	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:21 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:21 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f76b9983-801e-0047-0eec-1a7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181121Z-17db6f7c8cfspvtq2pgqb2w5k0000000052000000000enap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:21 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.10	49811	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:21 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:21 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 0cb7a61f-501e-0064-6562-1c1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181121Z-17db6f7c8cfvtw4hh2496wp8p800000003pg000000009fk4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:22 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.10	49813	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:21 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:21 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 46e4659a-701e-000d-2947-1c6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181121Z-17db6f7c8cfpm9w8b1ybgtytds000000036g000000008ryq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:22 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.10	49815	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:21 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:21 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 3704a696-901e-0048-3641-1cb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181121Z-17db6f7c8cfhrxld7punfw920n00000003xg00000000ec4w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:22 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.10	49814	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:21 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:21 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: defb5908-e01e-0033-2de2-1a4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181121Z-17db6f7c8cf8rgvlb86c9c009800000003cg0000000080gs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:22 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.10	49812	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:21 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:21 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 91985fd7-d01e-008e-1e12-1c387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181121Z-17db6f7c8cfgqlr45m385mnngs00000003ug000000007a98 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:22 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.10	49819	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:22 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:22 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: f7510ca4-501e-000a-5e6f-1c0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181122Z-17db6f7c8cf9c22xp43k2gbqvn00000002v000000000cbwr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:22 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.10	49816	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:22 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:22 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 07ebf894-801e-008c-19d8-1a7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181122Z-17db6f7c8cfqxt4wrzg7st2fm800000005cg0000000075me x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:22 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.10	49817	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:22 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:22 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 07f85e87-a01e-003d-78df-1a98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181122Z-17db6f7c8cfspvtq2pgqb2w5k000000005500000000088cw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:22 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.10	49818	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:22 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:22 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: d1236033-501e-008f-33ea-1a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181122Z-17db6f7c8cfgqlr45m385mnngs00000003w0000000003dmw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:22 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.10	49820	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:22 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:22 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: f0eac77b-f01e-00aa-541b-1c8521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181122Z-17db6f7c8cfvq8pt2ak3arkg6n000000036000000000f1ua x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:22 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.10	49821	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:23 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:23 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:23 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 0b054cf6-001e-00a2-745b-1cd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181123Z-17db6f7c8cfbr2wt66emzt78g400000004tg000000008y5u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:23 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.10	49822	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:23 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:23 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:23 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 745fe90a-101e-005a-7f69-1c882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181123Z-17db6f7c8cfcrfgzd01a8emnyg00000002pg00000000grsu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:23 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.10	49823	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:23 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:23 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:23 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 5e6ff04f-301e-0033-6022-1cfa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181123Z-17db6f7c8cf4g2pjavqhm24vp400000005h0000000003vk3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:23 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.10	49824	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:23 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:23 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:23 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 44f36d90-201e-00aa-7dd7-1a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181123Z-17db6f7c8cfqkqk8bn4ck6f7200000000530000000003647 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:23 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.10	49825	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:23 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:23 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:23 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 234b0266-801e-0035-5da3-1b752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181123Z-17db6f7c8cf96l6t7bwyfgbkhw000000046g00000000frw8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:23 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.10	49827	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:24 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:24 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:24 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: fe1a38a0-a01e-0053-6ad8-1a8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181124Z-17db6f7c8cf8rgvlb86c9c009800000003cg0000000080mr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:24 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.10	49826	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:24 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:24 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:24 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: c0002b7f-501e-0029-6e1c-1cd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181124Z-17db6f7c8cfvq8pt2ak3arkg6n000000039g0000000051e2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:24 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.10	49830	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:24 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:24 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:24 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 6d1bd684-201e-00aa-7f91-1c3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181124Z-17db6f7c8cfvzwz27u5rnq9kpc00000005e000000000hntr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:24 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.10	49829	