Edit tour

Windows Analysis Report
http://wxqlb.ecobusinessegypt.com/4Upeae17759oIun1207nsacmhsouq29959VLTMIPDLABHITRZ3224VGST20749x12

Overview

General Information

Sample URL:	http://wxqlb.ecobusinessegypt.com/4Upeae17759oIun1207nsacmhsouq29959VLTMIPDLABHITRZ3224VGST20749x12
Analysis ID:	1540247
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

HTML body contains low number of good links

HTML title does not match URL

None HTTPS page querying sensitive user data (password, username or email)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6040 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5020 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2544 --field-trial-handle=2520,i,17085417321202707697,12867946886163869045,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 404 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://wxqlb.ecobusinessegypt.com/4Upeae17759oIun1207nsacmhsouq29959VLTMIPDLABHITRZ3224VGST20749x12" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/plain; charset=utf-8X-Address: gin_throttle_mw_360000000000_173.254.250.90X-Ratelimit-Limit: 10X-Ratelimit-Remaining: 8X-Ratelimit-Reset: 1729694959Date: Wed, 23 Oct 2024 13:49:19 GMTContent-Length: 0

Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: http://search.yahoo.com/mrss/
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2023/01/931/523/Walmart-1.jpg
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/07/931/523/pizza-slice.j
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/Blinken-missi
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/ap24296272406
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/austin-2.jpg?
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/ba801039-meta
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/brics.jpg?ve=
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/china-invasio
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/china-militar
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/gettyimages-1
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/giulia-manfri
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/israel-iran-p
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/israel-po-2.j
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/kyun-and-zino
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/lebanon-strik
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/lebanon.png?v
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/lew-unrwa-kne
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/philippines-a
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/shoes.png?ve=
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/sinwar-gaza-t
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/spainstudent.
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/varna-bulgari
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/woman-stuck-a
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://apnews.com/article/greece-court-smelling-shoes-conviction-thessaloniki-ec071292e0c413f7adc4b
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://economictimes.indiatimes.com/news/defence/india-remains-worlds-top-arms-importer-sipri-repor
Source: chromecache_48.2.dr, chromecache_50.2.dr	String found in binary or memory: https://feeds.foxnews.com/foxnews/world
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://global.fncstatic.com/static/orion/styles/img/fox-news/logos/fox-news-desktop.png
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://kyivindependent.com/putin-hosts-brics-summit-in-russia-but-brazilian-and-cuban-leaders-cance
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://moxie.foxnews.com/google-publisher/world.xml
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://nypost.com/2024/09/19/world-news/israeli-senior-arrested-for-allegedly-plotting-with-iran-to
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://nypost.com/2024/10/21/world-news/student-crushed-then-incinerated-after-passing-out-in-garba
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://pubsubhubbub.appspot.com/
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.axios.com/2024/10/15/us-israel-gaza-humanitarian-conditions-military-aid-letter"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.bloomberg.com/news/articles/2024-10-21/why-turkey-a-nato-member-wants-to-join-brics&quot
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.brookings.edu/articles/what-can-we-expect-from-the-2024-brics-summit/#will-north-korea-j
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.cbc.ca/news/canada/nova-scotia/halifax-walmart-workplace-death-police-1.7359358"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.cfr.org/backgrounder/what-brics-group-and-why-it-expanding"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.csis.org/analysis/unpacking-chinas-naval-buildup"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxbusiness.com/category/walmart"
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/columns/digging-history"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/food-drink/food/restaurants"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/health/healthy-living/womens-health"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/health/mental-health/drug-and-substance-abuse"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/person/benjamin-netanyahu"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/politics/defense"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/politics/executive/law"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/politics/finance/investigations"
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/politics/foreign-policy/state-department"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/science/archaeology"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/science/archaeology/ancient-rome"
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/tech/technologies/smartphones"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/travel/general/extreme-travel"
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/us/crime/police-and-law-enforcement"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/us/terror"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/world"
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/world/conflicts"
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/world/conflicts/iran"
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/world/conflicts/north-korea"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/world/conflicts/ukraine"
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/world/crime"
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/world/disasters/disaster-response"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/world/environment/oceans"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/world/personalities/vladimir-putin"
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/world/terrorism"
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/world/united-nations"
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/world/world-regions/asia"
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/world/world-regions/australia"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/world/world-regions/canada"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/world/world-regions/china"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/world/world-regions/germany"
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/world/world-regions/israel"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/world/world-regions/middle-east"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/world/world-regions/middle-east/lebanon"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/world/world-regions/russia"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/world/world-regions/saudi-arabia"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/world/world-regions/south-korea"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/world/world-regions/spain"
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/category/world/world-regions/taiwan"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/elections"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/entertainment/king-charles-heckled-australian-lawmaker-you-not-my-king"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/food-drink"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/lifestyle/irish-farmer-finds-near-60-pound-slab-ancient-bog-butter-his-land-
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/lifestyle/man-stumbles-gem-worth-thousands-hidden-dirt-its-like-nothing-else
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/lifestyle/statue-greek-god-uncovered-archaeologists-excavation-ancient-roman
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/live-news/israel-lebanon-invasion-hezbollah-sep-30"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/person/s/eryk-michael-smith"
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/politics/idf-says-mission-not-over-until-hostages-returned-we-not-rest"
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/politics/israels-un-ambassador-response-iran-very-painful-regime-think-twice
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/politics/justice-department-backs-un-claim-relief-workers-allegedly-involved
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/politics/one-year-anniversary-oct-7-attacks-arrives-lasting-trauma-israelis-
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/politics/putin-meets-iranian-president-celebrates-very-close-relationship&qu
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/politics/russia-moldova-eu-referendum"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/politics/state-dept-officials-hinted-israeli-war-crimes-pushed-gaza-aid-days
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/politics/taiwanese-people-ready-fight-china-ramps-up-aggression-ambassador-s
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/politics/us-investigating-release-classified-docs-israels-planned-strike-ira
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/politics/us-provide-ukraine-another-425m-worth-supplies-help-defend-itself-a
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/politics/zelensky-victory-plan-includes-replacing-us-troops-outposts-europe-
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/sports/brazilian-surfer-hovers-above-ocean-viral-photo-breaks-olympic-surfin
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/us/california-man-survives-shark-attack-reportedly-punching-predator-inside-
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/us/death-south-carolina-pastors-wife-under-investigation-family-warns-false-
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/us/hawaii-lifeguard-killed-shark-attack-after-surfing-tragic-loss"
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/us/hezbollah-hiding-500m-gold-cash-hospital-lebanon-idf-says"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/us/identity-badly-decomposed-body-found-ohio-car-wash-released-report"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/us/navy-prepares-china-conflict-newly-announced-strategy"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/us/remains-american-woman-68-found-stomach-shark-after-disappearing-diving-v
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/us/see-it-mystery-surfer-caught-video-saving-bird-drowning-waves-hero"
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/4000-staffordshire-hoard-make-largest-collection-history-its-kind&quot
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/american-reportedly-kidnapped-philippine-coastal-town-police-investiga
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/ancient-roman-statue-discovered-construction-workers-bulgaria
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/austin-warns-no-silver-bullet-defeat-putin-us-aid-hangs-balance-ahead-
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/austria-police-to-increase-border-checks-after-germany-legalizes-canna
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/biden-admin-cuts-funding-controversial-un-agency-allegations-members-a
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/biden-harris-envoy-accused-pressuring-israeli-lawmakers-drop-bill-bann
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/blinken-arrives-israel-biden-harris-admin-faces-scrutiny-over-compromi
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/china-dominated-bloc-offers-iran-saudi-arabia-membership-move-that-see
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/china-holds-live-fire-drills-near-taiwan-another-show-force
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/china-seeks-wear-down-taiwans-reliance-covert-economic-cyber-operation
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/china-surrounds-taiwan-military-exercise-against-independence"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/college-student-denmark-uses-metal-detector-discover-ancient-jewelry&q
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/encircling-taiwan-smokescreen-chinas-real-goal-convincing-us-not-inter
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/exclusive-sen-blackburn-calls-investigation-allegation-un-agency-emplo
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/father-called-uk-police-confess-killing-daughter-10-england-after-he-f
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/former-mexican-public-security-chief-gets-more-than-38-years-2m-fine-t
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/german-police-warn-blue-punisher-ecstasy-pill-2-teen-deaths"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/germany-drug-bust-cocaine-soybeans-billion"
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/greek-man-convicted-sneaking-onto-neighbors-properties-smell-shoes
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/group-metal-detectorists-uncover-hoard-coins-england
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/hamas-admits-painful-distressing-losses-after-israeli-video-shows-terr
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/hezbollah-generates-funds-activities-guise-non-profit-israeli-official
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/history-hoxne-hoard-largest-collection-roman-treasure-found-britain&qu
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/idf-investigating-whether-hamas-chief-yahya-sinwar-killed-gaza-operati
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/idf-releases-video-showing-hamas-leader-yahya-sinwar-fleeing-tunnel-fa
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/idf-video-israeli-tank-fires-building-where-hamas-leader-yahya-sinwar-
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/israel-breaks-up-iranian-spy-ring-arrests-7-its-own-citizens-significa
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/israel-busts-iranian-plot-assassinate-mayor-major-israeli-city
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/israel-continues-weigh-options-timing-iran-strike-following-biden-neta
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/israel-hammers-hezbollah-finances-crushing-airstrikes
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/israel-hammers-hezbollah-finances-crushing-airstrikes"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/israel-shares-dossier-spelling-allegations-12-un-employees-allegedly-i
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/israel-strike-lebanon-targeting-hezbollah-financial-assets
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/israel-strike-lebanon-targeting-hezbollah-financial-assets"
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/israel-strikes-hezbollah-naval-base-beirut-iran-rallies-gulf-arab-nati
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/israel-takes-out-another-hezbollah-leader-projectiles-intercepted-near
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/israeli-military-says-hezbollah-leader-hassan-nasrallah-killed-beirut-
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/italian-surfer-dies-freak-accident-after-swordfish-impales-her-while-s
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/lithuanian-fm-warns-russia-can-do-so-much-damage-its-neighbors"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/man-dies-freak-accident-involving-frozen-hamburgers-difficult-hear&quo
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/missing-student-spain-likely-crushed-incinerated-after-passing-out-tra
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/more-countries-cut-funding-un-agency-staffer-accused-participatin-oct-
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/netanyahu-promises-retaliation-following-assassination-attempt-hezboll
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/north-korea-blows-up-parts-inter-korean-road-rail-links-symbolic-displ
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/north-korea-sends-warning-south-korea-saying-troops-ready-strike-more-
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/police-bust-restaurant-serving-best-selling-pizza-side-cocaine
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/putin-hits-ukraine-200-missiles-drones-massive-strikes-amid-invasion-r
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/putin-no-rivals-presidency-election-spokesman-claims"
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/roman-era-graves-found-by-homeowner-during-basement-renovation-project
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/russia-china-hold-biggest-war-games-since-soviet-era"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/russian-man-rescued-after-67-days-adrift-sea-his-family-members-didnt-
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/south-korea-demands-withdrawal-north-korean-troops-allegedly-helping-r
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/south-korean-intelligence-says-north-sent-troops-aid-russias-war-ukrai
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/taiwan-reacts-to-trumps-should-pay-us-for-defense-comments"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/taiwans-new-president-urges-china-halt-military-intimidation-tactics&q
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/turkeys-erdogan-threatens-to-invade-israel-over-war-in-gaza-regional-t
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/uav-launched-toward-israeli-pm-netanyahus-private-residence-caesarea&q
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/ukraine-blasts-un-chief-over-potential-meeting-putin-brics-says-stayed
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/ukraine-defense-minister-confident-can-replenish-troops-need-weapons-e
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/un-chief-defends-unrwa-says-only-a-few-elements-participated-oct-7&quo
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/us-concerned-reports-north-korean-soldiers-fighting-alongside-russia-u
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/us-readiness-plays-significant-role-fending-off-iranian-attack-israel&
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/volunteer-during-archaeological-excavation-finds-remarkable-piece-jewe
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/walmart-employee-found-dead-inside-walk-in-oven-canada-store-police
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/white-house-monitoring-reports-north-korean-soldiers-deployed-russia-h
Source: chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/woman-becomes-stuck-upside-down-between-boulders-7-hours-while-trying-
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/world-leaders-gather-switzerland-ukraine-peace-summit-excluding-russia
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/zelenskyy-questions-chinas-true-interest-behind-plan-end-russias-war&q
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.foxnews.com/world/zelenskyy-warns-vances-plan-ukrainian-lands-seized-russia-result-globa
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.jpost.com/israel-news/article-820919"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.reuters.com/world/europe/putin-end-brics-summit-with-news-conference-thursday-aide-says-
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.reuters.com/world/shadow-ukraine-war-hangs-over-putins-brics-summit-russia-2024-10-21/&q
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://www.the-sun.com/news/12718961/majorca-body-rubbish-truck-drunk/"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://x.com/MFA_Ukraine/status/1848463278126551123"
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: https://x.com/ZelenskyyUa/status/1848356717899162099"

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.67:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49985 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.win@16/17@12/4

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2544 --field-trial-handle=2520,i,17085417321202707697,12867946886163869045,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://wxqlb.ecobusinessegypt.com/4Upeae17759oIun1207nsacmhsouq29959VLTMIPDLABHITRZ3224VGST20749x12"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2544 --field-trial-handle=2520,i,17085417321202707697,12867946886163869045,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
wxqlb.ecobusinessegypt.com	185.246.86.158	true	true	unknown
www.google.com	142.250.185.132	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
moxie.foxnews.com	unknown	unknown	false	unknown
www.foxnews.com	unknown	unknown	false	unknown
feeds.foxnews.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
http://wxqlb.ecobusinessegypt.com/assets/styles.css	true	unknown
http://wxqlb.ecobusinessegypt.com/news?q=Not%20allowed!%20list	true	unknown
http://wxqlb.ecobusinessegypt.com/4Upeae17759oIun1207nsacmhsouq29959VLTMIPDLABHITRZ3224VGST20749x12	true	unknown
http://wxqlb.ecobusinessegypt.com/news?q=Not%20allowed!%20list#03	true	unknown
http://wxqlb.ecobusinessegypt.com/t/4Upeae17759oIun1207nsacmhsouq29959VLTMIPDLABHITRZ3224VGST20749x12	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/sinwar-gaza-t	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://nypost.com/2024/09/19/world-news/israeli-senior-arrested-for-allegedly-plotting-with-iran-to	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.csis.org/analysis/unpacking-chinas-naval-buildup"	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2023/01/931/523/Walmart-1.jpg	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/category/world/world-regions/china"	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/israel-hammers-hezbollah-finances-crushing-airstrikes	chromecache_47.2.dr	false	unknown
https://www.foxnews.com/politics/zelensky-victory-plan-includes-replacing-us-troops-outposts-europe-	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/israel-iran-p	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://nypost.com/2024/10/21/world-news/student-crushed-then-incinerated-after-passing-out-in-garba	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/us/identity-badly-decomposed-body-found-ohio-car-wash-released-report"	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/college-student-denmark-uses-metal-detector-discover-ancient-jewelry&q	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/politics/russia-moldova-eu-referendum"	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/blinken-arrives-israel-biden-harris-admin-faces-scrutiny-over-compromi	chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/uav-launched-toward-israeli-pm-netanyahus-private-residence-caesarea&q	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.bloomberg.com/news/articles/2024-10-21/why-turkey-a-nato-member-wants-to-join-brics&quot	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/4000-staffordshire-hoard-make-largest-collection-history-its-kind&quot	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/south-korea-demands-withdrawal-north-korean-troops-allegedly-helping-r	chromecache_47.2.dr	false	unknown
https://www.foxnews.com/category/us/crime/police-and-law-enforcement"	chromecache_47.2.dr	false	unknown
https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/china-militar	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/taiwans-new-president-urges-china-halt-military-intimidation-tactics&q	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.jpost.com/israel-news/article-820919"	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/history-hoxne-hoard-largest-collection-roman-treasure-found-britain&qu	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/israel-takes-out-another-hezbollah-leader-projectiles-intercepted-near	chromecache_47.2.dr	false	unknown
https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/spainstudent.	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/politics/taiwanese-people-ready-fight-china-ramps-up-aggression-ambassador-s	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/category/politics/finance/investigations"	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/russian-man-rescued-after-67-days-adrift-sea-his-family-members-didnt-	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/category/world/crime"	chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/israel-hammers-hezbollah-finances-crushing-airstrikes"	chromecache_47.2.dr	false	unknown
https://global.fncstatic.com/static/orion/styles/img/fox-news/logos/fox-news-desktop.png	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/ancient-roman-statue-discovered-construction-workers-bulgaria	chromecache_47.2.dr	false	unknown
https://www.foxnews.com/category/tech/technologies/smartphones"	chromecache_47.2.dr	false	unknown
https://www.foxnews.com/us/hawaii-lifeguard-killed-shark-attack-after-surfing-tragic-loss"	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/austria-police-to-increase-border-checks-after-germany-legalizes-canna	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/exclusive-sen-blackburn-calls-investigation-allegation-un-agency-emplo	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/biden-harris-envoy-accused-pressuring-israeli-lawmakers-drop-bill-bann	chromecache_47.2.dr	false	unknown
https://www.foxnews.com/category/world/world-regions/spain"	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/austin-2.jpg?	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/category/person/benjamin-netanyahu"	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/category/health/healthy-living/womens-health"	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/lifestyle/statue-greek-god-uncovered-archaeologists-excavation-ancient-roman	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.axios.com/2024/10/15/us-israel-gaza-humanitarian-conditions-military-aid-letter"	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/lebanon-strik	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/category/world/world-regions/germany"	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/austin-warns-no-silver-bullet-defeat-putin-us-aid-hangs-balance-ahead-	chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/turkeys-erdogan-threatens-to-invade-israel-over-war-in-gaza-regional-t	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/idf-video-israeli-tank-fires-building-where-hamas-leader-yahya-sinwar-	chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/putin-no-rivals-presidency-election-spokesman-claims"	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/us/death-south-carolina-pastors-wife-under-investigation-family-warns-false-	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/netanyahu-promises-retaliation-following-assassination-attempt-hezboll	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/politics/state-dept-officials-hinted-israeli-war-crimes-pushed-gaza-aid-days	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/ap24296272406	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/lebanon.png?v	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/israel-po-2.j	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/china-surrounds-taiwan-military-exercise-against-independence"	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/israel-continues-weigh-options-timing-iran-strike-following-biden-neta	chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/missing-student-spain-likely-crushed-incinerated-after-passing-out-tra	chromecache_47.2.dr	false	unknown
https://pubsubhubbub.appspot.com/	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/hamas-admits-painful-distressing-losses-after-israeli-video-shows-terr	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/category/politics/foreign-policy/state-department"	chromecache_47.2.dr	false	unknown
https://www.foxnews.com/category/world/united-nations"	chromecache_47.2.dr	false	unknown
https://www.foxnews.com/category/world/world-regions/canada"	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/israel-strike-lebanon-targeting-hezbollah-financial-assets"	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/ukraine-blasts-un-chief-over-potential-meeting-putin-brics-says-stayed	chromecache_47.2.dr	false	unknown
https://www.foxnews.com/entertainment/king-charles-heckled-australian-lawmaker-you-not-my-king"	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/category/world/world-regions/saudi-arabia"	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://kyivindependent.com/putin-hosts-brics-summit-in-russia-but-brazilian-and-cuban-leaders-cance	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://economictimes.indiatimes.com/news/defence/india-remains-worlds-top-arms-importer-sipri-repor	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/category/food-drink/food/restaurants"	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/hezbollah-generates-funds-activities-guise-non-profit-israeli-official	chromecache_47.2.dr	false	unknown
https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/lew-unrwa-kne	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/category/health/mental-health/drug-and-substance-abuse"	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/category/travel/general/extreme-travel"	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
http://search.yahoo.com/mrss/	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/woman-becomes-stuck-upside-down-between-boulders-7-hours-while-trying-	chromecache_47.2.dr	false	unknown
https://www.foxnews.com/category/world/world-regions/israel"	chromecache_47.2.dr	false	unknown
https://www.foxnews.com/category/world/world-regions/middle-east"	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/category/world/world-regions/south-korea"	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/10/931/523/ba801039-meta	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/roman-era-graves-found-by-homeowner-during-basement-renovation-project	chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/encircling-taiwan-smokescreen-chinas-real-goal-convincing-us-not-inter	chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/walmart-employee-found-dead-inside-walk-in-oven-canada-store-police	chromecache_47.2.dr	false	unknown
https://www.foxnews.com/us/remains-american-woman-68-found-stomach-shark-after-disappearing-diving-v	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/category/world"	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/category/politics/executive/law"	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/us/see-it-mystery-surfer-caught-video-saving-bird-drowning-waves-hero"	chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world	chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/china-dominated-bloc-offers-iran-saudi-arabia-membership-move-that-see	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxbusiness.com/category/walmart"	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/lithuanian-fm-warns-russia-can-do-so-much-damage-its-neighbors"	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/category/world/conflicts"	chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/israeli-military-says-hezbollah-leader-hassan-nasrallah-killed-beirut-	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/world/russia-china-hold-biggest-war-games-since-soviet-era"	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.foxnews.com/category/science/archaeology"	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown
https://www.reuters.com/world/shadow-ukraine-war-hangs-over-putins-brics-summit-russia-2024-10-21/&q	chromecache_43.2.dr, chromecache_47.2.dr	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
185.246.86.158	wxqlb.ecobusinessegypt.com	France	21409	IKOULAFR	true
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540247
Start date and time:	2024-10-23 15:48:21 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 36s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://wxqlb.ecobusinessegypt.com/4Upeae17759oIun1207nsacmhsouq29959VLTMIPDLABHITRZ3224VGST20749x12
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@16/17@12/4
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.99, 172.217.18.14, 108.177.15.84, 34.104.35.123, 151.101.2.132, 151.101.66.132, 151.101.130.132, 151.101.194.132, 104.102.34.105, 2.18.64.10, 2.18.64.35, 4.245.163.56, 192.229.221.95, 20.3.187.198, 2.16.100.168, 88.221.110.91, 142.250.185.202, 172.217.16.138, 142.250.186.74, 142.250.184.234, 142.250.185.234, 216.58.212.170, 142.250.181.234, 142.250.185.106, 142.250.185.170, 142.250.185.74, 142.250.185.138, 172.217.18.106, 216.58.206.42, 142.250.186.138, 142.250.186.170, 216.58.212.138, 52.165.164.15, 93.184.221.240, 172.217.18.3
Excluded domains from analysis (whitelisted): j.sni.global.fastly.net, slscr.update.microsoft.com, e8979.dscj.akamaiedge.net, clientservices.googleapis.com, a767.dspw65.akamai.net, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, client.wns.windows.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, www.foxnews.com.edgekey.net, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com, moxie.foxnews.com.edgekey.net, e197183.dsca.akamaiedge.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://wxqlb.ecobusinessegypt.com/4Upeae17759oIun1207nsacmhsouq29959VLTMIPDLABHITRZ3224VGST20749x12

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: http://wxqlb.ecobusinessegypt.com/news?q=Not%20allowed!%20list#03 Model: claude-3-haiku-20240307	```json { "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: http://wxqlb.ecobusinessegypt.com/news?q=Not%20allowed!%20list#03 Model: claude-3-haiku-20240307	```json { "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: http://wxqlb.ecobusinessegypt.com/news?q=Not%20allowed!%20list#03 Model: claude-3-haiku-20240307	```json { "brands": [ "Fox News" ] }
	```json { "brands": [ "Fox News" ] }
URL: http://wxqlb.ecobusinessegypt.com/news?q=Not%20allowed!%20list#03 Model: claude-3-haiku-20240307	```json { "brands": [ "Fox News" ] }
	```json { "brands": [ "Fox News" ] }
URL: http://wxqlb.ecobusinessegypt.com/ Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Enter your email", "prominent_button_name": "Subscribe", "text_input_field_labels": [ "Enter your email" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false }

URL: http://wxqlb.ecobusinessegypt.com/ Model: claude-3-haiku-20240307	```json { "brands": [ "Fox News" ] }
	```json { "brands": [ "Fox News" ] }
URL: http://wxqlb.ecobusinessegypt.com/ Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Enter your email", "prominent_button_name": "Subscribe", "text_input_field_labels": [ "Enter your email" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false }

URL: http://wxqlb.ecobusinessegypt.com/ Model: claude-3-haiku-20240307	```json { "brands": [ "Fox News" ] }
	```json { "brands": [ "Fox News" ] }
URL: http://wxqlb.ecobusinessegypt.com/ Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Enter your email", "prominent_button_name": "Subscribe", "text_input_field_labels": [ "Enter your email" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false }

URL: http://wxqlb.ecobusinessegypt.com/ Model: gpt-4o	```json{ "legit_domain": "foxnews.com", "classification": "wellknown", "reasons": [ "The brand 'Fox News' is well-known and is associated with the domain 'foxnews.com'.", "The provided URL 'wxqlb.ecobusinessegypt.com' does not match the legitimate domain for Fox News.", "The domain 'ecobusinessegypt.com' is unrelated to Fox News and suggests a different entity.", "The subdomain 'wxqlb' and the main domain 'ecobusinessegypt.com' do not have any known association with Fox News.", "The presence of an input field asking for an email on an unrelated domain is suspicious and indicative of phishing." ], "riskscore": 9} Google indexed: False
URL: wxqlb.ecobusinessegypt.com Brands: Fox News Input Fields: Enter your email
URL: http://wxqlb.ecobusinessegypt.com/ Model: claude-3-haiku-20240307	```json { "brands": [ "Fox News" ] }
	```json { "brands": [ "Fox News" ] }
URL: http://wxqlb.ecobusinessegypt.com/ Model: gpt-4o	```json{ "legit_domain": "foxnews.com", "classification": "wellknown", "reasons": [ "The brand 'Fox News' is well-known and typically associated with the domain 'foxnews.com'.", "The provided URL 'wxqlb.ecobusinessegypt.com' does not match the legitimate domain for Fox News.", "The domain 'ecobusinessegypt.com' is unrelated to Fox News and appears suspicious.", "The subdomain 'wxqlb' and the main domain 'ecobusinessegypt.com' do not have any known association with Fox News.", "The presence of an input field asking for an email on an unrelated domain increases the suspicion of phishing." ], "riskscore": 9} Google indexed: False
URL: wxqlb.ecobusinessegypt.com Brands: Fox News Input Fields: Enter your email
URL: http://wxqlb.ecobusinessegypt.com/ Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Enter your email", "prominent_button_name": "Subscribe", "text_input_field_labels": [ "Enter your email" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false }

URL: http://wxqlb.ecobusinessegypt.com/ Model: claude-3-haiku-20240307	```json { "brands": [ "Fox News" ] }
	```json { "brands": [ "Fox News" ] }
URL: http://wxqlb.ecobusinessegypt.com/ Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Enter your email", "prominent_button_name": "Subscribe", "text_input_field_labels": [ "Enter your email" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false }

URL: http://wxqlb.ecobusinessegypt.com/ Model: gpt-4o	```json{ "legit_domain": "foxnews.com", "classification": "wellknown", "reasons": [ "The brand 'Fox News' is well-known and is associated with the domain 'foxnews.com'.", "The provided URL 'wxqlb.ecobusinessegypt.com' does not match the legitimate domain for Fox News.", "The domain 'ecobusinessegypt.com' is unrelated to Fox News and appears suspicious.", "The subdomain 'wxqlb' and the main domain 'ecobusinessegypt.com' do not have any known association with Fox News.", "The presence of an input field asking for an email on an unrelated domain increases the suspicion of phishing." ], "riskscore": 9} Google indexed: False
URL: wxqlb.ecobusinessegypt.com Brands: Fox News Input Fields: Enter your email
URL: http://wxqlb.ecobusinessegypt.com/ Model: claude-3-haiku-20240307	```json { "brands": [ "Fox News" ] }
	```json { "brands": [ "Fox News" ] }
URL: http://wxqlb.ecobusinessegypt.com/ Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Enter your email", "prominent_button_name": "Subscribe", "text_input_field_labels": [ "Enter your email" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false }

URL: http://wxqlb.ecobusinessegypt.com/ Model: gpt-4o	```json{ "legit_domain": "foxnews.com", "classification": "wellknown", "reasons": [ "The brand 'Fox News' is well-known and is associated with the domain 'foxnews.com'.", "The provided URL 'wxqlb.ecobusinessegypt.com' does not match the legitimate domain for Fox News.", "The domain 'ecobusinessegypt.com' does not have any known association with Fox News.", "The subdomain 'wxqlb' and the main domain 'ecobusinessegypt.com' are suspicious and unrelated to Fox News.", "The presence of an input field asking for an email on an unrelated domain increases the suspicion of phishing." ], "riskscore": 9} Google indexed: False
URL: wxqlb.ecobusinessegypt.com Brands: Fox News Input Fields: Enter your email
URL: http://wxqlb.ecobusinessegypt.com/news Model: claude-3-haiku-20240307	```json { "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: http://wxqlb.ecobusinessegypt.com/ Model: claude-3-haiku-20240307	```json { "brands": [ "Fox News" ] }
	```json { "brands": [ "Fox News" ] }
URL: http://wxqlb.ecobusinessegypt.com/news Model: claude-3-haiku-20240307	```json { "brands": [ "Fox News" ] }
	```json { "brands": [ "Fox News" ] }

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 43

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 text, with very long lines (9889)
Category:	downloaded
Size (bytes):	182192
Entropy (8bit):	4.816711353728526
Encrypted:	false
SSDEEP:	3072:ytMdH31CzH8m3j9xdQ+dAeFmDRFshN4faArL4TPSil2M8iaLOCuZx0FDEJv1qKXM:ytMdH31CzH8m3j9xdQ+dAeFmDRFshN4t
MD5:	8FDFA7EE0D73A34FC3BFC7FED3898D95
SHA1:	C72E66A53C7F54EB763FB5ADBECF62CAC86F3B21
SHA-256:	FC2ECA2933FD05F94050B34D8DC2A819A1AB44650AF412C70C289116B313C2DD
SHA-512:	6ABE5B057FAE16E9733AA7D2C55DE11938C32AED0877827D2354A25241CC77E15D9E9F19B9E50583DC637BF483E60826F083093617C33EFF48527AF608539015
Malicious:	false
Reputation:	low
URL:	https://moxie.foxnews.com/google-publisher/world.xml
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>.<rss xmlns:media="http://search.yahoo.com/mrss/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0">. <channel>. <title>Latest World News on Fox News</title>. <link>https://www.foxnews.com/world</link>. <description>See the latest world news and international news on Fox News. Learn all about the news happening around the world.</description>. <copyright>Copyright 2024 FOX News Network</copyright>. <language>en-us</language>. <pubDate>Wed, 23 Oct 2024 08:54:59 -0400</pubDate>. <image>. <url>https://global.fncstatic.com/static/orion/styles/img/fox-news/logos/fox-news-desktop.png</url>. <title>Latest World News on Fox News</title>. <link>https://www.foxnews.com/world</link>. </image>. <atom:link rel="self" href="https://moxie.foxnew

Chrome Cache Entry: 44

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	4.7130828204283555
Encrypted:	false
SSDEEP:	24:UkvMuGRKe7+U6eSEMDSaGvMdufqGmnoSPfzS7pvMugQrYFv0CGSTYFUL9MtDY3Ss:Uk9w7x9sHGgufRNkz09fcFMCGJFUL9MO
MD5:	1FB5EDFEA0AF10D301EFCD56738BA30A
SHA1:	1AAC6EB08825AD63AC334CFF1F816CC9ECA71219
SHA-256:	161D0961994DD86814FAFBA6EDD6FA7A75D17B19B2E60E1EE01ADAA9EA19DADC
SHA-512:	A0C3F78B663E01D24DDD53AF6D0D1E3E9DD743C3E4CB6FC8F45588BCC37AB3923A2992505C4842D9E451692A7E7495155F58BFED056BCFE57E02204603F962DD
Malicious:	false
Reputation:	low
URL:	http://wxqlb.ecobusinessegypt.com/assets/styles.css
Preview:	body {. font-family: Arial, sans-serif;. background-color: #f0f0f0;. display: flex;. justify-content: center;. align-items: center;. height: 100vh;. margin: 0;. padding: 0;.}...container {. background-color: #ffffff;. padding: 30px;. border-radius: 10px;. box-shadow: 0 4px 6px rgba(0, 0, 0, 0.1);. text-align: center;.}..h1 {. font-size: 36px;. margin-bottom: 20px;. color: #333;.}..p {. font-size: 18px;. color: #777;. margin-bottom: 40px;.}...countdown {. display: flex;. justify-content: center;. margin-bottom: 40px;.}...countdown-item {. display: inline-block;. margin: 0 10px;.}...countdown-item span {. font-size: 24px;. color: #444;.}...countdown-item label {. display: block;. font-size: 14px;. color: #999;.}..form {. display: flex;. justify-content: center;. align-items: center;. flex-direction: column;.}..input[type="email"] {. font-size: 16px;. padding: 10px;. border: 1px sol

Chrome Cache Entry: 45

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HoUinYn:IUyY
MD5:	903747EA4323C522742842A52CE710C9
SHA1:	9F806EA4288867A31A4AD53AC171AA4029DF182B
SHA-256:	4BD8B60F91849C936AE45615145A7B7BE2CF803322A30BABBAE7267A142CA5BB
SHA-512:	EEF73DC29A38ED70FFCFC321931BCB5B5A29FAAC356E8F6D84F57C532EEF44AE75021C341CF7DAE26B8211924A1C0E0EC4735F6BFC4AF3970A48EB63BFB7895F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAlHKBRzbpQjxxIFDYOoWz0=?alt=proto
Preview:	CgkKBw2DqFs9GgA=

Chrome Cache Entry: 46

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (398)
Category:	downloaded
Size (bytes):	458
Entropy (8bit):	5.131460290374407
Encrypted:	false
SSDEEP:	12:8AaJ+dAW1FTWoK9xGixFoBwdNDJNZUSbZkXCABHRsqq+7p:8bJOAWYragNvZUSuzRsqZp
MD5:	0A3E69B8B37A6DF0ACD7E7F5D9D3B854
SHA1:	680DE96CFE2AFF1B030BFBD4A7CFA2529993EA61
SHA-256:	0F3A07F36D6BDDEE418F7D7548BC165B09817E10764A359D2773388CDEC9FF8A
SHA-512:	9C5C0679E082A5776536835110B90436CD6531E3B2C4FC7A15BDCE7F550D6647447C904E68D660FAF81E39C108E17198830E8B133E86D8559180FA6FB5CE25C7
Malicious:	false
Reputation:	low
URL:	http://wxqlb.ecobusinessegypt.com/4Upeae17759oIun1207nsacmhsouq29959VLTMIPDLABHITRZ3224VGST20749x12
Preview:	<script>.let e=new URL(window.location.href);e.pathname="/t"+e.pathname;let o=e.toString();navigator.cookieEnabled&&!function(e){for(var o=["googlebot","bingbot","yandexbot","duckduckbot","slurp","baiduspider","facebot","ia_archiver"],t=e.toLowerCase(),n=0;n<o.length;n++)if(t.indexOf(o[n])>-1)return!0;return!1}(navigator.userAgent)?setTimeout((function(){document.location.href=o}),1e3):console.log("bt");.</script>..<p style="color:gray;">redirect...</p>.

