Edit tour

Windows Analysis Report
email-email-pandad....pdf

Overview

General Information

Sample name:	email-email-pandad....pdf
Analysis ID:	1540513
MD5:	98fcc26fa7cc3be7021cdfe210587121
SHA1:	5b0a84d84f53255ef932aa19593e7f675f32a4f4
SHA256:	01f9357df53dc668f9eb8cdb00e775219d6498b1ea856bc7ea42bed00d403113
Infos:

Detection

HTMLPhisher

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Yara detected BlockedWebSite

AI detected landing page (webpage, office document or email)

Suspicious PDF detected (based on various text indicators)

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

Acrobat.exe (PID: 6176 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\email-email-pandad....pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 6292 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 7240 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2096 --field-trial-handle=1576,i,5142166503301341022,5512777148727592726,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 8120 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://vibeforceji.sa.com/CZsV/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5572 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1980,i,3645715694664674740,1691753166203851061,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.0.pages.csv	JoeSecurity_BlockedWebSite	Yara detected BlockedWebSite	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://vibeforceji.sa.com/CZsV/

SlashNext: Label: Credential Stealing type: Phishing & Social Engineering

Phishing

Yara detected BlockedWebSite

Source: Yara match

File source: 1.0.pages.csv, type: HTML

Suspicious PDF detected (based on various text indicators)

Source: Adobe Acrobat PDF

OCR Text: Remittance Advice PandaDoc by Chuck Brokish Remittance Adv... 1 of 1 document This PDF file is protected because it contains private and sensitive information. Click the below button to view the file. VIEW DOCUMENT Page 1 of 1 We use cookies to personalize your experience, and for measurement and analytics purposes. By using our website and services, you agree to our use of cookies as described in our Cookie Notice & Privacy Notice Accept All Cookies Cookies Settings

Source: https://vibeforceji.sa.com/CZsV/	HTTP Parser: No favicon
Source: https://vibeforceji.sa.com/CZsV/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49889 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:49892 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49917 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49918 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49920 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49919 version: TLS 1.2

Source: Joe Sandbox View	IP Address: 104.18.94.41 104.18.94.41
Source: Joe Sandbox View	IP Address: 104.18.95.41 104.18.95.41
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Rz8NeoA+uv6Muot&MD=pVremttP HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /CZsV/ HTTP/1.1Host: vibeforceji.sa.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/styles/cf.errors.css HTTP/1.1Host: vibeforceji.sa.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://vibeforceji.sa.com/CZsV/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1Host: vibeforceji.sa.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vibeforceji.sa.com/cdn-cgi/styles/cf.errors.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: vibeforceji.sa.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vibeforceji.sa.com/CZsV/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1Host: vibeforceji.sa.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Rz8NeoA+uv6Muot&MD=pVremttP HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/phish-bypass?atok=TrFJmYX6B14UCNep9v53WbOwiAAf2hFvHQNjJFkf0FE-1729710821-0.0.1.1-%2FCZsV%2F HTTP/1.1Host: vibeforceji.sa.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://vibeforceji.sa.com/CZsV/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /CZsV/ HTTP/1.1Host: vibeforceji.sa.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://vibeforceji.sa.com/CZsV/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_mw_byp=TrFJmYX6B14UCNep9v53WbOwiAAf2hFvHQNjJFkf0FE-1729710821-0.0.1.1-/CZsV/
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vibeforceji.sa.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f2bbd6738e15/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vibeforceji.sa.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/1qx9m/0x4AAAAAAAh5rHoa6EUSYiSr/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://vibeforceji.sa.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f2bbd6738e15/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8d740f858baee7b3&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/1qx9m/0x4AAAAAAAh5rHoa6EUSYiSr/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/1qx9m/0x4AAAAAAAh5rHoa6EUSYiSr/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8d740f858baee7b3&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1928947388:1729702599:o_S8SA7T_E8I66BSvyhSre8lk5xeZfNTrZLfTLnGVio/8d740f858baee7b3/MeioXoENStId0lyRbIuUyztcSQLaG25Hhzj_cLYHvvc-1729710976-1.1.1.1-WksxpSL.PghPiLDxnW5RDboqN4ZQiQ49dCxZv0u4.3dzcGlrb3D69Xycb38HHchd HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8d740f858baee7b3/1729710979882/PtZJ1X4TvZquAJ5 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/1qx9m/0x4AAAAAAAh5rHoa6EUSYiSr/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8d740f858baee7b3/1729710979882/PtZJ1X4TvZquAJ5 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8d740f858baee7b3/1729710979883/4b423a6a39b721aa95416786a98ac3a689276707736109f34bcd4f4b3cbfdc73/zpa9U2-gwJiJTvy HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/1qx9m/0x4AAAAAAAh5rHoa6EUSYiSr/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1928947388:1729702599:o_S8SA7T_E8I66BSvyhSre8lk5xeZfNTrZLfTLnGVio/8d740f858baee7b3/MeioXoENStId0lyRbIuUyztcSQLaG25Hhzj_cLYHvvc-1729710976-1.1.1.1-WksxpSL.PghPiLDxnW5RDboqN4ZQiQ49dCxZv0u4.3dzcGlrb3D69Xycb38HHchd HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic	DNS traffic detected: DNS query: vibeforceji.sa.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com

Source: unknown

HTTP traffic detected: POST /report/v4?s=%2FT2IjVgsSymexo%2BW1r4GBlZKBdeAOwk%2F1kE6fnqpoJ8g0XmzWZAMtGPwF6gYMR0hWTzd3zetQAzcVF%2FJ68fd1e6EMMOBAp4qqzoAnu299UVXGLZKbSxerLx8ChlhaLYQX%2FGK9mg%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 394Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 23 Oct 2024 19:13:41 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FT2IjVgsSymexo%2BW1r4GBlZKBdeAOwk%2F1kE6fnqpoJ8g0XmzWZAMtGPwF6gYMR0hWTzd3zetQAzcVF%2FJ68fd1e6EMMOBAp4qqzoAnu299UVXGLZKbSxerLx8ChlhaLYQX%2FGK9mg%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d740bbbeda14785-DFW
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 23 Oct 2024 19:13:51 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closecache-control: private, no-cache, max-age=0pragma: no-cachevary: Accept-EncodingCF-Cache-Status: BYPASSReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3bxHcscmsuXq33QRZGVzCDFG8KllcQdC5XtAVhIR5egFeuZsU40Vfcaikdd23pj81keurv6Lopmm2ehiSXCPspUq9DlVynTGjhuWT9yXk%2Fhg6GR3Ce4DlnUqcc1%2FjzVSAh9tCbU%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d740bf8fdaf6b1c-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=74049&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2847&recv_bytes=1175&delivery_rate=37842&cwnd=251&unsent_bytes=0&cid=f716181704c847db&ts=461&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 23 Oct 2024 19:16:21 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: hfHAOs4QF1DJ5wMhJb9Ps05CIeIDQLEdAWs=$VM58kTpxMD7FzkMEServer: cloudflareCF-RAY: 8d740fa18fcb6c44-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 23 Oct 2024 19:16:25 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: 50Mvip3M4TG+jx0lMKbWMScMIuUyfOJQMYc=$DTLvO48JnAcIyH7jServer: cloudflareCF-RAY: 8d740fbbbbf3e746-DFWalt-svc: h3=":443"; ma=86400

Source: 77EC63BDA74BD0D0E0426DC8F80085060.2.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: 2D85F72862B55C4EADD9E66E06947F3D0.2.dr	String found in binary or memory: http://x1.i.lencr.org/
Source: email-email-pandad....pdf	String found in binary or memory: https://vibeforceji.sa.com/CZsV/)
Source: email-email-pandad....pdf	String found in binary or memory: https://www.pandadoc.com/cookie-notice/)
Source: email-email-pandad....pdf	String found in binary or memory: https://www.pandadoc.com/privacy-notice)

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49889 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:49892 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49917 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49918 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49920 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49919 version: TLS 1.2

Source: classification engine

Classification label: mal64.phis.winPDF@40/66@15/8

Source: email-email-pandad....pdf	Initial sample: https://vibeforceji.sa.com/czsv/
Source: email-email-pandad....pdf	Initial sample: https://www.pandadoc.com/privacy-notice
Source: email-email-pandad....pdf	Initial sample: https://www.pandadoc.com/cookie-notice/
Source: email-email-pandad....pdf	Initial sample: https://vibeforceji.sa.com/CZsV/

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-23 15-13-15-762.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\email-email-pandad....pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2096 --field-trial-handle=1576,i,5142166503301341022,5512777148727592726,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://vibeforceji.sa.com/CZsV/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1980,i,3645715694664674740,1691753166203851061,262144 /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2096 --field-trial-handle=1576,i,5142166503301341022,5512777148727592726,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1980,i,3645715694664674740,1691753166203851061,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: email-email-pandad....pdf	Initial sample: PDF keyword /JS count = 0
Source: email-email-pandad....pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: email-email-pandad....pdf

Initial sample: PDF keyword stream count = 21

Source: email-email-pandad....pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: email-email-pandad....pdf

Initial sample: PDF keyword obj count = 54

Persistence and Installation Behavior

AI detected landing page (webpage, office document or email)

Source: PDF document	LLM: Page contains button: 'VIEW DOCUMENT' Source: 'PDF document'
Source: PDF document	LLM: PDF document contains prominent button: 'view document'

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Spearphishing Link	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://vibeforceji.sa.com/CZsV/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering
http://x1.i.lencr.org/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
challenges.cloudflare.com	104.18.95.41	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
vibeforceji.sa.com	172.67.187.94	true	false	unknown
x1.i.lencr.org	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://vibeforceji.sa.com/cdn-cgi/images/icon-exclamation.png?1376755637	false		unknown
https://vibeforceji.sa.com/cdn-cgi/phish-bypass?atok=TrFJmYX6B14UCNep9v53WbOwiAAf2hFvHQNjJFkf0FE-1729710821-0.0.1.1-%2FCZsV%2F	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/1qx9m/0x4AAAAAAAh5rHoa6EUSYiSr/auto/fbE/normal/auto/	false		unknown
https://a.nel.cloudflare.com/report/v4?s=%2FT2IjVgsSymexo%2BW1r4GBlZKBdeAOwk%2F1kE6fnqpoJ8g0XmzWZAMtGPwF6gYMR0hWTzd3zetQAzcVF%2FJ68fd1e6EMMOBAp4qqzoAnu299UVXGLZKbSxerLx8ChlhaLYQX%2FGK9mg%3D	false		unknown
https://challenges.cloudflare.com/turnstile/v0/api.js	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8d740f858baee7b3/1729710979882/PtZJ1X4TvZquAJ5	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	false		unknown
https://vibeforceji.sa.com/favicon.ico	false		unknown
https://vibeforceji.sa.com/cdn-cgi/styles/cf.errors.css	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8d740f858baee7b3&lang=auto	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8d740f858baee7b3/1729710979883/4b423a6a39b721aa95416786a98ac3a689276707736109f34bcd4f4b3cbfdc73/zpa9U2-gwJiJTvy	false		unknown
https://a.nel.cloudflare.com/report/v4?s=3bxHcscmsuXq33QRZGVzCDFG8KllcQdC5XtAVhIR5egFeuZsU40Vfcaikdd23pj81keurv6Lopmm2ehiSXCPspUq9DlVynTGjhuWT9yXk%2Fhg6GR3Ce4DlnUqcc1%2FjzVSAh9tCbU%3D	false		unknown
https://vibeforceji.sa.com/CZsV/	true	SlashNext: Credential Stealing type: Phishing & Social Engineering	unknown
https://challenges.cloudflare.com/turnstile/v0/g/f2bbd6738e15/api.js	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.pandadoc.com/cookie-notice/)	email-email-pandad....pdf	false		unknown
http://x1.i.lencr.org/	2D85F72862B55C4EADD9E66E06947F3D0.2.dr	false	URL Reputation: safe	unknown
https://vibeforceji.sa.com/CZsV/)	email-email-pandad....pdf	true		unknown
https://www.pandadoc.com/privacy-notice)	email-email-pandad....pdf	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.64.188	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
172.67.187.94	vibeforceji.sa.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540513
Start date and time:	2024-10-23 21:12:18 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 50s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowspdfcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	email-email-pandad....pdf
Detection:	MAL
Classification:	mal64.phis.winPDF@40/66@15/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .pdf Found PDF document Close Viewer