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:24 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:24 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:24 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 35289574-d01e-00ad-2923-1be942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181124Z-17db6f7c8cfbd7pgux3k6qfa60000000041g00000000gd49 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:24 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.10	49828	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:24 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:24 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:24 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: fd1eaa3c-c01e-0034-22e2-1a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181124Z-17db6f7c8cf5mtxmr1c51513n000000005h00000000029qn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:24 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.10	49832	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:24 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:25 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:25 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: a9c9f622-801e-0047-0d7e-1b7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181125Z-17db6f7c8cf6qp7g7r97wxgbqc00000004n0000000006kvq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:25 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.10	49831	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:25 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:25 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:25 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: fa68fd7e-e01e-0099-0ae2-1ada8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181125Z-17db6f7c8cfgqlr45m385mnngs00000003pg00000000mv7m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:25 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.10	49833	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:25 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:25 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:25 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: f4958516-001e-00a2-15de-1ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181125Z-17db6f7c8cfbd7pgux3k6qfa6000000004800000000009m4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:25 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.10	49834	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:25 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:25 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:25 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 31291780-601e-0050-232a-1c2c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181125Z-17db6f7c8cfpm9w8b1ybgtytds000000035000000000bs8f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:25 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.10	49835	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:25 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:25 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:25 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 2d3659d2-d01e-0066-1cca-1aea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181125Z-17db6f7c8cfspvtq2pgqb2w5k0000000055g00000000608m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:25 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.10	49836	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:25 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:25 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:25 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 5f90b282-c01e-00ad-7c2b-1ca2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181125Z-17db6f7c8cfvq8pt2ak3arkg6n000000035000000000fts7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:25 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.10	49839	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:25 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:25 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:25 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 5c04d847-901e-007b-6354-1cac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181125Z-17db6f7c8cfmhggkx889x958tc000000029g00000000kzh7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:25 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.10	49837	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:25 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:25 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:25 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 7536bc90-101e-005a-6b87-1c882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181125Z-17db6f7c8cffhvbz3mt0ydz7x400000003dg00000000c7et x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:25 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.10	49838	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:25 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:25 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:25 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 609b4fe7-801e-007b-3997-1be7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181125Z-17db6f7c8cfbd7pgux3k6qfa60000000045g000000006w69 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:25 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.10	49840	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:25 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:26 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:25 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 540e34d0-301e-0096-5f1b-1ce71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181125Z-17db6f7c8cffhvbz3mt0ydz7x400000003fg000000005und x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:26 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.10	49841	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:26 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:26 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:26 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 5afb0683-e01e-0052-7239-1cd9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181126Z-17db6f7c8cfcl4jvqfdxaxz9w800000002r0000000003nua x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:26 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.10	49843	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:26 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:26 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:26 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 8e2f4d00-001e-000b-08a9-1c15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181126Z-17db6f7c8cf9wwz8ehu7c5p33g00000002f000000000dhb3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:26 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.10	49844	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:26 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:26 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:26 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 842b74fa-501e-008c-2f04-1acd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181126Z-17db6f7c8cfqxt4wrzg7st2fm800000005c0000000008ca5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:26 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.10	49842	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:26 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:26 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:26 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 95427c10-401e-005b-245b-1c9c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181126Z-17db6f7c8cffhvbz3mt0ydz7x400000003d000000000dppw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:26 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.10	49845	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:26 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:26 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:26 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: ff135f01-c01e-002b-23eb-1b6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181126Z-17db6f7c8cfwtn5x6ye8p8q9m000000003x00000000037g2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:26 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.10	49846	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:27 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:27 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:27 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 0506fa48-b01e-001e-4cc1-1a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181127Z-17db6f7c8cf5mtxmr1c51513n000000005g0000000004xqn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:27 