Chrome Cache Entry: 47

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 text, with very long lines (9889)
Category:	dropped
Size (bytes):	182192
Entropy (8bit):	4.816711353728526
Encrypted:	false
SSDEEP:	3072:ytMdH31CzH8m3j9xdQ+dAeFmDRFshN4faArL4TPSil2M8iaLOCuZx0FDEJv1qKXM:ytMdH31CzH8m3j9xdQ+dAeFmDRFshN4t
MD5:	8FDFA7EE0D73A34FC3BFC7FED3898D95
SHA1:	C72E66A53C7F54EB763FB5ADBECF62CAC86F3B21
SHA-256:	FC2ECA2933FD05F94050B34D8DC2A819A1AB44650AF412C70C289116B313C2DD
SHA-512:	6ABE5B057FAE16E9733AA7D2C55DE11938C32AED0877827D2354A25241CC77E15D9E9F19B9E50583DC637BF483E60826F083093617C33EFF48527AF608539015
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>.<rss xmlns:media="http://search.yahoo.com/mrss/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0">. <channel>. <title>Latest World News on Fox News</title>. <link>https://www.foxnews.com/world</link>. <description>See the latest world news and international news on Fox News. Learn all about the news happening around the world.</description>. <copyright>Copyright 2024 FOX News Network</copyright>. <language>en-us</language>. <pubDate>Wed, 23 Oct 2024 08:54:59 -0400</pubDate>. <image>. <url>https://global.fncstatic.com/static/orion/styles/img/fox-news/logos/fox-news-desktop.png</url>. <title>Latest World News on Fox News</title>. <link>https://www.foxnews.com/world</link>. </image>. <atom:link rel="self" href="https://moxie.foxnew

Chrome Cache Entry: 48

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	3196
Entropy (8bit):	4.574347775700303
Encrypted:	false
SSDEEP:	48:vu0C1AFRZpvtph6F6BgxVbaCdQciJ2ZBgof6PM5FGxs7vtj:vu51Yd6ygx4cA2
MD5:	1EC6D0BF1CC9487FD942F4776976889B
SHA1:	7C9438FCA4C6F4FA02B1930D9F02E215A6A308AD
SHA-256:	3DFAEBA551060E1B054ED2D585E28B09EA4363F8BA08A0FD22123CBBC87312A4
SHA-512:	97274786A2A31DF5A3F7771CE5C3DFA3B71CC302508239CFBE777337799C8D1C2F3C8521451346142E223521DA35969A9955B14707470B4128CB77E4EF50A24F
Malicious:	false
Reputation:	low
URL:	http://wxqlb.ecobusinessegypt.com/news
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Fox News World RSS Feed - marrocotagine.com </title>. <style>. body {. font-family: Arial, sans-serif;. background-color: #f4f6f9;. color: #333;. margin: 0;. padding: 0;. }.. .container {. width: 80%;. margin: 0 auto;. }.. h1 {. font-size: 2rem;. margin: 2rem 0;. }.. .news-item {. background-color: white;. padding: 1.5rem;. margin-bottom: 1rem;. box-shadow: 0 1px 3px rgba(0, 0, 0, 0.12), 0 1px 2px rgba(0, 0, 0, 0.24);. }.. .news-item h2 {. font-size: 1.5rem;. margin-bottom: 1rem;. }.. .news-item a {. color: #1a73e8;. text-decoration: none;. }.. .news-item a:h

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2878
Entropy (8bit):	4.855288576612555
Encrypted:	false
SSDEEP:	48:Z9JJpI4LLIk6ddLHJy8A3SXUV/ot5CjsEn+yxw4Dj7jvj:P3LLIk6T9yvGssE5x7
MD5:	8A9BFAA379FEC9F6E5FF78E42BC94232
SHA1:	02311C778ED4016329830C36E8C352603D2BD407
SHA-256:	EE905AAC2B92AEE3A4C52B44A06D099EA4ECE9C81FE50BE4F1C06CCE37E5FC15
SHA-512:	938B9D1122C9DFBA50332149226740CADCBF8927C7C621BC59EBE4857CCD11A1D9BB08F25061752F4EC35AE958D595D1051739C1C15D7257128FCAFCFD2B703F
Malicious:	false
Reputation:	low
URL:	http://wxqlb.ecobusinessegypt.com/
Preview:	.............<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Coming Soon - marrocotagine.com</title>.. <link rel="stylesheet" href="/assets/styles.css">..</head>.<body>.<div class="container">. <h1>Our Website is Coming Soon!</h1>. <p>We are working hard to give you the best experience. Stay tuned!</p>. <div class="countdown">. <div class="countdown-item">. <span id="days">00</span>. <label>Days</label>. </div>. <div class="countdown-item">. <span id="hours">00</span>. <label>Hours</label>. </div>. <div class="countdown-item">. <span id="minutes">00</span>. <label>Minutes</label>. </div>. <div class="countdown-item">. <span id="seconds">00</span>. <label>Seconds</label>. </div>. </div>.. <form id="subscription-form" onsubmi

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	3196
Entropy (8bit):	4.574347775700303
Encrypted:	false
SSDEEP:	48:vu0C1AFRZpvtph6F6BgxVbaCdQciJ2ZBgof6PM5FGxs7vtj:vu51Yd6ygx4cA2
MD5:	1EC6D0BF1CC9487FD942F4776976889B
SHA1:	7C9438FCA4C6F4FA02B1930D9F02E215A6A308AD
SHA-256:	3DFAEBA551060E1B054ED2D585E28B09EA4363F8BA08A0FD22123CBBC87312A4
SHA-512:	97274786A2A31DF5A3F7771CE5C3DFA3B71CC302508239CFBE777337799C8D1C2F3C8521451346142E223521DA35969A9955B14707470B4128CB77E4EF50A24F
Malicious:	false
Reputation:	low
URL:	http://wxqlb.ecobusinessegypt.com/news?q=Not%20allowed!%20list
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Fox News World RSS Feed - marrocotagine.com </title>. <style>. body {. font-family: Arial, sans-serif;. background-color: #f4f6f9;. color: #333;. margin: 0;. padding: 0;. }.. .container {. width: 80%;. margin: 0 auto;. }.. h1 {. font-size: 2rem;. margin: 2rem 0;. }.. .news-item {. background-color: white;. padding: 1.5rem;. margin-bottom: 1rem;. box-shadow: 0 1px 3px rgba(0, 0, 0, 0.12), 0 1px 2px rgba(0, 0, 0, 0.24);. }.. .news-item h2 {. font-size: 1.5rem;. margin-bottom: 1rem;. }.. .news-item a {. color: #1a73e8;. text-decoration: none;. }.. .news-item a:h

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	182
Entropy (8bit):	4.944537532066128
Encrypted:	false
SSDEEP:	3:gH8IIRRQLGRFfHFwOkADFoCK0SfeRFSABEFJOeV/FdLbGuQ87e/eeRFSABEFJOM1:uIRnXHFmmmJ0SWRdWJz/FJKSK/zRdWJZ
MD5:	202AC4DE8A77C0E9972985168AB0D7AA
SHA1:	17B1BB34C3E63456BFEC39ACFE507A2DD60D321C
SHA-256:	5C617BCAC438974C13E0F98C1BB7C1580AF07AA66D94C68102FB5803D293171E
SHA-512:	8664685E048DF1505033D9F81846397B35E696B2616215CC86EF763D3A2F848354DD608013AF6CA6B31DFC9B1C2F1655DDFD7FE5C77A029661E481C9DA572124
Malicious:	false
Reputation:	low
URL:	http://wxqlb.ecobusinessegypt.com/t/4Upeae17759oIun1207nsacmhsouq29959VLTMIPDLABHITRZ3224VGST20749x12
Preview:	<script>.setTimeout(function(){. window.location.href = '/news?q=Not allowed! list#03'; . console.log('redirecting to /news?q=Not allowed! list#03');.}, 1000);.</script>.<p></p>.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 23, 2024 15:49:10.880285978 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 23, 2024 15:49:10.880287886 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 23, 2024 15:49:11.192655087 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 23, 2024 15:49:17.743618965 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:17.743653059 CEST	443	49710	40.113.103.199	192.168.2.6
Oct 23, 2024 15:49:17.743704081 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:17.744720936 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:17.744735003 CEST	443	49710	40.113.103.199	192.168.2.6
Oct 23, 2024 15:49:19.133546114 CEST	443	49710	40.113.103.199	192.168.2.6
Oct 23, 2024 15:49:19.133639097 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:19.139233112 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:19.139242887 CEST	443	49710	40.113.103.199	192.168.2.6
Oct 23, 2024 15:49:19.139656067 CEST	443	49710	40.113.103.199	192.168.2.6
Oct 23, 2024 15:49:19.141669035 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:19.141725063 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:19.141731024 CEST	443	49710	40.113.103.199	192.168.2.6
Oct 23, 2024 15:49:19.142014027 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:19.183372974 CEST	443	49710	40.113.103.199	192.168.2.6
Oct 23, 2024 15:49:19.393341064 CEST	443	49710	40.113.103.199	192.168.2.6
Oct 23, 2024 15:49:19.393984079 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:19.393984079 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:19.394005060 CEST	443	49710	40.113.103.199	192.168.2.6
Oct 23, 2024 15:49:19.394083977 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:20.113712072 CEST	49716	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:49:20.114032984 CEST	49717	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:49:20.119096994 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:49:20.119164944 CEST	49716	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:49:20.119327068 CEST	49716	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:49:20.119328022 CEST	80	49717	185.246.86.158	192.168.2.6
Oct 23, 2024 15:49:20.119381905 CEST	49717	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:49:20.124763012 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:49:20.503773928 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 23, 2024 15:49:20.517540932 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:20.517581940 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:20.517664909 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:20.518167019 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:20.518182039 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:20.518975973 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 23, 2024 15:49:20.816534042 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 23, 2024 15:49:20.935555935 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:49:20.997785091 CEST	49716	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:49:21.045120001 CEST	49716	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:49:21.050667048 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:49:21.278393030 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.278470039 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.280476093 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:49:21.307277918 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.307298899 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.307562113 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.327281952 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.333300114 CEST	49716	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:49:21.367338896 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.520303965 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.520332098 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.520348072 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.520457983 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.520483971 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.520535946 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.579571009 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.579591990 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.579653025 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.579664946 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.579734087 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.638228893 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.638250113 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.638339996 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.638344049 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.638411045 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.696005106 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.696022987 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.696084976 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.696090937 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.696147919 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.697805882 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.697823048 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.697881937 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.697885036 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.697941065 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.742221117 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.742234945 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.742304087 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.742307901 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.742371082 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.756542921 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.756562948 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.756638050 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.756660938 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.756704092 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.812793016 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.812824965 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.812895060 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.812916994 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.812962055 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.812994003 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.813658953 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.813677073 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.813747883 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.813752890 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.813800097 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.814677000 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.814701080 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.814769983 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.814775944 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.814821959 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.816368103 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.816385984 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.816445112 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.816450119 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.816493034 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.854315042 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.854336977 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.854424953 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.854500055 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.854640007 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.871287107 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.871304989 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.871444941 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.871469975 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.871526003 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.871570110 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.871630907 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.871635914 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.871648073 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.871692896 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.872726917 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.872752905 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:21.872770071 CEST	49718	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:21.872776031 CEST	443	49718	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:22.108990908 CEST	49716	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:49:22.114634037 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:49:22.468360901 CEST	49723	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:22.468413115 CEST	443	49723	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:22.468508959 CEST	49723	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:22.475951910 CEST	49724	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:22.475991011 CEST	443	49724	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:22.476044893 CEST	49724	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:22.476250887 CEST	49723	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:22.476268053 CEST	443	49723	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:22.478372097 CEST	49725	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:22.478404045 CEST	443	49725	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:22.478450060 CEST	49725	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:22.478578091 CEST	49725	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:22.478590012 CEST	443	49725	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:22.479974031 CEST	49726	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:22.479984999 CEST	443	49726	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:22.480041027 CEST	49726	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:22.480981112 CEST	49727	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:22.480990887 CEST	443	49727	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:22.481040955 CEST	49727	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:22.481300116 CEST	49724	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:22.481317997 CEST	443	49724	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:22.482038021 CEST	49726	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:22.482048035 CEST	443	49726	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:22.482187986 CEST	49727	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:22.482193947 CEST	443	49727	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:22.532428980 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:49:22.555627108 CEST	443	49705	173.222.162.64	192.168.2.6
Oct 23, 2024 15:49:22.555713892 CEST	49705	443	192.168.2.6	173.222.162.64
Oct 23, 2024 15:49:22.581492901 CEST	49716	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:49:23.176363945 CEST	49728	443	192.168.2.6	142.250.185.132
Oct 23, 2024 15:49:23.176426888 CEST	443	49728	142.250.185.132	192.168.2.6
Oct 23, 2024 15:49:23.176522970 CEST	49728	443	192.168.2.6	142.250.185.132
Oct 23, 2024 15:49:23.176780939 CEST	49728	443	192.168.2.6	142.250.185.132
Oct 23, 2024 15:49:23.176820040 CEST	443	49728	142.250.185.132	192.168.2.6
Oct 23, 2024 15:49:23.312474966 CEST	443	49724	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.314326048 CEST	49724	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.314351082 CEST	443	49724	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.314855099 CEST	49724	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.314861059 CEST	443	49724	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.315450907 CEST	443	49727	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.316054106 CEST	443	49723	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.316307068 CEST	49727	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.316339970 CEST	443	49727	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.316766977 CEST	49727	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.316771984 CEST	443	49727	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.317476988 CEST	49723	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.317502022 CEST	443	49723	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.317924976 CEST	443	49726	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.318056107 CEST	49723	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.318063974 CEST	443	49723	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.318310022 CEST	49726	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.318325043 CEST	443	49726	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.318799973 CEST	49726	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.318805933 CEST	443	49726	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.450025082 CEST	443	49724	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.450087070 CEST	443	49724	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.450208902 CEST	49724	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.450465918 CEST	49724	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.450488091 CEST	443	49724	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.450503111 CEST	49724	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.450510025 CEST	443	49724	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.453377962 CEST	49729	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.453403950 CEST	443	49729	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.453483105 CEST	49729	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.453613997 CEST	49729	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.453630924 CEST	443	49729	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.454442978 CEST	443	49726	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.454519033 CEST	443	49726	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.454580069 CEST	49726	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.454696894 CEST	49726	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.454704046 CEST	443	49726	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.454716921 CEST	49726	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.454721928 CEST	443	49726	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.455708981 CEST	443	49727	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.455727100 CEST	443	49727	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.455784082 CEST	443	49727	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.455790997 CEST	49727	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.455832005 CEST	49727	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.456235886 CEST	49727	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.456255913 CEST	443	49727	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.456269026 CEST	49727	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.456274033 CEST	443	49727	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.456662893 CEST	443	49723	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.456685066 CEST	443	49723	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.456749916 CEST	49723	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.456767082 CEST	443	49723	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.456800938 CEST	49723	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.456808090 CEST	443	49723	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.456819057 CEST	443	49723	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.457087994 CEST	49723	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.457103968 CEST	443	49723	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.457113028 CEST	49723	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.457118988 CEST	443	49723	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.460443020 CEST	49730	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.460479975 CEST	443	49730	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.460531950 CEST	49730	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.460674047 CEST	49731	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.460689068 CEST	443	49731	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.460794926 CEST	49730	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.460809946 CEST	443	49730	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.460815907 CEST	49731	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.462100029 CEST	49732	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.462115049 CEST	443	49732	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.462172031 CEST	49732	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.462515116 CEST	49731	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.462528944 CEST	443	49731	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.462604046 CEST	49732	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.462615967 CEST	443	49732	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.565256119 CEST	49733	443	192.168.2.6	184.28.90.27
Oct 23, 2024 15:49:23.565310001 CEST	443	49733	184.28.90.27	192.168.2.6
Oct 23, 2024 15:49:23.565375090 CEST	49733	443	192.168.2.6	184.28.90.27
Oct 23, 2024 15:49:23.567025900 CEST	49733	443	192.168.2.6	184.28.90.27
Oct 23, 2024 15:49:23.567044973 CEST	443	49733	184.28.90.27	192.168.2.6
Oct 23, 2024 15:49:23.580029011 CEST	49716	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:49:23.585619926 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:49:23.591187954 CEST	443	49725	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.591680050 CEST	49725	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.591697931 CEST	443	49725	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.592173100 CEST	49725	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.592178106 CEST	443	49725	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.731616020 CEST	443	49725	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.731633902 CEST	443	49725	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.731683016 CEST	443	49725	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.731689930 CEST	49725	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.731728077 CEST	49725	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.732011080 CEST	49725	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.732024908 CEST	443	49725	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.732049942 CEST	49725	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.732055902 CEST	443	49725	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.735399961 CEST	49734	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.735441923 CEST	443	49734	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.735511065 CEST	49734	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.735691071 CEST	49734	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:23.735704899 CEST	443	49734	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:23.823510885 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:49:23.823548079 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:49:23.823590994 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:49:23.823632956 CEST	49716	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:49:23.866754055 CEST	49716	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:49:24.033870935 CEST	443	49728	142.250.185.132	192.168.2.6
Oct 23, 2024 15:49:24.034200907 CEST	49728	443	192.168.2.6	142.250.185.132
Oct 23, 2024 15:49:24.034229040 CEST	443	49728	142.250.185.132	192.168.2.6
Oct 23, 2024 15:49:24.035352945 CEST	443	49728	142.250.185.132	192.168.2.6
Oct 23, 2024 15:49:24.035406113 CEST	49728	443	192.168.2.6	142.250.185.132
Oct 23, 2024 15:49:24.036653996 CEST	49728	443	192.168.2.6	142.250.185.132
Oct 23, 2024 15:49:24.036720037 CEST	443	49728	142.250.185.132	192.168.2.6
Oct 23, 2024 15:49:24.082938910 CEST	49728	443	192.168.2.6	142.250.185.132
Oct 23, 2024 15:49:24.082952023 CEST	443	49728	142.250.185.132	192.168.2.6
Oct 23, 2024 15:49:24.130234957 CEST	49728	443	192.168.2.6	142.250.185.132
Oct 23, 2024 15:49:24.213313103 CEST	443	49730	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.213912010 CEST	443	49729	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.213984013 CEST	49730	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.214009047 CEST	443	49730	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.214411020 CEST	49729	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.214463949 CEST	443	49729	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.214627028 CEST	49730	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.214632988 CEST	443	49730	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.214915991 CEST	49729	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.214926958 CEST	443	49729	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.219587088 CEST	443	49731	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.219969988 CEST	49731	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.219990969 CEST	443	49731	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.220452070 CEST	49731	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.220458031 CEST	443	49731	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.349853992 CEST	443	49730	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.350079060 CEST	443	49730	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.350251913 CEST	49730	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.350341082 CEST	49730	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.350363970 CEST	443	49730	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.350393057 CEST	49730	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.350404024 CEST	443	49730	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.351670027 CEST	443	49729	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.352052927 CEST	443	49729	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.352108002 CEST	49729	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.352200985 CEST	49729	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.352238894 CEST	443	49729	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.352257967 CEST	49729	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.352267027 CEST	443	49729	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.353331089 CEST	49736	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.353415966 CEST	443	49736	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.353498936 CEST	49736	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.353631020 CEST	49736	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.353663921 CEST	443	49736	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.354232073 CEST	49737	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.354275942 CEST	443	49737	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.354335070 CEST	49737	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.354464054 CEST	49737	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.354480028 CEST	443	49737	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.357736111 CEST	443	49731	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.357819080 CEST	443	49731	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.357863903 CEST	49731	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.358078957 CEST	49731	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.358100891 CEST	443	49731	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.358115911 CEST	49731	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.358122110 CEST	443	49731	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.360177994 CEST	49738	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.360202074 CEST	443	49738	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.360268116 CEST	49738	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.360392094 CEST	49738	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.360419035 CEST	443	49738	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.437756062 CEST	443	49733	184.28.90.27	192.168.2.6
Oct 23, 2024 15:49:24.437844038 CEST	49733	443	192.168.2.6	184.28.90.27
Oct 23, 2024 15:49:24.439528942 CEST	49733	443	192.168.2.6	184.28.90.27
Oct 23, 2024 15:49:24.439547062 CEST	443	49733	184.28.90.27	192.168.2.6
Oct 23, 2024 15:49:24.439966917 CEST	443	49733	184.28.90.27	192.168.2.6
Oct 23, 2024 15:49:24.483520031 CEST	443	49734	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.487242937 CEST	49733	443	192.168.2.6	184.28.90.27
Oct 23, 2024 15:49:24.494187117 CEST	49734	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.494215965 CEST	443	49734	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.494844913 CEST	49734	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.494849920 CEST	443	49734	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.495143890 CEST	49733	443	192.168.2.6	184.28.90.27
Oct 23, 2024 15:49:24.539334059 CEST	443	49733	184.28.90.27	192.168.2.6
Oct 23, 2024 15:49:24.764519930 CEST	443	49732	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.769511938 CEST	49732	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.769527912 CEST	443	49732	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.770663977 CEST	49732	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.770668030 CEST	443	49732	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.887031078 CEST	443	49734	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.887187958 CEST	443	49734	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.887331009 CEST	49734	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.904273033 CEST	443	49732	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.904678106 CEST	443	49732	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.908447981 CEST	49732	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.955487013 CEST	49734	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.955502033 CEST	443	49734	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.963848114 CEST	49732	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.963852882 CEST	443	49732	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.963920116 CEST	49732	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.963923931 CEST	443	49732	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.971534967 CEST	49740	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.971570969 CEST	443	49740	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.972412109 CEST	49740	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.979130983 CEST	49741	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.979165077 CEST	443	49741	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.980411053 CEST	49741	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.982824087 CEST	49740	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.982835054 CEST	443	49740	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.983001947 CEST	49741	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:24.983021021 CEST	443	49741	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:24.998805046 CEST	443	49733	184.28.90.27	192.168.2.6
Oct 23, 2024 15:49:24.998878956 CEST	443	49733	184.28.90.27	192.168.2.6
Oct 23, 2024 15:49:24.999104023 CEST	49733	443	192.168.2.6	184.28.90.27
Oct 23, 2024 15:49:25.009305954 CEST	49733	443	192.168.2.6	184.28.90.27
Oct 23, 2024 15:49:25.009321928 CEST	443	49733	184.28.90.27	192.168.2.6
Oct 23, 2024 15:49:25.054495096 CEST	49742	443	192.168.2.6	184.28.90.27
Oct 23, 2024 15:49:25.054552078 CEST	443	49742	184.28.90.27	192.168.2.6
Oct 23, 2024 15:49:25.054626942 CEST	49742	443	192.168.2.6	184.28.90.27
Oct 23, 2024 15:49:25.054917097 CEST	49742	443	192.168.2.6	184.28.90.27
Oct 23, 2024 15:49:25.054929972 CEST	443	49742	184.28.90.27	192.168.2.6
Oct 23, 2024 15:49:25.106492043 CEST	443	49738	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.106987000 CEST	49738	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.107008934 CEST	443	49738	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.107492924 CEST	49738	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.107498884 CEST	443	49738	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.112828970 CEST	443	49737	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.113174915 CEST	49737	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.113198996 CEST	443	49737	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.113629103 CEST	49737	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.113635063 CEST	443	49737	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.129107952 CEST	443	49736	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.129662991 CEST	49736	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.129724026 CEST	443	49736	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.130064011 CEST	49736	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.130078077 CEST	443	49736	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.241933107 CEST	443	49738	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.242075920 CEST	443	49738	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.242240906 CEST	49738	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.242301941 CEST	49738	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.242330074 CEST	443	49738	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.242347956 CEST	49738	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.242356062 CEST	443	49738	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.245394945 CEST	49743	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.245435953 CEST	443	49743	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.245593071 CEST	49743	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.245784998 CEST	49743	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.245803118 CEST	443	49743	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.251785040 CEST	443	49737	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.251910925 CEST	443	49737	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.252121925 CEST	49737	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.252288103 CEST	49737	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.252288103 CEST	49737	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.252331972 CEST	443	49737	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.252360106 CEST	443	49737	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.254375935 CEST	49744	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.254420996 CEST	443	49744	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.254498959 CEST	49744	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.254633904 CEST	49744	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.254666090 CEST	443	49744	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.272002935 CEST	443	49736	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.272075891 CEST	443	49736	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.272255898 CEST	49736	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.272480965 CEST	49736	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.272480965 CEST	49736	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.272528887 CEST	443	49736	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.272552013 CEST	443	49736	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.274816990 CEST	49745	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.274861097 CEST	443	49745	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.274940014 CEST	49745	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.275115967 CEST	49745	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.275146961 CEST	443	49745	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.730590105 CEST	443	49741	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.730643988 CEST	443	49740	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.731542110 CEST	49741	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.731566906 CEST	443	49741	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.731770992 CEST	49740	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.731791973 CEST	443	49740	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.732058048 CEST	49741	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.732064962 CEST	443	49741	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.732198000 CEST	49740	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.732202053 CEST	443	49740	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.866023064 CEST	443	49741	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.866226912 CEST	443	49741	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.866439104 CEST	49741	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.866487026 CEST	49741	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.866487026 CEST	49741	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.866514921 CEST	443	49741	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.866525888 CEST	443	49741	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.868263006 CEST	443	49740	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.868328094 CEST	443	49740	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.868408918 CEST	49740	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.868590117 CEST	49740	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.868609905 CEST	443	49740	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.868621111 CEST	49740	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.868627071 CEST	443	49740	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.869590044 CEST	49746	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.869683027 CEST	443	49746	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.869786024 CEST	49746	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.869949102 CEST	49746	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.869985104 CEST	443	49746	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.870729923 CEST	49747	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.870824099 CEST	443	49747	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.870898008 CEST	49747	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.871001005 CEST	49747	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.871037006 CEST	443	49747	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.909858942 CEST	443	49742	184.28.90.27	192.168.2.6
Oct 23, 2024 15:49:25.910002947 CEST	49742	443	192.168.2.6	184.28.90.27
Oct 23, 2024 15:49:25.911324024 CEST	49742	443	192.168.2.6	184.28.90.27
Oct 23, 2024 15:49:25.911353111 CEST	443	49742	184.28.90.27	192.168.2.6
Oct 23, 2024 15:49:25.911720037 CEST	443	49742	184.28.90.27	192.168.2.6
Oct 23, 2024 15:49:25.912934065 CEST	49742	443	192.168.2.6	184.28.90.27
Oct 23, 2024 15:49:25.959343910 CEST	443	49742	184.28.90.27	192.168.2.6
Oct 23, 2024 15:49:25.996541977 CEST	443	49743	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.997298002 CEST	49743	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.997315884 CEST	443	49743	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:25.997822046 CEST	49743	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:25.997828007 CEST	443	49743	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.017258883 CEST	443	49744	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.017863035 CEST	49744	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.017927885 CEST	443	49744	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.018048048 CEST	49744	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.018063068 CEST	443	49744	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.031441927 CEST	443	49745	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.035032034 CEST	49745	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.035068035 CEST	443	49745	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.035408020 CEST	49745	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.035423040 CEST	443	49745	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.133514881 CEST	443	49743	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.133719921 CEST	443	49743	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.133862019 CEST	49743	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.134113073 CEST	49743	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.134124994 CEST	443	49743	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.134162903 CEST	49743	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.134171009 CEST	443	49743	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.137294054 CEST	49748	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.137312889 CEST	443	49748	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.137408018 CEST	49748	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.137667894 CEST	49748	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.137681961 CEST	443	49748	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.157973051 CEST	443	49742	184.28.90.27	192.168.2.6
Oct 23, 2024 15:49:26.158055067 CEST	443	49742	184.28.90.27	192.168.2.6
Oct 23, 2024 15:49:26.158126116 CEST	49742	443	192.168.2.6	184.28.90.27
Oct 23, 2024 15:49:26.159029961 CEST	49742	443	192.168.2.6	184.28.90.27
Oct 23, 2024 15:49:26.159029961 CEST	49742	443	192.168.2.6	184.28.90.27
Oct 23, 2024 15:49:26.159076929 CEST	443	49742	184.28.90.27	192.168.2.6
Oct 23, 2024 15:49:26.159106016 CEST	443	49742	184.28.90.27	192.168.2.6
Oct 23, 2024 15:49:26.161859989 CEST	443	49744	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.162074089 CEST	443	49744	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.162470102 CEST	49744	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.162470102 CEST	49744	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.162470102 CEST	49744	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.165689945 CEST	49749	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.165714979 CEST	443	49749	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.165785074 CEST	49749	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.166076899 CEST	49749	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.166090965 CEST	443	49749	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.168782949 CEST	443	49745	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.168922901 CEST	443	49745	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.168989897 CEST	49745	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.169132948 CEST	49745	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.169151068 CEST	443	49745	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.169173956 CEST	49745	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.169188023 CEST	443	49745	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.178353071 CEST	49750	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.178383112 CEST	443	49750	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.178452969 CEST	49750	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.178608894 CEST	49750	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.178626060 CEST	443	49750	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.471344948 CEST	49744	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.471378088 CEST	443	49744	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.609462023 CEST	443	49747	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.610387087 CEST	49747	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.610449076 CEST	443	49747	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.611799002 CEST	49747	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.611813068 CEST	443	49747	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.625998974 CEST	443	49746	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.626775980 CEST	49746	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.626801014 CEST	443	49746	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.627702951 CEST	49746	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.627754927 CEST	443	49746	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.748194933 CEST	443	49747	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.748255014 CEST	443	49747	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.748388052 CEST	49747	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.766695023 CEST	443	49746	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.767028093 CEST	443	49746	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.767096043 CEST	49746	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.781466007 CEST	49747	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.781466007 CEST	49747	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.781527042 CEST	443	49747	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.781555891 CEST	443	49747	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.785058022 CEST	49746	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.785113096 CEST	443	49746	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.785144091 CEST	49746	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.785161018 CEST	443	49746	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.797060966 CEST	49752	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.797097921 CEST	443	49752	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.797152996 CEST	49752	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.798043966 CEST	49752	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.798055887 CEST	443	49752	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.799984932 CEST	49753	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.800029039 CEST	443	49753	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.800091982 CEST	49753	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.800585985 CEST	49753	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.800595999 CEST	443	49753	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.905364037 CEST	443	49748	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.906667948 CEST	49748	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.906696081 CEST	443	49748	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.907927990 CEST	49748	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.907934904 CEST	443	49748	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.944942951 CEST	443	49749	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.945538044 CEST	443	49750	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.945981979 CEST	49749	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.946006060 CEST	443	49749	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.947352886 CEST	49749	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.947357893 CEST	443	49749	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.948043108 CEST	49750	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.948062897 CEST	443	49750	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:26.949014902 CEST	49750	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:26.949021101 CEST	443	49750	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.043612003 CEST	443	49748	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.043751001 CEST	443	49748	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.043800116 CEST	49748	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.081763029 CEST	443	49750	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.081851006 CEST	443	49750	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.081901073 CEST	49750	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.083172083 CEST	443	49749	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.083329916 CEST	443	49749	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.083372116 CEST	49749	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.426346064 CEST	49748	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.426374912 CEST	443	49748	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.428999901 CEST	49748	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.429008007 CEST	443	49748	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.545178890 CEST	443	49753	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.553131104 CEST	443	49752	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.570549011 CEST	49752	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.570595980 CEST	443	49752	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.571851969 CEST	49752	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.571871996 CEST	443	49752	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.572283030 CEST	49750	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.572304010 CEST	443	49750	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.572316885 CEST	49750	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.572329044 CEST	443	49750	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.575568914 CEST	49749	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.575594902 CEST	443	49749	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.575606108 CEST	49749	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.575612068 CEST	443	49749	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.591974020 CEST	49753	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.592000008 CEST	443	49753	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.593476057 CEST	49753	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.593488932 CEST	443	49753	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.610641003 CEST	49754	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.610702991 CEST	443	49754	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.610780954 CEST	49754	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.611016035 CEST	49754	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.611047983 CEST	443	49754	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.615705013 CEST	49755	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.615761042 CEST	443	49755	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.615818977 CEST	49755	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.618896961 CEST	49756	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.618933916 CEST	443	49756	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.619019985 CEST	49756	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.619349957 CEST	49755	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.619375944 CEST	443	49755	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.619501114 CEST	49756	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.619519949 CEST	443	49756	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.703866005 CEST	443	49752	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.704387903 CEST	443	49752	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.704438925 CEST	49752	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.704483032 CEST	49752	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.704494953 CEST	443	49752	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.704508066 CEST	49752	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.704513073 CEST	443	49752	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.708165884 CEST	49757	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.708214998 CEST	443	49757	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.708416939 CEST	49757	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.708700895 CEST	49757	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.708712101 CEST	443	49757	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.724363089 CEST	443	49753	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.724522114 CEST	443	49753	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.724585056 CEST	49753	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.724627018 CEST	49753	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.724647045 CEST	443	49753	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.724661112 CEST	49753	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.724668026 CEST	443	49753	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.727291107 CEST	49758	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.727339029 CEST	443	49758	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:27.727508068 CEST	49758	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.727732897 CEST	49758	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:27.727746964 CEST	443	49758	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.206049919 CEST	49759	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:28.206110954 CEST	443	49759	40.113.103.199	192.168.2.6
Oct 23, 2024 15:49:28.206322908 CEST	49759	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:28.208678007 CEST	49759	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:28.208697081 CEST	443	49759	40.113.103.199	192.168.2.6
Oct 23, 2024 15:49:28.369932890 CEST	443	49756	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.371644974 CEST	49756	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.371665001 CEST	443	49756	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.374016047 CEST	49756	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.374022961 CEST	443	49756	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.377043962 CEST	443	49755	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.377877951 CEST	49755	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.377893925 CEST	443	49755	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.380490065 CEST	49755	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.380495071 CEST	443	49755	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.382220984 CEST	443	49754	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.383196115 CEST	49754	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.383203983 CEST	443	49754	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.384687901 CEST	49754	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.384691954 CEST	443	49754	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.467988968 CEST	443	49757	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.484179974 CEST	443	49758	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.488127947 CEST	49757	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.488147020 CEST	443	49757	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.489983082 CEST	49757	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.489988089 CEST	443	49757	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.491822958 CEST	49758	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.491858006 CEST	443	49758	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.493592024 CEST	49758	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.493612051 CEST	443	49758	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.514473915 CEST	443	49755	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.514534950 CEST	443	49755	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.514588118 CEST	49755	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.515048981 CEST	49755	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.515065908 CEST	443	49755	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.519898891 CEST	49760	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.519944906 CEST	443	49760	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.520019054 CEST	49760	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.520282984 CEST	49760	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.520298004 CEST	443	49760	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.522705078 CEST	443	49754	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.522856951 CEST	443	49754	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.522918940 CEST	49754	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.523297071 CEST	49754	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.523317099 CEST	443	49754	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.523334026 CEST	49754	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.523338079 CEST	443	49754	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.529243946 CEST	49761	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.529299021 CEST	443	49761	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.529369116 CEST	49761	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.529611111 CEST	49761	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.529628038 CEST	443	49761	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.625807047 CEST	443	49757	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.626313925 CEST	443	49757	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.626410007 CEST	49757	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.626521111 CEST	49757	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.626521111 CEST	49757	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.626544952 CEST	443	49757	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.626554966 CEST	443	49757	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.629492998 CEST	443	49758	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.629561901 CEST	443	49758	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.629631042 CEST	49758	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.630044937 CEST	49758	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.630068064 CEST	443	49758	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.633424044 CEST	49762	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.633465052 CEST	443	49762	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.633555889 CEST	49762	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.633805990 CEST	443	49756	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.633877993 CEST	443	49756	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.633965969 CEST	49756	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.634200096 CEST	49762	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.634213924 CEST	443	49762	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.635468006 CEST	49763	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.635523081 CEST	443	49763	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.635598898 CEST	49763	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.635858059 CEST	49763	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.635876894 CEST	443	49763	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.635951042 CEST	49756	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.635958910 CEST	443	49756	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.635986090 CEST	49756	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.635996103 CEST	443	49756	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.638434887 CEST	49764	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.638473034 CEST	443	49764	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:28.638541937 CEST	49764	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.638926983 CEST	49764	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:28.638942957 CEST	443	49764	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.281652927 CEST	443	49760	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.282329082 CEST	49760	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.282413960 CEST	443	49760	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.282994986 CEST	49760	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.283009052 CEST	443	49760	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.293746948 CEST	443	49761	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.294326067 CEST	49761	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.294359922 CEST	443	49761	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.294816971 CEST	49761	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.294831991 CEST	443	49761	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.317637920 CEST	443	49759	40.113.103.199	192.168.2.6
Oct 23, 2024 15:49:29.317732096 CEST	49759	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:29.319905043 CEST	49759	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:29.319917917 CEST	443	49759	40.113.103.199	192.168.2.6
Oct 23, 2024 15:49:29.320738077 CEST	443	49759	40.113.103.199	192.168.2.6
Oct 23, 2024 15:49:29.322782040 CEST	49759	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:29.322882891 CEST	49759	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:29.322896004 CEST	443	49759	40.113.103.199	192.168.2.6
Oct 23, 2024 15:49:29.323120117 CEST	49759	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:29.367340088 CEST	443	49759	40.113.103.199	192.168.2.6
Oct 23, 2024 15:49:29.391623020 CEST	443	49762	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.392265081 CEST	49762	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.392278910 CEST	443	49762	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.392760038 CEST	49762	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.392764091 CEST	443	49762	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.393421888 CEST	443	49763	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.393763065 CEST	49763	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.393796921 CEST	443	49763	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.394211054 CEST	49763	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.394218922 CEST	443	49763	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.397634983 CEST	443	49764	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.398118019 CEST	49764	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.398139954 CEST	443	49764	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.398566961 CEST	49764	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.398572922 CEST	443	49764	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.417928934 CEST	443	49760	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.418085098 CEST	443	49760	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.418174982 CEST	49760	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.418298960 CEST	49760	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.418314934 CEST	443	49760	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.418323994 CEST	49760	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.418329000 CEST	443	49760	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.421694994 CEST	49765	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.421746016 CEST	443	49765	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.421823025 CEST	49765	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.421982050 CEST	49765	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.421993971 CEST	443	49765	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.432954073 CEST	443	49761	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.433099031 CEST	443	49761	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.433163881 CEST	49761	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.433214903 CEST	49761	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.433214903 CEST	49761	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.433250904 CEST	443	49761	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.433271885 CEST	443	49761	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.435738087 CEST	49766	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.435761929 CEST	443	49766	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.436002970 CEST	49766	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.436147928 CEST	49766	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.436160088 CEST	443	49766	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.528753042 CEST	443	49763	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.528949022 CEST	443	49763	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.529115915 CEST	49763	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.529202938 CEST	49763	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.529202938 CEST	49763	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.529248953 CEST	443	49763	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.529275894 CEST	443	49763	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.529999018 CEST	443	49762	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.530060053 CEST	443	49762	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.530194998 CEST	49762	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.530443907 CEST	49762	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.530471087 CEST	443	49762	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.530493975 CEST	49762	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.530505896 CEST	443	49762	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.532942057 CEST	49768	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.532942057 CEST	49767	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.532969952 CEST	443	49768	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.532979012 CEST	443	49767	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.533046007 CEST	49768	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.533184052 CEST	49767	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.533215046 CEST	49767	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.533232927 CEST	443	49767	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.533286095 CEST	49768	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.533297062 CEST	443	49768	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.533305883 CEST	443	49764	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.533468008 CEST	443	49764	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.533529043 CEST	49764	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.533565044 CEST	49764	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.533582926 CEST	443	49764	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.533596992 CEST	49764	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.533601999 CEST	443	49764	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.535736084 CEST	49769	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.535775900 CEST	443	49769	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.535872936 CEST	49769	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.535984993 CEST	49769	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:29.536014080 CEST	443	49769	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:29.571193933 CEST	443	49759	40.113.103.199	192.168.2.6
Oct 23, 2024 15:49:29.572195053 CEST	49759	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:29.572221041 CEST	443	49759	40.113.103.199	192.168.2.6