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 184.28.88.176, 52.5.13.197, 23.22.254.206, 52.202.204.11, 54.227.187.23, 172.64.41.3, 162.159.61.3, 2.23.197.184, 88.221.168.141, 2.16.100.168, 88.221.110.91, 2.19.126.149, 2.19.126.143, 192.229.221.95, 172.217.16.195, 142.250.184.238, 142.251.5.84, 34.104.35.123, 142.250.185.106, 142.250.186.170, 216.58.206.74, 142.250.185.202, 142.250.184.202, 142.250.185.138, 216.58.212.170, 142.250.185.234, 172.217.18.10, 142.250.184.234, 142.250.185.74, 172.217.16.202, 142.250.186.106, 172.217.23.106, 142.250.181.234, 216.58.206.42, 142.250.185.131, 142.250.185.110
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, e8652.dscx.akamaiedge.net, slscr.update.microsoft.com, e4578.dscb.akamaiedge.net, clientservices.googleapis.com, a767.dspw65.akamai.net, acroipm2.adobe.com, clients2.google.com, ocsp.digicert.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, update.googleapis.com, wu-b-net.trafficmanager.net, crl.root-x1.letsencrypt.org.edgekey.net, optimizationguide-pa.googleapis.com, clients1.google.com, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, acroipm2.adobe.com.edgesuite.net, ctldl.windowsupdate.com, p13n.adobe.io, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, ssl.adobe.com.edgekey.net, armmf.adobe.com, edgedl.me.gvt1.com, clients.l.google.com, geo2.adobe.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: email-email-pandad....pdf

Simulations

Behavior and APIs

Time	Type	Description
15:13:26	API Interceptor	2x Sleep call for process: AcroCEF.exe modified

LLM Input / Output

Input	Output
URL: https://vibeforceji.sa.com/CZsV/ Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "This website has been reported for potential phishing.", "prominent_button_name": "Learn More", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: PDF document Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "VIEW DOCUMENT", "prominent_button_name": "VIEW DOCUMENT", "text_input_field_labels": [ "Initial Mail Recipient", "Payment to", "Initial Mail Recipient", "Payment to" ], "pdf_icon_visible": true, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://vibeforceji.sa.com/CZsV/ Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Browser security check in progress.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://vibeforceji.sa.com/CZsV/ Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Browser security check in progress.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://vibeforceji.sa.com/CZsV/ Model: claude-3-haiku-20240307	```json { "brands": [ "Cloudflare" ] }
	```json { "brands": [ "Cloudflare" ] }
URL: https://vibeforceji.sa.com/CZsV/ Model: claude-3-haiku-20240307	```json { "brands": [] }
	```json { "brands": [] }
URL: PDF document Model: claude-3-haiku-20240307	```json { "brands": [ "PandaDoc" ] }
	```json { "brands": [ "PandaDoc" ] }
URL: https://vibeforceji.sa.com/CZsV/ Model: claude-3-haiku-20240307	```json { "brands": [ "Cloudflare" ] }
	```json { "brands": [ "Cloudflare" ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
104.21.64.188	file.exe	Get hash	malicious	LummaC	Browse
104.21.64.188	n8JqyJSXnE.exe	Get hash	malicious	LummaC, Glupteba, LummaC Stealer, Petite Virus, SmokeLoader, Socks5Systemz, Stealc	Browse
172.67.187.94	grekjJu4PM.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RedLine, RisePro Stealer, zgRAT	Browse
	6JrdNYGEPZ.exe	Get hash	malicious	Glupteba, LummaC Stealer, Petite Virus, SmokeLoader, Stealc	Browse
	file.exe	Get hash	malicious	Glupteba, Petite Virus, SmokeLoader, Socks5Systemz, Stealc	Browse
239.255.255.250	http://www.holidaybunch.com	Get hash	malicious	Unknown	Browse
	https://app.pandadoc.com/document/v2?token=69b8ae0059c2551a9a27ed1b65653c1a0b5ee1ff	Get hash	malicious	Unknown	Browse
	Play_VM.Now.matt.sibilo_Audio.wav...v.html	Get hash	malicious	HtmlDropper	Browse
	https://s.id/closingdocview67111111	Get hash	malicious	HTMLPhisher	Browse
	Review_&_Aprove_Your_Next_Payroll39298.html	Get hash	malicious	Unknown	Browse
	https://dca13.z4.web.core.windows.net/werrx01USAHTML/?bcda=1-877-883-8072#	Get hash	malicious	TechSupportScam	Browse
	https://us-west-2.protection.sophos.com/?d=paypal.com&u=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&i=NThlN2NjYzYyOTljZjkxNGY4YmM0YzBi&t=dXIwWlg3KytlTG1EdzlRZmkxVjlOckM2b1BrWkxObTBEQ2VISDhjSjlYOD0=&h=7a9b3afabb0e4580a0feb91870d6da56&s=AVNPUEhUT0NFTkNSWVBUSVbTVZ2wjOkEGkbXL4nPhMMvEuG2k7zc-XuVtIgw9mnjN_b0fgOlRWAR6l8XE0q2vkLElGkG2u7h4wINuzGWow1k	Get hash	malicious	Unknown	Browse
	https://app.any.run/tasks/b041ecda-4b41-4fca-8d52-41ef98c121fe	Get hash	malicious	Unknown	Browse
	https://talentrecruting.com/?Y3w2MDkxNzZ8d190cmF1MTEwRHx8fA0KfHxicnlhbi50LmJlYmJAc2FpYy5jb20=	Get hash	malicious	Unknown	Browse
	PayrolNotificationBenefit_.html	Get hash	malicious	Mamba2FA	Browse
104.18.94.41	https://s.id/closingdocview67111111	Get hash	malicious	HTMLPhisher	Browse
	KERR SURVEYING LLC EE RFI#1.pdf	Get hash	malicious	Unknown	Browse
	Airbornemx Benefits Enrollment.pdf	Get hash	malicious	HTMLPhisher	Browse
	https://boulos.pages.dev/index.html	Get hash	malicious	HTMLPhisher	Browse
	sample.pdf	Get hash	malicious	HtmlDropper	Browse
	https://api-restauration.basiic.net/fWmcv/	Get hash	malicious	Unknown	Browse
	https://1drv.ms/o/c/6c73e1f3356d6c81/EvfBo1LISVpEg8JGFA7u8GsBL0LmooIAfd5Q39ROhQ0Lhw?e=ZTugWV	Get hash	malicious	HtmlDropper	Browse
	Scan_8346203.pdf	Get hash	malicious	Unknown	Browse
	Totalenergies.com_reff_3243808335_ATGeyDyASJ.html	Get hash	malicious	Phisher	Browse
	https://k6t.utackhepr.com/WE76L1u/	Get hash	malicious	Tycoon2FA	Browse
104.18.95.41	https://s.id/closingdocview67111111	Get hash	malicious	HTMLPhisher	Browse
	KERR SURVEYING LLC EE RFI#1.pdf	Get hash	malicious	Unknown	Browse
	Airbornemx Benefits Enrollment.pdf	Get hash	malicious	HTMLPhisher	Browse
	https://boulos.pages.dev/index.html	Get hash	malicious	HTMLPhisher	Browse
	https://1drv.ms/o/c/fca0349b9dac3054/Egg4xW-gVZtFnFIBDYLqn3IBzvGvLdCTacUKBwENWO33dQ?e=nEqWJi	Get hash	malicious	Unknown	Browse
	sample.pdf	Get hash	malicious	HtmlDropper	Browse
	https://api-restauration.basiic.net/fWmcv/	Get hash	malicious	Unknown	Browse
	Scan_8346203.pdf	Get hash	malicious	Unknown	Browse
	Totalenergies.com_reff_3243808335_ATGeyDyASJ.html	Get hash	malicious	Phisher	Browse
	Jwhite Pay Increase EFile997843.pdf	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
challenges.cloudflare.com	https://s.id/closingdocview67111111	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	KERR SURVEYING LLC EE RFI#1.pdf	Get hash	malicious	Unknown	Browse	104.18.94.41
	https://boulos.pages.dev/index.html	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	https://1drv.ms/o/c/fca0349b9dac3054/Egg4xW-gVZtFnFIBDYLqn3IBzvGvLdCTacUKBwENWO33dQ?e=nEqWJi	Get hash	malicious	Unknown	Browse	104.18.95.41
	sample.pdf	Get hash	malicious	HtmlDropper	Browse	104.18.95.41
	https://api-restauration.basiic.net/fWmcv/	Get hash	malicious	Unknown	Browse	104.18.94.41
	https://1drv.ms/o/c/6c73e1f3356d6c81/EvfBo1LISVpEg8JGFA7u8GsBL0LmooIAfd5Q39ROhQ0Lhw?e=ZTugWV	Get hash	malicious	HtmlDropper	Browse	104.18.94.41
	Scan_8346203.pdf	Get hash	malicious	Unknown	Browse	104.18.95.41
	Totalenergies.com_reff_3243808335_ATGeyDyASJ.html	Get hash	malicious	Phisher	Browse	104.18.94.41
	Jwhite Pay Increase EFile997843.pdf	Get hash	malicious	Unknown	Browse	104.18.95.41

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	http://www.holidaybunch.com	Get hash	malicious	Unknown	Browse	172.67.142.245
	https://app.pandadoc.com/document/v2?token=69b8ae0059c2551a9a27ed1b65653c1a0b5ee1ff	Get hash	malicious	Unknown	Browse	104.16.117.116
	Play_VM.Now.matt.sibilo_Audio.wav...v.html	Get hash	malicious	HtmlDropper	Browse	172.67.74.152
	https://s.id/closingdocview67111111	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	Review_&_Aprove_Your_Next_Payroll39298.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://app.any.run/tasks/b041ecda-4b41-4fca-8d52-41ef98c121fe	Get hash	malicious	Unknown	Browse	172.67.20.89
	https://talentrecruting.com/?Y3w2MDkxNzZ8d190cmF1MTEwRHx8fA0KfHxicnlhbi50LmJlYmJAc2FpYy5jb20=	Get hash	malicious	Unknown	Browse	104.17.25.14
	PayrolNotificationBenefit_.html	Get hash	malicious	Mamba2FA	Browse	104.17.25.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	172.67.206.204
	KERR SURVEYING LLC EE RFI#1.pdf	Get hash	malicious	Unknown	Browse	104.17.25.14
CLOUDFLARENETUS	http://www.holidaybunch.com	Get hash	malicious	Unknown	Browse	172.67.142.245
	https://app.pandadoc.com/document/v2?token=69b8ae0059c2551a9a27ed1b65653c1a0b5ee1ff	Get hash	malicious	Unknown	Browse	104.16.117.116
	Play_VM.Now.matt.sibilo_Audio.wav...v.html	Get hash	malicious	HtmlDropper	Browse	172.67.74.152
	https://s.id/closingdocview67111111	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	Review_&_Aprove_Your_Next_Payroll39298.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://app.any.run/tasks/b041ecda-4b41-4fca-8d52-41ef98c121fe	Get hash	malicious	Unknown	Browse	172.67.20.89
	https://talentrecruting.com/?Y3w2MDkxNzZ8d190cmF1MTEwRHx8fA0KfHxicnlhbi50LmJlYmJAc2FpYy5jb20=	Get hash	malicious	Unknown	Browse	104.17.25.14
	PayrolNotificationBenefit_.html	Get hash	malicious	Mamba2FA	Browse	104.17.25.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	172.67.206.204
	KERR SURVEYING LLC EE RFI#1.pdf	Get hash	malicious	Unknown	Browse	104.17.25.14
CLOUDFLARENETUS	http://www.holidaybunch.com	Get hash	malicious	Unknown	Browse	172.67.142.245
	https://app.pandadoc.com/document/v2?token=69b8ae0059c2551a9a27ed1b65653c1a0b5ee1ff	Get hash	malicious	Unknown	Browse	104.16.117.116
	Play_VM.Now.matt.sibilo_Audio.wav...v.html	Get hash	malicious	HtmlDropper	Browse	172.67.74.152
	https://s.id/closingdocview67111111	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	Review_&_Aprove_Your_Next_Payroll39298.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://app.any.run/tasks/b041ecda-4b41-4fca-8d52-41ef98c121fe	Get hash	malicious	Unknown	Browse	172.67.20.89
	https://talentrecruting.com/?Y3w2MDkxNzZ8d190cmF1MTEwRHx8fA0KfHxicnlhbi50LmJlYmJAc2FpYy5jb20=	Get hash	malicious	Unknown	Browse	104.17.25.14
	PayrolNotificationBenefit_.html	Get hash	malicious	Mamba2FA	Browse	104.17.25.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	172.67.206.204
	KERR SURVEYING LLC EE RFI#1.pdf	Get hash	malicious	Unknown	Browse	104.17.25.14
CLOUDFLARENETUS	http://www.holidaybunch.com	Get hash	malicious	Unknown	Browse	172.67.142.245
	https://app.pandadoc.com/document/v2?token=69b8ae0059c2551a9a27ed1b65653c1a0b5ee1ff	Get hash	malicious	Unknown	Browse	104.16.117.116
	Play_VM.Now.matt.sibilo_Audio.wav...v.html	Get hash	malicious	HtmlDropper	Browse	172.67.74.152
	https://s.id/closingdocview67111111	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	Review_&_Aprove_Your_Next_Payroll39298.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://app.any.run/tasks/b041ecda-4b41-4fca-8d52-41ef98c121fe	Get hash	malicious	Unknown	Browse	172.67.20.89
	https://talentrecruting.com/?Y3w2MDkxNzZ8d190cmF1MTEwRHx8fA0KfHxicnlhbi50LmJlYmJAc2FpYy5jb20=	Get hash	malicious	Unknown	Browse	104.17.25.14
	PayrolNotificationBenefit_.html	Get hash	malicious	Mamba2FA	Browse	104.17.25.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	172.67.206.204
	KERR SURVEYING LLC EE RFI#1.pdf	Get hash	malicious	Unknown	Browse	104.17.25.14