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.10	49848	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:27 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:27 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:27 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 03a639d1-101e-008d-40f2-1a92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181127Z-17db6f7c8cfqxt4wrzg7st2fm800000005f0000000000bwc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:27 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.10	49847	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:27 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:27 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:27 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: db50f49a-301e-000c-213b-1c323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181127Z-17db6f7c8cfmhggkx889x958tc00000002b000000000f9eq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:27 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.10	49849	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:27 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:27 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:27 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: abf18231-001e-0034-1fe5-1cdd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181127Z-17db6f7c8cffhvbz3mt0ydz7x400000003a000000000mf6x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:27 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.10	49850	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:27 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:27 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:27 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 08565fb3-401e-0029-27c4-1a9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181127Z-17db6f7c8cfhrxld7punfw920n00000003w000000000hprk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:27 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.10	49855	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:28 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:29 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:28 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 6eea93bb-701e-0097-0521-1bb8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181128Z-17db6f7c8cfp6mfve0htepzbps00000004sg000000001bnf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:29 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.10	49851	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:28 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:29 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:29 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: cb165497-401e-0029-395e-1c9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181129Z-17db6f7c8cf9wwz8ehu7c5p33g00000002g000000000bc7e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:29 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.10	49852	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:28 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:29 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:28 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: ef1c8585-201e-0000-7b47-1ca537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181128Z-17db6f7c8cf6f7vv3recfp4a6w000000026000000000gynx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:29 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.10	49853	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:28 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:29 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:28 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: e28c1875-001e-00ad-40e2-1a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181128Z-17db6f7c8cfnqpbkckdefmqa4400000005bg000000001mdc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:29 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.10	49854	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:28 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:29 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:29 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 33c14fe4-301e-001f-2cee-1aaa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181129Z-17db6f7c8cfqkqk8bn4ck6f7200000000540000000000a32 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:29 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.10	49856	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:29 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:29 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:29 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: b9726785-901e-00ac-76d7-1ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181129Z-17db6f7c8cfspvtq2pgqb2w5k00000000570000000001ugz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:29 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.10	49858	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:29 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:29 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:29 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 374dd3c9-a01e-006f-2dec-1a13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181129Z-17db6f7c8cf96l6t7bwyfgbkhw00000004ag000000004tpk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:29 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.10	49859	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:29 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:29 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:29 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 4ec1f56b-301e-006e-0147-1cf018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181129Z-17db6f7c8cfvq8pt2ak3arkg6n000000036000000000f24g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:29 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.10	49857	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:29 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:29 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:29 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: b0bf752c-501e-0047-5047-1cce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181129Z-17db6f7c8cfcl4jvqfdxaxz9w800000002sg0000000003ge x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:29 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.10	49860	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:29 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:29 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:29 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 0e3b9b60-f01e-003c-163b-1c8cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181129Z-17db6f7c8cfvzwz27u5rnq9kpc00000005gg00000000bsrt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:29 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.10	49861	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:30 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:30 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:30 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 4eeac0e9-d01e-0066-085b-1cea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181130Z-17db6f7c8cf6qp7g7r97wxgbqc00000004hg00000000bftf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:30 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.10	49862	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:30 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:30 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:30 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 17ba822c-f01e-001f-0875-1a5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181130Z-17db6f7c8cf6qp7g7r97wxgbqc00000004g000000000f0h8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:30 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.10	49863	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:30 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:30 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:30 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 2ae22a5c-001e-0046-6b1b-1cda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181130Z-17db6f7c8cfcl4jvqfdxaxz9w800000002n000000000bagq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:30 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.10	49864	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:30 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:30 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:30 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: e3c1877a-301e-003f-0f1b-1c266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181130Z-17db6f7c8cfcl4jvqfdxaxz9w800000002pg0000000071ud x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:30 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.10	49865	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:30 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:30 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:30 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 7dbe0e1e-c01e-007a-2997-1bb877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181130Z-17db6f7c8cfgqlr45m385mnngs00000003t000000000bc2e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:30 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.10	49866	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:31 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:31 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:31 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: d178e097-d01e-005a-72ac-1b7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181131Z-17db6f7c8cf96l6t7bwyfgbkhw00000004b000000000391z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:31 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.10	49867	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:31 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:31 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:31 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: f593edb0-801e-0083-3a0f-1cf0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181131Z-17db6f7c8cfvq8pt2ak3arkg6n0000000380000000009e1g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:31 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.10	49868	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:31 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:31 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:31 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: bf76ff4d-e01e-0020-06e6-1cde90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181131Z-17db6f7c8cfcrfgzd01a8emnyg00000002v0000000002r3d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:31 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.10	49870	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:31 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:31 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:31 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: e523a955-e01e-003c-028a-1bc70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181131Z-17db6f7c8cfvq8pt2ak3arkg6n000000034000000000ht4w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:31 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.10	49869	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:31 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:31 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:31 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 4e4e9d2c-d01e-0066-2d1e-1cea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181131Z-17db6f7c8cf8rgvlb86c9c009800000003f0000000000ezw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:31 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.10	49871	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:32 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:32 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:32 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: 6367065e-201e-0071-46d7-1aff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181132Z-17db6f7c8cfbr2wt66emzt78g400000004vg000000003xtn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:32 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.10	49872	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:32 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:32 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:32 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: 054ff9cd-601e-000d-3cf3-1a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181132Z-17db6f7c8cfhrxld7punfw920n00000003y000000000dww3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:32 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.10	49874	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:32 UTC	192	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:32 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:32 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: c2ce770e-d01e-00ad-7c5e-1ce942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181132Z-17db6f7c8cfcrfgzd01a8emnyg00000002q000000000eqq5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:32 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.10	49873	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:32 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:32 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:32 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: f75af137-a01e-000d-5feb-1ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181132Z-17db6f7c8cfp6mfve0htepzbps00000004pg000000009dwt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:32 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.10	49875	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:32 UTC	192	OUT	GET /rules/rule702650v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:32 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:32 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEA1B544" x-ms-request-id: 06b81cbc-d01e-0065-2ee4-1ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181132Z-17db6f7c8cfqxt4wrzg7st2fm8000000058g00000000gmsa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:32 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 61 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702650" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedia" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.10	49876	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:32 UTC	192	OUT	GET /rules/rule703101v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:32 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:32 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F93037" x-ms-request-id: 91a46b58-d01e-008e-7016-1c387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181132Z-17db6f7c8cfp6mfve0htepzbps00000004hg00000000h43n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:32 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 31 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 41 54 53 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 41 54 53 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703101" V="1" DC="SM" EN="Office.Telemetry.Event.Office.MATS.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMATS"

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.10	49877	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:11:32 UTC	192	OUT	GET /rules/rule703100v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:11:32 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:11:32 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:04 GMT ETag: "0x8DC582BEBCD5699" x-ms-request-id: 77a9ad56-001e-000b-39ca-1a15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T181132Z-17db6f7c8cfqxt4wrzg7st2fm800000005eg000000001r3u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:11:32 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 31 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 41 54 53 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 41 54 53 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703100" V="1" DC="SM" EN="Office.Telemetry.Event.Office.MATS" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMATS" S="Medium" /> <F T="2">

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 6852, Parent PID: 3912

General

Target ID:	0
Start time:	14:11:00
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6672, Parent PID: 6852

General

Target ID:	2
Start time:	14:11:03
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2552 --field-trial-handle=2520,i,299039247589719325,9255678577870922180,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 480, Parent PID: 3912

General

Target ID:	3
Start time:	14:11:06
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://mail.w-iphon.sa.com/icloud-archivos/code2022esp.php"
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://mail.w-iphon.sa.com/icloud-archivos/code2022esp.php

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Static File Info

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

Windows Analysis Report
http://mail.w-iphon.sa.com/icloud-archivos/code2022esp.php