Oct 23, 2024 15:49:29.572246075 CEST	49759	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:29.572276115 CEST	49759	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:30.197396040 CEST	443	49766	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.199016094 CEST	49766	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.199040890 CEST	443	49766	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.199814081 CEST	443	49765	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.200103998 CEST	49766	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.200109005 CEST	443	49766	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.202379942 CEST	49765	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.202418089 CEST	443	49765	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.203871012 CEST	49765	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.203881025 CEST	443	49765	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.310883999 CEST	443	49769	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.311672926 CEST	49769	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.311682940 CEST	443	49768	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.311697006 CEST	443	49769	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.312700987 CEST	49769	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.312720060 CEST	443	49769	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.313410997 CEST	49768	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.313424110 CEST	443	49768	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.314069033 CEST	49768	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.314074039 CEST	443	49768	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.325201035 CEST	443	49767	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.325938940 CEST	49767	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.325979948 CEST	443	49767	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.327620029 CEST	49767	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.327635050 CEST	443	49767	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.335310936 CEST	443	49766	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.335453033 CEST	443	49766	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.335508108 CEST	49766	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.339023113 CEST	49766	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.339051008 CEST	443	49766	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.339068890 CEST	49766	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.339076042 CEST	443	49766	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.339520931 CEST	443	49765	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.339585066 CEST	443	49765	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.339626074 CEST	49765	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.342835903 CEST	49765	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.342859030 CEST	443	49765	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.342875004 CEST	49765	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.342883110 CEST	443	49765	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.358809948 CEST	49770	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.358839035 CEST	443	49770	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.358899117 CEST	49770	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.359428883 CEST	49770	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.359443903 CEST	443	49770	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.361731052 CEST	49771	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.361779928 CEST	443	49771	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.361840963 CEST	49771	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.367214918 CEST	49771	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.367238045 CEST	443	49771	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.446324110 CEST	443	49769	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.446413040 CEST	443	49769	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.446469069 CEST	49769	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.447021961 CEST	49769	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.447046041 CEST	443	49769	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.447057962 CEST	49769	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.447065115 CEST	443	49769	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.448726892 CEST	443	49768	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.448791981 CEST	443	49768	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.448843956 CEST	49768	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.450284958 CEST	49768	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.450298071 CEST	443	49768	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.460465908 CEST	49772	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.460520983 CEST	443	49772	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.460582018 CEST	49772	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.461627007 CEST	49772	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.461642981 CEST	443	49772	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.464379072 CEST	49773	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.464409113 CEST	443	49773	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.464467049 CEST	49773	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.464730024 CEST	49773	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.464742899 CEST	443	49773	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.469604969 CEST	443	49767	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.469758034 CEST	443	49767	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.469871998 CEST	49767	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.469961882 CEST	49767	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.469980001 CEST	443	49767	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.469993114 CEST	49767	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.470000029 CEST	443	49767	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.475910902 CEST	49774	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.475934029 CEST	443	49774	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:30.475996971 CEST	49774	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.476475000 CEST	49774	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:30.476488113 CEST	443	49774	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.113284111 CEST	443	49771	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.113936901 CEST	49771	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.113977909 CEST	443	49771	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.114428997 CEST	443	49770	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.115048885 CEST	49771	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.115077972 CEST	443	49771	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.115760088 CEST	49770	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.115783930 CEST	443	49770	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.116202116 CEST	49770	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.116205931 CEST	443	49770	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.217200994 CEST	443	49773	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.218272924 CEST	49773	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.218272924 CEST	49773	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.218288898 CEST	443	49773	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.218302965 CEST	443	49773	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.218965054 CEST	443	49772	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.219331026 CEST	49772	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.219360113 CEST	443	49772	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.219729900 CEST	49772	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.219734907 CEST	443	49772	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.245091915 CEST	443	49774	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.245470047 CEST	49774	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.245485067 CEST	443	49774	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.245927095 CEST	49774	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.245932102 CEST	443	49774	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.249491930 CEST	443	49771	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.249794006 CEST	443	49771	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.249852896 CEST	49771	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.249916077 CEST	49771	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.249916077 CEST	49771	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.249937057 CEST	443	49771	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.249948978 CEST	443	49771	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.251655102 CEST	443	49770	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.251718044 CEST	443	49770	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.251775980 CEST	49770	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.251898050 CEST	49770	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.251914024 CEST	443	49770	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.251924992 CEST	49770	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.251930952 CEST	443	49770	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.253823996 CEST	49776	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.253878117 CEST	443	49776	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.253983021 CEST	49776	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.254350901 CEST	49776	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.254373074 CEST	443	49776	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.254972935 CEST	49777	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.254992008 CEST	443	49777	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.255062103 CEST	49777	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.255287886 CEST	49777	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.255304098 CEST	443	49777	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.355463028 CEST	443	49773	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.355544090 CEST	443	49773	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.355705023 CEST	49773	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.355808973 CEST	49773	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.355823040 CEST	443	49773	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.355856895 CEST	49773	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.355863094 CEST	443	49773	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.358859062 CEST	443	49772	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.358916998 CEST	49778	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.358959913 CEST	443	49778	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.359055042 CEST	49778	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.359191895 CEST	49778	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.359209061 CEST	443	49778	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.359488010 CEST	443	49772	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.359560013 CEST	49772	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.359587908 CEST	49772	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.359601021 CEST	443	49772	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.359611034 CEST	49772	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.359616041 CEST	443	49772	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.361785889 CEST	49779	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.361804962 CEST	443	49779	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.361870050 CEST	49779	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.362046957 CEST	49779	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.362056017 CEST	443	49779	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.380991936 CEST	443	49774	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.381206036 CEST	443	49774	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.381262064 CEST	49774	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.381294012 CEST	49774	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.381299019 CEST	443	49774	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.381321907 CEST	49774	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.381325006 CEST	443	49774	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.383719921 CEST	49780	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.383735895 CEST	443	49780	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:31.383972883 CEST	49780	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.384033918 CEST	49780	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:31.384037971 CEST	443	49780	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.010195971 CEST	443	49776	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.010787964 CEST	49776	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.010803938 CEST	443	49776	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.011280060 CEST	49776	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.011286974 CEST	443	49776	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.011712074 CEST	443	49777	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.011991978 CEST	49777	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.012013912 CEST	443	49777	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.012331963 CEST	49777	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.012336969 CEST	443	49777	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.122452974 CEST	443	49778	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.123095989 CEST	49778	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.123111010 CEST	443	49778	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.123131037 CEST	443	49779	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.123414993 CEST	49779	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.123431921 CEST	443	49779	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.123620033 CEST	49778	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.123625040 CEST	443	49778	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.124068975 CEST	49779	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.124074936 CEST	443	49779	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.141055107 CEST	443	49780	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.141578913 CEST	49780	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.141602993 CEST	443	49780	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.142316103 CEST	49780	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.142332077 CEST	443	49780	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.148356915 CEST	443	49776	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.148412943 CEST	443	49776	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.148713112 CEST	49776	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.148927927 CEST	49776	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.148950100 CEST	443	49776	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.148961067 CEST	49776	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.148967981 CEST	443	49776	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.149877071 CEST	443	49777	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.150131941 CEST	443	49777	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.150193930 CEST	49777	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.150255919 CEST	49777	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.150270939 CEST	443	49777	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.150281906 CEST	49777	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.150286913 CEST	443	49777	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.153026104 CEST	49781	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.153067112 CEST	443	49781	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.153203011 CEST	49781	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.153264046 CEST	49782	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.153300047 CEST	443	49782	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.153342009 CEST	49781	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.153352022 CEST	443	49781	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.153407097 CEST	49782	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.153526068 CEST	49782	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.153537035 CEST	443	49782	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.259459972 CEST	443	49778	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.259644032 CEST	443	49778	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.259695053 CEST	49778	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.260267019 CEST	443	49779	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.260499001 CEST	443	49779	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.260543108 CEST	49779	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.269280910 CEST	49778	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.269306898 CEST	443	49778	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.269324064 CEST	49778	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.269330978 CEST	443	49778	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.271408081 CEST	49779	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.271408081 CEST	49779	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.271440983 CEST	443	49779	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.271466017 CEST	443	49779	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.276629925 CEST	49783	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.276648998 CEST	443	49783	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.276777983 CEST	49783	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.277460098 CEST	443	49780	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.277669907 CEST	443	49780	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.277854919 CEST	49780	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.278292894 CEST	49784	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.278382063 CEST	443	49784	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.278453112 CEST	49784	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.279098034 CEST	49783	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.279109001 CEST	443	49783	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.279225111 CEST	49780	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.279237032 CEST	443	49780	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.281536102 CEST	49785	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.281624079 CEST	443	49785	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.281696081 CEST	49785	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.281872034 CEST	49784	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.281905890 CEST	443	49784	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.281948090 CEST	49785	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.281985998 CEST	443	49785	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.937047958 CEST	443	49781	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.937655926 CEST	49781	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.937721968 CEST	443	49781	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.938091993 CEST	49781	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.938098907 CEST	443	49781	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.944000006 CEST	443	49782	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.944569111 CEST	49782	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.944592953 CEST	443	49782	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:32.945261955 CEST	49782	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:32.945266008 CEST	443	49782	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.039781094 CEST	443	49783	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.040082932 CEST	443	49785	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.040421009 CEST	49783	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.040452003 CEST	443	49783	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.040903091 CEST	49783	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.040908098 CEST	443	49783	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.040961981 CEST	49785	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.040996075 CEST	443	49785	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.041615009 CEST	49785	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.041620016 CEST	443	49785	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.073353052 CEST	443	49784	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.073955059 CEST	49784	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.074032068 CEST	443	49784	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.074393034 CEST	443	49781	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.074414968 CEST	49784	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.074429035 CEST	443	49784	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.074456930 CEST	443	49781	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.074525118 CEST	49781	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.074734926 CEST	49781	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.074757099 CEST	443	49781	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.074764967 CEST	49781	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.074773073 CEST	443	49781	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.078146935 CEST	49787	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.078182936 CEST	443	49787	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.078264952 CEST	49787	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.078505993 CEST	49787	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.078519106 CEST	443	49787	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.084526062 CEST	443	49782	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.084598064 CEST	443	49782	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.084675074 CEST	49782	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.084860086 CEST	49782	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.084860086 CEST	49782	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.084877968 CEST	443	49782	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.084894896 CEST	443	49782	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.087609053 CEST	49788	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.087647915 CEST	443	49788	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.087716103 CEST	49788	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.087847948 CEST	49788	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.087866068 CEST	443	49788	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.176408052 CEST	443	49785	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.176656008 CEST	443	49785	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.176809072 CEST	49785	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.176856041 CEST	49785	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.176881075 CEST	443	49785	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.176898003 CEST	49785	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.176906109 CEST	443	49785	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.178349018 CEST	443	49783	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.178417921 CEST	443	49783	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.178508997 CEST	49783	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.178580999 CEST	49783	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.178600073 CEST	443	49783	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.178617001 CEST	49783	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.178622961 CEST	443	49783	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.179855108 CEST	49789	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.179893017 CEST	443	49789	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.179975986 CEST	49789	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.180176020 CEST	49789	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.180188894 CEST	443	49789	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.181123018 CEST	49790	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.181147099 CEST	443	49790	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.181265116 CEST	49790	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.181376934 CEST	49790	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.181385994 CEST	443	49790	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.214600086 CEST	443	49784	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.214677095 CEST	443	49784	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.214857101 CEST	49784	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.214920044 CEST	49784	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.214953899 CEST	443	49784	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.214997053 CEST	49784	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.215012074 CEST	443	49784	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.217474937 CEST	49791	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.217511892 CEST	443	49791	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:33.217637062 CEST	49791	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.217802048 CEST	49791	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:33.217812061 CEST	443	49791	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:34.839742899 CEST	443	49728	142.250.185.132	192.168.2.6
Oct 23, 2024 15:49:34.839821100 CEST	443	49728	142.250.185.132	192.168.2.6
Oct 23, 2024 15:49:34.839878082 CEST	49728	443	192.168.2.6	142.250.185.132
Oct 23, 2024 15:49:34.959368944 CEST	49728	443	192.168.2.6	142.250.185.132
Oct 23, 2024 15:49:34.959392071 CEST	443	49728	142.250.185.132	192.168.2.6
Oct 23, 2024 15:49:34.978993893 CEST	443	49788	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:34.979552984 CEST	49788	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:34.979556084 CEST	443	49787	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:34.979571104 CEST	443	49788	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:34.979892015 CEST	49787	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:34.979948044 CEST	443	49787	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:34.980391979 CEST	49787	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:34.980410099 CEST	49788	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:34.980410099 CEST	443	49787	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:34.980416059 CEST	443	49788	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:34.986598015 CEST	443	49789	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:34.986951113 CEST	49789	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:34.986968040 CEST	443	49789	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:34.987063885 CEST	443	49790	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:34.987376928 CEST	49789	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:34.987382889 CEST	443	49789	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:34.987521887 CEST	49790	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:34.987544060 CEST	443	49790	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:34.987922907 CEST	49790	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:34.987927914 CEST	443	49790	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:34.988430977 CEST	443	49791	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:34.988753080 CEST	49791	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:34.988760948 CEST	443	49791	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:34.989160061 CEST	49791	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:34.989165068 CEST	443	49791	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.115267038 CEST	443	49788	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.115534067 CEST	443	49788	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.115613937 CEST	49788	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.115703106 CEST	49788	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.115716934 CEST	443	49788	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.115725994 CEST	49788	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.115731001 CEST	443	49788	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.116954088 CEST	443	49787	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.117105961 CEST	443	49787	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.117176056 CEST	49787	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.117248058 CEST	49787	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.117275953 CEST	443	49787	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.117324114 CEST	49787	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.117341042 CEST	443	49787	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.118983984 CEST	49793	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.119026899 CEST	443	49793	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.119050026 CEST	49794	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.119093895 CEST	443	49794	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.119107962 CEST	49793	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.119167089 CEST	49794	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.119347095 CEST	49793	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.119354963 CEST	49794	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.119364023 CEST	443	49794	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.119376898 CEST	443	49793	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.123225927 CEST	443	49791	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.123294115 CEST	443	49791	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.123398066 CEST	49791	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.123492956 CEST	49791	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.123492956 CEST	49791	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.123507977 CEST	443	49791	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.123522043 CEST	443	49791	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.124202967 CEST	443	49790	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.124284029 CEST	443	49790	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.124372005 CEST	49790	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.124397039 CEST	49790	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.124402046 CEST	443	49790	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.124409914 CEST	49790	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.124413013 CEST	443	49790	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.124459982 CEST	443	49789	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.124515057 CEST	443	49789	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.124583960 CEST	49789	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.124720097 CEST	49789	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.124725103 CEST	443	49789	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.124747038 CEST	49789	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.124752998 CEST	443	49789	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.126346111 CEST	49795	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.126367092 CEST	443	49795	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.126497030 CEST	49796	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.126512051 CEST	443	49796	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.126521111 CEST	49795	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.126610994 CEST	49796	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.126753092 CEST	49796	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.126765013 CEST	443	49796	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.126827002 CEST	49795	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.126851082 CEST	443	49795	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.127325058 CEST	49797	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.127343893 CEST	443	49797	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.127450943 CEST	49797	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.127578020 CEST	49797	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.127593994 CEST	443	49797	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.872759104 CEST	443	49796	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.873344898 CEST	49796	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.873358011 CEST	443	49796	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.875057936 CEST	49796	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.875061989 CEST	443	49796	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.876038074 CEST	443	49795	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.876723051 CEST	49795	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.876761913 CEST	443	49795	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.876847029 CEST	49795	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.876863956 CEST	443	49795	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.878448963 CEST	443	49794	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.879188061 CEST	49794	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.879188061 CEST	49794	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.879240036 CEST	443	49794	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.879280090 CEST	443	49794	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.890045881 CEST	443	49797	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.890677929 CEST	49797	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.890677929 CEST	49797	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.890706062 CEST	443	49797	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.890748978 CEST	443	49797	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.893830061 CEST	443	49793	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.894427061 CEST	49793	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.894428015 CEST	49793	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:35.894449949 CEST	443	49793	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:35.894484997 CEST	443	49793	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:36.007780075 CEST	443	49796	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:36.007925034 CEST	443	49796	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:36.008111954 CEST	49796	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.008114100 CEST	49796	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.008254051 CEST	49796	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.008263111 CEST	443	49796	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:36.011079073 CEST	49798	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.011095047 CEST	443	49798	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:36.011195898 CEST	49798	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.011358023 CEST	49798	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.011364937 CEST	443	49798	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:36.015285015 CEST	443	49794	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:36.015578032 CEST	443	49794	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:36.015676975 CEST	49794	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.015677929 CEST	49794	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.015746117 CEST	49794	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.015774965 CEST	443	49794	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:36.017560005 CEST	49799	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.017601013 CEST	443	49799	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:36.017774105 CEST	49799	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.017774105 CEST	49799	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.017812967 CEST	443	49799	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:36.022317886 CEST	443	49795	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:36.022439003 CEST	443	49795	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:36.022530079 CEST	49795	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.022530079 CEST	49795	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.022583961 CEST	49795	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.022608042 CEST	443	49795	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:36.024373055 CEST	49800	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.024406910 CEST	443	49800	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:36.024710894 CEST	49800	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.024710894 CEST	49800	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.024744034 CEST	443	49800	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:36.033493996 CEST	443	49793	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:36.033654928 CEST	443	49793	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:36.033914089 CEST	49793	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.033914089 CEST	49793	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.034281015 CEST	49793	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.034293890 CEST	443	49793	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:36.037885904 CEST	49801	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.037904978 CEST	443	49801	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:36.038217068 CEST	49801	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.038217068 CEST	49801	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.038240910 CEST	443	49801	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:36.179857969 CEST	443	49797	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:36.179944992 CEST	443	49797	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:36.180227995 CEST	49797	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.180227995 CEST	49797	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.180255890 CEST	49797	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.180268049 CEST	443	49797	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:36.183689117 CEST	49802	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.183717966 CEST	443	49802	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:36.184057951 CEST	49802	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.184057951 CEST	49802	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.184089899 CEST	443	49802	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:36.783103943 CEST	443	49798	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:36.783822060 CEST	49798	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.783834934 CEST	443	49798	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:36.785368919 CEST	49798	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:36.785372972 CEST	443	49798	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:37.868483067 CEST	443	49798	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:37.868647099 CEST	443	49798	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:37.868720055 CEST	49798	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:37.868902922 CEST	49798	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:37.868921041 CEST	443	49798	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:37.868932962 CEST	49798	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:37.868938923 CEST	443	49798	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:37.871273994 CEST	443	49800	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:37.872031927 CEST	49800	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:37.872050047 CEST	443	49800	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:37.872561932 CEST	49800	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:37.872576952 CEST	443	49800	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:37.872718096 CEST	49803	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:37.872745991 CEST	443	49803	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:37.872792006 CEST	443	49801	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:37.872807980 CEST	49803	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:37.872870922 CEST	443	49799	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:37.872944117 CEST	49803	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:37.872957945 CEST	443	49803	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:37.873168945 CEST	49801	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:37.873178005 CEST	443	49801	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:37.873420000 CEST	49799	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:37.873445988 CEST	443	49799	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:37.873558044 CEST	49801	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:37.873563051 CEST	443	49801	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:37.874032974 CEST	49799	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:37.874041080 CEST	443	49799	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.011245012 CEST	443	49800	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.011394024 CEST	443	49800	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.011508942 CEST	49800	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.011713982 CEST	49800	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.011713982 CEST	49800	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.011742115 CEST	443	49800	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.011754990 CEST	443	49800	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.013174057 CEST	443	49802	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.013796091 CEST	49802	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.013823032 CEST	443	49802	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.014384031 CEST	49802	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.014399052 CEST	443	49802	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.015336990 CEST	49804	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.015376091 CEST	443	49804	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.015458107 CEST	49804	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.015616894 CEST	49804	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.015631914 CEST	443	49804	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.017915010 CEST	443	49799	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.018168926 CEST	443	49799	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.018239021 CEST	49799	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.018285036 CEST	49799	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.018300056 CEST	443	49799	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.018311977 CEST	49799	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.018318892 CEST	443	49799	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.021214008 CEST	49805	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.021235943 CEST	443	49805	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.021317005 CEST	443	49801	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.021369934 CEST	49805	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.021457911 CEST	443	49801	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.021562099 CEST	49801	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.021595955 CEST	49805	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.021611929 CEST	443	49805	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.021677971 CEST	49801	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.021686077 CEST	443	49801	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.021703959 CEST	49801	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.021708012 CEST	443	49801	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.024388075 CEST	49806	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.024408102 CEST	443	49806	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.024621010 CEST	49806	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.024621010 CEST	49806	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.024646044 CEST	443	49806	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.149158001 CEST	443	49802	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.149300098 CEST	443	49802	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.149409056 CEST	49802	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.149524927 CEST	49802	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.149524927 CEST	49802	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.149544954 CEST	443	49802	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.149555922 CEST	443	49802	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.152513027 CEST	49807	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.152570963 CEST	443	49807	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.152657032 CEST	49807	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.152868032 CEST	49807	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.152899027 CEST	443	49807	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.650861979 CEST	443	49803	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.651501894 CEST	49803	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.651519060 CEST	443	49803	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.652009010 CEST	49803	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.652013063 CEST	443	49803	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.764235973 CEST	443	49806	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.767770052 CEST	443	49804	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.769283056 CEST	49806	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.769300938 CEST	443	49806	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.769674063 CEST	49806	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.769684076 CEST	443	49806	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.770560980 CEST	49804	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.770577908 CEST	443	49804	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.771330118 CEST	49804	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.771336079 CEST	443	49804	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.802208900 CEST	443	49803	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.802278042 CEST	443	49803	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.802345991 CEST	49803	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.805016041 CEST	443	49805	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.812891006 CEST	49803	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.812901974 CEST	443	49803	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.812913895 CEST	49803	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.812920094 CEST	443	49803	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.814330101 CEST	49805	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.814357042 CEST	443	49805	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.814888954 CEST	49805	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.814896107 CEST	443	49805	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.818315983 CEST	49808	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.818330050 CEST	443	49808	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.818528891 CEST	49808	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.818921089 CEST	49808	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.818932056 CEST	443	49808	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.899080992 CEST	443	49806	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.899454117 CEST	443	49806	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.899539948 CEST	49806	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.907325983 CEST	443	49807	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.907634974 CEST	443	49804	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.907759905 CEST	443	49804	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.909234047 CEST	49804	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.930659056 CEST	49806	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.930686951 CEST	443	49806	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.930697918 CEST	49806	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.930706978 CEST	443	49806	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.932410955 CEST	49807	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.932425022 CEST	443	49807	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.933442116 CEST	49807	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.933454990 CEST	443	49807	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.933598995 CEST	49804	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.933605909 CEST	443	49804	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.933625937 CEST	49804	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.933629990 CEST	443	49804	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.937499046 CEST	49809	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.937547922 CEST	443	49809	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.937750101 CEST	49809	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.937882900 CEST	49809	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.937891960 CEST	443	49809	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.940545082 CEST	49810	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.940565109 CEST	443	49810	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.940648079 CEST	49810	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.941088915 CEST	49810	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:38.941098928 CEST	443	49810	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.949985027 CEST	443	49805	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.950068951 CEST	443	49805	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:38.951188087 CEST	49805	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.061005116 CEST	49805	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.061027050 CEST	443	49805	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.065309048 CEST	443	49807	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.065567970 CEST	443	49807	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.066860914 CEST	49807	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.088184118 CEST	49807	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.088184118 CEST	49807	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.088203907 CEST	443	49807	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.088295937 CEST	443	49807	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.166127920 CEST	49811	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.166171074 CEST	443	49811	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.166240931 CEST	49811	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.179470062 CEST	49811	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.179493904 CEST	443	49811	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.188783884 CEST	49812	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.188818932 CEST	443	49812	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.188906908 CEST	49812	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.192006111 CEST	49812	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.192034960 CEST	443	49812	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.726747036 CEST	443	49810	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.727689981 CEST	443	49809	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.727824926 CEST	49810	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.727847099 CEST	443	49810	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.727971077 CEST	49809	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.727982998 CEST	443	49809	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.728566885 CEST	49809	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.728571892 CEST	443	49809	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.728697062 CEST	49810	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.728703976 CEST	443	49810	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.806189060 CEST	443	49808	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.806858063 CEST	49808	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.806874037 CEST	443	49808	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.807442904 CEST	49808	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.807449102 CEST	443	49808	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.860335112 CEST	443	49810	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.860492945 CEST	443	49810	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.860552073 CEST	49810	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.860805988 CEST	49810	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.860824108 CEST	443	49810	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.860837936 CEST	49810	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.860846043 CEST	443	49810	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.864135027 CEST	443	49809	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.864209890 CEST	443	49809	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.864389896 CEST	49809	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.864389896 CEST	49809	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.864424944 CEST	49809	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.864443064 CEST	443	49809	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.864820957 CEST	49813	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.864856958 CEST	443	49813	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.865258932 CEST	49813	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.865258932 CEST	49813	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.865284920 CEST	443	49813	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.867798090 CEST	49814	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.867868900 CEST	443	49814	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.867954016 CEST	49814	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.868196964 CEST	49814	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.868223906 CEST	443	49814	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.943972111 CEST	443	49808	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.944097042 CEST	443	49808	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.944148064 CEST	49808	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.944163084 CEST	443	49808	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.944252014 CEST	443	49808	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.944305897 CEST	49808	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.944554090 CEST	49808	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.944570065 CEST	443	49808	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.944586039 CEST	49808	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.944591999 CEST	443	49808	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.947967052 CEST	49815	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.948000908 CEST	443	49815	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.948153973 CEST	49815	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.948292971 CEST	49815	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.948299885 CEST	443	49815	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.957617998 CEST	443	49811	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.957695007 CEST	443	49812	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.958214045 CEST	49812	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.958235025 CEST	443	49812	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.958399057 CEST	49811	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.958410025 CEST	443	49811	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.958812952 CEST	49812	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.958825111 CEST	443	49812	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:39.958965063 CEST	49811	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:39.958969116 CEST	443	49811	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.097418070 CEST	443	49812	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.097450018 CEST	443	49812	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.097537041 CEST	443	49812	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.097556114 CEST	49812	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.097613096 CEST	49812	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.098001957 CEST	49812	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.098031044 CEST	443	49812	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.098058939 CEST	49812	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.098072052 CEST	443	49812	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.098095894 CEST	443	49811	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.098124981 CEST	443	49811	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.098181009 CEST	49811	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.098191023 CEST	443	49811	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.098252058 CEST	443	49811	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.098304033 CEST	49811	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.098480940 CEST	49811	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.098494053 CEST	443	49811	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.098515034 CEST	49811	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.098520041 CEST	443	49811	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.102142096 CEST	49816	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.102227926 CEST	443	49816	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.102329969 CEST	49816	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.102472067 CEST	49816	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.102509975 CEST	443	49816	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.102555990 CEST	49817	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.102643967 CEST	443	49817	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.102735996 CEST	49817	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.102936983 CEST	49817	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.102984905 CEST	443	49817	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.620667934 CEST	443	49814	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.621752977 CEST	49814	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.621753931 CEST	49814	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.621849060 CEST	443	49814	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.621881008 CEST	443	49814	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.622802019 CEST	443	49813	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.623538971 CEST	49813	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.623538971 CEST	49813	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.623559952 CEST	443	49813	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.623570919 CEST	443	49813	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.701783895 CEST	443	49815	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.702444077 CEST	49815	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.702461004 CEST	443	49815	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.702717066 CEST	49815	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.702721119 CEST	443	49815	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.757349014 CEST	443	49814	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.757410049 CEST	443	49814	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.757778883 CEST	49814	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.757780075 CEST	49814	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.757780075 CEST	49814	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.759711981 CEST	443	49813	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.759740114 CEST	443	49813	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.759831905 CEST	443	49813	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.759869099 CEST	49813	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.760008097 CEST	49813	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.760035992 CEST	49813	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.760035992 CEST	49813	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.760046959 CEST	443	49813	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.760051012 CEST	443	49813	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.761137009 CEST	49818	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.761229038 CEST	443	49818	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.761580944 CEST	49818	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.761854887 CEST	49818	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.761893034 CEST	443	49818	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.762166977 CEST	49819	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.762211084 CEST	443	49819	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.762357950 CEST	49819	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.762408018 CEST	49819	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.762419939 CEST	443	49819	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.836258888 CEST	443	49815	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.836724043 CEST	443	49815	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.836878061 CEST	49815	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.836878061 CEST	49815	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.837064028 CEST	49815	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.837070942 CEST	443	49815	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.839835882 CEST	49820	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.839867115 CEST	443	49820	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.840148926 CEST	49820	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.840148926 CEST	49820	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.840177059 CEST	443	49820	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.855864048 CEST	443	49816	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.855885029 CEST	443	49817	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.856316090 CEST	49817	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.856322050 CEST	49816	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.856334925 CEST	443	49817	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.856363058 CEST	443	49816	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.856921911 CEST	49817	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.856925964 CEST	49816	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.856933117 CEST	443	49817	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.856941938 CEST	443	49816	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.993057966 CEST	443	49816	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.993107080 CEST	443	49817	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.993130922 CEST	443	49816	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.993196011 CEST	443	49817	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.993271112 CEST	49817	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.993416071 CEST	49816	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.993459940 CEST	49817	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.993460894 CEST	49817	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.993491888 CEST	443	49817	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.993516922 CEST	49816	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.993516922 CEST	49816	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.993529081 CEST	443	49817	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.993563890 CEST	443	49816	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.993596077 CEST	443	49816	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.996593952 CEST	49821	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.996598959 CEST	49822	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.996629000 CEST	443	49822	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.996629000 CEST	443	49821	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.996705055 CEST	49821	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.996709108 CEST	49822	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.996850967 CEST	49822	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.996865034 CEST	443	49822	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:40.996870995 CEST	49821	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:40.996886015 CEST	443	49821	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.072834969 CEST	49814	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.072902918 CEST	443	49814	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.524638891 CEST	443	49819	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.531136990 CEST	443	49818	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.563200951 CEST	49819	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.563235998 CEST	443	49819	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.563782930 CEST	49819	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.563796997 CEST	443	49819	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.564080000 CEST	49818	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.564126015 CEST	443	49818	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.564425945 CEST	49818	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.564435959 CEST	443	49818	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.608061075 CEST	443	49820	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.608635902 CEST	49820	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.608660936 CEST	443	49820	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.608983994 CEST	49820	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.608989954 CEST	443	49820	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.698223114 CEST	443	49819	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.698297977 CEST	443	49819	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.698496103 CEST	49819	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.698884964 CEST	443	49818	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.698956013 CEST	443	49818	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.699008942 CEST	49818	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.703612089 CEST	49819	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.703612089 CEST	49819	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.703648090 CEST	443	49819	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.703677893 CEST	443	49819	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.717118979 CEST	49818	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.717148066 CEST	443	49818	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.745111942 CEST	443	49820	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.745264053 CEST	443	49820	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.745420933 CEST	49820	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.756447077 CEST	443	49821	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.760344982 CEST	443	49822	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.760993004 CEST	49823	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.761029005 CEST	443	49823	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.761148930 CEST	49823	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.761940956 CEST	49823	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.761956930 CEST	443	49823	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.762257099 CEST	49820	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.762274027 CEST	443	49820	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.762332916 CEST	49820	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.762337923 CEST	443	49820	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.766895056 CEST	49821	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.766916990 CEST	443	49821	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.772264004 CEST	49821	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.772273064 CEST	443	49821	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.772507906 CEST	49822	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.772526026 CEST	443	49822	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.780358076 CEST	49822	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.780364037 CEST	443	49822	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.783711910 CEST	49824	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.783731937 CEST	443	49824	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.783951044 CEST	49824	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.783951044 CEST	49824	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.783998966 CEST	443	49824	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.790159941 CEST	49825	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.790194035 CEST	443	49825	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.790270090 