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://app.pandadoc.com/document/v2?token=69b8ae0059c2551a9a27ed1b65653c1a0b5ee1ff	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	Play_VM.Now.matt.sibilo_Audio.wav...v.html	Get hash	malicious	HtmlDropper	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	https://s.id/closingdocview67111111	Get hash	malicious	HTMLPhisher	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	Review_&_Aprove_Your_Next_Payroll39298.html	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	https://dca13.z4.web.core.windows.net/werrx01USAHTML/?bcda=1-877-883-8072#	Get hash	malicious	TechSupportScam	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	https://us-west-2.protection.sophos.com/?d=paypal.com&u=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&i=NThlN2NjYzYyOTljZjkxNGY4YmM0YzBi&t=dXIwWlg3KytlTG1EdzlRZmkxVjlOckM2b1BrWkxObTBEQ2VISDhjSjlYOD0=&h=7a9b3afabb0e4580a0feb91870d6da56&s=AVNPUEhUT0NFTkNSWVBUSVbTVZ2wjOkEGkbXL4nPhMMvEuG2k7zc-XuVtIgw9mnjN_b0fgOlRWAR6l8XE0q2vkLElGkG2u7h4wINuzGWow1k	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	https://app.any.run/tasks/b041ecda-4b41-4fca-8d52-41ef98c121fe	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	https://talentrecruting.com/?Y3w2MDkxNzZ8d190cmF1MTEwRHx8fA0KfHxicnlhbi50LmJlYmJAc2FpYy5jb20=	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	PayrolNotificationBenefit_.html	Get hash	malicious	Mamba2FA	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	https://botnet.app/k4q.exe	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27 13.107.246.45

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.219451007313591
Encrypted:	false
SSDEEP:	6:17+q2P92nKuAl9OmbnIFUt8XZmw+3VkwO92nKuAl9OmbjLJ:0v4HAahFUt8X/+F5LHAaSJ
MD5:	05204516DD19E916156A346F1F723D53
SHA1:	633AB9F8BCD202F7E229D27650A2239DDD1ED67F
SHA-256:	D918282AF7582CD24FAE01962EC885B89AE341451A6615B8E3F67701BCF0B3C0
SHA-512:	215EF742BDB599EF847E9F0C4AC57F8AFA8A6707A844DFF63F8904F89F1A86E8DC6A38782759252B2FB94B0BE45F1CD92CD724FDA53168485C98CB01F226F624
Malicious:	false
Reputation:	low
Preview:	2024/10/23-15:13:13.680 548 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/10/23-15:13:13.683 548 Recovering log #3.2024/10/23-15:13:13.683 548 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.219451007313591
Encrypted:	false
SSDEEP:	6:17+q2P92nKuAl9OmbnIFUt8XZmw+3VkwO92nKuAl9OmbjLJ:0v4HAahFUt8X/+F5LHAaSJ
MD5:	05204516DD19E916156A346F1F723D53
SHA1:	633AB9F8BCD202F7E229D27650A2239DDD1ED67F
SHA-256:	D918282AF7582CD24FAE01962EC885B89AE341451A6615B8E3F67701BCF0B3C0
SHA-512:	215EF742BDB599EF847E9F0C4AC57F8AFA8A6707A844DFF63F8904F89F1A86E8DC6A38782759252B2FB94B0BE45F1CD92CD724FDA53168485C98CB01F226F624
Malicious:	false
Reputation:	low
Preview:	2024/10/23-15:13:13.680 548 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/10/23-15:13:13.683 548 Recovering log #3.2024/10/23-15:13:13.683 548 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	338
Entropy (8bit):	5.200761362035783
Encrypted:	false
SSDEEP:	6:uiyq2P92nKuAl9Ombzo2jMGIFUt8xcq1Zmw+xc8RkwO92nKuAl9Ombzo2jMmLJ:byv4HAa8uFUt8as/+a8R5LHAa8RJ
MD5:	5D9681D23D9FA1C53AD85E3600B179F1
SHA1:	33E0624D6C9E19BC0DDD6FD611C1E7D1A8749691
SHA-256:	37349FFD16856B8305D6A90A72894A4829B65E68927C7F5A7FDACF88793CABDB
SHA-512:	F99E42FDA7ABBAA0170CC10FE36DEC69F49E426E0D82EF7B8CBF44B7D4BDE3FEE748CE8818F0722F8653CCCCB6F3091196F8561AC2A30DD75EAABBBE67C37838
Malicious:	false
Reputation:	low
Preview:	2024/10/23-15:13:13.758 1c74 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/10/23-15:13:13.759 1c74 Recovering log #3.2024/10/23-15:13:13.759 1c74 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	338
Entropy (8bit):	5.200761362035783
Encrypted:	false
SSDEEP:	6:uiyq2P92nKuAl9Ombzo2jMGIFUt8xcq1Zmw+xc8RkwO92nKuAl9Ombzo2jMmLJ:byv4HAa8uFUt8as/+a8R5LHAa8RJ
MD5:	5D9681D23D9FA1C53AD85E3600B179F1
SHA1:	33E0624D6C9E19BC0DDD6FD611C1E7D1A8749691
SHA-256:	37349FFD16856B8305D6A90A72894A4829B65E68927C7F5A7FDACF88793CABDB
SHA-512:	F99E42FDA7ABBAA0170CC10FE36DEC69F49E426E0D82EF7B8CBF44B7D4BDE3FEE748CE8818F0722F8653CCCCB6F3091196F8561AC2A30DD75EAABBBE67C37838
Malicious:	false
Reputation:	low
Preview:	2024/10/23-15:13:13.758 1c74 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/10/23-15:13:13.759 1c74 Recovering log #3.2024/10/23-15:13:13.759 1c74 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\4d8ebde1-4c0e-4d4c-b5d2-55f2d9b1f29d.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	modified
Size (bytes):	508
Entropy (8bit):	5.064332823780809
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqQ3mw2sBdOg2HF2caq3QYiubxnP7E4T3OF+:Y2sRds33jdMHFJ3QYhbxP7nbI+
MD5:	5ED55546A1F51BCC4544E836A00BF3D2
SHA1:	D7DEDCCB74FFDAD2CA693B99A8A0B0E019ADDB2F
SHA-256:	829B7C5CCD78B7E486E964DFA13A717FC94BEE1E69355FDE027538872924E2B8
SHA-512:	53CF6022156C29604E2FD7F3B71B032F7CC3B8FBD2D44E27B74B2251FE0EE64CFDBC659470F7582A7029DF6B0BCA90FC876BCCF74C8770D67AD6F366935A6447
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13374270800461391","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":297154},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.5","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G","CAYSABiAgICA+P////8B":"Offline"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	508
Entropy (8bit):	5.064332823780809
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqQ3mw2sBdOg2HF2caq3QYiubxnP7E4T3OF+:Y2sRds33jdMHFJ3QYhbxP7nbI+
MD5:	5ED55546A1F51BCC4544E836A00BF3D2
SHA1:	D7DEDCCB74FFDAD2CA693B99A8A0B0E019ADDB2F
SHA-256:	829B7C5CCD78B7E486E964DFA13A717FC94BEE1E69355FDE027538872924E2B8
SHA-512:	53CF6022156C29604E2FD7F3B71B032F7CC3B8FBD2D44E27B74B2251FE0EE64CFDBC659470F7582A7029DF6B0BCA90FC876BCCF74C8770D67AD6F366935A6447
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13374270800461391","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":297154},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.5","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G","CAYSABiAgICA+P////8B":"Offline"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	4509
Entropy (8bit):	5.235145299670094
Encrypted:	false
SSDEEP:	96:QqBpCqGp3Al+NehBmkID2w6bNMhugoKTNY+No/KTNcygLPGLLU0IsxfLuZ:rBpJGp3AoqBmki25ZEVoKTNY+NoCTNL6
MD5:	40AD8D8D32EF276710D5F47276DF3A59
SHA1:	98AF2AB7AAD173D0E0BFA41E35C5C0044761E8A1
SHA-256:	09FA0C7570EF7917C6C909C52A7026F1899DCA755956DD9F6986164E86B6C833
SHA-512:	5619B9CF0EAA95843DFF585BB833E92C409FF79B75D759B54542AFDF4AF80AB3B620CE14E50A526552D83CA5D9AA5797D634B851F99CA2457A3DD0A47B6A999E
Malicious:	false
Reputation:	low
Preview:	*...#................version.1..namespace-.1a.o................next-map-id.1.Pnamespace-047a745d_5c98_4926_b446_942fb948d072-https://rna-resource.acrobat.com/.0.K..r................next-map-id.2.Snamespace-bdf2fbfe_e08b_407d_8a81_9a6094e373a0-https://rna-v2-resource.acrobat.com/.1.m.Fr................next-map-id.3.Snamespace-24b9c7f4_3e31_4d11_a607_ac91d6485c9e-https://rna-v2-resource.acrobat.com/.2.8.o................next-map-id.4.Pnamespace-bc60f291_faa7_4492_8b22_e186b4ce62c1-https://rna-resource.acrobat.com/.3.A-N^...............Pnamespace-047a745d_5c98_4926_b446_942fb948d072-https://rna-resource.acrobat.com/-j..^...............Pnamespace-bc60f291_faa7_4492_8b22_e186b4ce62c1-https://rna-resource.acrobat.com/[.\|.a...............Snamespace-bdf2fbfe_e08b_407d_8a81_9a6094e373a0-https://rna-v2-resource.acrobat.com/....a...............Snamespace-24b9c7f4_3e31_4d11_a607_ac91d6485c9e-https://rna-v2-resource.acrobat.com/.W.@o................next-map-id.5.Pnamespace-8fb46ac3_c992_47ca_bb04_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	326
Entropy (8bit):	5.169079873452165
Encrypted:	false
SSDEEP:	6:Wlyq2P92nKuAl9OmbzNMxIFUt8k1Zmw+yRkwO92nKuAl9OmbzNMFLJ:ayv4HAa8jFUt8a/+yR5LHAa84J
MD5:	3ED5F9BFD92A69504431024B570BBF6D
SHA1:	29D1964A67DA646D607A6C74F32310555B5013BC
SHA-256:	0192819BC9C5E4508F4D128F646581D9FB198C157FED88BB421F2657140686FD
SHA-512:	A4FF0BA77C637F040A9FC8303DA268A978AFC9254A97724DCF3C9E25BF72E738DB932A57863B8D79711C531E71CB897DCC9828812826702B73BB6B56D0B16BC1
Malicious:	false
Preview:	2024/10/23-15:13:14.552 1c74 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/10/23-15:13:14.553 1c74 Recovering log #3.2024/10/23-15:13:14.553 1c74 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	326
Entropy (8bit):	5.169079873452165
Encrypted:	false
SSDEEP:	6:Wlyq2P92nKuAl9OmbzNMxIFUt8k1Zmw+yRkwO92nKuAl9OmbzNMFLJ:ayv4HAa8jFUt8a/+yR5LHAa84J
MD5:	3ED5F9BFD92A69504431024B570BBF6D
SHA1:	29D1964A67DA646D607A6C74F32310555B5013BC
SHA-256:	0192819BC9C5E4508F4D128F646581D9FB198C157FED88BB421F2657140686FD
SHA-512:	A4FF0BA77C637F040A9FC8303DA268A978AFC9254A97724DCF3C9E25BF72E738DB932A57863B8D79711C531E71CB897DCC9828812826702B73BB6B56D0B16BC1
Malicious:	false
Preview:	2024/10/23-15:13:14.552 1c74 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/10/23-15:13:14.553 1c74 Recovering log #3.2024/10/23-15:13:14.553 1c74 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241023191317Z-162.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 107 x -152 x 32, cbSize 65110, bits offset 54
Category:	dropped
Size (bytes):	65110
Entropy (8bit):	2.8391670172211856
Encrypted:	false
SSDEEP:	192:RSsWqWcwNVIYGe1n2och5RuRMkI8PnSkwS8PyiV4sw9SZtZds9dgWELr/LLgAGmm:UJbfNVIg12oc0RrlqxYmZauK5
MD5:	B87E235138BFCEF16BF8A5C9FE9378A6
SHA1:	566F37B36CE72B69AB51E741545FE84079E365B7
SHA-256:	9D0F4288FB15786DB7650AABC2842C03B3E28CC7620610D798E51062FBCC9601
SHA-512:	95B411AA39ADB39FA8C40AD4F2118D8ACA9E5CB5855C988C387DE91B7B0AA53ADC4C209A197235841B8B2168BA186A547E29D02F4811B9B582E7F279C98A72AA
Malicious:	false
Preview:	BMV.......6...(...k...h..... ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Certificate, Version=3
Category:	dropped
Size (bytes):	1391
Entropy (8bit):	7.705940075877404
Encrypted:	false
SSDEEP:	24:ooVdTH2NMU+I3E0Ulcrgdaf3sWrATrnkC4EmCUkmGMkfQo1fSZotWzD1:ooVguI3Kcx8WIzNeCUkJMmSuMX1
MD5:	0CD2F9E0DA1773E9ED864DA5E370E74E
SHA1:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA-256:	96BCEC06264976F37460779ACF28C5A7CFE8A3C0AAE11A8FFCEE05C0BDDF08C6
SHA-512:	3B40F27E828323F5B91F8909883A78A21C86551761F27B38029FAAEC14AF5B7AA96FB9F9CC93EE201B5EB1D0FEF17B290747E8B839D2E49A8F36C5EBF3C7C910
Malicious:	false
Preview:	0..k0..S............@.YDc.c...0....H........0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10...150604110438Z..350604110438Z0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10.."0....H.............0..........$s..7.+W(.....8..n<.W.x.u...jn..O(..h.lD...c...k....1.!~.3<.H..y.....!.K...qiJffl.~<p..)"......K...~....G.\|.H#S.8.O.o...IW..t../.8.{.p!.u.0<.....c...O..K~.....w...{J.L.%.p..)..S$........J.?..aQ.....cq...o[...\4ylv.;.by.../&.....................6....7..6u...r......I......A..v........5/(.l....dwnG7..Y^h..r...A)>Y>.&.$...Z.L@.F....:Qn.;.}r...xY.>Qx....../..>{J.Ks......P.\|C.t..t.....0.[q6....00\H..;..}`...).........A.......\|.;F.H..v.v..j.=...8.d..+..(.....B.".'].y...p..N..:..'Qn..d.3CO......B0@0...U...........0...U.......0....0...U......y.Y.{....s.....X..n0...*.H.............U.X....P.....i ')..au\.n...i/..VK..s.Y.!.~.Lq...`.9....!V..P.Y...Y.............b.E.f..\|o..;.....'...}~.."......

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
Category:	dropped
Size (bytes):	71954
Entropy (8bit):	7.996617769952133
Encrypted:	true
SSDEEP:	1536:gc257bHnClJ3v5mnAQEBP+bfnW8Ctl8G1G4eu76NWDdB34w18R5cBWcJAm68+Q:gp2ld5jPqW8LgeulxB3fgcEfDQ
MD5:	49AEBF8CBD62D92AC215B2923FB1B9F5
SHA1:	1723BE06719828DDA65AD804298D0431F6AFF976
SHA-256:	B33EFCB95235B98B48508E019AFA4B7655E80CF071DEFABD8B2123FC8B29307F
SHA-512:	BF86116B015FB56709516D686E168E7C9C68365136231CC51D0B6542AE95323A71D2C7ACEC84AAD7DCECC2E410843F6D82A0A6D51B9ACFC721A9C84FDD877B5B
Malicious:	false
Preview:	MSCF............,...................I..................XaK .authroot.stl.[.i..6..CK..<Tk......4.cl!Kg..E..Y.f_..".$mR"$.J.E.KB."..rKv.."{.g....3.W.....c..9.s...=....y6#..x..........D......\(.#.s.!.A.......cd.c........+^.ov...n.....3BL..0.......BPUR&.X..02.q...R...J.....w.....b.vy>....-.&..(..oe."."...J9...0U.6J..\|U..S.....M.F8g...=.......p...........l.?3.J.x.G.Ep..$g..tj......)v]9(:.)W.8.Op.1Q..:.nPd........7.7..M].V F..g.....12..!7(...B.......h.RZ.......l.<.....6..Z^.`p?... .p.Gp.#.'.X..........\|!.8.....".m.49r?.I...g...8.v.....a``.g.R4.i...J8q....NFW,E.6Y....!.o5%.Y.....R..<..S9....r....WO...(.....F..Q=....-..7d..O(....-..+k.........K..........{Q....Z..j._.E...QZ.~.\.^......N.9.k..O.}dD.b1r...[}/....T..E..G..c.\|.c.&>?..^t. ..;..X.d.E.0G....[Q.,......#.Dp..L.o\|#syc.J............}G-.ou6.=52..XWi=...m.....^u......c..fc?&pR7S5....I...j.G........j.j..Tc.El.....B.pQ.,Bp....j...9g.. >..s..m#.Nb.o_u.M.V...........\#...v..Mo\sF..s....Y...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	192
Entropy (8bit):	2.7569015731729736
Encrypted:	false
SSDEEP:	3:kkFklqs0NEllXfllXlE/HT8kHll7llXNNX8RolJuRdxLlGB9lQRYwpDdt:kKz0QT8A/7VNMa8RdWBwRd
MD5:	8049F014637879D190591CF5829C3F10
SHA1:	FB375A88BFCDC4FAB1E904FDC0C1DF71934C8FA7
SHA-256:	0B6E867C98209DFB15CB66513DF6E50C6597C1A39C1F162681B8C384698F8924
SHA-512:	AA1E6CE137BFFDADBD9BBB47A70939260DC0E55F2D98571A35AF1FA1F484766EE65B3E551FB0084FC0B9D3D4D557C52509A62D70843DA184F3BDD298130AF126
Malicious:	false
Preview:	p...... ..........Q..%..(....................................................... ..........W.....n..............o...h.t.t.p.:././.x.1...i...l.e.n.c.r...o.r.g./...".6.4.c.d.6.6.5.4.-.5.6.f."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	modified
Size (bytes):	328
Entropy (8bit):	3.144086598890895
Encrypted:	false
SSDEEP:	6:kKBL9UswDLL+N+SkQlPlEGYRMY9z+4KlDA3RUebT3:8DnLNkPlE99SNxAhUe/3
MD5:	263B3AF51F0799A1C959D66F052E39F5
SHA1:	D617C740A65E4AF1A6B4BA63FD9F541E86969874
SHA-256:	0538A31A899914DCE9C5F62C49EFA127FF4FCD9D6E737668E79C2BC557EC8E84
SHA-512:	78939FDE0FCBCC1BD0A491CFAD61283DA1A9C72B92FE32015EA7B583518FD4507D988453BDFE078E6586EF975218C502F875F3418596F52B65B089D10507AED8
Malicious:	false
Preview:	p...... ........8...%..(....................................................... ........G..@.......&...............h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".a.7.2.8.2.e.b.4.0.b.1.d.a.1.:.0."...

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.6768

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	185099
Entropy (8bit):	5.182478651346149
Encrypted:	false
SSDEEP:	1536:JsVoWFMWQNk1KUQII5J5lZRT95tFiQibVJDS+Stu/3IVQBrp3Mv9df0CXLhNHqTM:bViyFXE07ZmandGCyN2mM7IgOP0gC
MD5:	94185C5850C26B3C6FC24ABC385CDA58
SHA1:	42F042285037B0C35BC4226D387F88C770AB5CAA
SHA-256:	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
SHA-512:	652657C00DD6AED1A132E1DFD0B97B8DF233CDC257DA8F75AC9F2428F2F7715186EA8B3B24F8350D409CC3D49AFDD36E904B077E28B4AD3E4D08B4DBD5714344
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:AgencyFB-Reg.FamilyName:Agency FB.StyleName:Regular.MenuName:Agency FB.StyleBits:0.WeightClass:400.WidthClass:3.AngleClass:0.FullName:Agency FB.WritingScript:Roman.hasSVG:no.hasCOLR:no.VariableFontType:NonVariableFont.WinName:Agency FB.FileLength:58920.NameArray:0,Win,1,Agency FB.NameArray:0,Mac,4,Agency FB.NameArray:0,Win,1,Agency FB.%EndFont..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:AgencyFB-Bold.FamilyName:Agency FB.StyleName:Bold.MenuName:Agency FB.StyleBits:2.WeightClass:700.WidthClass:3.AngleClass:0.FullName:Agency FB Bold.WritingScript:Roman.hasSVG:no.hasCOLR:no.VariableFontType:NonVariableFont.WinName:Agency FB Bold.FileLength:60656.NameArray:0,Win,1,Agency FB.NameArray:0,Mac,4,Agency FB Bold.NameArray:0,Win,1,Agency FB.%EndFont..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:Algerian.FamilyName:Algerian.StyleName:Regular.MenuName:Algerian.StyleBits:0.We

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	227002
Entropy (8bit):	3.392780893644728
Encrypted:	false
SSDEEP:	1536:WKPC4iyzDtrh1cK3XEivK7VK/3AYvYwgF/rRoL+sn:DPCaJ/3AYvYwglFoL+sn
MD5:	87EDBEE38F56C20298F25D5D3D4D1B5C
SHA1:	7F904E9615AC3186A87472EF366DD8202855B0B7
SHA-256:	A46B56D3ABCC137D1872DDF20EED4BCD7D04518282282ADB32DDCCF70D7FFBA6
SHA-512:	BBEBC1FCD5BC9AE042DD5782425BA8C47BF3EAC283B2487FC4E3FF6BF8101306DAB081E5135594165D4DC1AC120FF125AADBC5B3FFE7C646183C04DF77865E0D
Malicious:	false
Preview:	Adobe Acrobat Reader (64-bit) 23.6.20320....?A12_AV2_Search_18px.............................................................................................................KKK KKK.KKK.KKK.KKK.KKK.KKK@........................................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.............................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.........................KKK.KKK.KKK.KKK0....................KKK.KKK.KKK.KKK`....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK.KKK.....................................KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK.KKK@....................KKK.KKK.KKK.KKK`........................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.KKK.............................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.34848409692838
Encrypted:	false
SSDEEP:	6:YEQXJ2HXzAuxGB/2Ox+FIbRI6XVW7+0Y/XxoAvJM3g98kUwPeUkwRe9:YvXKXzAuMdUYpW78XOGMbLUkee9
MD5:	175CEAD5CF20A7FDEC78BE1F23FF8CF8
SHA1:	BBBE18264F18FCCD7279A4A8FF9EF66EED9CCD39
SHA-256:	8190741CF60EC280DAD4962B46110EE206636F5B1FC0C236540593D9EA0189E6
SHA-512:	A2ACD7826FE161FE1E51DDEF64E3BAE38D3A1FC5058614428C2480AF064844132E27CC39FB031F95C8622A63307AEC285584CCD8F6552345C74EDE1681DAC874
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"57093e56-742e-4ec2-9ed5-443263ba8c0f","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1729887395159,"statusCode":200,"surfaceID":"ACROBAT_READER_MASTER_SURFACEID","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.285141809510393
Encrypted:	false
SSDEEP:	6:YEQXJ2HXzAuxGB/2Ox+FIbRI6XVW7+0Y/XxoAvJfBoTfXpnrPeUkwRe9:YvXKXzAuMdUYpW78XOGWTfXcUkee9
MD5:	81861169F69D99730DD96EF6A233E0AC
SHA1:	4684AD8EB3AD7620CFC35D830A66771FFA47B215
SHA-256:	0AD76CDA3FD56B8499D62763473D270622A78BB249C04681272A203899A68273
SHA-512:	EFE8D556A9D317AA66D7782E52F33CEBB16362B20C5918BE87552B6D147CF965FB542A02B97559294A7D40A9A0D0113BD4A223E0EF8E2D05DA528F1BAC04327A
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"57093e56-742e-4ec2-9ed5-443263ba8c0f","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1729887395159,"statusCode":200,"surfaceID":"DC_FirstMile_Home_View_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.264221273715354
Encrypted:	false
SSDEEP:	6:YEQXJ2HXzAuxGB/2Ox+FIbRI6XVW7+0Y/XxoAvJfBD2G6UpnrPeUkwRe9:YvXKXzAuMdUYpW78XOGR22cUkee9
MD5:	E55AE4B2E86EE16F7B9BC355D8C88616
SHA1:	72DBF3D1C3510156056A12F2C886926EF3DD91E6
SHA-256:	AB4225B18A3E1978FFAE4737E7376A9363C1961D61399D53A3C7A2B5CCCFDD6D
SHA-512:	C5E0D127660E8F557051A79F23CAAE3266126D2FEB2F61D8EF8FAD892B5367C5A51CB2610E76B7773C48FE3C11679B494A22AEA887FF8BA9BCA7F348B2C1CC7A
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"57093e56-742e-4ec2-9ed5-443263ba8c0f","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1729887395159,"statusCode":200,"surfaceID":"DC_FirstMile_Right_Sec_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.326854894252883
Encrypted:	false
SSDEEP:	6:YEQXJ2HXzAuxGB/2Ox+FIbRI6XVW7+0Y/XxoAvJfPmwrPeUkwRe9:YvXKXzAuMdUYpW78XOGH56Ukee9
MD5:	7AF10ABD092A2313E89CF2A6DD946731
SHA1:	E01A1E741577F9966381AF7745DE3A9D8F734540
SHA-256:	F022D1D3903D2DA67C61A9BF3201FFF5A81E6E3A192F10236BBBABF3C3300675
SHA-512:	EB7AB5B026E96ACF5AEF150FDF0420EB12F1A26704703930F343A3E8E5C5E079E788B73AAB046930A158D88B9EBFE225A84EF74635A89E6F3DE516F9A440B585
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"57093e56-742e-4ec2-9ed5-443263ba8c0f","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1729887395159,"statusCode":200,"surfaceID":"DC_READER_LAUNCH_CARD","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1055
Entropy (8bit):	5.655923188450741
Encrypted:	false
SSDEEP:	24:Yv6XzAuMdFiM7pLgEscLf7nnl0RCmK8czOCCSS:YvG9M7hgGzaAh8cv/S
MD5:	B1B58F5CB230706544BB4B9A75FC4CF9
SHA1:	3EA748EEFE4DCA62FC14226ED293C8391627E009
SHA-256:	C448F9F0F84F76E91B26189B7F3F213B5D68692EE4B449037A9D7B2BA7F79FBF
SHA-512:	08F306504AD7DF5209FA9951E1374999F5BFECB50C94876154FE27F4B423F5C0A9AE3F7E29D7955627FD49AE113408692F46C1F6BBA36EC488818F7F325F6BCD
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"57093e56-742e-4ec2-9ed5-443263ba8c0f","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1729887395159,"statusCode":200,"surfaceID":"DC_Reader_Convert_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Convert_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"92038_285529ActionBlock_1","campaignId":92038,"containerId":"1","controlGroupId":"","treatmentId":"eb1a4bce-8215-46f1-b44c-154b21a85d60","variationId":"285529"},"containerId":1,"containerLabel":"JSON for DC_Reader_Convert_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkV4cG9ydCBQREZzIHRvIE1pY3Jvc29mdCBXb3JkIGFuZCBFeGNlbC4ifSwidGNhdElkIjpudWxsfQ==","dataType":"application\/json","encodingScheme":tr