CEST	49825	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.790366888 CEST	49825	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.790380955 CEST	443	49825	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.907180071 CEST	443	49821	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.907273054 CEST	443	49821	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.907324076 CEST	49821	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.907563925 CEST	49821	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.907583952 CEST	443	49821	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.907608986 CEST	49821	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.907613993 CEST	443	49821	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.910797119 CEST	49826	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.910835028 CEST	443	49826	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.911022902 CEST	49826	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.911108971 CEST	49826	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.911123037 CEST	443	49826	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.939287901 CEST	443	49822	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.939502954 CEST	443	49822	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.939568996 CEST	49822	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.939604998 CEST	49822	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.939620972 CEST	443	49822	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.939632893 CEST	49822	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.939639091 CEST	443	49822	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.942269087 CEST	49827	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.942296982 CEST	443	49827	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:41.942367077 CEST	49827	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.943126917 CEST	49827	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:41.943136930 CEST	443	49827	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.523076057 CEST	443	49823	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.523607016 CEST	49823	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.523631096 CEST	443	49823	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.524050951 CEST	49823	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.524055958 CEST	443	49823	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.554429054 CEST	443	49824	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.555062056 CEST	49824	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.555069923 CEST	443	49824	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.555677891 CEST	49824	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.555691957 CEST	443	49824	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.565795898 CEST	443	49825	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.566248894 CEST	49825	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.566271067 CEST	443	49825	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.566608906 CEST	49825	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.566615105 CEST	443	49825	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.661151886 CEST	443	49823	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.661230087 CEST	443	49823	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.661459923 CEST	49823	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.661506891 CEST	49823	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.661525965 CEST	443	49823	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.661535978 CEST	49823	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.661540985 CEST	443	49823	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.664467096 CEST	49828	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.664522886 CEST	443	49828	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.664601088 CEST	49828	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.664812088 CEST	49828	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.664830923 CEST	443	49828	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.668253899 CEST	443	49826	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.668641090 CEST	49826	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.668663979 CEST	443	49826	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.669080973 CEST	49826	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.669086933 CEST	443	49826	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.693355083 CEST	443	49824	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.693394899 CEST	443	49824	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.693439007 CEST	443	49824	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.693492889 CEST	49824	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.693550110 CEST	49824	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.693562031 CEST	443	49824	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.693572044 CEST	49824	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.693577051 CEST	443	49824	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.695707083 CEST	49829	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.695754051 CEST	443	49829	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.695888996 CEST	49829	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.695997000 CEST	49829	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.696013927 CEST	443	49829	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.700803995 CEST	443	49827	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.701129913 CEST	49827	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.701150894 CEST	443	49827	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.701567888 CEST	49827	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.701579094 CEST	443	49827	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.705190897 CEST	443	49825	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.705348969 CEST	443	49825	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.705401897 CEST	49825	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.705431938 CEST	49825	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.705442905 CEST	443	49825	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.705465078 CEST	49825	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.705470085 CEST	443	49825	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.708199978 CEST	49830	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.708245993 CEST	443	49830	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.708309889 CEST	49830	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.708427906 CEST	49830	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.708446026 CEST	443	49830	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.806966066 CEST	443	49826	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.807003021 CEST	443	49826	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.807051897 CEST	443	49826	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.807056904 CEST	49826	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.807264090 CEST	49826	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.807264090 CEST	49826	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.807281017 CEST	49826	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.807296038 CEST	443	49826	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.809784889 CEST	49831	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.809817076 CEST	443	49831	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.809978962 CEST	49831	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.810059071 CEST	49831	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.810065985 CEST	443	49831	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.843003035 CEST	443	49827	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.843082905 CEST	443	49827	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.843142033 CEST	49827	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.843297958 CEST	49827	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.843308926 CEST	443	49827	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.843337059 CEST	49827	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.843341112 CEST	443	49827	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.845490932 CEST	49832	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.845537901 CEST	443	49832	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:42.845593929 CEST	49832	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.845719099 CEST	49832	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:42.845737934 CEST	443	49832	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.064301968 CEST	49716	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:49:43.069816113 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:49:43.300683022 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:49:43.300719976 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:49:43.300755978 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:49:43.300784111 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:49:43.300796986 CEST	49716	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:49:43.300827980 CEST	49716	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:49:43.319267988 CEST	49716	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:49:43.324790001 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:49:43.426902056 CEST	443	49828	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.427792072 CEST	49828	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.427877903 CEST	443	49828	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.428277016 CEST	49828	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.428292990 CEST	443	49828	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.458636999 CEST	443	49829	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.459336042 CEST	49829	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.459367990 CEST	443	49829	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.459953070 CEST	49829	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.459960938 CEST	443	49829	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.474570036 CEST	443	49830	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.475204945 CEST	49830	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.475241899 CEST	443	49830	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.475630045 CEST	49830	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.475641012 CEST	443	49830	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.554245949 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:49:43.554284096 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:49:43.554317951 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:49:43.554356098 CEST	49716	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:49:43.564129114 CEST	443	49828	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.564882994 CEST	443	49828	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.565079927 CEST	49828	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.565079927 CEST	49828	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.565079927 CEST	49828	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.566396952 CEST	443	49831	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.568253040 CEST	49831	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.568274021 CEST	443	49831	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.570534945 CEST	49833	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.570544004 CEST	49831	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.570550919 CEST	443	49831	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.570600986 CEST	443	49833	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.570708036 CEST	49833	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.582154989 CEST	49833	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.582189083 CEST	443	49833	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.597760916 CEST	49716	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:49:43.598228931 CEST	443	49829	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.598289967 CEST	443	49829	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.598480940 CEST	49829	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.601625919 CEST	49829	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.601653099 CEST	443	49829	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.602299929 CEST	49829	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.602308989 CEST	443	49829	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.605222940 CEST	49835	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.605258942 CEST	443	49835	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.605344057 CEST	49835	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.605525970 CEST	49835	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.605551958 CEST	443	49835	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.608947992 CEST	443	49830	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.609019995 CEST	443	49830	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.609122038 CEST	443	49830	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.609210014 CEST	49830	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.609210014 CEST	49830	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.609287024 CEST	49830	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.609327078 CEST	443	49830	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.611675978 CEST	49836	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.611694098 CEST	443	49836	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.611758947 CEST	49836	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.611903906 CEST	49836	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.611917973 CEST	443	49836	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.618000031 CEST	443	49832	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.618427038 CEST	49832	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.618443966 CEST	443	49832	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.618904114 CEST	49832	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.618908882 CEST	443	49832	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.705761909 CEST	443	49831	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.705845118 CEST	443	49831	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.706609011 CEST	49831	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.707832098 CEST	49831	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.707832098 CEST	49831	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.707849979 CEST	443	49831	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.707861900 CEST	443	49831	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.741802931 CEST	49837	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.741822958 CEST	443	49837	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.741919041 CEST	49837	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.742106915 CEST	49837	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.742120028 CEST	443	49837	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.757184029 CEST	443	49832	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.757262945 CEST	443	49832	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.757318974 CEST	49832	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.757572889 CEST	49832	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.757584095 CEST	443	49832	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.757594109 CEST	49832	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.757600069 CEST	443	49832	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.760720015 CEST	49838	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.760740995 CEST	443	49838	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.760910034 CEST	49838	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.761126995 CEST	49838	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.761138916 CEST	443	49838	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:43.868917942 CEST	49828	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:43.868987083 CEST	443	49828	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.476020098 CEST	443	49835	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.476536036 CEST	49835	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.476573944 CEST	443	49835	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.477019072 CEST	49835	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.477026939 CEST	443	49835	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.480803013 CEST	443	49836	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.481234074 CEST	49836	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.481261969 CEST	443	49836	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.481705904 CEST	49836	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.481714010 CEST	443	49836	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.481972933 CEST	443	49833	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.482296944 CEST	49833	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.482325077 CEST	443	49833	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.482755899 CEST	49833	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.482764006 CEST	443	49833	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.504849911 CEST	443	49837	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.505399942 CEST	49837	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.505422115 CEST	443	49837	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.506148100 CEST	49837	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.506153107 CEST	443	49837	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.507637024 CEST	443	49838	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.507981062 CEST	49838	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.507999897 CEST	443	49838	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.508428097 CEST	49838	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.508435965 CEST	443	49838	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.611965895 CEST	443	49835	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.612107038 CEST	443	49835	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.612139940 CEST	443	49835	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.612159014 CEST	49835	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.612199068 CEST	49835	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.612387896 CEST	49835	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.612411976 CEST	443	49835	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.612426996 CEST	49835	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.612436056 CEST	443	49835	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.614185095 CEST	443	49836	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.614341021 CEST	443	49836	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.614402056 CEST	49836	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.614425898 CEST	49836	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.614444017 CEST	443	49836	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.614455938 CEST	49836	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.614463091 CEST	443	49836	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.616228104 CEST	49839	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.616265059 CEST	443	49839	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.616333008 CEST	49839	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.616585970 CEST	49839	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.616601944 CEST	443	49839	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.617079020 CEST	49840	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.617120028 CEST	443	49840	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.617182016 CEST	49840	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.617316961 CEST	49840	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.617336988 CEST	443	49840	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.617666960 CEST	443	49833	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.617810965 CEST	443	49833	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.617866039 CEST	49833	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.617903948 CEST	49833	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.617916107 CEST	443	49833	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.617935896 CEST	49833	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.617943048 CEST	443	49833	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.619959116 CEST	49841	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.620043993 CEST	443	49841	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.620131969 CEST	49841	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.620263100 CEST	49841	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.620287895 CEST	443	49841	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.641355038 CEST	443	49838	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.641540051 CEST	443	49838	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.641633987 CEST	49838	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.641650915 CEST	49838	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.641659021 CEST	443	49838	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.641669035 CEST	49838	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.641674042 CEST	443	49838	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.644109011 CEST	49842	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.644144058 CEST	443	49842	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.644208908 CEST	49842	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.644329071 CEST	49842	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.644345999 CEST	443	49842	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.644712925 CEST	443	49837	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.644741058 CEST	443	49837	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.644787073 CEST	443	49837	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.644792080 CEST	49837	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.644820929 CEST	49837	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.644973993 CEST	49837	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.644987106 CEST	443	49837	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.645019054 CEST	49837	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.645023108 CEST	443	49837	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.647036076 CEST	49843	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.647119999 CEST	443	49843	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:44.647197962 CEST	49843	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.647311926 CEST	49843	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:44.647351980 CEST	443	49843	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.364428997 CEST	443	49840	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.369858027 CEST	49840	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.369858027 CEST	49840	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.369884968 CEST	443	49840	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.369908094 CEST	443	49840	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.391145945 CEST	443	49842	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.396210909 CEST	443	49841	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.403994083 CEST	49842	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.404026031 CEST	443	49842	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.404534101 CEST	49842	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.404537916 CEST	443	49842	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.405424118 CEST	49841	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.405458927 CEST	443	49841	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.411936998 CEST	49841	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.411952019 CEST	443	49841	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.413054943 CEST	443	49843	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.418580055 CEST	49843	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.418615103 CEST	443	49843	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.419550896 CEST	49843	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.419564962 CEST	443	49843	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.501019955 CEST	443	49840	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.501189947 CEST	443	49840	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.501368999 CEST	49840	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.501655102 CEST	49840	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.501655102 CEST	49840	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.501673937 CEST	443	49840	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.501683950 CEST	443	49840	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.506464005 CEST	49844	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.506494045 CEST	443	49844	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.506570101 CEST	49844	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.510415077 CEST	49844	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.510428905 CEST	443	49844	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.536696911 CEST	443	49842	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.536817074 CEST	443	49842	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.536919117 CEST	49842	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.537188053 CEST	49842	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.537194014 CEST	443	49842	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.540653944 CEST	49845	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.540704012 CEST	443	49845	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.540802956 CEST	49845	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.542701960 CEST	49845	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.542725086 CEST	443	49845	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.547278881 CEST	443	49841	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.547383070 CEST	443	49841	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.547482967 CEST	443	49841	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.547719002 CEST	49841	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.547806978 CEST	49841	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.547806978 CEST	49841	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.547852039 CEST	443	49841	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.547900915 CEST	443	49841	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.554415941 CEST	49846	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.554425955 CEST	443	49846	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.554673910 CEST	49846	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.554936886 CEST	49846	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.554948092 CEST	443	49846	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.555289984 CEST	443	49843	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.555474997 CEST	443	49843	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.558768988 CEST	49843	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.558835983 CEST	49843	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.558835983 CEST	49843	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.558852911 CEST	443	49843	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.558875084 CEST	443	49843	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.561597109 CEST	49847	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.561611891 CEST	443	49847	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:45.561749935 CEST	49847	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.562469959 CEST	49847	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:45.562486887 CEST	443	49847	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.255084991 CEST	443	49844	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.255971909 CEST	49844	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.255994081 CEST	443	49844	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.256241083 CEST	49844	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.256244898 CEST	443	49844	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.312408924 CEST	443	49845	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.313479900 CEST	49845	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.313479900 CEST	49845	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.313507080 CEST	443	49845	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.313524961 CEST	443	49845	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.318906069 CEST	443	49847	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.320401907 CEST	49847	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.320422888 CEST	443	49847	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.323342085 CEST	49847	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.323353052 CEST	443	49847	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.325221062 CEST	443	49846	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.327858925 CEST	49846	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.327873945 CEST	443	49846	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.330527067 CEST	49846	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.330534935 CEST	443	49846	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.390918970 CEST	443	49844	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.391074896 CEST	443	49844	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.391140938 CEST	49844	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.456067085 CEST	443	49847	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.456252098 CEST	443	49847	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.456343889 CEST	49847	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.466182947 CEST	443	49846	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.466329098 CEST	443	49846	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.466392040 CEST	49846	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.487524986 CEST	443	49845	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.487559080 CEST	443	49845	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.487615108 CEST	443	49845	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.487672091 CEST	49845	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.487672091 CEST	49845	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.497209072 CEST	443	49839	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.556211948 CEST	49839	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.642538071 CEST	49839	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.642549038 CEST	443	49839	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.661626101 CEST	49839	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.661638021 CEST	443	49839	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.665431976 CEST	49844	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.665498018 CEST	443	49844	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.669023991 CEST	49845	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.669049025 CEST	443	49845	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.669064045 CEST	49845	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.669071913 CEST	443	49845	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.818187952 CEST	49847	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.818202019 CEST	443	49847	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.825392962 CEST	49846	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.825411081 CEST	443	49846	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.825445890 CEST	49846	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.825453043 CEST	443	49846	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.845107079 CEST	49848	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.845146894 CEST	443	49848	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.845204115 CEST	49848	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.846364021 CEST	49848	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.846385956 CEST	443	49848	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.851644039 CEST	49849	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.851672888 CEST	443	49849	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.851742983 CEST	49849	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.852173090 CEST	49849	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.852185965 CEST	443	49849	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.854383945 CEST	49850	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.854408026 CEST	443	49850	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.854538918 CEST	49850	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.855400085 CEST	49850	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.855415106 CEST	443	49850	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.859391928 CEST	49851	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.859401941 CEST	443	49851	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.859483957 CEST	49851	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.859639883 CEST	49851	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.859651089 CEST	443	49851	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.866722107 CEST	443	49839	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.866785049 CEST	443	49839	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.866837025 CEST	49839	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.867669106 CEST	49839	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.867681026 CEST	443	49839	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.867705107 CEST	49839	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.867711067 CEST	443	49839	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.873995066 CEST	49852	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.874027967 CEST	443	49852	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.874236107 CEST	49852	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.875327110 CEST	49852	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:46.875339985 CEST	443	49852	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:46.886856079 CEST	49853	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:46.886897087 CEST	443	49853	40.113.103.199	192.168.2.6
Oct 23, 2024 15:49:46.886955976 CEST	49853	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:46.888396025 CEST	49853	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:46.888415098 CEST	443	49853	40.113.103.199	192.168.2.6
Oct 23, 2024 15:49:47.599215984 CEST	443	49848	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.599663973 CEST	49848	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.599684954 CEST	443	49848	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.600533962 CEST	49848	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.600538969 CEST	443	49848	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.611821890 CEST	443	49851	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.612492085 CEST	49851	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.612515926 CEST	443	49851	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.613326073 CEST	49851	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.613332033 CEST	443	49851	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.616377115 CEST	443	49849	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.616668940 CEST	49849	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.616688013 CEST	443	49849	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.617479086 CEST	49849	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.617484093 CEST	443	49849	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.624989033 CEST	443	49850	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.625727892 CEST	49850	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.625744104 CEST	443	49850	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.626979113 CEST	49850	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.626985073 CEST	443	49850	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.638693094 CEST	443	49852	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.639108896 CEST	49852	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.639131069 CEST	443	49852	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.639759064 CEST	49852	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.639769077 CEST	443	49852	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.734179020 CEST	443	49848	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.734374046 CEST	443	49848	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.734436989 CEST	49848	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.734513998 CEST	49848	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.734533072 CEST	443	49848	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.734540939 CEST	49848	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.734548092 CEST	443	49848	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.737385035 CEST	49854	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.737426996 CEST	443	49854	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.737535954 CEST	49854	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.737679005 CEST	49854	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.737695932 CEST	443	49854	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.748986959 CEST	443	49851	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.749077082 CEST	443	49851	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.749223948 CEST	49851	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.749268055 CEST	49851	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.749268055 CEST	49851	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.749294043 CEST	443	49851	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.749305964 CEST	443	49851	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.751321077 CEST	49855	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.751363993 CEST	443	49855	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.751430035 CEST	49855	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.751538038 CEST	49855	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.751574039 CEST	443	49855	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.753925085 CEST	443	49849	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.754100084 CEST	443	49849	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.754164934 CEST	49849	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.754179001 CEST	443	49849	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.754209042 CEST	443	49849	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.754281044 CEST	49849	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.754281044 CEST	49849	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.754363060 CEST	49849	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.754369974 CEST	443	49849	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.756146908 CEST	49856	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.756174088 CEST	443	49856	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.756429911 CEST	49856	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.756587029 CEST	49856	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.756602049 CEST	443	49856	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.764986038 CEST	443	49850	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.765146971 CEST	443	49850	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.765202045 CEST	49850	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.765264988 CEST	49850	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.765273094 CEST	443	49850	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.765280962 CEST	49850	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.765285969 CEST	443	49850	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.767395973 CEST	49857	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.767422915 CEST	443	49857	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.767510891 CEST	49857	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.767637014 CEST	49857	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.767652988 CEST	443	49857	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.776218891 CEST	443	49852	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.776321888 CEST	443	49852	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.776410103 CEST	49852	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.776439905 CEST	49852	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.776439905 CEST	49852	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.776451111 CEST	443	49852	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.776460886 CEST	443	49852	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.778610945 CEST	49858	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.778676033 CEST	443	49858	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.778743029 CEST	49858	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.778882027 CEST	49858	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:47.778908014 CEST	443	49858	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:47.996928930 CEST	443	49853	40.113.103.199	192.168.2.6
Oct 23, 2024 15:49:47.997129917 CEST	49853	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:48.002265930 CEST	49853	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:48.002288103 CEST	443	49853	40.113.103.199	192.168.2.6
Oct 23, 2024 15:49:48.002676010 CEST	443	49853	40.113.103.199	192.168.2.6
Oct 23, 2024 15:49:48.004668951 CEST	49853	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:48.004731894 CEST	49853	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:48.004744053 CEST	443	49853	40.113.103.199	192.168.2.6
Oct 23, 2024 15:49:48.004861116 CEST	49853	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:48.047362089 CEST	443	49853	40.113.103.199	192.168.2.6
Oct 23, 2024 15:49:48.254226923 CEST	443	49853	40.113.103.199	192.168.2.6
Oct 23, 2024 15:49:48.294327974 CEST	49853	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:48.294328928 CEST	49853	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:48.294399023 CEST	443	49853	40.113.103.199	192.168.2.6
Oct 23, 2024 15:49:48.294491053 CEST	49853	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:49:48.508852005 CEST	443	49855	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.510448933 CEST	443	49857	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.513593912 CEST	49855	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.513626099 CEST	443	49855	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.514640093 CEST	49855	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.514647961 CEST	443	49855	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.515285969 CEST	49857	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.515321970 CEST	443	49857	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.515985012 CEST	49857	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.515991926 CEST	443	49857	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.521811008 CEST	443	49854	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.522861004 CEST	49854	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.522861004 CEST	49854	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.522881031 CEST	443	49854	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.522917032 CEST	443	49854	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.524997950 CEST	443	49856	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.525942087 CEST	49856	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.525942087 CEST	49856	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.525964022 CEST	443	49856	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.525985956 CEST	443	49856	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.548038006 CEST	443	49858	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.549324989 CEST	49858	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.549325943 CEST	49858	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.549345016 CEST	443	49858	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.549364090 CEST	443	49858	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.647205114 CEST	443	49855	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.647208929 CEST	443	49857	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.647269011 CEST	443	49855	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.647416115 CEST	443	49857	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.647418022 CEST	49855	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.647573948 CEST	49857	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.661885977 CEST	443	49854	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.661953926 CEST	443	49854	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.662055016 CEST	443	49854	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.662122965 CEST	49854	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.662133932 CEST	49854	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.665821075 CEST	443	49856	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.665891886 CEST	443	49856	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.665998936 CEST	443	49856	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.666066885 CEST	49856	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.669969082 CEST	49855	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.669995070 CEST	443	49855	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.670023918 CEST	49855	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.670032024 CEST	443	49855	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.671587944 CEST	49856	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.671595097 CEST	443	49856	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.671624899 CEST	49856	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.671629906 CEST	443	49856	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.673150063 CEST	49857	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.673166037 CEST	443	49857	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.673207045 CEST	49857	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.673214912 CEST	443	49857	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.674684048 CEST	49854	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.674684048 CEST	49854	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.674693108 CEST	443	49854	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.674702883 CEST	443	49854	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.689619064 CEST	443	49858	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.689640999 CEST	443	49858	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.689677954 CEST	443	49858	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.689711094 CEST	49858	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.689733982 CEST	49858	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.706273079 CEST	49858	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.706309080 CEST	443	49858	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.706338882 CEST	49858	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.706347942 CEST	443	49858	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.853178024 CEST	49859	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.853230000 CEST	443	49859	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.853483915 CEST	49859	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.877887964 CEST	49859	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.877935886 CEST	443	49859	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.891478062 CEST	49860	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.891509056 CEST	443	49860	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.891684055 CEST	49860	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.891823053 CEST	49860	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.891830921 CEST	443	49860	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.893428087 CEST	49861	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.893471956 CEST	443	49861	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.894300938 CEST	49862	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.894310951 CEST	443	49862	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.894328117 CEST	49861	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.894450903 CEST	49862	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.906867981 CEST	49861	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.906883001 CEST	443	49861	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.930567980 CEST	49862	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.930582047 CEST	443	49862	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.932138920 CEST	49863	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.932153940 CEST	443	49863	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:48.932396889 CEST	49863	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.932648897 CEST	49863	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:48.932662010 CEST	443	49863	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.639575958 CEST	443	49859	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.640396118 CEST	49859	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.640414953 CEST	443	49859	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.640788078 CEST	49859	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.640794992 CEST	443	49859	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.652658939 CEST	443	49861	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.653177023 CEST	49861	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.653197050 CEST	443	49861	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.653650999 CEST	49861	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.653666973 CEST	443	49861	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.658324003 CEST	443	49860	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.658658028 CEST	49860	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.658669949 CEST	443	49860	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.659157991 CEST	49860	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.659169912 CEST	443	49860	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.674911022 CEST	443	49862	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.675307035 CEST	49862	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.675322056 CEST	443	49862	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.675745010 CEST	49862	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.675749063 CEST	443	49862	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.698726892 CEST	443	49863	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.699068069 CEST	49863	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.699078083 CEST	443	49863	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.699525118 CEST	49863	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.699532986 CEST	443	49863	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.778901100 CEST	443	49859	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.779062986 CEST	443	49859	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.779177904 CEST	49859	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.779264927 CEST	49859	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.779264927 CEST	49859	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.779288054 CEST	443	49859	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.779299021 CEST	443	49859	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.782329082 CEST	49864	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.782361984 CEST	443	49864	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.782428026 CEST	49864	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.782588959 CEST	49864	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.782598019 CEST	443	49864	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.800106049 CEST	443	49861	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.800134897 CEST	443	49861	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.800173998 CEST	49861	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.800184011 CEST	443	49861	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.800198078 CEST	443	49861	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.800241947 CEST	49861	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.800401926 CEST	49861	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.800417900 CEST	443	49861	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.800431013 CEST	49861	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.800437927 CEST	443	49861	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.801563025 CEST	443	49860	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.801634073 CEST	443	49860	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.801759958 CEST	49860	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.801878929 CEST	49860	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.801878929 CEST	49860	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.801897049 CEST	443	49860	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.801908016 CEST	443	49860	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.803062916 CEST	49865	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.803107977 CEST	443	49865	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.803178072 CEST	49865	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.803308010 CEST	49865	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.803328991 CEST	443	49865	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.804146051 CEST	49866	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.804157019 CEST	443	49866	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.804208994 CEST	49866	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.804403067 CEST	49866	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.804414988 CEST	443	49866	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.810635090 CEST	443	49862	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.810705900 CEST	443	49862	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.810755014 CEST	49862	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.810767889 CEST	443	49862	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.810817003 CEST	443	49862	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.810924053 CEST	49862	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.810957909 CEST	49862	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.810985088 CEST	443	49862	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.811006069 CEST	49862	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.811016083 CEST	443	49862	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.812928915 CEST	49867	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.812944889 CEST	443	49867	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.813045979 CEST	49867	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.813165903 CEST	49867	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.813180923 CEST	443	49867	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.837414026 CEST	443	49863	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.837474108 CEST	443	49863	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.837513924 CEST	49863	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.837660074 CEST	49863	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.837660074 CEST	49863	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.837671995 CEST	443	49863	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.837681055 CEST	443	49863	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.839813948 CEST	49868	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.839904070 CEST	443	49868	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:49.839982986 CEST	49868	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.840105057 CEST	49868	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:49.840142012 CEST	443	49868	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.535054922 CEST	443	49864	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.535748005 CEST	49864	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.535769939 CEST	443	49864	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.536557913 CEST	49864	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.536562920 CEST	443	49864	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.558362007 CEST	443	49866	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.558975935 CEST	49866	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.558984041 CEST	443	49866	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.559546947 CEST	49866	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.559551001 CEST	443	49866	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.563193083 CEST	443	49865	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.563559055 CEST	49865	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.563571930 CEST	443	49865	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.563951015 CEST	49865	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.563957930 CEST	443	49865	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.574240923 CEST	443	49867	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.574584007 CEST	49867	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.574592113 CEST	443	49867	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.574970007 CEST	49867	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.574975014 CEST	443	49867	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.599211931 CEST	443	49868	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.599636078 CEST	49868	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.599658966 CEST	443	49868	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.600058079 CEST	49868	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.600064039 CEST	443	49868	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.669506073 CEST	443	49864	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.669671059 CEST	443	49864	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.669748068 CEST	49864	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.669939995 CEST	49864	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.669959068 CEST	443	49864	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.669970036 CEST	49864	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.669975996 CEST	443	49864	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.673437119 CEST	49869	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.673546076 CEST	443	49869	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.673638105 CEST	49869	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.673840046 CEST	49869	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.673861980 CEST	443	49869	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.694987059 CEST	443	49866	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.695023060 CEST	443	49866	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.695080996 CEST	49866	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.695085049 CEST	443	49866	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.695142984 CEST	49866	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.695343971 CEST	49866	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.695359945 CEST	443	49866	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.695379019 CEST	49866	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.695384979 CEST	443	49866	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.698101997 CEST	49870	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.698208094 CEST	443	49870	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.698419094 CEST	49870	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.698607922 CEST	49870	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.698645115 CEST	443	49870	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.700892925 CEST	443	49865	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.701056004 CEST	443	49865	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.701122999 CEST	49865	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.701170921 CEST	49865	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.701170921 CEST	49865	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.701193094 CEST	443	49865	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.701215029 CEST	443	49865	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.703213930 CEST	49871	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.703263044 CEST	443	49871	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.703459024 CEST	49871	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.703533888 CEST	49871	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.703556061 CEST	443	49871	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.711357117 CEST	443	49867	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.711426973 CEST	443	49867	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.711554050 CEST	49867	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.711591959 CEST	49867	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.711591959 CEST	49867	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.711616039 CEST	443	49867	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.711628914 CEST	443	49867	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.713768959 CEST	49872	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.713812113 CEST	443	49872	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.713876009 CEST	49872	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.714011908 CEST	49872	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.714032888 CEST	443	49872	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.738423109 CEST	443	49868	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.738442898 CEST	443	49868	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.738500118 CEST	443	49868	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.738519907 CEST	49868	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.738648891 CEST	49868	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.738842010 CEST	49868	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.738859892 CEST	443	49868	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.738887072 CEST	49868	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.738899946 CEST	443	49868	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.741903067 CEST	49873	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.741941929 CEST	443	49873	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:50.742182016 CEST	49873	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.742347956 CEST	49873	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:50.742366076 CEST	443	49873	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.427422047 CEST	443	49869	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.428093910 CEST	49869	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.428175926 CEST	443	49869	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.428572893 CEST	49869	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.428590059 CEST	443	49869	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.443789005 CEST	443	49870	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.444463015 CEST	49870	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.444494009 CEST	443	49870	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.445157051 CEST	49870	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.445163965 CEST	443	49870	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.468558073 CEST	443	49872	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.469070911 CEST	49872	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.469089985 CEST	443	49872	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.469746113 CEST	49872	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.469752073 CEST	443	49872	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.472995996 CEST	443	49871	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.473467112 CEST	49871	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.473494053 CEST	443	49871	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.473889112 CEST	49871	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.473901033 CEST	443	49871	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.500883102 CEST	443	49873	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.501424074 CEST	49873	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.501441002 CEST	443	49873	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.501990080 CEST	49873	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.501996040 CEST	443	49873	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.563819885 CEST	443	49869	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.564058065 CEST	443	49869	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.564131021 CEST	49869	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.564218044 CEST	49869	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.564218044 CEST	49869	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.564244032 CEST	443	49869	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.564258099 CEST	443	49869	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.569375992 CEST	49874	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.569410086 CEST	443	49874	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.569502115 CEST	49874	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.569628954 CEST	49874	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.569634914 CEST	443	49874	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.610786915 CEST	443	49871	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.610948086 CEST	443	49871	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.611021996 CEST	49871	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.611248970 CEST	49871	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.611274004 CEST	443	49871	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.611300945 CEST	49871	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.611330986 CEST	443	49871	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.612683058 CEST	443	49872	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.613082886 CEST	443	49872	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.613149881 CEST	49872	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.613159895 CEST	443	49872	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.613192081 CEST	443	49872	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.613246918 CEST	49872	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.613301992 CEST	49872	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.613313913 CEST	443	49872	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.613320112 CEST	49872	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.613326073 CEST	443	49872	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.614267111 CEST	443	49870	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.614317894 CEST	443	49870	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.614518881 CEST	49875	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.614538908 CEST	443	49875	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.614545107 CEST	49870	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.614692926 CEST	49870	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.614711046 CEST	443	49870	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.614727020 CEST	49875	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.614746094 CEST	49870	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.614753008 CEST	443	49870	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.615309954 CEST	49875	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.615324020 CEST	443	49875	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.616000891 CEST	49876	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.616051912 CEST	443	49876	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.616147041 CEST	49876	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.616326094 CEST	49876	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.616360903 CEST	443	49876	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.616851091 CEST	49877	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.616872072 