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1050
Entropy (8bit):	5.647205237546575
Encrypted:	false
SSDEEP:	24:Yv6XzAuMdFiM3VLgEF0c7sbnl0RCmK8czOCYHflEpwiVD:YvG9M3Fg6sGAh8cvYHWpwS
MD5:	A8E29B654A20A7B443413A8DF0CF0BAE
SHA1:	43F9ED1E5C2377294CAA7A2D5585FFB3FD0A70BA
SHA-256:	A29ED505C41E524293F25BAE889EDF36DD73CD0321FAEA52DA12B507A960A57A
SHA-512:	DDB5ADEB974E7FF9813C4A778A5DA8CA9D7CEDC5D94510F0C5E65BDA0ABDCD2268CE4A878F91C296FCA6DE43EFB163B958F3810CA1B8DE66A9E3200D3AE97A8B
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"57093e56-742e-4ec2-9ed5-443263ba8c0f","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1729887395159,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Disc_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85534_264855ActionBlock_0","campaignId":85534,"containerId":"1","controlGroupId":"","treatmentId":"0924134e-3c59-4f53-b731-add558c56fec","variationId":"264855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Disc_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkNvbnZlcnQsIGVkaXQgYW5kIGUtc2lnblxuZm9ybXMgJiBhZ3JlZW1lbnRzLiJ9LCJ0Y2F0SWQiOm51bGx9","dataType":"application\/json","encodingScheme":true},"

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.2715651832931165
Encrypted:	false
SSDEEP:	6:YEQXJ2HXzAuxGB/2Ox+FIbRI6XVW7+0Y/XxoAvJfQ1rPeUkwRe9:YvXKXzAuMdUYpW78XOGY16Ukee9
MD5:	B6C6863C36B3C721375855BA7723B221
SHA1:	0AD374E31F8460B1363FFD05B2FD1339181253E2
SHA-256:	7EDDDE6021488DE88F408EB5E97BACD359EB4EB9042F012AE0D3265842BA2363
SHA-512:	5F4C0E6CCAF01616DFD9CD88822A21FBAE0B3B3B7634CBECB63FA588E497B6C836A342EA3BFD22247673691C2FAC2239A5EFA6F976FF549CDA31BB106CF8AE68
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"57093e56-742e-4ec2-9ed5-443263ba8c0f","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1729887395159,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1038
Entropy (8bit):	5.644549733290983
Encrypted:	false
SSDEEP:	24:Yv6XzAuMdFiMm2LgEF7cciAXs0nl0RCmK8czOCAPtciBD:YvG9Mmogc8hAh8cvA5
MD5:	633DFC8B4667D7A3549397093ECEF77C
SHA1:	4F7DF2693C203A67ED2E0D1C92CB23D00A29C5E0
SHA-256:	D5CE692552E9844B9DE9BB750B8E25B2315718136CBCAF555A1E7FA470359320
SHA-512:	21BB5828E840499F531481C939CE0C435D478B16C0D3097167B897E934D01DEC3F33AEF82F8B3EC9D1B324D49EEF9D73D568E68D7AF728266D83C281349D7BBE
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"57093e56-742e-4ec2-9ed5-443263ba8c0f","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1729887395159,"statusCode":200,"surfaceID":"DC_Reader_Edit_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Edit_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85534_264855ActionBlock_1","campaignId":85534,"containerId":"1","controlGroupId":"","treatmentId":"49d2f713-7aa9-44db-aa50-0a7a22add459","variationId":"264855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Edit_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkVkaXQgdGV4dCwgaW1hZ2VzLCBwYWdlcywgYW5kIG1vcmUuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"application\/json","encodingScheme":true},"endDTS":1744

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1164
Entropy (8bit):	5.696689566558772
Encrypted:	false
SSDEEP:	24:Yv6XzAuMdFiMKKLgEfIcZVSkpsn264rS514ZjBrwloJTmcVIsrSK5D:YvG9MKEgqprtrS5OZjSlwTmAfSKF
MD5:	0D02522F418FE35011DCED494E4E9E79
SHA1:	4277FC42CCA4E3B52917F3444FEC87BD23757F79
SHA-256:	EB37583AC48046F19BBECFDCC9AA5F5E262A3A16B38789B0F2F8F55717877A57
SHA-512:	B53ADB14F441E953F1E57E8AEFBB04940C1C45C82858DE7BB1412543342BDD8AC990958522FE457DF4EC311161E150A190796891DA92C461EC231A67D371AC58
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"57093e56-742e-4ec2-9ed5-443263ba8c0f","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1729887395159,"statusCode":200,"surfaceID":"DC_Reader_Home_LHP_Trial_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Home_LHP_Trial_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85531_264848ActionBlock_0","campaignId":85531,"containerId":"1","controlGroupId":"","treatmentId":"ee1a7497-76e7-43c2-bb63-9a0551e11d73","variationId":"264848"},"containerId":1,"containerLabel":"JSON for DC_Reader_Home_LHP_Trial_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IlRyeSBBY3JvYmF0IFBybyJ9LCJ1aSI6eyJ0aXRsZV9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjE1cHgiLCJmb250X3N0eWxlIjoiMCJ9LCJkZXNjcmlwdGlvbl9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjEzcHgiLCJmb250X3N0eWxlIjoiLTEifSwidGl0bGUiOiJGcmVlIHRyaWFsIiwiZGVzY3JpcHRpb24iOiJHZXQgdW5saW1pdGVkIGFjY2VzcyB0b1xucHJlbWl1bSBQREYgYW5kIGUtc2lnbmluZ1xudG9vbHMuIn0sImJhbm5lcl9zdHlsaW5nIjo

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.278570886539893
Encrypted:	false
SSDEEP:	6:YEQXJ2HXzAuxGB/2Ox+FIbRI6XVW7+0Y/XxoAvJfYdPeUkwRe9:YvXKXzAuMdUYpW78XOGg8Ukee9
MD5:	7A32A85BFDBD3DF37E31B578EE9EE6CF
SHA1:	684AF0FD423FFB04E0FC170CCDEB64C323160215
SHA-256:	1C0952C782C4504BC4F856D630E8E35323F9A8854E59A699A3F589C6ECAC919F
SHA-512:	1A22FD1FCA05F1A41216D473AE92D11C2327364CB22F120E160836C035D69C0E260415B485F56D24EF99F1CDDC470EAF8FE2465AA25CB3616D641EA5D1AA3A7E
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"57093e56-742e-4ec2-9ed5-443263ba8c0f","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1729887395159,"statusCode":200,"surfaceID":"DC_Reader_More_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1395
Entropy (8bit):	5.770256705187927
Encrypted:	false
SSDEEP:	24:Yv6XzAuMdFiM5rLgEGOc93W2JeFmaR7CQzttgBcu141CjrWpHfRzVCV9FJN7:YvG9M5HgDv3W2aYQfgB5OUupHrQ9FJF
MD5:	65F182EF9A068096070386393CEBEAB4
SHA1:	725B06A9EAA611B18B238A9C91F9E9AC189013FF
SHA-256:	9251518A427B37ACC4E1DCA119FF879732281E8ECA051255B4E8447DFB50E721
SHA-512:	94D90CB664CAFBDCB5B756F9CCF67971586194AE1525625FBD7ADBE4531A255221D18092890B471622941248F2158E73A02A40D7367C4C9E83AC27846EC0A4B3
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"57093e56-742e-4ec2-9ed5-443263ba8c0f","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1729887395159,"statusCode":200,"surfaceID":"DC_Reader_RHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_RHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"57802_176003ActionBlock_0","campaignId":57802,"containerId":"1","controlGroupId":"","treatmentId":"d0374f2d-08b2-49b9-9500-3392758c9e2e","variationId":"176003"},"containerId":1,"containerLabel":"JSON for Reader DC RHP Banner","content":{"data":"eyJjdGEiOnsidHlwZSI6ImJ1dHRvbiIsInRleHQiOiJGcmVlIDctRGF5IFRyaWFsIiwiZ29fdXJsIjoiaHR0cHM6Ly9hY3JvYmF0LmFkb2JlLmNvbS9wcm94eS9wcmljaW5nL3VzL2VuL3NpZ24tZnJlZS10cmlhbC5odG1sP3RyYWNraW5naWQ9UEMxUFFMUVQmbXY9aW4tcHJvZHVjdCZtdjI9cmVhZGVyIn0sInVpIjp7InRpdGxlX3N0eWxpbmciOnsiZm9udF9zaXplIjoiMTQiLCJmb250X3N0eWxlIjoiMyJ9LCJkZXNjcmlwdGlvbl9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjEyIiwiZm9udF9zdHlsZSI6IjMifSwidGl0

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.262265263344067
Encrypted:	false
SSDEEP:	6:YEQXJ2HXzAuxGB/2Ox+FIbRI6XVW7+0Y/XxoAvJfbPtdPeUkwRe9:YvXKXzAuMdUYpW78XOGDV8Ukee9
MD5:	10C796B428809AD6FE2FA831E05309F1
SHA1:	404EAF6ED0F2B6F6E4119617A11258BDA8E7D63B
SHA-256:	A63727079C39FFA914596CBDAC6DBB3523EBF24B36657DFF8A5B9D5FEEDC24E0
SHA-512:	8657B3F1616B97106FB8180FD30097083BBC62BC2F7B9BEDF0DD0D110316BCD24FAD6DA570F52C71BCBBE57DFCCC8B0F82548B3583CA2A487304B58DBB949709
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"57093e56-742e-4ec2-9ed5-443263ba8c0f","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1729887395159,"statusCode":200,"surfaceID":"DC_Reader_RHP_Intent_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.263327491084905
Encrypted:	false
SSDEEP:	6:YEQXJ2HXzAuxGB/2Ox+FIbRI6XVW7+0Y/XxoAvJf21rPeUkwRe9:YvXKXzAuMdUYpW78XOG+16Ukee9
MD5:	8B66D135DB8A39220CCAB17422AF6EE9
SHA1:	F6DBD0FCC505DD1C4262C94C9A3306EB112C4FA3
SHA-256:	428675BBF15F50CB1E1146435CBC5A73C31EDADFE35EDFF9EF7AA1933DE539F4
SHA-512:	02B8DED53944C226D830255FB87BA1C71E601F7C10614E248F24544E808B09FA349639248893FA355DD101123307573B6504833912B3A623698DAA81BE6B4FC0
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"57093e56-742e-4ec2-9ed5-443263ba8c0f","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1729887395159,"statusCode":200,"surfaceID":"DC_Reader_RHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1026
Entropy (8bit):	5.625464382721781
Encrypted:	false
SSDEEP:	24:Yv6XzAuMdFiM7amXayLgE7cMCBNaqnl0RCmK8czOC/BSS:YvG9MLBgACBOAh8cvMS
MD5:	C7EEF2B873D8E1E511866A35E9392F05
SHA1:	B79B33345F4B3434546E8D840FBA8BCE327C3025
SHA-256:	FEA2B99F4F356AE8056211626D624615B4E5404178D3A98AAAB236621638A219
SHA-512:	0DBCF0C9CFAD7AFCA7FAB89687081365F7E2C913FE98CE52D9F3C7F99FFB48EB8FE1E583E55FCB2F152A9D7C97CB50B32B018292063D68A01E19492AA38C0A4F
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"57093e56-742e-4ec2-9ed5-443263ba8c0f","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1729887395159,"statusCode":200,"surfaceID":"DC_Reader_Sign_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Sign_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"92038_285529ActionBlock_0","campaignId":92038,"containerId":"1","controlGroupId":"","treatmentId":"6291f52b-6cb0-4d31-bc46-37ce85e9eb25","variationId":"285529"},"containerId":1,"containerLabel":"JSON for DC_Reader_Sign_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkVhc2lseSBmaWxsIGFuZCBzaWduIFBERnMuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"application\/json","encodingScheme":true},"endDTS":1751323379000,"s