CEST	443	49877	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.617124081 CEST	49877	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.617259979 CEST	49877	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.617278099 CEST	443	49877	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.638633966 CEST	443	49873	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.638679981 CEST	443	49873	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.638803959 CEST	49873	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.639003992 CEST	49873	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.639010906 CEST	443	49873	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.639022112 CEST	49873	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.639025927 CEST	443	49873	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.641244888 CEST	49878	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.641279936 CEST	443	49878	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:51.641369104 CEST	49878	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.641506910 CEST	49878	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:51.641526937 CEST	443	49878	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.325334072 CEST	443	49874	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.325994015 CEST	49874	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.326020956 CEST	443	49874	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.326607943 CEST	49874	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.326616049 CEST	443	49874	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.375631094 CEST	443	49877	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.376250982 CEST	49877	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.376286030 CEST	443	49877	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.376801968 CEST	49877	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.376811981 CEST	443	49877	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.379597902 CEST	443	49876	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.380038977 CEST	49876	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.380068064 CEST	443	49876	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.380460024 CEST	49876	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.380467892 CEST	443	49876	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.385381937 CEST	443	49875	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.385740042 CEST	49875	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.385770082 CEST	443	49875	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.386231899 CEST	49875	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.386236906 CEST	443	49875	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.388483047 CEST	443	49878	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.388792992 CEST	49878	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.388824940 CEST	443	49878	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.389169931 CEST	49878	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.389177084 CEST	443	49878	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.462480068 CEST	443	49874	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.462596893 CEST	443	49874	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.462658882 CEST	49874	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.462688923 CEST	443	49874	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.462944031 CEST	49874	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.462953091 CEST	443	49874	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.462968111 CEST	49874	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.462982893 CEST	443	49874	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.466414928 CEST	49879	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.466460943 CEST	443	49879	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.466538906 CEST	49879	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.466733932 CEST	49879	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.466753006 CEST	443	49879	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.518493891 CEST	443	49876	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.518543959 CEST	443	49876	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.518625021 CEST	49876	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.518954039 CEST	49876	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.518980026 CEST	443	49876	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.518994093 CEST	49876	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.519001007 CEST	443	49876	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.519213915 CEST	443	49877	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.519421101 CEST	443	49877	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.519476891 CEST	49877	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.519510984 CEST	49877	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.519527912 CEST	443	49877	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.519542933 CEST	49877	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.519548893 CEST	443	49877	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.522742987 CEST	49880	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.522790909 CEST	443	49880	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.522859097 CEST	49881	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.522927999 CEST	49880	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.522927999 CEST	443	49881	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.523010015 CEST	49881	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.523049116 CEST	49880	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.523083925 CEST	443	49880	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.523144960 CEST	49881	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.523166895 CEST	443	49881	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.526046991 CEST	443	49875	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.526267052 CEST	443	49875	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.526483059 CEST	49875	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.526483059 CEST	49875	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.526515007 CEST	49875	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.526525021 CEST	443	49875	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.528697014 CEST	49882	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.528733015 CEST	443	49882	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.528865099 CEST	49882	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.529009104 CEST	49882	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.529027939 CEST	443	49882	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.534177065 CEST	443	49878	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.534245014 CEST	443	49878	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.534307957 CEST	49878	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.534471989 CEST	49878	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.534480095 CEST	443	49878	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.534513950 CEST	49878	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.534518957 CEST	443	49878	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.536601067 CEST	49883	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.536634922 CEST	443	49883	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:52.536784887 CEST	49883	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.536931992 CEST	49883	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:52.536953926 CEST	443	49883	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.425584078 CEST	443	49880	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.426192999 CEST	443	49879	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.426575899 CEST	49879	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.426652908 CEST	443	49879	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.426750898 CEST	49880	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.426750898 CEST	49880	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.426784039 CEST	443	49880	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.426804066 CEST	443	49880	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.426956892 CEST	49879	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.426973104 CEST	443	49879	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.427480936 CEST	443	49882	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.427813053 CEST	49882	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.427826881 CEST	443	49882	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.428045988 CEST	443	49883	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.428359985 CEST	49882	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.428365946 CEST	443	49882	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.428421974 CEST	49883	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.428445101 CEST	443	49883	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.428780079 CEST	49883	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.428786039 CEST	443	49883	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.430202007 CEST	443	49881	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.430517912 CEST	49881	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.430521965 CEST	443	49881	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.430958033 CEST	49881	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.430960894 CEST	443	49881	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.563034058 CEST	443	49880	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.563118935 CEST	443	49880	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.563224077 CEST	49880	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.563524008 CEST	49880	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.563524008 CEST	49880	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.563544035 CEST	443	49880	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.563554049 CEST	443	49880	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.564606905 CEST	443	49879	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.564807892 CEST	443	49879	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.564884901 CEST	443	49882	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.564956903 CEST	443	49882	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.565048933 CEST	49879	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.565048933 CEST	49879	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.565078020 CEST	49882	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.565104961 CEST	443	49882	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.565126896 CEST	443	49882	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.565139055 CEST	49879	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.565176964 CEST	49882	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.565187931 CEST	443	49879	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.565222979 CEST	49882	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.565222979 CEST	49882	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.565231085 CEST	443	49882	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.565239906 CEST	443	49882	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.566808939 CEST	443	49883	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.567228079 CEST	443	49883	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.567279100 CEST	49883	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.568624020 CEST	49883	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.568645000 CEST	443	49883	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.568659067 CEST	49883	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.568665028 CEST	443	49883	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.569530964 CEST	49884	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.569571972 CEST	443	49884	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.569638014 CEST	49884	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.570079088 CEST	49884	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.570096016 CEST	443	49884	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.570774078 CEST	443	49881	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.570827007 CEST	49885	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.570858955 CEST	443	49885	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.570918083 CEST	49885	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.570940018 CEST	443	49881	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.570983887 CEST	49881	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.571080923 CEST	49881	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.571091890 CEST	443	49881	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.571095943 CEST	49881	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.571099997 CEST	443	49881	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.571754932 CEST	49886	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.571769953 CEST	443	49886	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.571856976 CEST	49886	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.572175026 CEST	49885	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.572194099 CEST	443	49885	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.572302103 CEST	49886	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.572313070 CEST	443	49886	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.572314024 CEST	49887	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.572331905 CEST	443	49887	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.572398901 CEST	49887	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.572640896 CEST	49887	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.572652102 CEST	443	49887	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.573354006 CEST	49888	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.573395014 CEST	443	49888	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:53.573462009 CEST	49888	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.573566914 CEST	49888	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:53.573580980 CEST	443	49888	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.316900015 CEST	443	49884	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.317717075 CEST	49884	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.317738056 CEST	443	49884	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.318464994 CEST	49884	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.318470955 CEST	443	49884	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.327783108 CEST	443	49888	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.327791929 CEST	443	49886	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.328275919 CEST	49888	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.328310013 CEST	443	49888	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.328814983 CEST	49888	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.328820944 CEST	443	49888	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.329168081 CEST	49886	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.329184055 CEST	443	49886	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.329869032 CEST	49886	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.329873085 CEST	443	49886	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.338092089 CEST	443	49887	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.338593006 CEST	49887	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.338607073 CEST	443	49887	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.339101076 CEST	49887	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.339104891 CEST	443	49887	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.341397047 CEST	443	49885	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.341738939 CEST	49885	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.341753006 CEST	443	49885	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.342186928 CEST	49885	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.342190981 CEST	443	49885	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.451004982 CEST	443	49884	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.451186895 CEST	443	49884	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.452507019 CEST	49884	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.452735901 CEST	49884	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.452755928 CEST	443	49884	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.452779055 CEST	49884	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.452785015 CEST	443	49884	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.456321955 CEST	49889	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.456373930 CEST	443	49889	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.456518888 CEST	49889	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.460427046 CEST	49889	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.460453987 CEST	443	49889	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.464858055 CEST	443	49886	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.464879036 CEST	443	49888	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.464906931 CEST	443	49888	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.464952946 CEST	443	49888	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.464981079 CEST	49888	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.465049982 CEST	443	49886	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.465079069 CEST	49888	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.465094090 CEST	443	49886	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.465118885 CEST	49886	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.465534925 CEST	49888	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.465534925 CEST	49888	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.465539932 CEST	49886	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.465539932 CEST	49886	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.465554953 CEST	443	49888	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.465568066 CEST	443	49888	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.465581894 CEST	49886	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.465593100 CEST	443	49886	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.468971968 CEST	49890	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.468993902 CEST	443	49890	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.469062090 CEST	49890	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.469558954 CEST	49890	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.469574928 CEST	443	49890	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.472418070 CEST	49891	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.472451925 CEST	443	49891	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.472651005 CEST	49891	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.472824097 CEST	49891	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.472841024 CEST	443	49891	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.476032972 CEST	443	49887	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.476105928 CEST	443	49887	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.476231098 CEST	443	49887	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.476269007 CEST	49887	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.476717949 CEST	49887	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.476819992 CEST	49887	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.476819992 CEST	49887	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.476829052 CEST	443	49887	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.476838112 CEST	443	49887	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.479988098 CEST	49892	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.480030060 CEST	443	49892	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.480227947 CEST	49892	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.480298996 CEST	49892	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.480315924 CEST	443	49892	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.480529070 CEST	443	49885	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.480707884 CEST	443	49885	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.481014967 CEST	49885	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.481014967 CEST	49885	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.481077909 CEST	49885	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.481081009 CEST	443	49885	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.484433889 CEST	49893	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.484519005 CEST	443	49893	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:54.488637924 CEST	49893	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.488732100 CEST	49893	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:54.488756895 CEST	443	49893	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.218403101 CEST	443	49890	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.219541073 CEST	443	49889	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.219603062 CEST	49890	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.219628096 CEST	443	49890	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.219815016 CEST	49890	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.219820976 CEST	443	49890	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.220212936 CEST	443	49891	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.220244884 CEST	49889	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.220268011 CEST	443	49889	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.220846891 CEST	49891	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.220846891 CEST	49889	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.220854998 CEST	443	49891	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.220866919 CEST	443	49889	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.221021891 CEST	49891	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.221025944 CEST	443	49891	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.241060972 CEST	443	49892	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.241719007 CEST	49892	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.241744995 CEST	443	49892	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.242222071 CEST	49892	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.242229939 CEST	443	49892	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.252470016 CEST	443	49893	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.253005028 CEST	49893	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.253067017 CEST	443	49893	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.254570961 CEST	49893	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.254585028 CEST	443	49893	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.355926037 CEST	443	49890	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.355951071 CEST	443	49890	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.356004953 CEST	443	49890	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.356038094 CEST	49890	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.356107950 CEST	49890	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.356420040 CEST	49890	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.356420040 CEST	49890	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.356431007 CEST	443	49890	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.356439114 CEST	443	49890	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.357551098 CEST	443	49891	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.357863903 CEST	443	49891	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.358166933 CEST	49891	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.358195066 CEST	49891	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.358195066 CEST	49891	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.358206987 CEST	443	49891	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.358215094 CEST	443	49891	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.358525991 CEST	443	49889	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.359556913 CEST	443	49889	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.359884977 CEST	49889	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.359884977 CEST	49889	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.360013008 CEST	49889	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.360017061 CEST	443	49889	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.361216068 CEST	49894	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.361224890 CEST	49895	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.361265898 CEST	443	49894	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.361315966 CEST	443	49895	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.361429930 CEST	49894	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.361437082 CEST	49895	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.361622095 CEST	49894	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.361629963 CEST	443	49894	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.361752033 CEST	49895	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.361785889 CEST	443	49895	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.363888025 CEST	49896	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.363926888 CEST	443	49896	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.364078045 CEST	49896	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.364310980 CEST	49896	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.364325047 CEST	443	49896	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.379452944 CEST	443	49892	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.379508018 CEST	443	49892	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.380039930 CEST	443	49892	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.380423069 CEST	49892	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.385226011 CEST	49892	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.385251045 CEST	443	49892	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.385267973 CEST	49892	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.385276079 CEST	443	49892	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.389169931 CEST	49897	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.389185905 CEST	443	49897	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.389266014 CEST	49897	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.389681101 CEST	49897	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.389693022 CEST	443	49897	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.391048908 CEST	443	49893	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.391117096 CEST	443	49893	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.391227007 CEST	443	49893	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.391299963 CEST	49893	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.391541004 CEST	49893	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.391541004 CEST	49893	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.391565084 CEST	443	49893	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.391587019 CEST	443	49893	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.395401955 CEST	49898	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.395437002 CEST	443	49898	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:55.395876884 CEST	49898	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.396055937 CEST	49898	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:55.396066904 CEST	443	49898	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.114443064 CEST	443	49895	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.114979029 CEST	49895	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.115017891 CEST	443	49895	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.115478039 CEST	49895	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.115488052 CEST	443	49895	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.123372078 CEST	443	49894	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.123739958 CEST	49894	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.123773098 CEST	443	49894	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.124144077 CEST	49894	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.124151945 CEST	443	49894	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.141496897 CEST	443	49896	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.141927004 CEST	49896	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.141956091 CEST	443	49896	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.142682076 CEST	49896	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.142688990 CEST	443	49896	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.145206928 CEST	443	49897	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.151813030 CEST	49897	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.151838064 CEST	443	49897	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.152219057 CEST	49897	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.152224064 CEST	443	49897	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.165358067 CEST	443	49898	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.165754080 CEST	49898	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.165771008 CEST	443	49898	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.166215897 CEST	49898	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.166222095 CEST	443	49898	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.250909090 CEST	443	49895	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.250992060 CEST	443	49895	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.251030922 CEST	443	49895	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.251108885 CEST	49895	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.251327991 CEST	49895	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.251327991 CEST	49895	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.251374960 CEST	443	49895	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.251401901 CEST	443	49895	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.255719900 CEST	49899	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.255748987 CEST	443	49899	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.255938053 CEST	49899	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.256129026 CEST	49899	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.256140947 CEST	443	49899	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.258838892 CEST	443	49894	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.259037018 CEST	443	49894	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.259102106 CEST	49894	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.259143114 CEST	49894	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.259143114 CEST	49894	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.259166002 CEST	443	49894	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.259179115 CEST	443	49894	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.261507988 CEST	49900	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.261548042 CEST	443	49900	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.261606932 CEST	49900	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.261740923 CEST	49900	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.261754036 CEST	443	49900	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.282310009 CEST	443	49896	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.282382965 CEST	443	49896	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.282505035 CEST	49896	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.282844067 CEST	49896	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.282862902 CEST	443	49896	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.282934904 CEST	49896	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.282943964 CEST	443	49896	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.283745050 CEST	443	49897	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.283902884 CEST	443	49897	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.284290075 CEST	49897	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.284313917 CEST	49897	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.284322977 CEST	443	49897	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.284331083 CEST	49897	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.284334898 CEST	443	49897	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.286690950 CEST	49901	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.286711931 CEST	443	49901	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.286772966 CEST	49901	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.286962032 CEST	49901	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.286973953 CEST	443	49901	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.288151026 CEST	49902	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.288168907 CEST	443	49902	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.288237095 CEST	49902	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.288373947 CEST	49902	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.288384914 CEST	443	49902	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.303935051 CEST	443	49898	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.304053068 CEST	443	49898	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.304151058 CEST	443	49898	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.304255962 CEST	49898	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.304255962 CEST	49898	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.304255962 CEST	49898	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.304296017 CEST	49898	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.304323912 CEST	443	49898	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.306401968 CEST	49903	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.306412935 CEST	443	49903	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.306478024 CEST	49903	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.306608915 CEST	49903	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:56.306622028 CEST	443	49903	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:56.584521055 CEST	49716	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:49:56.589893103 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:49:56.819327116 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:49:56.819350004 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:49:56.819361925 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:49:56.819411039 CEST	49716	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:49:56.819964886 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:49:56.820018053 CEST	49716	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:49:57.005338907 CEST	443	49899	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.005928993 CEST	49899	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.005956888 CEST	443	49899	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.006392956 CEST	49899	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.006397963 CEST	443	49899	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.015885115 CEST	443	49900	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.016330957 CEST	49900	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.016351938 CEST	443	49900	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.016767025 CEST	49900	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.016772985 CEST	443	49900	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.044480085 CEST	443	49901	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.045289040 CEST	49901	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.045305014 CEST	443	49901	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.045542002 CEST	49901	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.045546055 CEST	443	49901	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.046080112 CEST	443	49902	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.046617031 CEST	49902	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.046633959 CEST	443	49902	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.047002077 CEST	49902	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.047007084 CEST	443	49902	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.075664043 CEST	443	49903	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.076261044 CEST	49903	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.076289892 CEST	443	49903	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.076772928 CEST	49903	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.076778889 CEST	443	49903	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.142468929 CEST	443	49899	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.142527103 CEST	443	49899	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.142699957 CEST	49899	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.142872095 CEST	49899	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.142889023 CEST	443	49899	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.142899990 CEST	49899	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.142905951 CEST	443	49899	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.151859999 CEST	443	49900	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.151879072 CEST	49904	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.151925087 CEST	443	49904	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.152148962 CEST	49904	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.152162075 CEST	443	49900	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.152211905 CEST	49900	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.152228117 CEST	443	49900	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.152278900 CEST	443	49900	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.152333975 CEST	49900	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.152355909 CEST	49900	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.152374029 CEST	443	49900	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.152383089 CEST	49900	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.152388096 CEST	443	49900	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.152494907 CEST	49904	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.152528048 CEST	443	49904	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.154895067 CEST	49905	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.154942989 CEST	443	49905	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.155042887 CEST	49905	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.155247927 CEST	49905	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.155261040 CEST	443	49905	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.182221889 CEST	443	49901	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.182375908 CEST	443	49901	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.182461023 CEST	49901	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.182538033 CEST	49901	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.182538033 CEST	49901	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.182560921 CEST	443	49901	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.182569027 CEST	443	49901	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.184891939 CEST	443	49902	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.184972048 CEST	443	49902	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.185012102 CEST	443	49902	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.185045958 CEST	49902	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.185085058 CEST	49902	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.185170889 CEST	49902	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.185180902 CEST	443	49902	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.185189962 CEST	49902	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.185194969 CEST	443	49902	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.185866117 CEST	49906	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.185878038 CEST	443	49906	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.186202049 CEST	49906	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.186347008 CEST	49906	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.186359882 CEST	443	49906	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.187614918 CEST	49907	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.187635899 CEST	443	49907	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.187799931 CEST	49907	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.187958956 CEST	49907	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.187973022 CEST	443	49907	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.215873957 CEST	443	49903	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.216686010 CEST	443	49903	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.216778040 CEST	49903	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.216849089 CEST	49903	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.216849089 CEST	49903	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.216860056 CEST	443	49903	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.216870070 CEST	443	49903	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.219830990 CEST	49908	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.219860077 CEST	443	49908	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.219974041 CEST	49908	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.220338106 CEST	49908	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.220352888 CEST	443	49908	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.908647060 CEST	443	49904	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.910406113 CEST	49904	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.910430908 CEST	443	49904	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.911160946 CEST	49904	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.911164999 CEST	443	49904	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.944977045 CEST	443	49907	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.945693970 CEST	49907	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.945713043 CEST	443	49907	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.946178913 CEST	49907	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.946187973 CEST	443	49907	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.946774960 CEST	443	49906	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.947199106 CEST	49906	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.947233915 CEST	443	49906	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.947700977 CEST	49906	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.947705984 CEST	443	49906	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.950201035 CEST	443	49905	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.950474977 CEST	49905	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.950489044 CEST	443	49905	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.950974941 CEST	49905	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.950980902 CEST	443	49905	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.980406046 CEST	443	49908	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.980959892 CEST	49908	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.980988026 CEST	443	49908	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:57.981673002 CEST	49908	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:57.981679916 CEST	443	49908	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.074678898 CEST	443	49904	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.075124025 CEST	443	49904	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.075187922 CEST	49904	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.075304031 CEST	49904	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.075357914 CEST	443	49904	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.075392008 CEST	49904	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.075407982 CEST	443	49904	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.080586910 CEST	443	49907	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.080634117 CEST	443	49907	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.080693960 CEST	49907	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.082218885 CEST	443	49906	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.082511902 CEST	443	49906	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.082587004 CEST	49906	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.089910030 CEST	443	49905	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.090054989 CEST	443	49905	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.090188026 CEST	49905	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.116528988 CEST	443	49908	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.116601944 CEST	443	49908	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.116651058 CEST	443	49908	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.116679907 CEST	49908	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.116705894 CEST	49908	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.139343977 CEST	49907	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.139343977 CEST	49907	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.139367104 CEST	443	49907	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.139374018 CEST	49908	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.139377117 CEST	443	49907	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.139389038 CEST	443	49908	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.140836954 CEST	49909	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.140868902 CEST	443	49909	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.140970945 CEST	49909	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.141385078 CEST	49909	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.141393900 CEST	443	49909	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.141474962 CEST	49906	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.141491890 CEST	443	49906	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.141504049 CEST	49906	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.141508102 CEST	443	49906	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.141602993 CEST	49905	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.141602993 CEST	49905	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.141608953 CEST	443	49905	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.141616106 CEST	443	49905	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.148494959 CEST	49910	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.148519039 CEST	443	49910	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.148590088 CEST	49910	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.154786110 CEST	49911	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.154805899 CEST	443	49911	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.155009031 CEST	49911	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.155833960 CEST	49912	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.155858994 CEST	443	49912	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.155958891 CEST	49912	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.156137943 CEST	49912	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.156150103 CEST	443	49912	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.156193972 CEST	49910	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.156209946 CEST	443	49910	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.157649040 CEST	49913	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.157670975 CEST	443	49913	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.157772064 CEST	49911	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.157780886 CEST	443	49911	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.157804012 CEST	49913	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.157974958 CEST	49913	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.157984018 CEST	443	49913	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.888315916 CEST	443	49909	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.889661074 CEST	49909	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.889673948 CEST	443	49909	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.891062021 CEST	49909	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.891069889 CEST	443	49909	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.911379099 CEST	443	49913	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.913480043 CEST	443	49910	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.936433077 CEST	443	49912	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.938469887 CEST	49913	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.938484907 CEST	443	49913	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.939476967 CEST	443	49911	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.940361977 CEST	49913	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.940366030 CEST	443	49913	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.941421032 CEST	49910	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.941437006 CEST	443	49910	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.943334103 CEST	49910	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.943339109 CEST	443	49910	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.943614960 CEST	49911	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.943629026 CEST	443	49911	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.944777966 CEST	49911	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.944786072 CEST	443	49911	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.946197987 CEST	49912	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.946216106 CEST	443	49912	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:58.947593927 CEST	49912	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:58.947599888 CEST	443	49912	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.023782969 CEST	443	49909	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.023868084 CEST	443	49909	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.023920059 CEST	49909	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.024611950 CEST	49909	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.024631977 CEST	443	49909	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.024641991 CEST	49909	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.024647951 CEST	443	49909	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.032417059 CEST	49914	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.032440901 CEST	443	49914	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.032500982 CEST	49914	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.033162117 CEST	49914	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.033175945 CEST	443	49914	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.072849035 CEST	443	49913	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.073714018 CEST	443	49913	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.073765993 CEST	49913	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.074063063 CEST	49913	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.074073076 CEST	443	49913	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.077406883 CEST	443	49910	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.077485085 CEST	443	49910	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.077578068 CEST	49910	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.077589989 CEST	443	49910	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.077611923 CEST	443	49910	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.077653885 CEST	49910	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.077944040 CEST	443	49911	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.078005075 CEST	443	49911	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.078044891 CEST	49911	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.079848051 CEST	49910	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.079848051 CEST	49910	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.079862118 CEST	443	49910	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.079869986 CEST	443	49910	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.082945108 CEST	443	49912	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.083014011 CEST	443	49912	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.083055019 CEST	49912	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.083062887 CEST	443	49912	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.083120108 CEST	443	49912	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.083167076 CEST	49912	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.083334923 CEST	49912	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.083342075 CEST	443	49912	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.083376884 CEST	49912	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.083381891 CEST	443	49912	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.085397959 CEST	49911	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.085417032 CEST	443	49911	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.085428953 CEST	49911	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.085434914 CEST	443	49911	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.092839003 CEST	49915	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.092854023 CEST	443	49915	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.092915058 CEST	49915	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.093803883 CEST	49915	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.093817949 CEST	443	49915	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.097012997 CEST	49916	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.097103119 CEST	443	49916	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.097349882 CEST	49916	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.097950935 CEST	49916	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.097990990 CEST	443	49916	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.102308035 CEST	49917	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.102349043 CEST	443	49917	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.102413893 CEST	49917	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.104013920 CEST	49918	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.104037046 CEST	443	49918	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.104108095 CEST	49918	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.104731083 CEST	49917	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.104744911 CEST	443	49917	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.104967117 CEST	49918	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.104995966 CEST	443	49918	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.806221962 CEST	443	49914	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.807296038 CEST	49914	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.807296038 CEST	49914	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.807318926 CEST	443	49914	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.807326078 CEST	443	49914	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.842587948 CEST	443	49915	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.843703032 CEST	49915	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.843703032 CEST	49915	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.843717098 CEST	443	49915	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.843733072 CEST	443	49915	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.852591991 CEST	443	49917	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.853656054 CEST	49917	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.853657007 CEST	49917	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.853684902 CEST	443	49917	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.853702068 CEST	443	49917	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.859673023 CEST	443	49916	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.860440969 CEST	49916	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.860518932 CEST	443	49916	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.860551119 CEST	49916	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.860565901 CEST	443	49916	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.873917103 CEST	443	49918	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.874763966 CEST	49918	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.874763966 CEST	49918	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.874785900 CEST	443	49918	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.874820948 CEST	443	49918	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.946101904 CEST	443	49914	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.946136951 CEST	443	49914	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.946182966 CEST	443	49914	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.946387053 CEST	49914	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.946388006 CEST	49914	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.974906921 CEST	443	49915	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.975080013 CEST	443	49915	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.975188017 CEST	49915	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.979840994 CEST	49914	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.979856968 CEST	443	49914	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.979887009 CEST	49914	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.979892969 CEST	443	49914	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.981554985 CEST	49915	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.981569052 CEST	443	49915	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.981681108 CEST	49915	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.981684923 CEST	443	49915	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.986464977 CEST	49919	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.986517906 CEST	443	49919	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.986928940 CEST	443	49917	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.986964941 CEST	443	49917	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.987040997 CEST	49919	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.987040997 CEST	49917	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.987071037 CEST	443	49917	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.988024950 CEST	49919	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.988039017 CEST	443	49919	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.988037109 CEST	49920	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.988085032 CEST	49917	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.988125086 CEST	443	49920	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.988428116 CEST	49920	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.988527060 CEST	49917	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.988527060 CEST	49917	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.988538027 CEST	443	49917	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.988545895 CEST	443	49917	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.990895987 CEST	49921	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.990935087 CEST	443	49921	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.991214991 CEST	49920	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.991252899 CEST	443	49920	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.991292000 CEST	49921	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.991710901 CEST	49921	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.991728067 CEST	443	49921	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.998414040 CEST	443	49916	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.998435974 CEST	443	49916	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.998491049 CEST	443	49916	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.998536110 CEST	49916	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.998663902 CEST	49916	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.999257088 CEST	49916	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.999285936 CEST	443	49916	13.107.253.67	192.168.2.6