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	5.239743360120576
Encrypted:	false
SSDEEP:	6:YEQXJ2HXzAuxGB/2Ox+FIbRI6XVW7+0Y/XxoAvJfshHHrPeUkwRe9:YvXKXzAuMdUYpW78XOGUUUkee9
MD5:	60C06530BA116C000A1F2B837177168B
SHA1:	ABC1C03DC02CFC94C6E66E421FA7562EAC4C5801
SHA-256:	17CCA6CB99D8627E9D8011800EB665ADE071A502600360EDC0415CAADB5D4AA0
SHA-512:	FCA401D9A0BF43EB925EC85717EAA037172C09F382DABC2F3CCBFB29F361357CE60A8CAB5F1F68DBD38F83FD2A6F8E5533053056563BA3BC4207A7FC06B6802D
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"57093e56-742e-4ec2-9ed5-443263ba8c0f","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1729887395159,"statusCode":200,"surfaceID":"DC_Reader_Upsell_Cards","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	782
Entropy (8bit):	5.357557628806248
Encrypted:	false
SSDEEP:	12:YvXKXzAuMdUYpW78XOGTq16Ukee1+3CEJ1KXd15kcyKMQo7P70c0WM6ZB/uhWg+:Yv6XzAuMdFiMY168CgEXX5kcIfANhS
MD5:	21C56DF2C08765BA47580183BD9E3DC7
SHA1:	796C1CEFC3E84C4F5CE93731740D78AA9E074D2C
SHA-256:	9864DB3F1B780631974D0D6BB31D6E88E388B0C851D270E34927AF643A1C087A
SHA-512:	BF88BB6350A6C8AC3B5E6B2BEDBC12964418DA0C3ED02893847D98C0B3953A807AF2373F31465511DD12847C0C5317A68E9142CA86D52AB23649527407B81C0F
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"57093e56-742e-4ec2-9ed5-443263ba8c0f","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1729887395159,"statusCode":200,"surfaceID":"Edit_InApp_Aug2020","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"Edit_InApp_Aug2020"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"20360_57769ActionBlock_0","campaignId":20360,"containerId":"1","controlGroupId":"","treatmentId":"3c07988a-9c54-409d-9d06-53885c9f21ec","variationId":"57769"},"containerId":1,"containerLabel":"JSON for switching in-app test","content":{"data":"eyJ1cHNlbGxleHBlcmltZW50Ijp7InRlc3RpZCI6IjEiLCJjb2hvcnQiOiJicm93c2VyIn19","dataType":"application\/json","encodingScheme":true},"endDTS":1735804679000,"startDTS":1729710800195}}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2818
Entropy (8bit):	5.12659328600804
Encrypted:	false
SSDEEP:	24:YaWNCKcF9Ga8koBayiropvFkDRC4QcTDcLJRVh4NL2m84VPjlQj0SzfgPCC2CQ2H:Yc+koFvFUIcXmHqp8+Ao787q4S9Gg
MD5:	6660DAED644972050A1F31A6DE962ACF
SHA1:	488E1337241112017A2DAB8ED912A0F523021E84
SHA-256:	14F6C5D420E01B5F3B8B4EC75B3E782AF1E5200E50AE0F18A81D0E9929FDC62C
SHA-512:	0303EAB3F5630FF6CEFBD4AB8817BC701D07FED5F99F1B214493C289EE021161A967416ACDE6304B18FAE4DD3372BFF67BD2C3A338ECBC9FED6943443D5C27ED
Malicious:	false
Preview:	{"all":[{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"7f05240ead0096a372ff25466d51a878","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":1050,"ts":1729710799000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"03657c8b6caf2d03476d5aa96e253e9b","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":1164,"ts":1729710799000},{"id":"DC_Reader_Sign_LHP_Banner","info":{"dg":"888f227ea8e4e02a96565770e1188e79","sid":"DC_Reader_Sign_LHP_Banner"},"mimeType":"file","size":1026,"ts":1729710799000},{"id":"DC_Reader_Convert_LHP_Banner","info":{"dg":"ebdea2e61187d5c529d2a625545697f1","sid":"DC_Reader_Convert_LHP_Banner"},"mimeType":"file","size":1055,"ts":1729710799000},{"id":"DC_Reader_Edit_LHP_Banner","info":{"dg":"82dd6b00407c59747e52186e75d1f556","sid":"DC_Reader_Edit_LHP_Banner"},"mimeType":"file","size":1038,"ts":1729710799000},{"id":"Edit_InApp_Aug2020","info":{"dg":"4fa883167a266d0039bebc93fa15f935","sid":"Edit_InApp_Aug2020"},"mimeType":"file","size":782,"ts":17

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 19, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 19
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	0.9849568919300045
Encrypted:	false
SSDEEP:	24:TLHRx/XYKQvGJF7urs6I1RZKHs/Ds/SpG3j4zJwtNBwtNbRZ6bRZ4J3jF:TVl2GL7ms6ggOVpvzutYtp6PO
MD5:	980733FC422C52702FE801F6948949DB
SHA1:	782566AABD7C966C19EC7D563A930762EE601F2D
SHA-256:	A070512CB648781E5F9E2321A503A23CD8DC261491EF8D3B407E4A3E925F8A1E
SHA-512:	C99DAE08BF83D0557313A29F1C70D6EA74FF0AC13ED2CF23460EFE58476B93017F6C69AC8C8DF2209B52B5D93B5253B6EE682D64E6818DEAE6A743F483950810
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.3392192814512542
Encrypted:	false
SSDEEP:	24:7+tWAD1RZKHs/Ds/SpG3jPzJwtNBwtNbRZ6bRZWf1RZKJqLBx/XYKQvGJF7urs6A:7MWGgOVpYzutYtp6PMwqll2GL7ms6A
MD5:	AB0E7A91B4A2B3EF601A0A06225A00CE
SHA1:	FDE49FE6B2D108D71CA8753F255FD0A6772E6B93
SHA-256:	2A3A5B62AF5ECB1B4A1092FC5EADF63CB999036141A6ACB72AD2D2C611C4BE1B
SHA-512:	E4F8EA6E95AD51B74BEEE57233E784127C95B667DC9B2E656C9B1FB9E7287D64F27AEEE6B0CAC2F43071E85DA2310150EDD2AA37C6AB66FC84C5C44E332277D4
Malicious:	false
Preview:	.... .c......;.&......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................j...#..#.#.#.#.#.#.#.#.7.7........................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSI9e099.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.505069684106714
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K8rOlQqRMClH:Qw946cPbiOxDlbYnuRKDlBMC9
MD5:	0B178CE919064D5E00DC166F2AB7D58B
SHA1:	0D35AACDFEF3A0D284A9D50EE6BB353804F704F2
SHA-256:	C36D889E6169488907EF2011D90BD34A71A56F8460101096A0B416C313246788
SHA-512:	0D1483418C9D15D67C0CB6F1F9034540052CFD4B8E86A36A20F1C8AAF5600C8A0E5C1B9F5D107FC2CC690BABBF3C0DCCA07FCF15FD2824B06CF3618BF487EC23
Malicious:	false
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .2.3./.1.0./.2.0.2.4. . .1.5.:.1.3.:.2.1. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-23 15-13-15-762.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.376360055978702
Encrypted:	false
SSDEEP:	384:6b1sdmfenwop+WP21h2RPjRNg7JjO2on6oU6CyuJw1oaNIIu9EMuJuF6MKK9g9JQ:vIn
MD5:	1336667A75083BF81E2632FABAA88B67
SHA1:	46E40800B27D95DAED0DBB830E0D0BA85C031D40
SHA-256:	F81B7C83E0B979F04D3763B4F88CD05BC8FBB2F441EBFAB75826793B869F75D1
SHA-512:	D039D8650CF7B149799D42C7415CBF94D4A0A4BF389B615EF7D1B427BC51727D3441AA37D8C178E7E7E89D69C95666EB14C31B56CDFBD3937E4581A31A69081A
Malicious:	false
Preview:	SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:961+0200 ThreadID=6596 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	16603
Entropy (8bit):	5.3687380350918
Encrypted:	false
SSDEEP:	384:T3NKV7M7zElPR0uURS5E1THuKVs/9/vB9evlT7FUps7YWYpUcnFhONOnaKD8Dr9U:3UJF
MD5:	B9987A86DC28B4BCAD52E59D89590B45
SHA1:	03E0DC15BDD0B47AC5FB5B12FA93D8F10C1105F8
SHA-256:	A329B94CF2E9053ADCF3E2920F4E48781BB3768147818D142344AF636FE14949
SHA-512:	D9ACA11B332C1538271FC029A9BB5B5891ED1B308B588AB779170921B25C2CC0199A49F2044EA58BEF1C0071B4E53E6101B4BD6B60BEF77F40493BE26F748F65
Malicious:	false
Preview:	SessionID=be44566d-2d1c-4d13-84ec-4fb563c6b43b.1729710795784 Timestamp=2024-10-23T15:13:15:784-0400 ThreadID=6640 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=be44566d-2d1c-4d13-84ec-4fb563c6b43b.1729710795784 Timestamp=2024-10-23T15:13:15:785-0400 ThreadID=6640 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=be44566d-2d1c-4d13-84ec-4fb563c6b43b.1729710795784 Timestamp=2024-10-23T15:13:15:785-0400 ThreadID=6640 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=be44566d-2d1c-4d13-84ec-4fb563c6b43b.1729710795784 Timestamp=2024-10-23T15:13:15:785-0400 ThreadID=6640 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=be44566d-2d1c-4d13-84ec-4fb563c6b43b.1729710795784 Timestamp=2024-10-23T15:13:15:785-0400 ThreadID=6640 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	29752
Entropy (8bit):	5.395328346923155
Encrypted:	false
SSDEEP:	768:GLxxlyVUFcAzWL8VWL1ANSFld5YjMWLvJ8Uy++NSXl3WLd5WLrbhhVClkVMwDGbm:y
MD5:	81927CF38B2F3E8C42CE1FF85536F853
SHA1:	C76BB14321FE43E796678713D79B49224CA52575
SHA-256:	5E3EDCC6697BFE5B5650DA9364189ACBD1E1112B940F48B93CD78A3B8334C9D3
SHA-512:	C7894A6C03157D312CE0016DD7142CF4211E77648BB7A274BBC122B9740BC11DD9716E0224A6E0F63107349B94CA69D5B632AA62EA3A12AC80357DDB4A833324
Malicious:	false
Preview:	04-10-2023 02:39:31:.---2---..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : *************************************..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : ***********************************..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : Starting NGL..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..04-10-2023 02:39:31:.Closing File..04-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\784a4ca5-f9a8-461d-a6f8-c262ba3c4a59.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:/xA7o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R07/WLaGZDwYIGNPJe:JVB3mlind9i4ufFXpAXkrfUs0jWLaGZo
MD5:	A0CFC77914D9BFBDD8BC1B1154A7B364
SHA1:	54962BFDF3797C95DC2A4C8B29E873743811AD30
SHA-256:	81E45F94FE27B1D7D61DBC0DAFC005A1816D238D594B443BF4F0EE3241FB9685
SHA-512:	74A8F6D96E004B8AFB4B635C0150355CEF5D7127972EA90683900B60560AA9C7F8DE780D1D5A4A944AF92B63C69F80DCDE09249AB99696932F1955F9EED443BE
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\ef4b9edf-71d2-4dcf-a365-ba451711a5cc.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3Pjegf121YS8lkipdjMMNB1DofjgJJg
MD5:	3A49135134665364308390AC398006F1
SHA1:	28EF4CE5690BF8A9E048AF7D30688120DAC6F126
SHA-256:	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
SHA-512:	BE2C3C39CA57425B28DC36E669DA33B5FF6C7184509756B62832B5E2BFBCE46C9E62EAA88274187F7EE45474DCA98CD8084257EA2EBE6AB36932E28B857743E5
Malicious:	false
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Local\Temp\acrocef_low\f86897e6-e334-499f-a298-ab31d2538b08.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Local\Temp\acrocef_low\feb403fb-d6e7-4bda-bae4-258d304f60b5.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:/M7ouWLaGZjZwYIGNPJodpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:RuWLaGZjZwZGk3mlind9i4ufFXpAXkru
MD5:	AE1E8A5D3E7B2198980A0CA16DE5F3D3
SHA1:	A1DB2C58AFC81E6A114A8EB47BE0243956F79460
SHA-256:	8C2E1B13F6658714D51737D6745FE065B87497923945AB3028706A4171C8328F
SHA-512:	5B36CF0982C5AFED5CCEA4B30A0B31A2B5312FBF5438623D53153E076B59F1B4BEF8C08695EA74E086BCA4EF7221889DB977B5DCFF4C684BA0683FDDECDE2EC4
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 18:13:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9819241819077633
Encrypted:	false
SSDEEP:	48:8+dLTTrzHIidAKZdA19ehwiZUklqehGfy+3:8GTShfy
MD5:	0D858E47F502E539521EC45C7D2F0178
SHA1:	C6051B2A7B6B831D49609589E4ED532F85004974
SHA-256:	2C6C4FC5B24123A94687048A82A2781FA224751DDF732C3F40CA8B95E0523D91
SHA-512:	89CCB0A4A7928A76213163DDC4A3B501978FC3A30A7BD100EDB66552389E1C14855B310974ECF0426630AAE6303E5EC91A974F9E9706B681E22B941042B79993
Malicious:	false
Preview:	L..................F.@.. ...$+.,.........%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IWY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VWY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VWY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VWY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............e.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 18:13:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.997819375962839
Encrypted:	false
SSDEEP:	48:8XvdLTTrzHIidAKZdA1weh/iZUkAQkqehRfy+2:8FTI9QEfy
MD5:	3FE67106BCA11675F9721FE1CBB59DC9
SHA1:	0D2CBEAFEFD0B9EE733F31BABB2F544E4ADC898B
SHA-256:	56F0B1F67D20E16B3D4D5A74871A3718F970EC750A366838DD76BD22D792BADC
SHA-512:	D0AA62655676EB259B7BA912D36A10B73BFF1BE41D140B556FD31B3ED8F1B5145A7603BD7E0A2C52D2AEE3015EED0E7648401BD54764C838E17F971B1374F951
Malicious:	false
Preview:	L..................F.@.. ...$+.,....?...%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IWY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VWY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VWY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VWY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............e.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.006147313513852
Encrypted:	false
SSDEEP:	48:8xYdLTTrsHIidAKZdA14tseh7sFiZUkmgqeh7sHfy+BX:8xIT5nVfy
MD5:	36CD2BC533F28636EEB66BBF10100EC6
SHA1:	037F3D0A3F22AD65390005057070970CD1EAFEDF
SHA-256:	122681C63B74199B2DA2142E1D5B978B667F7D788DA80EEFCDFC253B60C04DE1
SHA-512:	17B679EFC50CA31B1D7CF9EFB31FBA1080761B3F69BCFC3C4A647B9EC8C09E7B36FECDCECBABDD54ED772136A60BCA982031679A1EDB0A5B8B2533592A864CDB
Malicious:	false
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IWY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VWY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VWY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............e.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 18:13:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.995048331313145
Encrypted:	false
SSDEEP:	48:8cdLTTrzHIidAKZdA1vehDiZUkwqehdfy+R:8UTTPfy
MD5:	BB27D24CDC1D20F855E9E262D1D0F223
SHA1:	5A7E22D73B24F220C174E01235F6D86DB531C705
SHA-256:	3333CE3B95F94ECA943777E10B91DCB3A43985190B20F13ECF178104FBE26681
SHA-512:	45625430322C8A8C248DA4DE21D28E5127A8F7A06B1843FD9C3517F04E587B2D3CE4AB63AE8B64E03BAF1C4B7CAA15970D8E7979DAD8EEBA613D37A1113D4C13
Malicious:	false
Preview:	L..................F.@.. ...$+.,........%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IWY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VWY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VWY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VWY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............e.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 18:13:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9834443164822635
Encrypted:	false
SSDEEP:	48:80MdLTTrzHIidAKZdA1hehBiZUk1W1qeh7fy+C:80ETD9bfy
MD5:	8825A4DF638090F7BC483146969666C3
SHA1:	EEA207D05D714BF2F716CF3D89218A903217995E
SHA-256:	13C04497F7FA7487FA41487DCA1E9C229902A042CF13D88353F6C68F056B3985
SHA-512:	37FD7C3A9CCEAF8278700481C874958041CE0839FC4BC769077F01449B2E945FBC900EF063B72573B9221F4627A550286B2CB1645970DE79C0114F1D2F3FCF69
Malicious:	false
Preview:	L..................F.@.. ...$+.,....y...%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IWY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VWY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VWY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VWY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............e.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 18:13:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9955318380676696
Encrypted:	false
SSDEEP:	48:86dLTTrzHIidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbVfy+yT+:8qTzT/TbxWOvTbVfy7T
MD5:	9589636A10672D1356A3189F0C19770B
SHA1:	7DE39E7256D1287678947F4509B1CA78DD7A188E
SHA-256:	0CCE2858084D6AF38E8EEEB303B0EED8955C13FDEAD2719EF1FA8F3CCD2E63DC
SHA-512:	8526AC38A310A91819ECEF4526F056BD497F2DFEEE5BF190668EEA96D85159A7D42A46D2C608D05E46A4E5FB8AB19F9898958E511F90FFA90A6DE8FC9829B2EC
Malicious:	false
Preview:	L..................F.@.. ...$+.,........%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IWY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VWY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VWY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VWY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............e.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 9 x 76, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.022997040570906
Encrypted:	false
SSDEEP:	3:yionv//thPl6tpxAkxl/k4E08up:6v/lhPLk7Tp
MD5:	2B68A3F4F61CC5DF47C229537103F421
SHA1:	B2152909E1D38A5EB06552940E55A5DBDDDF71F3
SHA-256:	E98E0FA8FDCDDB061FB17D96FD2225371341AD4B1C494253F5121EA23B918527
SHA-512:	912B22AF47B14855A7E5D71FF21B7455A6D00D52F69A1ECB1F441735FB629C5C04B6A19ABC46DB7AE6D15FD5218BBE0BAB124E6C29EA7B8C42DE472FD1095837
Malicious:	false
Preview:	.PNG........IHDR.......L.....0f......IDAT.....$.....IEND.B`.