Oct 23, 2024 15:49:59.999330997 CEST	49916	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:49:59.999345064 CEST	443	49916	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.004450083 CEST	49922	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.004472971 CEST	443	49922	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.004802942 CEST	49922	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.007463932 CEST	49922	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.007492065 CEST	443	49922	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.014353037 CEST	443	49918	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.014385939 CEST	443	49918	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.014442921 CEST	443	49918	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.014487028 CEST	49918	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.014727116 CEST	49918	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.014744997 CEST	443	49918	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.014774084 CEST	49918	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.014774084 CEST	49918	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.014789104 CEST	443	49918	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.014796019 CEST	443	49918	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.019694090 CEST	49923	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.019726992 CEST	443	49923	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.019819021 CEST	49923	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.020461082 CEST	49923	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.020474911 CEST	443	49923	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.740683079 CEST	443	49919	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.742038965 CEST	49919	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.742059946 CEST	443	49919	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.743135929 CEST	49919	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.743140936 CEST	443	49919	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.757268906 CEST	443	49920	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.757663965 CEST	443	49921	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.758414030 CEST	49920	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.758426905 CEST	443	49920	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.760030985 CEST	49920	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.760039091 CEST	443	49920	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.761251926 CEST	49921	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.761264086 CEST	443	49921	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.762327909 CEST	49921	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.762334108 CEST	443	49921	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.766364098 CEST	443	49922	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.767333984 CEST	49922	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.767343998 CEST	443	49922	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.768420935 CEST	49922	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.768429041 CEST	443	49922	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.781400919 CEST	443	49923	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.782028913 CEST	49923	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.782052040 CEST	443	49923	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.783428907 CEST	49923	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.783433914 CEST	443	49923	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.877928019 CEST	443	49919	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.878094912 CEST	443	49919	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.878144979 CEST	49919	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.880592108 CEST	49919	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.880609035 CEST	443	49919	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.894505024 CEST	49924	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.894539118 CEST	443	49924	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.894597054 CEST	49924	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.895116091 CEST	49924	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.895129919 CEST	443	49924	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.896991014 CEST	443	49920	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.897022009 CEST	443	49920	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.897068024 CEST	443	49920	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.897087097 CEST	49920	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.897161007 CEST	49920	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.897456884 CEST	443	49921	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.897540092 CEST	49920	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.897572994 CEST	443	49920	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.897588968 CEST	443	49921	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.897811890 CEST	49921	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.898245096 CEST	49921	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.898245096 CEST	49921	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.898258924 CEST	443	49921	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.898266077 CEST	443	49921	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.906223059 CEST	443	49922	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.906265020 CEST	443	49922	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.906303883 CEST	443	49922	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.906315088 CEST	49922	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.906353951 CEST	49922	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.906419992 CEST	49925	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.906450987 CEST	443	49925	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.906508923 CEST	49925	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.907001972 CEST	49922	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.907016039 CEST	443	49922	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.916414022 CEST	49926	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.916434050 CEST	443	49926	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.916490078 CEST	49926	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.916712046 CEST	49925	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.916727066 CEST	443	49925	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.917083979 CEST	49927	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.917107105 CEST	443	49927	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.917150021 CEST	49927	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.917241096 CEST	49926	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.917249918 CEST	443	49926	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.917320013 CEST	49927	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.917331934 CEST	443	49927	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.933120966 CEST	443	49923	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.933202028 CEST	443	49923	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.933253050 CEST	49923	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.933932066 CEST	49923	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.933932066 CEST	49923	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.933942080 CEST	443	49923	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.933949947 CEST	443	49923	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.941008091 CEST	49928	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.941042900 CEST	443	49928	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:00.941113949 CEST	49928	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.941450119 CEST	49928	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:00.941462994 CEST	443	49928	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.637006998 CEST	443	49924	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.638129950 CEST	49924	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.638144970 CEST	443	49924	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.639225006 CEST	49924	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.639230013 CEST	443	49924	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.671483994 CEST	443	49926	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.684535027 CEST	49926	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.684551954 CEST	443	49926	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.685576916 CEST	49926	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.685580969 CEST	443	49926	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.686798096 CEST	443	49925	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.687550068 CEST	49925	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.687572956 CEST	443	49925	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.691436052 CEST	49925	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.691441059 CEST	443	49925	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.693207979 CEST	443	49927	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.694124937 CEST	49927	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.694142103 CEST	443	49927	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.695456028 CEST	49927	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.695466042 CEST	443	49927	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.698610067 CEST	443	49928	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.699131012 CEST	49928	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.699151039 CEST	443	49928	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.704442024 CEST	49928	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.704447985 CEST	443	49928	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.771261930 CEST	443	49924	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.771306038 CEST	443	49924	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.771358013 CEST	443	49924	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.771387100 CEST	49924	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.771495104 CEST	49924	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.771867037 CEST	49924	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.771878958 CEST	443	49924	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.771907091 CEST	49924	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.771914005 CEST	443	49924	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.776431084 CEST	49929	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.776472092 CEST	443	49929	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.779654980 CEST	49929	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.779654980 CEST	49929	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.779692888 CEST	443	49929	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.817984104 CEST	443	49926	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.818001032 CEST	443	49926	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.818034887 CEST	443	49926	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.818059921 CEST	49926	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.818190098 CEST	49926	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.818483114 CEST	49926	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.818484068 CEST	49926	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.818492889 CEST	443	49926	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.818500996 CEST	443	49926	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.821965933 CEST	49930	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.821984053 CEST	443	49930	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.822267056 CEST	49930	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.822267056 CEST	49930	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.822290897 CEST	443	49930	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.828280926 CEST	443	49925	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.828433037 CEST	443	49925	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.828608036 CEST	49925	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.828696966 CEST	49925	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.828697920 CEST	49925	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.828713894 CEST	443	49925	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.828722000 CEST	443	49925	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.832073927 CEST	443	49927	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.833249092 CEST	49931	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.833277941 CEST	443	49931	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.833328009 CEST	443	49927	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.833380938 CEST	49931	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.833496094 CEST	49931	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.833513975 CEST	443	49931	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.833568096 CEST	49927	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.833784103 CEST	49927	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.833794117 CEST	443	49927	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.834145069 CEST	49927	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.834151983 CEST	443	49927	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.837328911 CEST	49932	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.837414980 CEST	443	49932	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.837629080 CEST	49932	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.837821007 CEST	49932	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.837862015 CEST	443	49932	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.838434935 CEST	443	49928	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.838500977 CEST	443	49928	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.838783026 CEST	49928	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.838949919 CEST	49928	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.838949919 CEST	49928	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.838957071 CEST	443	49928	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.838963985 CEST	443	49928	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.842459917 CEST	49933	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.842500925 CEST	443	49933	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:01.848720074 CEST	49933	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.848720074 CEST	49933	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:01.848762035 CEST	443	49933	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.566175938 CEST	443	49929	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.566818953 CEST	49929	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.566833973 CEST	443	49929	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.567420006 CEST	49929	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.567426920 CEST	443	49929	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.567748070 CEST	443	49930	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.568131924 CEST	49930	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.568149090 CEST	443	49930	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.568600893 CEST	49930	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.568605900 CEST	443	49930	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.594788074 CEST	443	49932	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.595438957 CEST	49932	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.595503092 CEST	443	49932	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.595823050 CEST	49932	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.595839024 CEST	443	49932	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.596384048 CEST	443	49931	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.596796036 CEST	49931	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.596808910 CEST	443	49931	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.597176075 CEST	49931	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.597182035 CEST	443	49931	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.611485958 CEST	443	49933	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.611938000 CEST	49933	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.611965895 CEST	443	49933	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.612392902 CEST	49933	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.612400055 CEST	443	49933	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.703423977 CEST	443	49930	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.703485012 CEST	443	49930	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.703537941 CEST	49930	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.703798056 CEST	49930	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.703804970 CEST	443	49930	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.703814030 CEST	49930	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.703819036 CEST	443	49930	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.706120014 CEST	443	49929	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.706191063 CEST	443	49929	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.706238985 CEST	49929	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.706248999 CEST	443	49929	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.706289053 CEST	443	49929	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.706334114 CEST	49929	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.706433058 CEST	49929	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.706442118 CEST	443	49929	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.706455946 CEST	49929	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.706471920 CEST	443	49929	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.708663940 CEST	49934	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.708749056 CEST	443	49934	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.708825111 CEST	49934	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.711293936 CEST	49934	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.711333990 CEST	443	49934	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.714010954 CEST	49935	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.714056969 CEST	443	49935	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.714118004 CEST	49935	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.714279890 CEST	49935	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.714293957 CEST	443	49935	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.732845068 CEST	443	49932	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.733149052 CEST	443	49932	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.733196020 CEST	443	49932	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.733314991 CEST	49932	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.733314991 CEST	49932	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.733315945 CEST	49932	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.733315945 CEST	49932	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.734730005 CEST	443	49931	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.735462904 CEST	443	49931	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.735526085 CEST	49931	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.735548973 CEST	49931	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.735557079 CEST	443	49931	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.735572100 CEST	49931	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.735577106 CEST	443	49931	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.736417055 CEST	49936	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.736433983 CEST	443	49936	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.736505032 CEST	49936	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.736646891 CEST	49936	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.736663103 CEST	443	49936	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.738590002 CEST	49937	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.738600969 CEST	443	49937	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.738658905 CEST	49937	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.738841057 CEST	49937	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.738852978 CEST	443	49937	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.748864889 CEST	443	49933	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.749063969 CEST	443	49933	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.749113083 CEST	49933	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.749146938 CEST	49933	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.749161005 CEST	443	49933	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.749170065 CEST	49933	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.749175072 CEST	443	49933	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.751241922 CEST	49938	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.751251936 CEST	443	49938	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:02.751327038 CEST	49938	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.751436949 CEST	49938	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:02.751450062 CEST	443	49938	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.034877062 CEST	49932	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.034941912 CEST	443	49932	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.474342108 CEST	443	49935	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.474920988 CEST	49935	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.474940062 CEST	443	49935	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.475438118 CEST	49935	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.475445032 CEST	443	49935	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.477368116 CEST	443	49934	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.477802038 CEST	49934	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.477885962 CEST	443	49934	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.478204012 CEST	49934	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.478219986 CEST	443	49934	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.482960939 CEST	443	49936	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.483452082 CEST	49936	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.483481884 CEST	443	49936	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.483665943 CEST	49936	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.483673096 CEST	443	49936	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.506820917 CEST	443	49938	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.507412910 CEST	49938	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.507436037 CEST	443	49938	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.507971048 CEST	443	49937	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.507991076 CEST	49938	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.507996082 CEST	443	49938	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.508343935 CEST	49937	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.508368969 CEST	443	49937	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.508697987 CEST	49937	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.508702040 CEST	443	49937	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.613385916 CEST	443	49935	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.613467932 CEST	443	49935	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.613611937 CEST	49935	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.613792896 CEST	49935	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.613792896 CEST	49935	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.613814116 CEST	443	49935	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.613825083 CEST	443	49935	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.615983963 CEST	443	49934	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.616049051 CEST	443	49934	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.616151094 CEST	443	49934	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.616359949 CEST	49934	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.616359949 CEST	49934	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.616360903 CEST	49934	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.616765976 CEST	49939	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.616796970 CEST	443	49939	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.616928101 CEST	49939	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.617880106 CEST	443	49936	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.617929935 CEST	49939	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.617943048 CEST	443	49939	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.618051052 CEST	443	49936	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.618760109 CEST	49936	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.618760109 CEST	49936	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.618889093 CEST	49940	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.618892908 CEST	49936	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.618913889 CEST	443	49936	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.618921041 CEST	443	49940	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.619080067 CEST	49940	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.619080067 CEST	49940	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.619107962 CEST	443	49940	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.621119022 CEST	49941	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.621181011 CEST	443	49941	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.621383905 CEST	49941	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.621484995 CEST	49941	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.621526003 CEST	443	49941	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.648490906 CEST	443	49938	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.648565054 CEST	443	49938	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.648765087 CEST	49938	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.648765087 CEST	49938	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.648785114 CEST	49938	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.648792028 CEST	443	49938	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.650820017 CEST	49942	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.650842905 CEST	443	49942	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.650974989 CEST	49942	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.651098013 CEST	49942	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.651112080 CEST	443	49942	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.656570911 CEST	443	49937	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.656604052 CEST	443	49937	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.656662941 CEST	443	49937	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.656800985 CEST	49937	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.656800985 CEST	49937	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.656835079 CEST	49937	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.656843901 CEST	443	49937	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.658771992 CEST	49943	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.658858061 CEST	443	49943	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.658961058 CEST	49943	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.659073114 CEST	49943	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.659111023 CEST	443	49943	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:03.925688982 CEST	49934	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:03.925753117 CEST	443	49934	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:04.388539076 CEST	443	49941	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:04.389878988 CEST	49941	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:04.389878988 CEST	49941	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:04.389944077 CEST	443	49941	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:04.389996052 CEST	443	49941	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:04.391073942 CEST	443	49939	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:04.391433954 CEST	443	49940	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:04.391482115 CEST	49939	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:04.391499043 CEST	443	49939	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:04.391758919 CEST	49939	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:04.391762972 CEST	443	49939	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:04.392169952 CEST	49940	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:04.392169952 CEST	49940	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:04.392205954 CEST	443	49940	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:04.392218113 CEST	443	49940	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:04.426315069 CEST	443	49943	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:04.427184105 CEST	49943	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:04.427246094 CEST	443	49943	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:04.427687883 CEST	49943	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:04.427702904 CEST	443	49943	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:04.450028896 CEST	443	49942	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:04.450767040 CEST	49942	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:04.450788021 CEST	443	49942	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:04.451272964 CEST	49942	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:04.451278925 CEST	443	49942	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:04.527549982 CEST	443	49941	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:04.527834892 CEST	443	49941	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:04.528100967 CEST	49941	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:04.528100967 CEST	49941	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:04.528186083 CEST	49941	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:04.528224945 CEST	443	49941	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:04.528533936 CEST	443	49940	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:04.528611898 CEST	443	49940	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:04.528671980 CEST	49940	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:04.528691053 CEST	443	49940	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:04.528724909 CEST	443	49940	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:04.528769016 CEST	49940	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:04.529882908 CEST	49940	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:04.529901981 CEST	443	49940	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:04.538733006 CEST	49944	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:04.538769960 CEST	443	49944	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:04.539345980 CEST	49945	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:04.539433002 CEST	443	49945	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:04.539450884 CEST	49944	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:04.539644957 CEST	49945	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:04.540268898 CEST	49945	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:04.540287971 CEST	49944	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:04.540299892 CEST	443	49944	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:04.540303946 CEST	443	49945	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:05.128607035 CEST	49717	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:50:05.585992098 CEST	443	49939	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:05.586182117 CEST	443	49939	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:05.586256027 CEST	49939	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:05.586287022 CEST	443	49942	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:05.586318970 CEST	443	49942	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:05.586322069 CEST	443	49943	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:05.586385965 CEST	49942	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:05.586414099 CEST	443	49942	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:05.586431026 CEST	443	49942	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:05.586472988 CEST	49942	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:05.586478949 CEST	443	49943	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:05.586582899 CEST	49942	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:05.586586952 CEST	49939	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:05.586596012 CEST	443	49942	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:05.586602926 CEST	443	49939	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:05.586606979 CEST	49942	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:05.586611986 CEST	443	49942	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:05.586615086 CEST	49943	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:05.587436914 CEST	49943	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:05.587466955 CEST	443	49943	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:05.590269089 CEST	49947	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:05.590343952 CEST	443	49947	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:05.590373039 CEST	49946	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:05.590411901 CEST	443	49946	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:05.590501070 CEST	49947	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:05.590584040 CEST	49946	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:05.590694904 CEST	49947	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:05.590717077 CEST	443	49947	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:05.590864897 CEST	49946	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:05.590878963 CEST	443	49946	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:05.591427088 CEST	49948	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:05.591454983 CEST	443	49948	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:05.591521025 CEST	49948	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:05.591622114 CEST	80	49717	185.246.86.158	192.168.2.6
Oct 23, 2024 15:50:05.591686010 CEST	49948	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:05.591698885 CEST	443	49948	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.347803116 CEST	443	49945	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.348469973 CEST	49945	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.348531961 CEST	443	49945	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.348825932 CEST	49945	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.348841906 CEST	443	49945	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.351074934 CEST	443	49948	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.351401091 CEST	49948	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.351413965 CEST	443	49948	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.351835012 CEST	49948	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.351839066 CEST	443	49948	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.353789091 CEST	443	49947	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.354114056 CEST	49947	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.354129076 CEST	443	49947	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.354444027 CEST	49947	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.354454994 CEST	443	49947	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.359889984 CEST	443	49946	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.360183001 CEST	49946	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.360193014 CEST	443	49946	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.360794067 CEST	49946	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.360797882 CEST	443	49946	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.374145985 CEST	443	49944	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.374943018 CEST	49944	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.374943018 CEST	49944	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.374958992 CEST	443	49944	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.374979973 CEST	443	49944	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.484025955 CEST	443	49945	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.484216928 CEST	443	49945	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.484283924 CEST	49945	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.484424114 CEST	49945	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.484441996 CEST	443	49945	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.484455109 CEST	49945	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.484462976 CEST	443	49945	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.486105919 CEST	443	49948	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.486148119 CEST	443	49948	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.486197948 CEST	443	49948	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.486218929 CEST	49948	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.486244917 CEST	49948	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.486478090 CEST	49948	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.486496925 CEST	443	49948	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.486644030 CEST	49948	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.486650944 CEST	443	49948	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.488749027 CEST	49949	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.488779068 CEST	443	49949	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.488944054 CEST	49949	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.489538908 CEST	443	49947	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.489789009 CEST	443	49947	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.489836931 CEST	49950	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.489865065 CEST	443	49950	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.489870071 CEST	49947	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.490067959 CEST	49950	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.490173101 CEST	49949	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.490186930 CEST	443	49949	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.490355968 CEST	49947	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.490361929 CEST	443	49947	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.490374088 CEST	49947	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.490379095 CEST	443	49947	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.491764069 CEST	49950	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.491777897 CEST	443	49950	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.493187904 CEST	49951	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.493206978 CEST	443	49951	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.493459940 CEST	49951	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.493716002 CEST	49951	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.493730068 CEST	443	49951	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.510019064 CEST	443	49946	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.510087013 CEST	443	49946	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.510173082 CEST	49946	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.510183096 CEST	443	49946	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.510363102 CEST	49946	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.512393951 CEST	49946	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.512393951 CEST	49946	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.512424946 CEST	443	49946	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.512434006 CEST	443	49946	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.514225960 CEST	443	49944	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.514380932 CEST	443	49944	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.514431000 CEST	49944	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.514575958 CEST	49944	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.514575958 CEST	49944	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.514591932 CEST	443	49944	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.514600039 CEST	443	49944	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.515661955 CEST	49952	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.515692949 CEST	443	49952	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.515750885 CEST	49952	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.515953064 CEST	49952	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.515970945 CEST	443	49952	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.517129898 CEST	49953	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.517155886 CEST	443	49953	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:06.517319918 CEST	49953	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.517441988 CEST	49953	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:06.517458916 CEST	443	49953	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.244036913 CEST	443	49950	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.244623899 CEST	49950	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.244637012 CEST	443	49950	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.245120049 CEST	49950	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.245125055 CEST	443	49950	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.257155895 CEST	443	49949	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.257740974 CEST	49949	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.257775068 CEST	443	49949	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.258068085 CEST	49949	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.258076906 CEST	443	49949	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.259866953 CEST	443	49951	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.260194063 CEST	49951	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.260204077 CEST	443	49951	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.260602951 CEST	49951	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.260607958 CEST	443	49951	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.290160894 CEST	443	49952	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.290541887 CEST	49952	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.290575981 CEST	443	49952	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.290896893 CEST	49952	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.290904045 CEST	443	49952	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.293468952 CEST	443	49953	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.293766975 CEST	49953	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.293790102 CEST	443	49953	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.294106960 CEST	49953	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.294112921 CEST	443	49953	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.381182909 CEST	443	49950	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.381254911 CEST	443	49950	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.381315947 CEST	49950	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.381329060 CEST	443	49950	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.381375074 CEST	443	49950	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.381417990 CEST	49950	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.381637096 CEST	49950	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.381650925 CEST	443	49950	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.381659031 CEST	49950	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.381664038 CEST	443	49950	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.384666920 CEST	49954	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.384692907 CEST	443	49954	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.384756088 CEST	49954	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.384959936 CEST	49954	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.384973049 CEST	443	49954	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.396965027 CEST	443	49949	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.397125959 CEST	443	49949	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.397228956 CEST	49949	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.397273064 CEST	49949	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.397274017 CEST	49949	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.397291899 CEST	443	49949	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.397305012 CEST	443	49949	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.399447918 CEST	49955	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.399480104 CEST	443	49955	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.399842024 CEST	443	49951	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.399863958 CEST	49955	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.399863958 CEST	49955	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.399912119 CEST	443	49955	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.400192976 CEST	443	49951	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.400348902 CEST	49951	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.400348902 CEST	49951	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.400348902 CEST	49951	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.402158976 CEST	49956	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.402200937 CEST	443	49956	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.402427912 CEST	49956	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.402556896 CEST	49956	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.402575970 CEST	443	49956	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.429146051 CEST	443	49952	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.429285049 CEST	443	49952	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.429383993 CEST	49952	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.429383993 CEST	49952	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.429474115 CEST	49952	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.429482937 CEST	443	49952	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.431432009 CEST	49957	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.431518078 CEST	443	49957	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.431672096 CEST	49957	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.431746960 CEST	49957	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.431771994 CEST	443	49957	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.432760000 CEST	443	49953	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.432918072 CEST	443	49953	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.433052063 CEST	49953	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.433052063 CEST	49953	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.433192015 CEST	49953	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.433204889 CEST	443	49953	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.434966087 CEST	49958	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.434993982 CEST	443	49958	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.435121059 CEST	49958	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.435218096 CEST	49958	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.435230017 CEST	443	49958	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:07.706769943 CEST	49951	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:07.706784010 CEST	443	49951	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.135845900 CEST	443	49954	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.136440992 CEST	49954	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.136477947 CEST	443	49954	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.136893988 CEST	49954	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.136899948 CEST	443	49954	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.146301985 CEST	443	49955	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.149379969 CEST	443	49956	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.149427891 CEST	49955	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.149450064 CEST	443	49955	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.150974035 CEST	49955	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.150978088 CEST	443	49955	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.151485920 CEST	49956	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.151515961 CEST	443	49956	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.151530027 CEST	49956	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.151535988 CEST	443	49956	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.196284056 CEST	443	49958	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.196857929 CEST	49958	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.196877003 CEST	443	49958	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.200439930 CEST	49958	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.200450897 CEST	443	49958	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.203506947 CEST	443	49957	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.204468012 CEST	49957	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.204468012 CEST	49957	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.204534054 CEST	443	49957	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.204574108 CEST	443	49957	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.271888018 CEST	443	49954	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.272003889 CEST	443	49954	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.272049904 CEST	443	49954	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.272083044 CEST	49954	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.272279024 CEST	49954	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.272356987 CEST	49954	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.272356987 CEST	49954	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.272373915 CEST	443	49954	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.272383928 CEST	443	49954	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.279274940 CEST	49959	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.279362917 CEST	443	49959	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.279637098 CEST	49959	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.280563116 CEST	49959	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.280601025 CEST	443	49959	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.284218073 CEST	443	49955	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.284395933 CEST	443	49955	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.284645081 CEST	49955	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.284645081 CEST	49955	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.284792900 CEST	49955	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.284806967 CEST	443	49955	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.286398888 CEST	443	49956	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.286768913 CEST	443	49956	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.290889978 CEST	49960	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.290925026 CEST	443	49960	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.290954113 CEST	49956	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.291068077 CEST	49960	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.291083097 CEST	49956	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.291083097 CEST	49956	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.291099072 CEST	443	49956	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.291107893 CEST	443	49956	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.291131020 CEST	49960	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.291138887 CEST	443	49960	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.293276072 CEST	49961	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.293346882 CEST	443	49961	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.295262098 CEST	49961	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.295536995 CEST	49961	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.295568943 CEST	443	49961	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.332256079 CEST	443	49958	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.332323074 CEST	443	49958	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.332596064 CEST	49958	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.332596064 CEST	49958	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.332624912 CEST	49958	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.332634926 CEST	443	49958	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.335644960 CEST	49962	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.335678101 CEST	443	49962	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.335851908 CEST	49962	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.335927963 CEST	49962	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.335935116 CEST	443	49962	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.341830015 CEST	443	49957	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.342245102 CEST	443	49957	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.342497110 CEST	49957	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.342498064 CEST	49957	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.342498064 CEST	49957	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.344870090 CEST	49963	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.344882965 CEST	443	49963	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.345092058 CEST	49963	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.345092058 CEST	49963	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.345119953 CEST	443	49963	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:08.644627094 CEST	49957	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:08.644644022 CEST	443	49957	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.036735058 CEST	443	49959	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.037322044 CEST	49959	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.037343979 CEST	443	49959	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.037815094 CEST	49959	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.037820101 CEST	443	49959	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.071150064 CEST	443	49961	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.071737051 CEST	49961	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.071795940 CEST	443	49961	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.072235107 CEST	49961	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.072248936 CEST	443	49961	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.085156918 CEST	443	49960	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.085680962 CEST	49960	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.085702896 CEST	443	49960	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.086050987 CEST	49960	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.086057901 CEST	443	49960	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.103962898 CEST	443	49963	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.104540110 CEST	49963	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.104585886 CEST	443	49963	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.105180025 CEST	49963	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.105189085 CEST	443	49963	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.105511904 CEST	443	49962	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.105875015 CEST	49962	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.105895042 CEST	443	49962	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.106262922 CEST	49962	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.106268883 CEST	443	49962	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.175278902 CEST	443	49959	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.175390005 CEST	443	49959	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.175585032 CEST	49959	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.175668001 CEST	49959	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.175668001 CEST	49959	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.175714016 CEST	443	49959	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.175741911 CEST	443	49959	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.180927038 CEST	49965	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.180957079 CEST	443	49965	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.181030989 CEST	49965	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.181195974 CEST	49965	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.181209087 CEST	443	49965	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.208225965 CEST	443	49961	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.208272934 CEST	443	49961	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.208334923 CEST	49961	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.208559036 CEST	49961	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.208575010 CEST	443	49961	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.211302042 CEST	49966	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.211349010 CEST	443	49966	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.211519003 CEST	49966	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.211602926 CEST	49966	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.211611032 CEST	443	49966	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.225874901 CEST	443	49960	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.225922108 CEST	443	49960	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.225994110 CEST	49960	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.226305962 CEST	49960	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.226325035 CEST	443	49960	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.226336002 CEST	49960	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.226341963 CEST	443	49960	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.229091883 CEST	49967	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.229116917 CEST	443	49967	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.229203939 CEST	49967	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.229425907 CEST	49967	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.229439020 CEST	443	49967	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.240284920 CEST	443	49963	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.240356922 CEST	443	49963	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.240464926 CEST	49963	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.242017984 CEST	49963	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.242033005 CEST	443	49963	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.244841099 CEST	443	49962	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.244910002 CEST	443	49962	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.245006084 CEST	443	49962	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.245204926 CEST	49962	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.247092962 CEST	49962	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.247442961 CEST	49962	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.247442961 CEST	49962	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.247454882 CEST	443	49962	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.247462034 CEST	443	49962	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.251012087 CEST	49968	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.251055956 CEST	443	49968	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.251096964 CEST	49969	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.251127005 CEST	443	49969	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.251135111 CEST	49968	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.251184940 CEST	49969	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.251297951 CEST	49968	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.251333952 CEST	443	49968	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.251358032 CEST	49969	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.251370907 CEST	443	49969	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.782731056 CEST	49716	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:50:09.788619041 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:50:09.949287891 CEST	443	49965	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.949842930 CEST	49965	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.949866056 CEST	443	49965	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.950351954 CEST	49965	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.950360060 CEST	443	49965	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.965652943 CEST	443	49966	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.966099024 CEST	49966	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.966121912 CEST	443	49966	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.966519117 CEST	49966	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.966525078 CEST	443	49966	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.986711025 CEST	443	49967	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.987123013 CEST	49967	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.987138987 CEST	443	49967	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:09.987802982 CEST	49967	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:09.987807989 CEST	443	49967	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.013370991 CEST	443	49969	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.014074087 CEST	49969	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.014094114 CEST	443	49969	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.014434099 CEST	49969	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.014440060 CEST	443	49969	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.014878035 CEST	443	49968	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.015181065 CEST	49968	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.015214920 CEST	443	49968	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.015579939 CEST	49968	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.015587091 CEST	443	49968	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.033843994 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:50:10.033862114 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:50:10.033876896 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:50:10.033893108 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:50:10.033911943 CEST	49716	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:50:10.033951998 CEST	49716	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:50:10.086507082 CEST	443	49965	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.086646080 CEST	443	49965	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.086719990 CEST	443	49965	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.086785078 CEST	49965	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.086878061 CEST	49965	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.086894989 CEST	443	49965	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.086915016 CEST	49965	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.086921930 CEST	443	49965	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.089991093 CEST	49970	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.090033054 CEST	443	49970	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.090195894 CEST	49970	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.090342045 CEST	49970	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.090357065 CEST	443	49970	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.105314970 CEST	443	49966	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.105731964 CEST	443	49966	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.106000900 CEST	49966	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.106074095 CEST	49966	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.106074095 CEST	49966	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.106091022 CEST	443	49966	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.106101036 CEST	443	49966	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.108788967 CEST	49971	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.108819008 CEST	443	49971	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.109229088 CEST	49971	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.109229088 CEST	49971	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.109256983 CEST	443	49971	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.126566887 CEST	443	49967	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.126977921 CEST	443	49967	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.127012968 CEST	443	49967	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.127058029 CEST	49967	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.127110004 CEST	49967	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.127121925 CEST	443	49967	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.127134085 CEST	49967	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.127140045 CEST	443	49967	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.131820917 CEST	49972	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.131845951 CEST	443	49972	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.132431984 CEST	49972	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.132731915 CEST	49972	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.132746935 CEST	443	49972	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.153553009 CEST	443	49969	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.153712034 CEST	443	49969	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.153836012 CEST	49969	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.154067993 CEST	49969	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.154084921 CEST	443	49969	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.154146910 CEST	49969	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.154154062 CEST	443	49969	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.157167912 CEST	443	49968	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.157301903 CEST	49973	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.157330990 CEST	443	49973	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.157406092 CEST	49973	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.157593012 CEST	443	49968	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.157625914 CEST	49973	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.157638073 CEST	443	49973	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.157689095 CEST	49968	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.157835960 CEST	49968	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.157859087 CEST	443	49968	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.157874107 CEST	49968	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.157881021 CEST	443	49968	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.159744978 CEST	49974	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.159759045 CEST	443	49974	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.159902096 CEST	49974	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.160077095 CEST	49974	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.160092115 CEST	443	49974	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.849987030 CEST	443	49970	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.851373911 CEST	49970	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.851401091 CEST	443	49970	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.852118969 CEST	49970	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.852123976 CEST	443	49970	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.858036041 CEST	443	49971	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.886584044 CEST	443	49972	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.907891989 CEST	443	49973	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.908015013 CEST	443	49974	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.909806967 CEST	49971	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.940711021 CEST	49972	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.951353073 CEST	49971	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.951368093 CEST	443	49971	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.956329107 CEST	49974	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.956527948 CEST	49973	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.957314968 CEST	49974	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.957324028 CEST	443	49974	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.957361937 CEST	49971	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.957372904 CEST	443	49971	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.960973024 CEST	49974	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.960979939 CEST	443	49974	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.983439922 CEST	49972	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.983444929 CEST	443	49972	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.986807108 CEST	49972	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.986814022 CEST	443	49972	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.988535881 CEST	443	49970	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.988605976 CEST	443	49970	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.988673925 CEST	49970	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.990736008 CEST	49973	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.990744114 CEST	443	49973	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.993314028 CEST	49973	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.993319035 CEST	443	49973	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.996510983 CEST	49970	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.996510983 CEST	49970	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:10.996546984 CEST	443	49970	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:10.996572971 CEST	443	49970	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.020121098 CEST	49975	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.020152092 CEST	443	49975	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.020281076 CEST	49975	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.023046970 CEST	49975	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.023058891 CEST	443	49975	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.090951920 CEST	443	49971	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.090984106 CEST	443	49971	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.091029882 CEST	443	49971	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.091046095 CEST	49971	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.091326952 CEST	49971	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.092365980 CEST	443	49974	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.092420101 CEST	443	49974	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.092483044 CEST	49974	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.092493057 CEST	443	49974	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.092565060 CEST	443	49974	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.093288898 CEST	49974	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.093542099 CEST	49971	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.093564987 CEST	443	49971	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.093612909 CEST	49971	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.093620062 CEST	443	49971	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.098803043 CEST	49974	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.098803043 CEST	49974	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.098819971 CEST	443	49974	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.098830938 CEST	443	49974	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.111628056 CEST	49976	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.111651897 CEST	443	49976	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.111751080 CEST	49976	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.112162113 CEST	49976	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.112176895 CEST	443	49976	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.112327099 CEST	49977	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.112368107 CEST	443	49977	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.112452030 CEST	49977	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.112601995 CEST	49977	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.112620115 CEST	443	49977	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.118357897 CEST	443	49972	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.118678093 CEST	443	49972	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.118730068 CEST	49972	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.118758917 CEST	49972	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.118767977 CEST	443	49972	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.118779898 CEST	49972	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.118786097 CEST	443	49972	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.120599031 CEST	49978	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.120618105 CEST	443	49978	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.121016979 CEST	49978	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.121192932 CEST	49978	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.121201038 CEST	443	49978	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.124452114 CEST	443	49973	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.124602079 CEST	443	49973	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.124696016 CEST	49973	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.124799967 CEST	49973	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.124799967 CEST	49973	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.124809027 CEST	443	49973	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.124816895 CEST	443	49973	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.126976013 CEST	49979	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.126991987 CEST	443	49979	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.127053022 CEST	49979	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.127228975 CEST	49979	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.127243996 CEST	443	49979	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.770596981 CEST	443	49975	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.771231890 CEST	49975	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.771255016 CEST	443	49975	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.771909952 CEST	49975	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.771914005 CEST	443	49975	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.877866030 CEST	443	49976	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.879178047 CEST	443	49977	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.879328966 CEST	49976	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.879348040 CEST	443	49976	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.880300999 CEST	49976	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.880306005 CEST	443	49976	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.880889893 CEST	49977	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.880920887 CEST	443	49977	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.881304979 CEST	49977	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.881313086 CEST	443	49977	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.882388115 CEST	443	49978	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.883156061 CEST	49978	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.883167982 CEST	443	49978	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.884193897 CEST	49978	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.884198904 CEST	443	49978	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.885411978 CEST	443	49979	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.885831118 CEST	49979	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.885839939 CEST	443	49979	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.886679888 CEST	49979	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.886704922 CEST	443	49979	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.908329964 CEST	443	49975	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.908498049 CEST	443	49975	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.908624887 CEST	49975	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.908992052 CEST	49975	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.909012079 CEST	443	49975	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.914880991 CEST	49980	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.914921045 CEST	443	49980	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:11.915066004 CEST	49980	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.915637970 CEST	49980	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:11.915652037 CEST	443	49980	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.016578913 CEST	443	49976	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.016625881 CEST	443	49976	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.016763926 CEST	443	49976	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.016828060 CEST	49976	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.017137051 CEST	49976	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.017151117 CEST	443	49976	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.017170906 CEST	49976	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.017175913 CEST	443	49976	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.019392014 CEST	443	49977	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.019418001 CEST	443	49977	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.019480944 CEST	443	49977	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.019510984 CEST	49977	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.019527912 CEST	49977	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.020442963 CEST	49977	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.020457983 CEST	443	49977	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.021222115 CEST	443	49979	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.021274090 CEST	443	49979	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.021343946 CEST	49979	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.021353006 CEST	443	49979	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.021404982 CEST	443	49979	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.021487951 CEST	49979	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.023041964 CEST	49979	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.023047924 CEST	443	49979	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.023088932 CEST	49979	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.023097038 CEST	443	49979	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.027775049 CEST	49981	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.027816057 CEST	443	49981	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.028074026 CEST	49981	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.031111002 CEST	49982	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.031200886 CEST	443	49982	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.031286001 CEST	49982	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.031550884 CEST	49981	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.031569958 CEST	443	49981	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.032222986 CEST	49983	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.032241106 CEST	443	49983	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.032289028 CEST	49983	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.032397985 CEST	49982	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.032435894 CEST	443	49982	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.032566071 CEST	49983	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.032577038 CEST	443	49983	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.040894985 CEST	443	49978	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.040920019 CEST	443	49978	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.040960073 CEST	443	49978	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.040978909 CEST	49978	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.040997982 CEST	49978	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.041626930 CEST	49978	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.041632891 CEST	443	49978	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.041654110 CEST	49978	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.041657925 CEST	443	49978	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.046621084 CEST	49984	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.046641111 CEST	443	49984	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.046809912 CEST	49984	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.047029972 CEST	49984	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.047043085 CEST	443	49984	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.681134939 CEST	443	49980	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.681906939 CEST	49980	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.681988955 CEST	443	49980	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.682590961 CEST	49980	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.682605028 CEST	443	49980	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.716272116 CEST	49985	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:50:12.716305971 CEST	443	49985	40.113.103.199	192.168.2.6
Oct 23, 2024 15:50:12.716376066 CEST	49985	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:50:12.718517065 CEST	49985	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:50:12.718530893 CEST	443	49985	40.113.103.199	192.168.2.6
Oct 23, 2024 15:50:12.808810949 CEST	443	49983	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.808893919 CEST	443	49981	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.809793949 CEST	49983	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.809820890 CEST	443	49983	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.810775042 CEST	443	49984	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.810928106 CEST	49983	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.810935020 CEST	443	49983	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.812201977 CEST	49981	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.812218904 CEST	443	49981	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.813728094 CEST	49981	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.813735962 CEST	443	49981	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.814749002 CEST	443	49982	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.815095901 CEST	49984	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.815108061 CEST	443	49984	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.815895081 CEST	49984	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.815903902 CEST	443	49984	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.816575050 CEST	49982	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.816651106 CEST	443	49982	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.817512989 CEST	49982	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.817527056 CEST	443	49982	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.821748018 CEST	443	49980	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.821803093 CEST	443	49980	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.821866035 CEST	49980	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.822618961 CEST	49980	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.822650909 CEST	443	49980	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.822678089 CEST	49980	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.822693110 CEST	443	49980	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.829144001 CEST	49986	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.829183102 CEST	443	49986	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.829282045 CEST	49986	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.829596043 CEST	49986	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.829611063 CEST	443	49986	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.945053101 CEST	443	49983	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.945096016 CEST	443	49983	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.945168972 CEST	49983	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.945451021 CEST	49983	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.945466995 CEST	443	49983	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.945486069 CEST	49983	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.945491076 CEST	443	49983	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.947175980 CEST	443	49981	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.947273970 CEST	443	49981	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.947407007 CEST	49981	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.947519064 CEST	49981	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.947526932 CEST	443	49981	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.949003935 CEST	49987	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.949070930 CEST	443	49987	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.949137926 CEST	49987	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.949453115 CEST	49987	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.949486971 CEST	443	49987	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.950100899 CEST	49988	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.950134039 CEST	443	49988	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.950375080 CEST	49988	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.950414896 CEST	443	49984	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.950440884 CEST	443	49984	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.950489044 CEST	49984	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.950505972 CEST	443	49984	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.950570107 CEST	49984	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.950575113 CEST	443	49984	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.950663090 CEST	49988	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.950678110 CEST	49984	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.950679064 CEST	443	49988	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.950696945 CEST	49984	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.950705051 CEST	443	49984	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.950722933 CEST	49984	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.950726986 CEST	443	49984	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.952763081 CEST	49989	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.952780962 CEST	443	49989	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.952836037 CEST	49989	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.952976942 CEST	49989	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.952986956 CEST	443	49989	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.958311081 CEST	443	49982	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.958456993 CEST	443	49982	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.958710909 CEST	49982	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.958746910 CEST	49982	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.958746910 CEST	49982	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.958769083 CEST	443	49982	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.958791018 CEST	443	49982	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.961070061 CEST	49990	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.961083889 CEST	443	49990	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:12.961143017 CEST	49990	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.961281061 CEST	49990	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:12.961294889 CEST	443	49990	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.593441010 CEST	443	49986	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.607108116 CEST	49986	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.607151031 CEST	443	49986	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.611556053 CEST	49986	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.611572027 CEST	443	49986	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.698441029 CEST	443	49989	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.702156067 CEST	443	49988	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.705785036 CEST	443	49987	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.723721981 CEST	443	49990	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.741436958 CEST	49990	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.741463900 CEST	443	49990	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.746511936 CEST	443	49986	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.746536970 CEST	443	49986	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.746632099 CEST	49986	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.746654987 CEST	443	49986	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.747013092 CEST	443	49986	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.747061014 CEST	49986	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.747263908 CEST	49990	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.747271061 CEST	443	49990	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.747551918 CEST	49989	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.747575998 CEST	443	49989	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.751318932 CEST	49989	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.751324892 CEST	443	49989	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.751696110 CEST	49986	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.751718044 CEST	443	49986	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.753288984 CEST	49988	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.753384113 CEST	49987	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.755455971 CEST	49988	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.755460978 CEST	443	49988	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.756513119 CEST	49988	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.756517887 CEST	443	49988	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.756899118 CEST	49987	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.756927967 CEST	443	49987	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.758038998 CEST	49987	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.758053064 CEST	443	49987	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.761298895 CEST	49991	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.761326075 CEST	443	49991	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.761424065 CEST	49991	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.761706114 CEST	49991	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.761718988 CEST	443	49991	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.821494102 CEST	443	49985	40.113.103.199	192.168.2.6
Oct 23, 2024 15:50:13.821578026 CEST	49985	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:50:13.824953079 CEST	49985	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:50:13.824965000 CEST	443	49985	40.113.103.199	192.168.2.6
Oct 23, 2024 15:50:13.825248003 CEST	443	49985	40.113.103.199	192.168.2.6
Oct 23, 2024 15:50:13.828083038 CEST	49985	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:50:13.828711987 CEST	49985	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:50:13.828725100 CEST	443	49985	40.113.103.199	192.168.2.6
Oct 23, 2024 15:50:13.829252958 CEST	49985	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:50:13.875327110 CEST	443	49985	40.113.103.199	192.168.2.6
Oct 23, 2024 15:50:13.882905006 CEST	443	49990	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.882975101 CEST	443	49990	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.883044958 CEST	49990	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.883065939 CEST	443	49990	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.883111954 CEST	443	49990	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.883136034 CEST	49990	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.883171082 CEST	49990	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.884136915 CEST	49990	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.884147882 CEST	443	49990	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.884188890 CEST	49990	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.884195089 CEST	443	49990	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.889214039 CEST	443	49988	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.889238119 CEST	443	49988	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.889292955 CEST	49988	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.889301062 CEST	443	49988	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.889585018 CEST	443	49988	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.889636993 CEST	49988	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.890363932 CEST	49988	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.890369892 CEST	443	49988	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.892344952 CEST	49992	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.892381907 CEST	443	49992	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.892473936 CEST	49992	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.894340038 CEST	49992	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.894354105 CEST	443	49992	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.897948980 CEST	49993	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.897993088 CEST	443	49993	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:13.898061991 CEST	49993	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.898296118 CEST	49993	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:13.898313999 CEST	443	49993	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.000576973 CEST	443	49989	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.000601053 CEST	443	49989	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.000607967 CEST	443	49989	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.000664949 CEST	49989	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.000673056 CEST	443	49989	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.000682116 CEST	443	49989	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.000739098 CEST	49989	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.009016991 CEST	443	49987	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.009051085 CEST	443	49987	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.009088039 CEST	443	49987	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.009118080 CEST	443	49987	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.009157896 CEST	443	49987	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.009161949 CEST	49987	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.009217024 CEST	443	49987	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.009258986 CEST	49987	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.009258986 CEST	49987	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.009262085 CEST	443	49987	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.009298086 CEST	49987	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.009320974 CEST	49987	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.010030031 CEST	49987	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.010062933 CEST	443	49987	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.010090113 CEST	49987	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.010107040 CEST	443	49987	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.016479969 CEST	49994	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.016506910 CEST	443	49994	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.016562939 CEST	49994	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.017136097 CEST	49994	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.017148018 CEST	443	49994	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.076932907 CEST	443	49985	40.113.103.199	192.168.2.6
Oct 23, 2024 15:50:14.077739000 CEST	49985	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:50:14.077756882 CEST	443	49985	40.113.103.199	192.168.2.6
Oct 23, 2024 15:50:14.077933073 CEST	443	49985	40.113.103.199	192.168.2.6
Oct 23, 2024 15:50:14.077999115 CEST	49985	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:50:14.078082085 CEST	49985	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:50:14.116749048 CEST	443	49989	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.116811037 CEST	443	49989	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.116820097 CEST	49989	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.116947889 CEST	49989	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.117216110 CEST	49989	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.117221117 CEST	443	49989	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.121807098 CEST	49995	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.121848106 CEST	443	49995	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.121917009 CEST	49995	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.122462988 CEST	49995	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.122482061 CEST	443	49995	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.660645962 CEST	443	49991	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.663693905 CEST	49991	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.663711071 CEST	443	49991	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.664761066 CEST	49991	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.664766073 CEST	443	49991	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.667171001 CEST	443	49993	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.668015957 CEST	49993	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.668045044 CEST	443	49993	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.669136047 CEST	49993	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.669142962 CEST	443	49993	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.674627066 CEST	443	49992	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.675005913 CEST	49992	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.675020933 CEST	443	49992	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.676011086 CEST	49992	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.676017046 CEST	443	49992	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.777053118 CEST	443	49994	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.778429031 CEST	49994	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.778445959 CEST	443	49994	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.779695034 CEST	49994	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.779699087 CEST	443	49994	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.813985109 CEST	443	49991	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.814004898 CEST	443	49991	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.814078093 CEST	49991	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.814093113 CEST	443	49991	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.814116001 CEST	443	49991	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.814163923 CEST	49991	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.814481974 CEST	443	49993	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.814546108 CEST	443	49993	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.814590931 CEST	49993	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.816914082 CEST	49991	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.816926956 CEST	443	49991	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.819875956 CEST	49993	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.819891930 CEST	443	49993	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.821711063 CEST	443	49992	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.821791887 CEST	443	49992	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.821863890 CEST	49992	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.825294018 CEST	49992	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.825294018 CEST	49992	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.825310946 CEST	443	49992	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.825320959 CEST	443	49992	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.836942911 CEST	49996	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.836971045 CEST	443	49996	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.837059021 CEST	49996	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.845769882 CEST	49996	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.845783949 CEST	443	49996	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.847457886 CEST	49997	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.847541094 CEST	443	49997	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.847632885 CEST	49997	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.848007917 CEST	49997	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.848037004 CEST	443	49997	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.861064911 CEST	49998	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.861115932 CEST	443	49998	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.861219883 CEST	49998	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.890099049 CEST	443	49995	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.892544985 CEST	49998	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.892560959 CEST	443	49998	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.905203104 CEST	49995	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.905220985 CEST	443	49995	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.905673027 CEST	49995	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.905678034 CEST	443	49995	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.939560890 CEST	443	49994	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.939632893 CEST	443	49994	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.939831018 CEST	49994	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.939924955 CEST	49994	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.939924955 CEST	49994	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.939944029 CEST	443	49994	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.939954042 CEST	443	49994	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.944380045 CEST	49999	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.944453955 CEST	443	49999	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:14.944528103 CEST	49999	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.944672108 CEST	49999	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:14.944701910 CEST	443	49999	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.041100979 CEST	443	49995	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.041147947 CEST	443	49995	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.041194916 CEST	49995	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.041496038 CEST	49995	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.041512012 CEST	443	49995	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.041524887 CEST	49995	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.041532040 CEST	443	49995	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.044748068 CEST	50000	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.044766903 CEST	443	50000	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.044826984 CEST	50000	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.045006037 CEST	50000	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.045021057 CEST	443	50000	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.595293045 CEST	443	49997	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.602154016 CEST	443	49996	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.633600950 CEST	443	49998	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.643619061 CEST	49997	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.643632889 CEST	49996	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.647160053 CEST	49997	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.647183895 CEST	443	49997	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.648255110 CEST	49997	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.648267031 CEST	443	49997	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.656908989 CEST	49996	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.656915903 CEST	443	49996	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.658020973 CEST	49996	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.658040047 CEST	443	49996	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.660871983 CEST	49998	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.660886049 CEST	443	49998	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.661838055 CEST	49998	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.661843061 CEST	443	49998	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.698765993 CEST	443	49999	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.719398975 CEST	49999	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.719449997 CEST	443	49999	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.720412970 CEST	49999	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.720426083 CEST	443	49999	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.782649040 CEST	443	49997	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.782826900 CEST	443	49997	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.782896996 CEST	49997	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.809396982 CEST	443	49996	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.809422970 CEST	443	49996	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.809472084 CEST	443	49996	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.809526920 CEST	49996	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.809973955 CEST	443	50000	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.810070038 CEST	443	49998	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.810126066 CEST	443	49998	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.810199022 CEST	49998	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.826457024 CEST	49997	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.826457024 CEST	49997	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.826504946 CEST	443	49997	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.826534033 CEST	443	49997	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.829332113 CEST	49998	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.829332113 CEST	49998	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.829356909 CEST	443	49998	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.829369068 CEST	443	49998	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.833317041 CEST	49996	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.833327055 CEST	443	49996	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.833383083 CEST	49996	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.833389997 CEST	443	49996	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.835442066 CEST	50000	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.835457087 CEST	443	50000	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.836158991 CEST	50000	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.836163998 CEST	443	50000	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.854468107 CEST	443	49999	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.854715109 CEST	443	49999	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.854773045 CEST	49999	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.854908943 CEST	49999	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.854932070 CEST	443	49999	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.854958057 CEST	49999	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.854973078 CEST	443	49999	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.966810942 CEST	443	50000	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.966892004 CEST	443	50000	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.966984034 CEST	50000	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.967180014 CEST	50000	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.967190981 CEST	443	50000	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:15.967204094 CEST	50000	443	192.168.2.6	13.107.253.67
Oct 23, 2024 15:50:15.967209101 CEST	443	50000	13.107.253.67	192.168.2.6
Oct 23, 2024 15:50:20.958475113 CEST	49717	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:50:20.964895964 CEST	80	49717	185.246.86.158	192.168.2.6
Oct 23, 2024 15:50:20.964965105 CEST	49717	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:50:23.177695990 CEST	50002	443	192.168.2.6	142.250.185.132
Oct 23, 2024 15:50:23.177738905 CEST	443	50002	142.250.185.132	192.168.2.6
Oct 23, 2024 15:50:23.177793980 CEST	50002	443	192.168.2.6	142.250.185.132
Oct 23, 2024 15:50:23.178090096 CEST	50002	443	192.168.2.6	142.250.185.132
Oct 23, 2024 15:50:23.178108931 CEST	443	50002	142.250.185.132	192.168.2.6
Oct 23, 2024 15:50:23.764636040 CEST	50003	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:50:23.768040895 CEST	49716	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:50:23.770441055 CEST	80	50003	185.246.86.158	192.168.2.6
Oct 23, 2024 15:50:23.771333933 CEST	50003	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:50:23.773654938 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:50:24.003078938 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:50:24.003122091 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:50:24.003159046 CEST	80	49716	185.246.86.158	192.168.2.6
Oct 23, 2024 15:50:24.003179073 CEST	49716	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:50:24.048324108 CEST	49716	80	192.168.2.6	185.246.86.158
Oct 23, 2024 15:50:24.080349922 CEST	443	50002	142.250.185.132	192.168.2.6
Oct 23, 2024 15:50:24.080743074 CEST	50002	443	192.168.2.6	142.250.185.132
Oct 23, 2024 15:50:24.080763102 CEST	443	50002	142.250.185.132	192.168.2.6
Oct 23, 2024 15:50:24.082196951 CEST	443	50002	142.250.185.132	192.168.2.6
Oct 23, 2024 15:50:24.084873915 CEST	50002	443	192.168.2.6	142.250.185.132
Oct 23, 2024 15:50:24.084980965 CEST	443	50002	142.250.185.132	192.168.2.6
Oct 23, 2024 15:50:24.128654957 CEST	50002	443	192.168.2.6	142.250.185.132
Oct 23, 2024 15:50:34.076149940 CEST	443	50002	142.250.185.132	192.168.2.6
Oct 23, 2024 15:50:34.076232910 CEST	443	50002	142.250.185.132	192.168.2.6
Oct 23, 2024 15:50:34.076271057 CEST	50002	443	192.168.2.6	142.250.185.132
Oct 23, 2024 15:50:34.959629059 CEST	50002	443	192.168.2.6	142.250.185.132
Oct 23, 2024 15:50:34.959660053 CEST	443	50002	142.250.185.132	192.168.2.6
Oct 23, 2024 15:50:41.464957952 CEST	50004	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:50:41.464999914 CEST	443	50004	40.113.103.199	192.168.2.6
Oct 23, 2024 15:50:41.465759039 CEST	50004	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:50:41.465759039 CEST	50004	443	192.168.2.6	40.113.103.199
Oct 23, 2024 15:50:41.465789080 CEST	443	50004	40.113.103.199	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 23, 2024 15:49:18.870419025 CEST	53	53986	1.1.1.1	192.168.2.6
Oct 23, 2024 15:49:18.870584965 CEST	53	63547	1.1.1.1	192.168.2.6
Oct 23, 2024 15:49:20.087435007 CEST	62415	53	192.168.2.6	1.1.1.1
Oct 23, 2024 15:49:20.087667942 CEST	54103	53	192.168.2.6	1.1.1.1
Oct 23, 2024 15:49:20.105283976 CEST	53	62415	1.1.1.1	192.168.2.6
Oct 23, 2024 15:49:20.123610020 CEST	53	54103	1.1.1.1	192.168.2.6
Oct 23, 2024 15:49:20.287497997 CEST	53	61993	1.1.1.1	192.168.2.6
Oct 23, 2024 15:49:23.113218069 CEST	65430	53	192.168.2.6	1.1.1.1
Oct 23, 2024 15:49:23.113446951 CEST	52027	53	192.168.2.6	1.1.1.1
Oct 23, 2024 15:49:23.174148083 CEST	53	52027	1.1.1.1	192.168.2.6
Oct 23, 2024 15:49:23.175206900 CEST	53	65430	1.1.1.1	192.168.2.6
Oct 23, 2024 15:49:23.848917007 CEST	58020	53	192.168.2.6	1.1.1.1
Oct 23, 2024 15:49:23.849678993 CEST	53575	53	192.168.2.6	1.1.1.1
Oct 23, 2024 15:49:23.872020006 CEST	53	53575	1.1.1.1	192.168.2.6
Oct 23, 2024 15:49:24.813325882 CEST	55591	53	192.168.2.6	1.1.1.1
Oct 23, 2024 15:49:24.813812971 CEST	52313	53	192.168.2.6	1.1.1.1
Oct 23, 2024 15:49:24.838395119 CEST	53	52313	1.1.1.1	192.168.2.6
Oct 23, 2024 15:49:26.555917025 CEST	63025	53	192.168.2.6	1.1.1.1
Oct 23, 2024 15:49:26.556313038 CEST	64912	53	192.168.2.6	1.1.1.1
Oct 23, 2024 15:49:26.561980963 CEST	53224	53	192.168.2.6	1.1.1.1
Oct 23, 2024 15:49:26.562213898 CEST	59076	53	192.168.2.6	1.1.1.1
Oct 23, 2024 15:49:37.874648094 CEST	53	57277	1.1.1.1	192.168.2.6
Oct 23, 2024 15:49:43.596569061 CEST	53	52190	1.1.1.1	192.168.2.6
Oct 23, 2024 15:49:56.619425058 CEST	53	55125	1.1.1.1	192.168.2.6
Oct 23, 2024 15:50:18.343914032 CEST	53	59727	1.1.1.1	192.168.2.6
Oct 23, 2024 15:50:19.309582949 CEST	53	60425	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 23, 2024 15:49:20.123666048 CEST	192.168.2.6	1.1.1.1	c230	(Port unreachable)	Destination Unreachable
Oct 23, 2024 15:49:23.872091055 CEST	192.168.2.6	1.1.1.1	c248	(Port unreachable)	Destination Unreachable
Oct 23, 2024 15:49:34.849018097 CEST	192.168.2.6	1.1.1.1	c2c5	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 23, 2024 15:49:20.087435007 CEST	192.168.2.6	1.1.1.1	0x6042	Standard query (0)	wxqlb.ecobusinessegypt.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:20.087667942 CEST	192.168.2.6	1.1.1.1	0xfc63	Standard query (0)	wxqlb.ecobusinessegypt.com	65	IN (0x0001)	false
Oct 23, 2024 15:49:23.113218069 CEST	192.168.2.6	1.1.1.1	0x1faa	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:23.113446951 CEST	192.168.2.6	1.1.1.1	0x5fb5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 23, 2024 15:49:23.848917007 CEST	192.168.2.6	1.1.1.1	0x2d7b	Standard query (0)	feeds.foxnews.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:23.849678993 CEST	192.168.2.6	1.1.1.1	0x6866	Standard query (0)	feeds.foxnews.com	65	IN (0x0001)	false
Oct 23, 2024 15:49:24.813325882 CEST	192.168.2.6	1.1.1.1	0xe17d	Standard query (0)	moxie.foxnews.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:24.813812971 CEST	192.168.2.6	1.1.1.1	0x67d3	Standard query (0)	moxie.foxnews.com	65	IN (0x0001)	false
Oct 23, 2024 15:49:26.555917025 CEST	192.168.2.6	1.1.1.1	0xf386	Standard query (0)	www.foxnews.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:26.556313038 CEST	192.168.2.6	1.1.1.1	0xa271	Standard query (0)	www.foxnews.com	65	IN (0x0001)	false
Oct 23, 2024 15:49:26.561980963 CEST	192.168.2.6	1.1.1.1	0x465a	Standard query (0)	moxie.foxnews.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:26.562213898 CEST	192.168.2.6	1.1.1.1	0xb28d	Standard query (0)	moxie.foxnews.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 23, 2024 15:49:20.105283976 CEST	1.1.1.1	192.168.2.6	0x6042	No error (0)	wxqlb.ecobusinessegypt.com		185.246.86.158	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:23.174148083 CEST	1.1.1.1	192.168.2.6	0x5fb5	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 23, 2024 15:49:23.175206900 CEST	1.1.1.1	192.168.2.6	0x1faa	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:23.859358072 CEST	1.1.1.1	192.168.2.6	0x2d7b	No error (0)	feeds.foxnews.com	j.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 15:49:23.872020006 CEST	1.1.1.1	192.168.2.6	0x6866	No error (0)	feeds.foxnews.com	j.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 15:49:24.838395119 CEST	1.1.1.1	192.168.2.6	0x67d3	No error (0)	moxie.foxnews.com	j.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 15:49:24.844633102 CEST	1.1.1.1	192.168.2.6	0xe17d	No error (0)	moxie.foxnews.com	moxie.foxnews.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 15:49:26.584259033 CEST	1.1.1.1	192.168.2.6	0xa271	No error (0)	www.foxnews.com	www.foxnews.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 15:49:26.586744070 CEST	1.1.1.1	192.168.2.6	0xf386	No error (0)	www.foxnews.com	www.foxnews.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 15:49:26.587879896 CEST	1.1.1.1	192.168.2.6	0xb28d	No error (0)	moxie.foxnews.com	moxie.foxnews.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 15:49:26.599788904 CEST	1.1.1.1	192.168.2.6	0x465a	No error (0)	moxie.foxnews.com	moxie.foxnews.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 15:49:32.360497952 CEST	1.1.1.1	192.168.2.6	0xfcea	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 15:49:32.360497952 CEST	1.1.1.1	192.168.2.6	0xfcea	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:50:11.730935097 CEST	1.1.1.1	192.168.2.6	0xdab7	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:50:11.730935097 CEST	1.1.1.1	192.168.2.6	0xdab7	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

fs.microsoft.com

wxqlb.ecobusinessegypt.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49716	185.246.86.158	80	5020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:49:20.119327068 CEST	506	OUT	GET /4Upeae17759oIun1207nsacmhsouq29959VLTMIPDLABHITRZ3224VGST20749x12 HTTP/1.1 Host: wxqlb.ecobusinessegypt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 23, 2024 15:49:20.935555935 CEST	711	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Address: gin_throttle_mw_360000000000_173.254.250.90 X-Ratelimit-Limit: 10 X-Ratelimit-Remaining: 9 X-Ratelimit-Reset: 1729694959 Date: Wed, 23 Oct 2024 13:49:19 GMT Content-Length: 458 Data Raw: 3c 73 63 72 69 70 74 3e 0a 6c 65 74 20 65 3d 6e 65 77 20 55 52 4c 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 65 2e 70 61 74 68 6e 61 6d 65 3d 22 2f 74 22 2b 65 2e 70 61 74 68 6e 61 6d 65 3b 6c 65 74 20 6f 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 26 26 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6f 3d 5b 22 67 6f 6f 67 6c 65 62 6f 74 22 2c 22 62 69 6e 67 62 6f 74 22 2c 22 79 61 6e 64 65 78 62 6f 74 22 2c 22 64 75 63 6b 64 75 63 6b 62 6f 74 22 2c 22 73 6c 75 72 70 22 2c 22 62 61 69 64 75 73 70 69 64 65 72 22 2c 22 66 61 63 65 62 6f 74 22 2c 22 69 61 5f 61 72 63 68 69 76 65 72 22 5d 2c 74 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6e 3d 30 3b 6e 3c 6f 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 74 2e 69 6e 64 65 78 4f 66 28 6f 5b 6e 5d 29 3e 2d 31 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 3f 73 65 74 54 [TRUNCATED] Data Ascii: <script>let e=new URL(window.location.href);e.pathname="/t"+e.pathname;let o=e.toString();navigator.cookieEnabled&&!function(e){for(var o=["googlebot","bingbot","yandexbot","duckduckbot","slurp","baiduspider","facebot","ia_archiver"],t=e.toLowerCase(),n=0;n<o.length;n++)if(t.indexOf(o[n])>-1)return!0;return!1}(navigator.userAgent)?setTimeout((function(){document.location.href=o}),1e3):console.log("bt");</script><p style="color:gray;">redirect...</p>
Oct 23, 2024 15:49:21.045120001 CEST	461	OUT	GET /favicon.ico HTTP/1.1 Host: wxqlb.ecobusinessegypt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://wxqlb.ecobusinessegypt.com/4Upeae17759oIun1207nsacmhsouq29959VLTMIPDLABHITRZ3224VGST20749x12 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 23, 2024 15:49:21.280476093 CEST	259	IN	HTTP/1.1 404 Not Found Content-Type: text/plain; charset=utf-8 X-Address: gin_throttle_mw_360000000000_173.254.250.90 X-Ratelimit-Limit: 10 X-Ratelimit-Remaining: 8 X-Ratelimit-Reset: 1729694959 Date: Wed, 23 Oct 2024 13:49:19 GMT Content-Length: 0
Oct 23, 2024 15:49:22.108990908 CEST	618	OUT	GET /t/4Upeae17759oIun1207nsacmhsouq29959VLTMIPDLABHITRZ3224VGST20749x12 HTTP/1.1 Host: wxqlb.ecobusinessegypt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://wxqlb.ecobusinessegypt.com/4Upeae17759oIun1207nsacmhsouq29959VLTMIPDLABHITRZ3224VGST20749x12 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 23, 2024 15:49:22.532428980 CEST	435	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Address: gin_throttle_mw_360000000000_173.254.250.90 X-Ratelimit-Limit: 10 X-Ratelimit-Remaining: 7 X-Ratelimit-Reset: 1729694959 Date: Wed, 23 Oct 2024 13:49:21 GMT Content-Length: 182 Data Raw: 3c 73 63 72 69 70 74 3e 0a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 27 2f 6e 65 77 73 3f 71 3d 4e 6f 74 20 61 6c 6c 6f 77 65 64 21 20 6c 69 73 74 23 30 33 27 3b 20 0a 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 72 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 6e 65 77 73 3f 71 3d 4e 6f 74 20 61 6c 6c 6f 77 65 64 21 20 6c 69 73 74 23 30 33 27 29 3b 0a 7d 2c 20 31 30 30 30 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 70 3e 3c 2f 70 3e 0a Data Ascii: <script>setTimeout(function(){ window.location.href = '/news?q=Not allowed! list#03'; console.log('redirecting to /news?q=Not allowed! list#03');}, 1000);</script><p></p>
Oct 23, 2024 15:49:23.580029011 CEST	581	OUT	GET /news?q=Not%20allowed!%20list HTTP/1.1 Host: wxqlb.ecobusinessegypt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://wxqlb.ecobusinessegypt.com/t/4Upeae17759oIun1207nsacmhsouq29959VLTMIPDLABHITRZ3224VGST20749x12 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 23, 2024 15:49:23.823510885 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Address: gin_throttle_mw_360000000000_173.254.250.90 X-Ratelimit-Limit: 10 X-Ratelimit-Remaining: 6 X-Ratelimit-Reset: 1729694959 Date: Wed, 23 Oct 2024 13:49:22 GMT Transfer-Encoding: chunked Data Raw: 38 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 46 6f 78 20 4e 65 77 73 20 57 6f 72 6c 64 20 52 53 53 20 46 65 65 64 20 20 2d 20 6d 61 72 72 6f 63 6f 74 61 67 69 6e 65 2e 63 6f 6d 20 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 34 66 36 66 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f [TRUNCATED] Data Ascii: 800<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Fox News World RSS Feed - marrocotagine.com </title> <style> body { font-family: Arial, sans-serif; background-color: #f4f6f9; color: #333; margin: 0; padding: 0; } .container { width: 80%; margin: 0 auto; } h1 { font-size: 2rem; margin: 2rem 0; } .news-item { background-color: white; padding: 1.5rem; margin-bottom: 1rem; box-shadow: 0 1px 3px rgba(0, 0, 0, 0.12), 0 1px 2px rgba(0, 0, 0, 0.24); } .news-item h2 { font-size: 1.5rem; margin-bottom: 1rem; } .news-item a { color: #1a73e8; text-decoration: none;
Oct 23, 2024 15:49:23.823548079 CEST	1236	IN	Data Raw: 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6e 65 77 73 2d 69 74 65 6d 20 61 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 20 20 20 20 20 20 Data Ascii: } .news-item a:hover { text-decoration: underline; } .news-item p { font-size: 1rem; margin-bottom: 0; } </style></head><body><div class="container"> <h1>Fox
Oct 23, 2024 15:49:23.823590994 CEST	1003	IN	Data Raw: 74 6c 65 64 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 67 75 69 64 20 3d 20 67 75 69 64 45 6c 65 6d 65 6e 74 20 3f 20 67 75 69 64 45 6c 65 6d 65 6e 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 20 3a 20 22 23 22 3b 0a 20 20 20 20 20 Data Ascii: tled"; const guid = guidElement ? guidElement.textContent : "#"; const description = descriptionElement ? descriptionElement.textContent : "No description available."; const content = contentElement ? conten
Oct 23, 2024 15:49:43.064301968 CEST	514	OUT	GET / HTTP/1.1 Host: wxqlb.ecobusinessegypt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://wxqlb.ecobusinessegypt.com/news?q=Not%20allowed!%20list Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 23, 2024 15:49:43.300683022 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Address: gin_throttle_mw_360000000000_173.254.250.90 X-Ratelimit-Limit: 10 X-Ratelimit-Remaining: 5 X-Ratelimit-Reset: 1729694959 Date: Wed, 23 Oct 2024 13:49:41 GMT Transfer-Encoding: chunked Data Raw: 38 30 30 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 6f 6d 69 6e 67 20 53 6f 6f 6e 20 2d 20 6d 61 72 72 6f 63 6f 74 61 67 69 6e 65 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 2e 63 73 73 22 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 3c 68 31 3e 4f 75 72 20 57 65 62 73 69 74 65 20 69 73 20 43 6f 6d 69 6e 67 20 53 6f [TRUNCATED] Data Ascii: 800<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Coming Soon - marrocotagine.com</title> <link rel="stylesheet" href="/assets/styles.css"></head><body><div class="container"> <h1>Our Website is Coming Soon!</h1> <p>We are working hard to give you the best experience. Stay tuned!</p> <div class="countdown"> <div class="countdown-item"> <span id="days">00</span> <label>Days</label> </div> <div class="countdown-item"> <span id="hours">00</span> <label>Hours</label> </div> <div class="countdown-item"> <span id="minutes">00</span> <label>Minutes</label> </div> <div class="countdown-item"> <span id="seconds">00</span> <label>Seconds</label> </div> </div> <form i
Oct 23, 2024 15:49:43.300719976 CEST	1236	IN	Data Raw: 64 3d 22 73 75 62 73 63 72 69 70 74 69 6f 6e 2d 66 6f 72 6d 22 20 6f 6e 73 75 62 6d 69 74 3d 22 73 75 62 6d 69 74 46 6f 72 6d 28 65 76 65 6e 74 29 22 3e 0a 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 65 6d 61 69 6c 22 20 69 64 Data Ascii: d="subscription-form" onsubmit="submitForm(event)"> <input type="email" id="email" placeholder="Enter your email" required> <button type="submit">Subscribe</button> <p id="subscription-message"></p> </form> <a h
Oct 23, 2024 15:49:43.300755978 CEST	424	IN	Data Raw: 6e 69 6e 67 20 25 20 28 31 30 30 30 20 2a 0a 20 20 20 20 20 20 20 20 20 20 20 20 36 30 29 29 20 2f 20 31 30 30 30 29 3b 0a 0a 20 20 20 20 20 20 20 20 64 61 79 73 45 6c 65 6d 65 6e 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 20 3d 20 64 61 79 73 2e 74 Data Ascii: ning % (1000 * 60)) / 1000); daysElement.textContent = days.toString().padStart(2, '0'); hoursElement.textContent = hours.toString().padStart(2, '0'); minutesElement.textContent = minutes.toString().padStar
Oct 23, 2024 15:49:43.300784111 CEST	261	IN	Data Raw: 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 65 6d 61 69 6c 27 29 2e 76 61 6c 75 65 3b 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 73 75 Data Ascii: cument.getElementById('email').value; document.getElementById('subscription-message').textContent = `Thank you for subscribing, ${email}!`; } updateCountdown(); setInterval(updateCountdown, 1000);</script></bod
Oct 23, 2024 15:49:43.319267988 CEST	356	OUT	GET /assets/styles.css HTTP/1.1 Host: wxqlb.ecobusinessegypt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://wxqlb.ecobusinessegypt.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 23, 2024 15:49:43.554245949 CEST	1236	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 1435 Content-Type: text/css; charset=utf-8 Last-Modified: Tue, 22 Oct 2024 13:37:43 GMT Date: Wed, 23 Oct 2024 13:49:42 GMT Data Raw: 62 6f 64 79 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 30 66 30 66 30 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 33 30 70 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 70 78 3b 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 34 70 78 20 36 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 3b 0a 20 20 20 20 [TRUNCATED] Data Ascii: body { font-family: Arial, sans-serif; background-color: #f0f0f0; display: flex; justify-content: center; align-items: center; height: 100vh; margin: 0; padding: 0;}.container { background-color: #ffffff; padding: 30px; border-radius: 10px; box-shadow: 0 4px 6px rgba(0, 0, 0, 0.1); text-align: center;}h1 { font-size: 36px; margin-bottom: 20px; color: #333;}p { font-size: 18px; color: #777; margin-bottom: 40px;}.countdown { display: flex; justify-content: center; margin-bottom: 40px;}.countdown-item { display: inline-block; margin: 0 10px;}.countdown-item span { font-size: 24px; color: #444;}.countdown-item label { display: block; font-size: 14px; color: #999;}form { display: flex; justify-content: center; align-items: center; flex-direction: column;}input[type="email"] { font-size: 16px; padding: 10px; border: 1px solid #ccc; [TRUNCATED]
Oct 23, 2024 15:49:43.554284096 CEST	212	IN	Data Raw: 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 30 30 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 62 75 74 74 6f 6e 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 20 Data Ascii: max-width: 300px; margin-bottom: 20px;}button { font-size: 16px; padding: 10px 20px; background-color: #333; color: #fff; border: none; border-radius: 5px; cursor: pointer;
Oct 23, 2024 15:49:43.554317951 CEST	172	IN	Data Raw: 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 30 2e 33 73 3b 0a 7d 0a 0a 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 35 35 35 Data Ascii: transition: background-color 0.3s;}button:hover { background-color: #555;}#subscription-message { font-size: 14px; color: #333; margin-top: 10px;}
Oct 23, 2024 15:49:56.584521055 CEST	490	OUT	GET /news HTTP/1.1 Host: wxqlb.ecobusinessegypt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://wxqlb.ecobusinessegypt.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 23, 2024 15:49:56.819327116 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Address: gin_throttle_mw_360000000000_173.254.250.90 X-Ratelimit-Limit: 10 X-Ratelimit-Remaining: 4 X-Ratelimit-Reset: 1729694959 Date: Wed, 23 Oct 2024 13:49:55 GMT Transfer-Encoding: chunked Data Raw: 38 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 46 6f 78 20 4e 65 77 73 20 57 6f 72 6c 64 20 52 53 53 20 46 65 65 64 20 20 2d 20 6d 61 72 72 6f 63 6f 74 61 67 69 6e 65 2e 63 6f 6d 20 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 34 66 36 66 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f [TRUNCATED] Data Ascii: 800<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Fox News World RSS Feed - marrocotagine.com </title> <style> body { font-family: Arial, sans-serif; background-color: #f4f6f9; color: #333; margin: 0; padding: 0; } .container { width: 80%; margin: 0 auto; } h1 { font-size: 2rem; margin: 2rem 0; } .news-item { background-color: white; padding: 1.5rem; margin-bottom: 1rem; box-shadow: 0 1px 3px rgba(0, 0, 0, 0.12), 0 1px 2px rgba(0, 0, 0, 0.24); } .news-item h2 { font-size: 1.5rem; margin-bottom: 1rem; } .news-item a { color: #1a73e8; text-decoration: none;
Oct 23, 2024 15:49:56.819350004 CEST	1236	IN	Data Raw: 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6e 65 77 73 2d 69 74 65 6d 20 61 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 20 20 20 20 20 20 Data Ascii: } .news-item a:hover { text-decoration: underline; } .news-item p { font-size: 1rem; margin-bottom: 0; } </style></head><body><div class="container"> <h1>Fox
Oct 23, 2024 15:49:56.819361925 CEST	424	IN	Data Raw: 74 6c 65 64 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 67 75 69 64 20 3d 20 67 75 69 64 45 6c 65 6d 65 6e 74 20 3f 20 67 75 69 64 45 6c 65 6d 65 6e 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 20 3a 20 22 23 22 3b 0a 20 20 20 20 20 Data Ascii: tled"; const guid = guidElement ? guidElement.textContent : "#"; const description = descriptionElement ? descriptionElement.textContent : "No description available."; const content = contentElement ? conten
Oct 23, 2024 15:49:56.819964886 CEST	579	IN	Data Raw: 6e 6e 65 72 48 54 4d 4c 20 3d 20 60 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 3e 3c 61 20 68 72 65 66 3d 22 24 7b 67 75 69 64 7d 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 24 7b 74 69 74 6c 65 7d 3c 2f 61 3e 3c 2f 68 32 3e 0a 20 Data Ascii: nnerHTML = ` <h2><a href="${guid}" target="_blank">${title}</a></h2> <p>${description}</p> <div>${content}</div> `; newsItemsContainer.appendChild(newsItem); }); }; (asy
Oct 23, 2024 15:50:09.782731056 CEST	490	OUT	GET / HTTP/1.1 Host: wxqlb.ecobusinessegypt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://wxqlb.ecobusinessegypt.com/news Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 23, 2024 15:50:10.033843994 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Address: gin_throttle_mw_360000000000_173.254.250.90 X-Ratelimit-Limit: 10 X-Ratelimit-Remaining: 3 X-Ratelimit-Reset: 1729694959 Date: Wed, 23 Oct 2024 13:50:08 GMT Transfer-Encoding: chunked Data Raw: 38 30 30 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 6f 6d 69 6e 67 20 53 6f 6f 6e 20 2d 20 6d 61 72 72 6f 63 6f 74 61 67 69 6e 65 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 2e 63 73 73 22 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 3c 68 31 3e 4f 75 72 20 57 65 62 73 69 74 65 20 69 73 20 43 6f 6d 69 6e 67 20 53 6f [TRUNCATED] Data Ascii: 800<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Coming Soon - marrocotagine.com</title> <link rel="stylesheet" href="/assets/styles.css"></head><body><div class="container"> <h1>Our Website is Coming Soon!</h1> <p>We are working hard to give you the best experience. Stay tuned!</p> <div class="countdown"> <div class="countdown-item"> <span id="days">00</span> <label>Days</label> </div> <div class="countdown-item"> <span id="hours">00</span> <label>Hours</label> </div> <div class="countdown-item"> <span id="minutes">00</span> <label>Minutes</label> </div> <div class="countdown-item"> <span id="seconds">00</span> <label>Seconds</label> </div> </div> <form i
Oct 23, 2024 15:50:23.768040895 CEST	490	OUT	GET /news HTTP/1.1 Host: wxqlb.ecobusinessegypt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://wxqlb.ecobusinessegypt.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 23, 2024 15:50:24.003078938 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Address: gin_throttle_mw_360000000000_173.254.250.90 X-Ratelimit-Limit: 10 X-Ratelimit-Remaining: 2 X-Ratelimit-Reset: 1729694959 Date: Wed, 23 Oct 2024 13:50:22 GMT Transfer-Encoding: chunked Data Raw: 38 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 46 6f 78 20 4e 65 77 73 20 57 6f 72 6c 64 20 52 53 53 20 46 65 65 64 20 20 2d 20 6d 61 72 72 6f 63 6f 74 61 67 69 6e 65 2e 63 6f 6d 20 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 34 66 36 66 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f [TRUNCATED] Data Ascii: 800<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Fox News World RSS Feed - marrocotagine.com </title> <style> body { font-family: Arial, sans-serif; background-color: #f4f6f9; color: #333; margin: 0; padding: 0; } .container { width: 80%; margin: 0 auto; } h1 { font-size: 2rem; margin: 2rem 0; } .news-item { background-color: white; padding: 1.5rem; margin-bottom: 1rem; box-shadow: 0 1px 3px rgba(0, 0, 0, 0.12), 0 1px 2px rgba(0, 0, 0, 0.24); } .news-item h2 { font-size: 1.5rem; margin-bottom: 1rem; } .news-item a { color: #1a73e8; text-decoration: none;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49717	185.246.86.158	80	5020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:50:05.128607035 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49710	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:19 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 69 64 53 72 65 4d 6e 36 67 45 71 69 7a 71 56 46 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 34 30 62 32 35 64 38 31 39 66 38 65 34 37 36 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: idSreMn6gEqizqVF.1Context: b40b25d819f8e476
2024-10-23 13:49:19 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-23 13:49:19 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 69 64 53 72 65 4d 6e 36 67 45 71 69 7a 71 56 46 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 34 30 62 32 35 64 38 31 39 66 38 65 34 37 36 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 36 7a 78 70 2b 4c 4a 7a 4b 53 55 77 31 38 63 4f 36 39 57 34 4a 49 79 63 35 55 71 4a 75 68 2f 4e 6a 54 46 4f 55 59 6b 2b 31 38 59 73 50 35 75 70 47 56 74 6b 54 6f 64 72 6c 74 52 75 74 57 6d 71 53 31 69 33 52 2b 63 2f 57 75 4a 68 62 34 52 59 77 52 5a 38 58 53 36 39 75 65 49 6b 4f 37 51 74 64 32 76 73 4e 5a 64 76 6b 59 7a 34 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: idSreMn6gEqizqVF.2Context: b40b25d819f8e476<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAU6zxp+LJzKSUw18cO69W4JIyc5UqJuh/NjTFOUYk+18YsP5upGVtkTodrltRutWmqS1i3R+c/WuJhb4RYwRZ8XS69ueIkO7Qtd2vsNZdvkYz4
2024-10-23 13:49:19 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 69 64 53 72 65 4d 6e 36 67 45 71 69 7a 71 56 46 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 34 30 62 32 35 64 38 31 39 66 38 65 34 37 36 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: idSreMn6gEqizqVF.3Context: b40b25d819f8e476<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-23 13:49:19 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-23 13:49:19 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6e 74 30 78 44 48 2b 7a 5a 45 61 47 34 62 6d 2f 61 70 7a 71 2b 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: nt0xDH+zZEaG4bm/apzq+Q.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.6	49718	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:21 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:21 UTC	561	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:21 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 21 Oct 2024 13:21:21 GMT ETag: "0x8DCF1D34132B902" x-ms-request-id: 84bcd95b-b01e-001e-1a38-240214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134921Z-17fbfdc98bbx648l6xmxqcmf2000000005yg000000000zkq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 13:49:21 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-23 13:49:21 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-23 13:49:21 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-23 13:49:21 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-23 13:49:21 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-23 13:49:21 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-23 13:49:21 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-23 13:49:21 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-23 13:49:21 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-23 13:49:21 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.6	49724	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:23 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:23 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 52fc638d-b01e-0070-36c5-201cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134923Z-r1755647c66h2wzt2z0cr0zc7400000002dg0000000065w0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:23 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.6	49727	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:23 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:23 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 509f9858-c01e-00a2-4459-232327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134923Z-17fbfdc98bbl89flqtm21qm6rn000000062g000000000aem x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:23 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.6	49723	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:23 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:23 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: b8a73167-901e-0015-0f59-23b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134923Z-17fbfdc98bbnhb2b0umpa641c800000005t0000000004zrs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:23 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.6	49726	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:23 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:23 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134923Z-r1755647c66xn9fj09y3bhxnh40000000920000000006e2y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:23 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.6	49725	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:23 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:23 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 269e024f-201e-0000-0ce5-20a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134923Z-r1755647c66z4pt7cv1pnqayy400000008cg00000000391r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:23 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.6	49730	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:24 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:24 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: a0191c6f-501e-0047-3c5d-23ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134924Z-17fbfdc98bb2fzn810kvcg2zng000000062g000000000wrt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:24 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.6	49729	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:24 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:24 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: e3ea90ed-d01e-0028-6059-237896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134924Z-17fbfdc98bbx648l6xmxqcmf2000000005vg000000004nyx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:24 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.6	49731	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:24 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:24 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e1deb6d3-201e-006e-700b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134924Z-r1755647c66vrwbmeqw88hpesn000000080g000000006puq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:24 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.6	49734	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:24 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:24 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 895e1389-601e-005c-16b8-20f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134924Z-r1755647c66zkj29xnfn2r3bwn00000005bg000000007t1y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:24 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49733	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:24 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 13:49:24 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=97008 Date: Wed, 23 Oct 2024 13:49:24 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.6	49732	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:24 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:24 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: fbb8ce34-501e-0064-0cbd-201f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134924Z-r1755647c66vrwbmeqw88hpesn000000081g000000006gp0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:24 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.6	49738	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:25 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:25 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1b2fb3ba-201e-0033-65ce-20b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134925Z-r1755647c66nxct5p0gnwngmx000000007q0000000000chq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:25 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.6	49737	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:25 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:25 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 13862abc-a01e-0053-5aa2-218603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134925Z-17fbfdc98bbvf2fnx6t6w0g25n00000005z0000000003qf1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:25 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.6	49736	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:25 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:25 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 20eafa8b-401e-0067-4901-2009c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134925Z-r1755647c66sn7s9kfw6gzvyp000000008eg000000000cvy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:25 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.6	49741	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:25 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:25 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7de7ed35-901e-005b-7c14-222005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134925Z-r1755647c66xn9fj09y3bhxnh4000000093g000000004k81 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:25 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.6	49740	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:25 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:25 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 68d87b8f-401e-0064-59c9-2054af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134925Z-r1755647c66lljn2k9s29ch9ts00000008c0000000003x7m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:25 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:25 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 13:49:26 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=96975 Date: Wed, 23 Oct 2024 13:49:26 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-23 13:49:26 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49743	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:25 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:26 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: bb9292ef-d01e-00ad-5d35-21e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134926Z-r1755647c66z4pt7cv1pnqayy40000000880000000007b6k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:26 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	49744	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:26 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:26 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 5e1d4904-301e-0020-1550-236299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134926Z-17fbfdc98bb7k7m5sdc8baghes00000005ug000000007sx0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:26 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.6	49745	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:26 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:26 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4cd68789-d01e-0017-448e-21b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134926Z-r1755647c66z4pt7cv1pnqayy400000008e0000000000y9d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:26 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49747	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:26 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:26 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 1c1a6b29-f01e-0096-0e50-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134926Z-17fbfdc98bbq2x5bzrteug30v800000005ug000000005f1u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:26 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	49746	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:26 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:26 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: c30aac03-701e-0098-3e64-23395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134926Z-17fbfdc98bb6j78ntkx6e2fx4c00000005ug000000003hu4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:26 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.6	49748	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:26 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:26 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: ab91094f-501e-008f-72f7-219054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134926Z-r1755647c66sn7s9kfw6gzvyp000000008bg000000003z37 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:27 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	49749	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:26 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:26 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: fc96bee5-501e-00a3-3f0b-22c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134926Z-r1755647c66f2zlraraf0y5hrs00000006xg000000000dba x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:27 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	49750	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:26 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:27 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: b93710ac-501e-007b-525a-235ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134927Z-17fbfdc98bbndwgn5b4pg7s8bs00000005sg0000000058pu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:27 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	49752	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:27 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:27 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 8ee7b399-e01e-0033-0c50-234695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134927Z-17fbfdc98bbvf2fnx6t6w0g25n00000005ug000000006nx7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:27 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	49753	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:27 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:27 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 8a7344d1-601e-0084-805a-236b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134927Z-17fbfdc98bbnpjstwqrbe0re7n00000005s0000000006wxu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:27 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	49756	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:28 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:28 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 58585528-701e-000d-4f7a-236de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134928Z-17fbfdc98bbndwgn5b4pg7s8bs00000005t00000000053cr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:28 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.6	49755	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:28 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:28 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3cf1b782-701e-0001-32e5-21b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134928Z-r1755647c66h2wzt2z0cr0zc7400000002h0000000002h6g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:28 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.6	49754	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:28 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:28 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 6ff76e76-001e-002b-21c5-2099f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134928Z-17fbfdc98bbnhb2b0umpa641c800000005tg000000004n8p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:28 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.6	49757	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:28 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:28 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 55f0b2c4-501e-008f-5c50-239054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134928Z-17fbfdc98bbmh88pm95yr8cy5n00000004tg00000000470u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:28 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.6	49758	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:28 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:28 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 265f42d2-801e-0047-38c8-207265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134928Z-r1755647c66dj7986akr8tvaw400000007m00000000045u3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:28 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.6	49760	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:29 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:29 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 9e0e1983-701e-003e-2856-2379b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134929Z-r1755647c66zkj29xnfn2r3bwn00000005eg000000005p6b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:29 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	49761	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:29 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:29 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 5fe4afb9-d01e-008e-4659-23387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134929Z-17fbfdc98bbkw9phumvsc7yy8w00000005v00000000058n0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:29 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.6	49759	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:29 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 47 77 37 51 67 58 5a 49 69 45 2b 33 67 4c 30 56 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 35 66 32 64 34 36 39 30 61 32 39 61 38 64 35 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: Gw7QgXZIiE+3gL0V.1Context: e5f2d4690a29a8d5