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24050)
Category:	downloaded
Size (bytes):	24051
Entropy (8bit):	4.941039417164537
Encrypted:	false
SSDEEP:	192:VuR/6okgTQwq23gGM8lUR9YRGQ2BwoX6zp+1+nDT1FvxKSI7/UsV7MSE6XZ2dKzk:JwV+oUcoQJpdf1dxKSI7/Ue7ZX2qk
MD5:	5E8C69A459A691B5D1B9BE442332C87D
SHA1:	F24DD1AD7C9080575D92A9A9A2C42620725EF836
SHA-256:	84E3C77025ACE5AF143972B4A40FC834DCDFD4E449D4B36A57E62326F16B3091
SHA-512:	6DB74B262D717916DE0B0B600EEAD2CC6A10E52A9E26D701FAE761FCBC931F35F251553669A92BE3B524F380F32E62AC6AD572BEA23C78965228CE9EFB92ED42
Malicious:	false
URL:	https://vibeforceji.sa.com/cdn-cgi/styles/cf.errors.css
Preview:	#cf-wrapper a,#cf-wrapper abbr,#cf-wrapper article,#cf-wrapper aside,#cf-wrapper b,#cf-wrapper big,#cf-wrapper blockquote,#cf-wrapper body,#cf-wrapper canvas,#cf-wrapper caption,#cf-wrapper center,#cf-wrapper cite,#cf-wrapper code,#cf-wrapper dd,#cf-wrapper del,#cf-wrapper details,#cf-wrapper dfn,#cf-wrapper div,#cf-wrapper dl,#cf-wrapper dt,#cf-wrapper em,#cf-wrapper embed,#cf-wrapper fieldset,#cf-wrapper figcaption,#cf-wrapper figure,#cf-wrapper footer,#cf-wrapper form,#cf-wrapper h1,#cf-wrapper h2,#cf-wrapper h3,#cf-wrapper h4,#cf-wrapper h5,#cf-wrapper h6,#cf-wrapper header,#cf-wrapper hgroup,#cf-wrapper html,#cf-wrapper i,#cf-wrapper iframe,#cf-wrapper img,#cf-wrapper label,#cf-wrapper legend,#cf-wrapper li,#cf-wrapper mark,#cf-wrapper menu,#cf-wrapper nav,#cf-wrapper object,#cf-wrapper ol,#cf-wrapper output,#cf-wrapper p,#cf-wrapper pre,#cf-wrapper s,#cf-wrapper samp,#cf-wrapper section,#cf-wrapper small,#cf-wrapper span,#cf-wrapper strike,#cf-wrapper strong,#cf-wrapper sub,#cf-w

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 54 x 54, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	452
Entropy (8bit):	7.0936408308765495
Encrypted:	false
SSDEEP:	12:6v/7EljW8E6Cl2SYh8SZM4tf70FSDvMXDxJp6ScFChY9:U8hCl2SIdZBtAFSDUX/ozIhK
MD5:	C33DE66281E933259772399D10A6AFE8
SHA1:	B9F9D500F8814381451011D4DCF59CD2D90AD94F
SHA-256:	F1591A5221136C49438642155691AE6C68E25B7241F3D7EBE975B09A77662016
SHA-512:	5834FB9D66F550E6CECFE484B7B6A14F3FCA795405DECE8E652BD69AD917B94B6BBDCDF7639161B9C07F0D33EABD3E79580446B5867219F72F4FC43FD43B98C3
Malicious:	false
Preview:	.PNG........IHDR...6...6............3PLTE.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?..".....tRNS.@0.`........ P.p`...../IDATx.....0...l..6....+...~yJ.F"....oE..L.3..[..i2..n.WyJ..z&.....F.......b....p~...\|:t5.m...fp.i./e....%.%...n.P...enV.....!...,.......E........t![HW.B.g.R.\^.e..o+........%.&-j..q...f@..o...]... ....u0.x..2K.+C..8.U.L.Y.[=.....y...o.tF..]M..U.,4..........a.>/.)....C3gNI.i...R.=....Q7..K......IEND.B`.

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	1249
Entropy (8bit):	5.242453121762845
Encrypted:	false
SSDEEP:	24:hYYIzD6yJRA3ZsjNQCRtgoLY95Mu56+eDHHLFCOXAkRcfRrzd0Ll72rKQk:rq6Kj2CZLY5Mc6NDLYzkYKLlOM
MD5:	F58515DFE987F7E027C8A71BBC884621
SHA1:	BEC6AEBF5940EA88FBBFF5748D539453D49FA284
SHA-256:	679E7E62B81267C93D0778083AE0FD0EFE24172FF0AC581835B54165B3D9ED43
SHA-512:	F085346A38318F7935D76909DB0367862924CC9B0D96256F7FF4E8999C041E610BBCDE8CA56C92673BDE0991C85E9C9D9B6726ABD91D0C3177462C80D4A99140
Malicious:	false
URL:	https://vibeforceji.sa.com/favicon.ico
Preview:	<!DOCTYPE html>.<html style="height:100%">.<head>.<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">.<title> 404 Not Found..</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</style></head>.<body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;">.<div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;">. <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">404</h1>.<h2 style="margin-top:20px;font-size: 30px;">Not Found..</h2>.<p>The resource requested could not be found on this server!</p>.</div></div><div style="color:#f0f0f0; font-size:12px;margin:auto;padding:0px 30px 0px 30px;position:relative;clear:both;height:100px;margin-top:-101px;background-color:#474747;border-top: 1px solid rgba(0,0,0,0.15);box-shadow: 0 1px

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 54 x 54, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	452
Entropy (8bit):	7.0936408308765495
Encrypted:	false
SSDEEP:	12:6v/7EljW8E6Cl2SYh8SZM4tf70FSDvMXDxJp6ScFChY9:U8hCl2SIdZBtAFSDUX/ozIhK
MD5:	C33DE66281E933259772399D10A6AFE8
SHA1:	B9F9D500F8814381451011D4DCF59CD2D90AD94F
SHA-256:	F1591A5221136C49438642155691AE6C68E25B7241F3D7EBE975B09A77662016
SHA-512:	5834FB9D66F550E6CECFE484B7B6A14F3FCA795405DECE8E652BD69AD917B94B6BBDCDF7639161B9C07F0D33EABD3E79580446B5867219F72F4FC43FD43B98C3
Malicious:	false
URL:	https://vibeforceji.sa.com/cdn-cgi/images/icon-exclamation.png?1376755637
Preview:	.PNG........IHDR...6...6............3PLTE.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?..".....tRNS.@0.`........ P.p`...../IDATx.....0...l..6....+...~yJ.F"....oE..L.3..[..i2..n.WyJ..z&.....F.......b....p~...\|:t5.m...fp.i./e....%.%...n.P...enV.....!...,.......E........t![HW.B.g.R.\^.e..o+........%.&-j..q...f@..o...]... ....u0.x..2K.+C..8.U.L.Y.[=.....y...o.tF..]M..U.,4..........a.>/.)....C3gNI.i...R.=....Q7..K......IEND.B`.