2024-10-23 13:49:29 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-23 13:49:29 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 47 77 37 51 67 58 5a 49 69 45 2b 33 67 4c 30 56 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 35 66 32 64 34 36 39 30 61 32 39 61 38 64 35 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 36 7a 78 70 2b 4c 4a 7a 4b 53 55 77 31 38 63 4f 36 39 57 34 4a 49 79 63 35 55 71 4a 75 68 2f 4e 6a 54 46 4f 55 59 6b 2b 31 38 59 73 50 35 75 70 47 56 74 6b 54 6f 64 72 6c 74 52 75 74 57 6d 71 53 31 69 33 52 2b 63 2f 57 75 4a 68 62 34 52 59 77 52 5a 38 58 53 36 39 75 65 49 6b 4f 37 51 74 64 32 76 73 4e 5a 64 76 6b 59 7a 34 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: Gw7QgXZIiE+3gL0V.2Context: e5f2d4690a29a8d5<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAU6zxp+LJzKSUw18cO69W4JIyc5UqJuh/NjTFOUYk+18YsP5upGVtkTodrltRutWmqS1i3R+c/WuJhb4RYwRZ8XS69ueIkO7Qtd2vsNZdvkYz4
2024-10-23 13:49:29 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 47 77 37 51 67 58 5a 49 69 45 2b 33 67 4c 30 56 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 35 66 32 64 34 36 39 30 61 32 39 61 38 64 35 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: Gw7QgXZIiE+3gL0V.3Context: e5f2d4690a29a8d5<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-23 13:49:29 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-23 13:49:29 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 70 48 61 52 46 66 57 49 54 6b 71 53 48 69 7a 42 55 68 78 6f 6d 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: pHaRFfWITkqSHizBUhxomg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	49762	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:29 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:29 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 46af3d48-701e-0032-6627-21a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134929Z-r1755647c66m4jttnz6nb8kzng00000006qg000000007xk1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:29 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	49763	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:29 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:29 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 5cd52618-301e-0033-5865-23fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134929Z-17fbfdc98bbqc8zsbguzmabx6800000005ng0000000096x2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:29 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.6	49764	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:29 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:29 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: ee1aea59-301e-0052-0750-2365d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134929Z-17fbfdc98bb75b2fuh11781a0n00000005s0000000006701 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:29 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.6	49766	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:30 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:30 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: e337ee23-e01e-003c-1ecf-20c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134930Z-r1755647c66d87vp2n0g7qt8bn00000007g0000000006wpg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:30 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.6	49765	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:30 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:30 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 8700b1e1-801e-008f-0e93-212c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134930Z-r1755647c66zkj29xnfn2r3bwn00000005g0000000004h2n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:30 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.6	49769	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:30 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:30 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 1b8ca13b-901e-008f-4667-2067a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134930Z-r1755647c66z4pt7cv1pnqayy400000008a0000000005zq5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:30 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	49768	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:30 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:30 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: d9d4df84-d01e-00ad-0964-23e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134930Z-17fbfdc98bb7qlzm4x52d2225c00000005sg0000000071fc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:30 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.6	49767	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:30 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:30 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: f5c3fbe0-b01e-0002-646f-231b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134930Z-17fbfdc98bbcrtjhdvnfuyp2880000000620000000002d6e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:30 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	49771	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:31 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:31 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: f6d2fe15-801e-007b-74f2-21e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134931Z-r1755647c66c9glmgg3prd89mn00000008ag00000000560c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:31 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	49770	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:31 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:31 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 3589f4cc-c01e-0079-731b-24e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134931Z-r1755647c66nfj7t97c2qyh6zg00000005500000000055c6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:31 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	49773	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:31 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:31 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 7a637aca-b01e-0002-3c05-221b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134931Z-r1755647c66j878m0wkraqty3800000006tg000000005q01 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:31 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.6	49772	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:31 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:31 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 68ab0001-401e-0064-04b8-2054af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134931Z-r1755647c66kmfl29f2su56tc4000000092g0000000053fx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:31 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	49774	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:31 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:31 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 8d905448-c01e-0079-0365-23e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134931Z-17fbfdc98bb7k7m5sdc8baghes00000005zg000000002g80 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:31 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.6	49776	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:32 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:32 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 71d2c1fc-001e-00a2-01de-21d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134932Z-r1755647c66cdf7jx43n17haqc000000093g0000000048gv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:32 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.6	49777	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:32 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:32 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0688ef78-901e-0029-5550-23274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134932Z-17fbfdc98bbg2mc9qrpn009kgs0000000630000000000qy8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:32 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.6	49778	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:32 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:32 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: e93de7dd-201e-006e-73e3-20bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134932Z-r1755647c66ldfgxa3qp9d53us0000000870000000008by2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:32 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.6	49779	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:32 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:32 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 9cd877b9-501e-0016-1f56-23181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134932Z-17fbfdc98bb7k7m5sdc8baghes00000005wg000000005tdq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:32 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.6	49780	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:32 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:32 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e692d532-001e-00a2-3ae7-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134932Z-r1755647c66k9st9tvd58z9dg800000008bg000000003x6u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:32 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.6	49781	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:32 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:32 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: b6a35dc4-401e-008c-3156-2386c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134932Z-17fbfdc98bbqc8zsbguzmabx6800000005q0000000006n63 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:33 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.6	49782	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:32 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:32 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 7fcc546d-701e-001e-80a3-21f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134932Z-r1755647c66fnxpdavnqahfp1w00000006ng000000000y76 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:33 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.6	49783	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:33 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:33 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 14f65908-801e-008f-32d6-202c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134933Z-r1755647c66m4jttnz6nb8kzng00000006t0000000005ktp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:33 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.6	49785	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:33 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:33 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: f94d3c24-301e-001f-4850-23aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134933Z-17fbfdc98bbrx2rj4asdpg8sbs00000001qg0000000080t1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:33 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.6	49784	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:33 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:33 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d4a2e493-801e-0048-07d3-20f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134933Z-r1755647c66r2hg89mqr09g9w000000000t00000000008xb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:33 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.6	49788	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:34 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:34 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 750d06c7-901e-0083-2d5b-20bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134934Z-r1755647c66cdf7jx43n17haqc000000093g0000000048n9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:35 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.6	49787	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:34 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:34 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 8832b605-d01e-0014-3350-23ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134934Z-17fbfdc98bbcrtjhdvnfuyp2880000000630000000000gsx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:35 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.6	49789	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:34 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:35 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 97d7c53d-b01e-001e-2be3-200214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134935Z-r1755647c66dj7986akr8tvaw400000007hg000000006u0k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:35 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.6	49790	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:34 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:35 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 9efc2aad-501e-000a-0592-1f0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134935Z-r1755647c66prnf6k99z0m3kzc00000008d0000000002hkk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:35 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	49791	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:34 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:35 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: e131a16a-201e-005d-6a5d-23afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134935Z-17fbfdc98bbvcvlzx1n0fduhm00000000610000000003t6t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:35 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.6	49796	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:35 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:35 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: df53dfe1-801e-0067-2856-23fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134935Z-17fbfdc98bbl89flqtm21qm6rn000000062g000000000ahd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:36 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.6	49795	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:35 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:35 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: ae9ee863-001e-000b-78d3-2015a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134935Z-r1755647c66nfj7t97c2qyh6zg0000000560000000004h6n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:36 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.6	49794	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:35 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:35 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: fc76d5e5-a01e-003d-2e6c-2398d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134935Z-17fbfdc98bbndwgn5b4pg7s8bs00000005r00000000069pc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:36 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.6	49797	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:35 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:35 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: e131a4b8-201e-005d-245d-23afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134935Z-17fbfdc98bbpc9nz0r22pywp08000000061g000000002x16 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:36 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.6	49793	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:35 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:35 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 1c36e671-f01e-0096-085a-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134935Z-17fbfdc98bbrx2rj4asdpg8sbs00000001xg000000000qaz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:36 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.6	49798	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:36 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:36 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 34547014-f01e-003f-75cc-20d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134936Z-r1755647c66f2zlraraf0y5hrs00000006tg000000005rkn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:37 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.6	49800	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:37 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:37 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 931f542e-301e-000c-75f2-21323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134937Z-r1755647c66mgrw7zd8m1pn55000000006xg000000000tr9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:38 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.6	49801	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:37 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:37 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: ea95fade-601e-003e-6b5d-233248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134937Z-r1755647c669hnl7dkxy835cqc000000061g000000006ugn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:38 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.6	49799	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:37 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:37 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 310b9d61-301e-0051-4f21-2138bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134937Z-r1755647c66j878m0wkraqty3800000006rg000000007mxa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:38 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.6	49802	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:38 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:38 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 33ac99f4-801e-0015-0d56-23f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134938Z-17fbfdc98bb94gkbvedtsa5ef400000005x0000000004znz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:38 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.6	49803	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:38 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:38 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 5871072e-001e-0034-4bb0-20dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134938Z-r1755647c66lljn2k9s29ch9ts00000008a00000000060h6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:38 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.6	49806	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:38 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:38 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: ec87b83f-a01e-0053-3f64-238603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134938Z-17fbfdc98bb7k7m5sdc8baghes00000005yg000000004129 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:38 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.6	49804	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:38 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:38 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:38 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: f46f8e47-e01e-00aa-72c7-20ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134938Z-r1755647c66dj7986akr8tvaw400000007m000000000462e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:38 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.6	49805	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:38 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:38 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d7699e86-701e-0050-405d-236767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134938Z-17fbfdc98bbwfg2nvhsr4h37pn00000005v00000000066u2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:38 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.6	49807	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:38 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:38 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2df5d45d-601e-003e-40f7-213248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134938Z-r1755647c66x46wg1q56tyyk6800000007ng000000002tw5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:39 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.6	49809	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:39 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:39 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 5347cb69-b01e-0070-29de-201cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134939Z-r1755647c66sxs9zhy17bg185w00000009300000000056zp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:39 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.6	49810	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:39 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:39 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 3ee1fb64-201e-00aa-2159-233928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134939Z-17fbfdc98bb7qlzm4x52d2225c00000005v00000000056ap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:39 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.6	49808	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:39 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:39 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:39 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 4aa30514-001e-0014-5150-235151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134939Z-17fbfdc98bb2fzn810kvcg2zng0000000630000000000fkf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:39 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.6	49812	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:39 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:40 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:39 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 6d4b4f71-e01e-00aa-4a56-23ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134939Z-17fbfdc98bbkw9phumvsc7yy8w00000005w0000000004ved x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:40 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.6	49811	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:39 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:40 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:40 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 9175aec4-101e-0028-2a56-238f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134940Z-r1755647c66tmf6g4720xfpwpn0000000950000000002s3q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:40 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.6	49814	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:40 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:40 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:40 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d0d0f8e5-601e-000d-298c-212618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134940Z-r1755647c66mgrw7zd8m1pn55000000006t0000000005x64 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:40 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.6	49813	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:40 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:40 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:40 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 639ae494-d01e-0082-069a-20e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134940Z-r1755647c66mgrw7zd8m1pn55000000006x0000000001nrs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:40 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.6	49815	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:40 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:40 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:40 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 46032cb8-c01e-007a-5b59-23b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134940Z-17fbfdc98bbvf2fnx6t6w0g25n000000060g000000001bzd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:40 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.6	49817	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:40 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:40 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:40 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 514e14b5-c01e-0014-51c9-20a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134940Z-r1755647c66zs9x4962sbyaz1w00000006n0000000000ehk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:40 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.6	49816	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:40 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:40 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:40 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 55d9b643-201e-003f-330b-226d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134940Z-r1755647c669hnl7dkxy835cqc0000000630000000004zvk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:40 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.6	49819	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:41 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:41 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:41 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 37f3233a-001e-0082-4c59-235880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134941Z-17fbfdc98bbkw9phumvsc7yy8w00000005w0000000004vf0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:41 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.6	49818	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:41 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:41 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:41 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 43dfc4f6-a01e-0070-0300-1d573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134941Z-17fbfdc98bbpc9nz0r22pywp08000000061g000000002x4k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:41 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.6	49820	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:41 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:41 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:41 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 44b73ccb-201e-0096-2a5d-23ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134941Z-r1755647c66j878m0wkraqty3800000006sg0000000073ak x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:41 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.6	49821	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:41 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:41 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:41 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 44b68622-401e-0067-4450-2309c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134941Z-17fbfdc98bbx648l6xmxqcmf2000000005v0000000004z1c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:41 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.6	49822	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:41 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:41 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:41 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 6dbd05ca-401e-0078-0659-234d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134941Z-17fbfdc98bb7qlzm4x52d2225c00000005y0000000001s43 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:41 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.6	49823	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:42 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:42 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:42 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: c39afafb-e01e-001f-695d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134942Z-17fbfdc98bbcrtjhdvnfuyp2880000000620000000002ddc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:42 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.6	49824	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:42 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:42 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:42 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 7898325b-901e-00ac-11c9-20b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134942Z-r1755647c66d87vp2n0g7qt8bn00000007p0000000002e9c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:42 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.6	49825	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:42 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:42 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:42 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: facc6f57-201e-006e-7356-23bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134942Z-17fbfdc98bb7qlzm4x52d2225c00000005xg000000002gfn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:42 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.6	49826	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:42 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:42 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:42 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 816a6405-301e-001f-06d8-21aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134942Z-r1755647c66mgrw7zd8m1pn55000000006r0000000007ahf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:42 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.6	49827	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:42 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:42 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:42 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 31e4fe8c-301e-0033-38f2-21fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134942Z-r1755647c66vrwbmeqw88hpesn0000000800000000006zsh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:42 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.6	49828	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:43 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:43 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:43 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 2a979a5c-f01e-003f-77f7-21d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134943Z-r1755647c66f2zlraraf0y5hrs00000006u0000000005hvb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:43 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.6	49829	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:43 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:43 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:43 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: d2e4573f-901e-0067-4de3-20b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134943Z-r1755647c66qqfh4kbna50rqv400000008zg000000007gx9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:43 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.6	49830	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:43 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:43 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:43 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 33f58e49-701e-0053-6bb3-203a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134943Z-r1755647c66ww2rh494kknq3r00000000930000000005kyt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:43 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.6	49831	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:43 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:43 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:43 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e682fb07-001e-00a2-2ae3-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134943Z-r1755647c66xrxq4nv7upygh4s00000001sg000000006t69 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:43 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.6	49832	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:43 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:43 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:43 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 106adab5-b01e-0001-11da-2046e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134943Z-r1755647c66lljn2k9s29ch9ts00000008c0000000003xeq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:43 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.6	49835	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:44 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:44 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:44 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 0efe6ec1-b01e-0053-7d56-23cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134944Z-17fbfdc98bbx4f4q0941cebmvs00000005wg00000000121z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:44 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.6	49836	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:44 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:44 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:44 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: cc75a80d-201e-0096-720b-22ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134944Z-r1755647c66kv68zfmyfrbcqzg00000006vg000000003m8n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:44 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.6	49833	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:44 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:44 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:44 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 0f0ed433-b01e-0053-635d-23cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134944Z-17fbfdc98bbqc8zsbguzmabx6800000005p00000000074zf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:44 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.6	49837	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:44 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:44 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:44 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 654233af-a01e-001e-0b27-2149ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134944Z-17fbfdc98bbcrtjhdvnfuyp28800000005w00000000084px x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:44 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.6	49838	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:44 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:44 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:44 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 97ea84b8-d01e-005a-0430-217fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134944Z-r1755647c66z4pt7cv1pnqayy40000000870000000008cdq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:44 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.6	49840	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:45 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:45 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:45 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: f0881de6-001e-002b-6759-2399f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134945Z-17fbfdc98bb8xnvm6t4x6ec5m400000005ng0000000078sp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:45 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.6	49842	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:45 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:45 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:45 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: b9c92f65-401e-0016-1c27-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134945Z-r1755647c669hnl7dkxy835cqc00000006600000000017uh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:45 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.6	49841	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:45 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:45 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:45 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 062c286a-b01e-005c-0c8e-214c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134945Z-r1755647c66c9glmgg3prd89mn00000008dg000000001r08 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:45 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.6	49843	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:45 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:45 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:45 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: c1deb205-c01e-0034-7e92-1f2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134945Z-r1755647c66xn9fj09y3bhxnh4000000095g000000002dtk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:45 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.6	49844	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:46 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:46 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:46 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: f5f98d55-001e-0049-58e4-215bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134946Z-r1755647c66sxs9zhy17bg185w00000008zg000000008r53 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:46 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.6	49845	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:46 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:46 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:46 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: c39b20d8-e01e-001f-4a5d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134946Z-r1755647c66zs9x4962sbyaz1w00000006kg000000002uwa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:46 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.6	49847	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:46 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:46 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:46 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: baa41b4f-401e-00ac-2c28-210a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134946Z-r1755647c66f2zlraraf0y5hrs00000006s0000000007u35 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:46 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.6	49846	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:46 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:46 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:46 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: b71c6767-a01e-0021-3a5a-23814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134946Z-17fbfdc98bb9tt772yde9rhbm800000005u0000000005gr9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:46 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.6	49839	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:46 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:46 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:46 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 5342d47f-d01e-0028-2f83-217896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134946Z-r1755647c669hnl7dkxy835cqc0000000650000000003311 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:46 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.6	49848	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:47 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:47 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:47 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: e1e0bfc6-201e-006e-0e0b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134947Z-r1755647c66nfj7t97c2qyh6zg00000005500000000055kc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:47 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.6	49851	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:47 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:47 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:47 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: b72677c2-a01e-0021-325d-23814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134947Z-17fbfdc98bbwfg2nvhsr4h37pn00000005y0000000004611 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:47 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.6	49849	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:47 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:47 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:47 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 4e9f4159-f01e-005d-3228-2113ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134947Z-r1755647c66nfj7t97c2qyh6zg00000005800000000025ep x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:47 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.6	49850	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:47 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:47 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:47 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 728679af-d01e-007a-566c-23f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134947Z-17fbfdc98bbnhb2b0umpa641c800000005t0000000004zzk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:47 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.6	49852	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:47 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:47 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:47 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: efa6dde7-e01e-0071-750c-2208e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134947Z-r1755647c66k9st9tvd58z9dg800000008900000000067pf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:47 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.6	49853	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:48 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 43 70 54 76 48 5a 44 6e 6b 6b 65 4c 74 57 55 77 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 35 64 65 65 32 30 65 61 64 32 30 34 32 62 33 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: CpTvHZDnkkeLtWUw.1Context: 35dee20ead2042b3
2024-10-23 13:49:48 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-23 13:49:48 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 43 70 54 76 48 5a 44 6e 6b 6b 65 4c 74 57 55 77 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 35 64 65 65 32 30 65 61 64 32 30 34 32 62 33 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 36 7a 78 70 2b 4c 4a 7a 4b 53 55 77 31 38 63 4f 36 39 57 34 4a 49 79 63 35 55 71 4a 75 68 2f 4e 6a 54 46 4f 55 59 6b 2b 31 38 59 73 50 35 75 70 47 56 74 6b 54 6f 64 72 6c 74 52 75 74 57 6d 71 53 31 69 33 52 2b 63 2f 57 75 4a 68 62 34 52 59 77 52 5a 38 58 53 36 39 75 65 49 6b 4f 37 51 74 64 32 76 73 4e 5a 64 76 6b 59 7a 34 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: CpTvHZDnkkeLtWUw.2Context: 35dee20ead2042b3<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAU6zxp+LJzKSUw18cO69W4JIyc5UqJuh/NjTFOUYk+18YsP5upGVtkTodrltRutWmqS1i3R+c/WuJhb4RYwRZ8XS69ueIkO7Qtd2vsNZdvkYz4
2024-10-23 13:49:48 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 43 70 54 76 48 5a 44 6e 6b 6b 65 4c 74 57 55 77 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 35 64 65 65 32 30 65 61 64 32 30 34 32 62 33 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: CpTvHZDnkkeLtWUw.3Context: 35dee20ead2042b3<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-23 13:49:48 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-23 13:49:48 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 68 57 49 77 69 2b 49 6f 46 55 4b 42 53 4a 6a 33 52 5a 52 4a 38 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: hWIwi+IoFUKBSJj3RZRJ8w.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.6	49855	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:48 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:48 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:48 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 90f594d0-e01e-0003-5056-230fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134948Z-17fbfdc98bbnhb2b0umpa641c800000005vg000000002e5w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:48 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.6	49857	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:48 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:48 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:48 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: ee3730f2-f01e-003f-725a-23d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134948Z-17fbfdc98bbq2x5bzrteug30v800000005zg00000000008k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:48 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.6	49854	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:48 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:48 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:48 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 44e5e715-301e-001f-6416-24aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134948Z-r1755647c66cdf7jx43n17haqc0000000900000000007wk3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:48 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.6	49856	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:48 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:48 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:48 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 8b373834-501e-008c-26e4-21cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134948Z-r1755647c66kv68zfmyfrbcqzg00000006ug000000004ef1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:48 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.6	49858	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:48 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:48 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:48 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 9144373a-f01e-005d-575a-2313ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134948Z-17fbfdc98bbnpjstwqrbe0re7n00000005sg000000006pra x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:48 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.6	49859	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:49 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:49 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:49 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 3d4cb055-601e-0097-01e5-21f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134949Z-r1755647c66gb86l6k27ha2m1c00000006vg000000003eq7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:49 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.6	49861	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:49 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:49 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:49 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 865bbc8c-c01e-002b-3926-216e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134949Z-r1755647c66h2wzt2z0cr0zc7400000002h0000000002het x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:49 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.6	49860	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:49 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:49 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:49 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: ce674b06-f01e-0052-7d0b-229224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134949Z-r1755647c668mbb8rg8s8fbge400000005800000000034sa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:49 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.6	49862	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:49 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:49 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:49 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 07658eab-b01e-005c-1e14-224c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134949Z-r1755647c66xrxq4nv7upygh4s00000001wg000000002t89 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:49 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.6	49863	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:49 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:49 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:49 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 06d7a471-401e-0029-1427-219b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134949Z-r1755647c66m4jttnz6nb8kzng00000006xg000000000kht x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:49 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.6	49864	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:50 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:50 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:50 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 5fe4c9d5-d01e-008e-1959-23387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134950Z-r1755647c66z4pt7cv1pnqayy400000008d00000000030gk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:50 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.6	49866	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:50 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:50 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:50 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 563c5de3-c01e-0034-155d-232af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134950Z-17fbfdc98bb9tt772yde9rhbm800000005tg000000006m09 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:50 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.6	49865	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:50 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:50 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:50 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 88a9635a-401e-005b-7585-219c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134950Z-r1755647c66tmf6g4720xfpwpn0000000940000000004gp3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:50 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.6	49867	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:50 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:50 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:50 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: c25cd208-b01e-0070-595d-231cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134950Z-r1755647c66wjht63r8k9qqnrs00000006v00000000045pr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:50 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.6	49868	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:50 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:50 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:50 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: d9c148d9-d01e-00ad-325d-23e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134950Z-17fbfdc98bblptj7fr9s141cpc00000005u0000000005s8d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:50 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.6	49869	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:51 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:51 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:51 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: aba5bc6a-e01e-0003-59e5-210fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134951Z-r1755647c66d87vp2n0g7qt8bn00000007gg000000007gk2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:51 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.6	49870	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:51 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:51 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:51 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 472c62b4-c01e-00a1-2e5d-237e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134951Z-17fbfdc98bb94gkbvedtsa5ef40000000610000000000hqq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:51 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.6	49872	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:51 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:51 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:51 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: c53c8a19-f01e-0096-07f7-2110ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134951Z-r1755647c66n5bjpba5s4mu9d0000000087g000000007weu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:51 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.6	49871	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:51 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:51 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:51 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 1bb821d9-c01e-0046-5959-232db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134951Z-17fbfdc98bbkw9phumvsc7yy8w00000005u0000000005ppc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:51 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.6	49873	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:51 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:51 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:51 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 7e8f74bf-e01e-000c-3628-218e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134951Z-r1755647c66xn9fj09y3bhxnh4000000096g000000000tg1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:51 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.6	49874	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:52 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:52 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:52 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 77170aa2-001e-0049-0450-235bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134952Z-r1755647c66h2wzt2z0cr0zc7400000002d0000000006qwg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:52 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.6	49877	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:52 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:52 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:52 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: 51b44b3a-601e-0097-5627-21f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134952Z-r1755647c66zkj29xnfn2r3bwn00000005k000000000149v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:52 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.6	49876	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:52 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:52 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:52 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: 08f72666-401e-0015-30d8-210e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134952Z-17fbfdc98bbkw9phumvsc7yy8w00000005t0000000006md2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:52 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.6	49875	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:52 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:52 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:52 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: 914440ca-f01e-005d-6f5a-2313ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134952Z-17fbfdc98bbnhb2b0umpa641c800000005ug000000003bys x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:52 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.6	49878	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:52 UTC	192	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 13:49:52 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:52 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: afaebec0-501e-008f-263b-229054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T134952Z-17fbfdc98bbnpjstwqrbe0re7n00000005ug000000004n4c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 13:49:52 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 6040, Parent PID: 5908

General

Target ID:	0
Start time:	09:49:13
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5020, Parent PID: 6040

General

Target ID:	2
Start time:	09:49:17
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2544 --field-trial-handle=2520,i,17085417321202707697,12867946886163869045,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 404, Parent PID: 5908

General

Target ID:	3
Start time:	09:49:19
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://wxqlb.ecobusinessegypt.com/4Upeae17759oIun1207nsacmhsouq29959VLTMIPDLABHITRZ3224VGST20749x12"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: http://wxqlb.ecobusinessegypt.com/	LLM: Score: 9 Reasons: The brand 'Fox News' is well-known and is associated with the domain 'foxnews.com'., The provided URL 'wxqlb.ecobusinessegypt.com' does not match the legitimate domain for Fox News., The domain 'ecobusinessegypt.com' is unrelated to Fox News and suggests a different entity., The subdomain 'wxqlb' and the main domain 'ecobusinessegypt.com' do not have any known association with Fox News., The presence of an input field asking for an email on an unrelated domain is suspicious and indicative of phishing. DOM: 4.4.pages.csv
Source: http://wxqlb.ecobusinessegypt.com/	LLM: Score: 9 Reasons: The brand 'Fox News' is well-known and typically associated with the domain 'foxnews.com'., The provided URL 'wxqlb.ecobusinessegypt.com' does not match the legitimate domain for Fox News., The domain 'ecobusinessegypt.com' is unrelated to Fox News and appears suspicious., The subdomain 'wxqlb' and the main domain 'ecobusinessegypt.com' do not have any known association with Fox News., The presence of an input field asking for an email on an unrelated domain increases the suspicion of phishing. DOM: 4.5.pages.csv
Source: http://wxqlb.ecobusinessegypt.com/	LLM: Score: 9 Reasons: The brand 'Fox News' is well-known and is associated with the domain 'foxnews.com'., The provided URL 'wxqlb.ecobusinessegypt.com' does not match the legitimate domain for Fox News., The domain 'ecobusinessegypt.com' is unrelated to Fox News and appears suspicious., The subdomain 'wxqlb' and the main domain 'ecobusinessegypt.com' do not have any known association with Fox News., The presence of an input field asking for an email on an unrelated domain increases the suspicion of phishing. DOM: 4.6.pages.csv
Source: http://wxqlb.ecobusinessegypt.com/	LLM: Score: 9 Reasons: The brand 'Fox News' is well-known and is associated with the domain 'foxnews.com'., The provided URL 'wxqlb.ecobusinessegypt.com' does not match the legitimate domain for Fox News., The domain 'ecobusinessegypt.com' does not have any known association with Fox News., The subdomain 'wxqlb' and the main domain 'ecobusinessegypt.com' are suspicious and unrelated to Fox News., The presence of an input field asking for an email on an unrelated domain increases the suspicion of phishing. DOM: 4.8.pages.csv

Source: http://wxqlb.ecobusinessegypt.com/4Upeae17759oIun1207nsacmhsouq29959VLTMIPDLABHITRZ3224VGST20749x12	HTTP Parser: No favicon
Source: http://wxqlb.ecobusinessegypt.com/t/4Upeae17759oIun1207nsacmhsouq29959VLTMIPDLABHITRZ3224VGST20749x12	HTTP Parser: No favicon
Source: http://wxqlb.ecobusinessegypt.com/news?q=Not%20allowed!%20list#03	HTTP Parser: No favicon
Source: http://wxqlb.ecobusinessegypt.com/news?q=Not%20allowed!%20list#03	HTTP Parser: No favicon
Source: http://wxqlb.ecobusinessegypt.com/	HTTP Parser: No favicon
Source: http://wxqlb.ecobusinessegypt.com/	HTTP Parser: No favicon
Source: http://wxqlb.ecobusinessegypt.com/	HTTP Parser: No favicon
Source: http://wxqlb.ecobusinessegypt.com/	HTTP Parser: No favicon
Source: http://wxqlb.ecobusinessegypt.com/	HTTP Parser: No favicon
Source: http://wxqlb.ecobusinessegypt.com/	HTTP Parser: No favicon
Source: http://wxqlb.ecobusinessegypt.com/news	HTTP Parser: No favicon

Source: http://wxqlb.ecobusinessegypt.com/	HTTP Parser: No <meta name="author".. found
Source: http://wxqlb.ecobusinessegypt.com/	HTTP Parser: No <meta name="author".. found
Source: http://wxqlb.ecobusinessegypt.com/	HTTP Parser: No <meta name="author".. found
Source: http://wxqlb.ecobusinessegypt.com/	HTTP Parser: No <meta name="author".. found
Source: http://wxqlb.ecobusinessegypt.com/	HTTP Parser: No <meta name="author".. found
Source: http://wxqlb.ecobusinessegypt.com/	HTTP Parser: No <meta name="author".. found

Source: http://wxqlb.ecobusinessegypt.com/	HTTP Parser: No <meta name="copyright".. found
Source: http://wxqlb.ecobusinessegypt.com/	HTTP Parser: No <meta name="copyright".. found
Source: http://wxqlb.ecobusinessegypt.com/	HTTP Parser: No <meta name="copyright".. found
Source: http://wxqlb.ecobusinessegypt.com/	HTTP Parser: No <meta name="copyright".. found
Source: http://wxqlb.ecobusinessegypt.com/	HTTP Parser: No <meta name="copyright".. found
Source: http://wxqlb.ecobusinessegypt.com/	HTTP Parser: No <meta name="copyright".. found

Source: global traffic	DNS traffic detected: DNS query: wxqlb.ecobusinessegypt.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: feeds.foxnews.com
Source: global traffic	DNS traffic detected: DNS query: moxie.foxnews.com
Source: global traffic	DNS traffic detected: DNS query: www.foxnews.com

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67

Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: </p><p><a href="https://www.foxnews.com/world/roman-era-graves-found-by-homeowner-during-basement-renovation-project" target="_blank" rel="noopener"><strong>ROMAN-ERA GRAVES FOUND BY HOMEOWNER DURING BASEMENT RENOVATION PROJECT</strong></a></p><p>The statue was found outside the fortress walls. Upon <a href="https://www.foxnews.com/category/columns/digging-history" target="_blank" rel="noopener">finding the ancient piece,</a> construction contractor Georgi Kraychev quickly reported the discovery to the museum, the Facebook post states. equals www.facebook.com (Facebook)
Source: chromecache_47.2.dr	String found in binary or memory: </p><p>The Varna Regional Museum of History announced the find in a Facebook post on Oct. 15, 2024, which included <a href="https://www.facebook.com/permalink.php?story_fbid=990566096449150&amp;id=100064873050437&amp;ref=embed_post" target="_blank" rel="nofollow noopener">photos of the discovery.</a></p><p>The statue, slightly taller than a human, according to the post, was found in Varna, the <a href="https://www.foxnews.com/world" target="_blank" rel="noopener">ancient city Odessa,</a> and displayed a middle-aged man with a short beard, dressed in a Roman toga and holding a scroll. equals www.facebook.com (Facebook)
Source: chromecache_43.2.dr, chromecache_47.2.dr	String found in binary or memory: <rss xmlns:media="http://search.yahoo.com/mrss/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"> equals www.yahoo.com (Yahoo)

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://wxqlb.ecobusinessegypt.com/4Upeae17759oIun1207nsacmhsouq29959VLTMIPDLABHITRZ3224VGST20749x12

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 43

Chrome Cache Entry: 44

Chrome Cache Entry: 45

Chrome Cache Entry: 46

Chrome Cache Entry: 47

Chrome Cache Entry: 48

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 6040, Parent PID: 5908

General

Chronological Activities

Windows Analysis Report
http://wxqlb.ecobusinessegypt.com/4Upeae17759oIun1207nsacmhsouq29959VLTMIPDLABHITRZ3224VGST20749x12