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47531)
Category:	dropped
Size (bytes):	47532
Entropy (8bit):	5.399631966931825
Encrypted:	false
SSDEEP:	768:khCcfnNm52VJHkmnX7knsQMcvjdMdSzCTLos4P8X60Yo6VA3H1KCZ2EHCb+I29Na:kbNm8JHnnX7ksG7CT0K6V4P8
MD5:	808A57CAE0B6FEE71F46EFDDED44B348
SHA1:	DD570A24C8BDA1B391AA1DDEA6004125818E579A
SHA-256:	5B75AC6F98994352699841DFFA6E562725EBBD0005C539946AD3625EC550EB0F
SHA-512:	3F06DFBFDEDE9BB4270EB1BBBE29FFBDB6E19DC0AA8234E1A2B92D84F0737555031231965151EFC386510193343985BCEC63062484BBD8EC0540A94A0109B765
Malicious:	false
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,l,h){try{var p=e[l](h),f=p.value}catch(s){n(s);return}p.done?r(f):Promise.resolve(f).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);function h(f){Wt(l,o,c,h,p,"next",f)}function p(f){Wt(l,o,c,h,p,"throw",f)}h(void 0)})}}function V(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):V(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 9 x 76, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.022997040570906
Encrypted:	false
SSDEEP:	3:yionv//thPl6tpxAkxl/k4E08up:6v/lhPLk7Tp
MD5:	2B68A3F4F61CC5DF47C229537103F421
SHA1:	B2152909E1D38A5EB06552940E55A5DBDDDF71F3
SHA-256:	E98E0FA8FDCDDB061FB17D96FD2225371341AD4B1C494253F5121EA23B918527
SHA-512:	912B22AF47B14855A7E5D71FF21B7455A6D00D52F69A1ECB1F441735FB629C5C04B6A19ABC46DB7AE6D15FD5218BBE0BAB124E6C29EA7B8C42DE472FD1095837
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8d740f858baee7b3/1729710979882/PtZJ1X4TvZquAJ5
Preview:	.PNG........IHDR.......L.....0f......IDAT.....$.....IEND.B`.

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47531)
Category:	downloaded
Size (bytes):	47532
Entropy (8bit):	5.399631966931825
Encrypted:	false
SSDEEP:	768:khCcfnNm52VJHkmnX7knsQMcvjdMdSzCTLos4P8X60Yo6VA3H1KCZ2EHCb+I29Na:kbNm8JHnnX7ksG7CT0K6V4P8
MD5:	808A57CAE0B6FEE71F46EFDDED44B348
SHA1:	DD570A24C8BDA1B391AA1DDEA6004125818E579A
SHA-256:	5B75AC6F98994352699841DFFA6E562725EBBD0005C539946AD3625EC550EB0F
SHA-512:	3F06DFBFDEDE9BB4270EB1BBBE29FFBDB6E19DC0AA8234E1A2B92D84F0737555031231965151EFC386510193343985BCEC63062484BBD8EC0540A94A0109B765
Malicious:	false
URL:	https://challenges.cloudflare.com/turnstile/v0/g/f2bbd6738e15/api.js
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,l,h){try{var p=e[l](h),f=p.value}catch(s){n(s);return}p.done?r(f):Promise.resolve(f).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);function h(f){Wt(l,o,c,h,p,"next",f)}function p(f){Wt(l,o,c,h,p,"throw",f)}h(void 0)})}}function V(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):V(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Static File Info

General

File type:	PDF document, version 1.4, 1 pages
Entropy (8bit):	7.225357905709433
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	email-email-pandad....pdf
File size:	246'264 bytes
MD5:	98fcc26fa7cc3be7021cdfe210587121
SHA1:	5b0a84d84f53255ef932aa19593e7f675f32a4f4
SHA256:	01f9357df53dc668f9eb8cdb00e775219d6498b1ea856bc7ea42bed00d403113
SHA512:	6bd182a333203e34ffc78c04eeddf37175a44169c8312a7e362216e1411d3d2d2db8a987c3d7b85d967bd49bce04b5a4af2660eec008791123b8de6ecd709b7b
SSDEEP:	3072:jgbsc/9D8lLszsZfJUVZGPuyLmmGPUNrHc8W37RgSx1d5jN:vq9IlzDUrGPuyLCO8lg4
TLSH:	4434AFAE536C419CE07093B0078A6E07E1953625F59A7750F1ECABCB6F3E935A98C0C7
File Content Preview:	%PDF-1.4..%......1 0 obj..<< /Producer (Call PDF v 2.4).. /Creator (Call PDF).. /Title ().. /Author ().. /Subject ()..>>..endobj..2 0 obj..<< /Type /Catalog.. /Pages 3 0 R.. /Metadata 53 0 R.. /MarkInfo << /Type /MarkInfo /Marked true >>..

File Icon


Icon Hash:	62cc8caeb29e8ae0

Static PDF Info

General
Header:	%PDF-1.4
Total Entropy:	7.225358
Total Bytes:	246264
Stream Entropy:	7.196948
Stream Bytes:	233968
Entropy outside Streams:	5.071641
Bytes outside Streams:	12296
Number of EOF found:	1
Bytes after EOF:

Keywords Statistics

Name	Count
obj	54
endobj	54
stream	21
endstream	21
xref	1
trailer	1
startxref	1
/Page	1
/Encrypt	0
/ObjStm	0
/URI	14
/JS	0
/JavaScript	0
/AA	0
/OpenAction	0
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Image Streams

ID	DHASH	MD5
5	a280a2a2a2a280a2	76dbc3d25c129d313ec4c62075eaac94
10	244b0f4d63630808	48c3d50c3e9ebdb22658a9a7ef802945
11	a280a2a2a2a280a2	14c0b261685b454159c8e3fb9a94029b
15	4d0ec0e8e8c00c4d	bad36a6876295f1bd52730fe04f28025
16	864e69b2306d5686	9682370d862f4d5893c2c2937bf8a2e3

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 23, 2024 21:13:16.616584063 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 23, 2024 21:13:16.616584063 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 23, 2024 21:13:16.721833944 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 23, 2024 21:13:18.580817938 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 23, 2024 21:13:18.580912113 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 23, 2024 21:13:20.483489990 CEST	49712	443	192.168.2.5	184.28.90.27
Oct 23, 2024 21:13:20.483587027 CEST	443	49712	184.28.90.27	192.168.2.5
Oct 23, 2024 21:13:20.483691931 CEST	49712	443	192.168.2.5	184.28.90.27
Oct 23, 2024 21:13:20.485156059 CEST	49712	443	192.168.2.5	184.28.90.27
Oct 23, 2024 21:13:20.485191107 CEST	443	49712	184.28.90.27	192.168.2.5
Oct 23, 2024 21:13:21.330034018 CEST	443	49712	184.28.90.27	192.168.2.5
Oct 23, 2024 21:13:21.330107927 CEST	49712	443	192.168.2.5	184.28.90.27
Oct 23, 2024 21:13:21.404439926 CEST	49712	443	192.168.2.5	184.28.90.27
Oct 23, 2024 21:13:21.404484987 CEST	443	49712	184.28.90.27	192.168.2.5
Oct 23, 2024 21:13:21.405085087 CEST	443	49712	184.28.90.27	192.168.2.5
Oct 23, 2024 21:13:21.446688890 CEST	49712	443	192.168.2.5	184.28.90.27
Oct 23, 2024 21:13:21.512667894 CEST	49712	443	192.168.2.5	184.28.90.27
Oct 23, 2024 21:13:21.555334091 CEST	443	49712	184.28.90.27	192.168.2.5
Oct 23, 2024 21:13:21.753560066 CEST	443	49712	184.28.90.27	192.168.2.5
Oct 23, 2024 21:13:21.753638029 CEST	443	49712	184.28.90.27	192.168.2.5
Oct 23, 2024 21:13:21.753685951 CEST	49712	443	192.168.2.5	184.28.90.27
Oct 23, 2024 21:13:21.759074926 CEST	49712	443	192.168.2.5	184.28.90.27
Oct 23, 2024 21:13:21.759098053 CEST	443	49712	184.28.90.27	192.168.2.5
Oct 23, 2024 21:13:21.759114027 CEST	49712	443	192.168.2.5	184.28.90.27
Oct 23, 2024 21:13:21.759121895 CEST	443	49712	184.28.90.27	192.168.2.5
Oct 23, 2024 21:13:21.889271975 CEST	49713	443	192.168.2.5	184.28.90.27
Oct 23, 2024 21:13:21.889308929 CEST	443	49713	184.28.90.27	192.168.2.5
Oct 23, 2024 21:13:21.889377117 CEST	49713	443	192.168.2.5	184.28.90.27
Oct 23, 2024 21:13:21.889895916 CEST	49713	443	192.168.2.5	184.28.90.27
Oct 23, 2024 21:13:21.889908075 CEST	443	49713	184.28.90.27	192.168.2.5
Oct 23, 2024 21:13:22.748186111 CEST	443	49713	184.28.90.27	192.168.2.5
Oct 23, 2024 21:13:22.748383045 CEST	49713	443	192.168.2.5	184.28.90.27
Oct 23, 2024 21:13:22.752918005 CEST	49713	443	192.168.2.5	184.28.90.27
Oct 23, 2024 21:13:22.752932072 CEST	443	49713	184.28.90.27	192.168.2.5
Oct 23, 2024 21:13:22.753262997 CEST	443	49713	184.28.90.27	192.168.2.5
Oct 23, 2024 21:13:22.754236937 CEST	49713	443	192.168.2.5	184.28.90.27
Oct 23, 2024 21:13:22.799329996 CEST	443	49713	184.28.90.27	192.168.2.5
Oct 23, 2024 21:13:23.000701904 CEST	443	49713	184.28.90.27	192.168.2.5
Oct 23, 2024 21:13:23.000870943 CEST	443	49713	184.28.90.27	192.168.2.5
Oct 23, 2024 21:13:23.000936031 CEST	49713	443	192.168.2.5	184.28.90.27
Oct 23, 2024 21:13:23.001524925 CEST	49713	443	192.168.2.5	184.28.90.27
Oct 23, 2024 21:13:23.001543999 CEST	443	49713	184.28.90.27	192.168.2.5
Oct 23, 2024 21:13:23.001554012 CEST	49713	443	192.168.2.5	184.28.90.27
Oct 23, 2024 21:13:23.001559019 CEST	443	49713	184.28.90.27	192.168.2.5
Oct 23, 2024 21:13:27.224662066 CEST	49716	443	192.168.2.5	4.175.87.197
Oct 23, 2024 21:13:27.224761009 CEST	443	49716	4.175.87.197	192.168.2.5
Oct 23, 2024 21:13:27.224848032 CEST	49716	443	192.168.2.5	4.175.87.197
Oct 23, 2024 21:13:27.225790024 CEST	49716	443	192.168.2.5	4.175.87.197
Oct 23, 2024 21:13:27.225802898 CEST	443	49716	4.175.87.197	192.168.2.5
Oct 23, 2024 21:13:27.403738976 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:27.403791904 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:27.403878927 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:27.404179096 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:27.404192924 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.139600039 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.139694929 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.141371965 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.141405106 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.141664028 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.150465012 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.195336103 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.359245062 CEST	443	49716	4.175.87.197	192.168.2.5
Oct 23, 2024 21:13:28.359354019 CEST	49716	443	192.168.2.5	4.175.87.197
Oct 23, 2024 21:13:28.361505032 CEST	49716	443	192.168.2.5	4.175.87.197
Oct 23, 2024 21:13:28.361534119 CEST	443	49716	4.175.87.197	192.168.2.5
Oct 23, 2024 21:13:28.361927032 CEST	443	49716	4.175.87.197	192.168.2.5
Oct 23, 2024 21:13:28.375159025 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.375185966 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.375200987 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.375282049 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.375364065 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.375431061 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.399162054 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.399183989 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.399256945 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.399276018 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.399362087 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.409812927 CEST	49716	443	192.168.2.5	4.175.87.197
Oct 23, 2024 21:13:28.493891954 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.493917942 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.493992090 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.494064093 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.494102001 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.494148016 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.516180992 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.516201973 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.516304970 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.516304970 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.516371965 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.516434908 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.520972967 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.520996094 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.521047115 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.521060944 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.521089077 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.521243095 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.555274010 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.555299044 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.555391073 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.555457115 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.555516005 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.612423897 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.612445116 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.612525940 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.612544060 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.612593889 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.630614996 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.630633116 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.630708933 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.630739927 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.630790949 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.634975910 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.634994030 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.635059118 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.635081053 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.635128021 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.638864994 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.638879061 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.638935089 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.638950109 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.638992071 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.641571999 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.641586065 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.641666889 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.641679049 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.641719103 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.645711899 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.645725012 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.645879984 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.645879984 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.645910978 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.645968914 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.672250986 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.672266006 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.672338009 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.672347069 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.672553062 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.725236893 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.725317001 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.725341082 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.725409985 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.725409985 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.725455999 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.725497007 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.767575979 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.767612934 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.767678976 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.770462990 CEST	49722	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.770513058 CEST	443	49722	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.770570993 CEST	49722	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.771275043 CEST	49723	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.771286011 CEST	443	49723	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.771358967 CEST	49723	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.771754026 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.771771908 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.772315025 CEST	49722	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.772344112 CEST	443	49722	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.772465944 CEST	49723	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.772475958 CEST	443	49723	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.772686005 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.772718906 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.772905111 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.773010969 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.773020983 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.773922920 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.773957014 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:28.774019003 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.774127007 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:28.774141073 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.295944929 CEST	49716	443	192.168.2.5	4.175.87.197
Oct 23, 2024 21:13:29.339380026 CEST	443	49716	4.175.87.197	192.168.2.5
Oct 23, 2024 21:13:29.499046087 CEST	443	49722	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.499567032 CEST	49722	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.499593019 CEST	443	49722	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.501652002 CEST	49722	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.501667023 CEST	443	49722	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.514802933 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.515167952 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.515181065 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.516336918 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.516341925 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.521465063 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.521778107 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.521795034 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.522120953 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.522126913 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.532449007 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.532767057 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.532835007 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.533108950 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.533113956 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.628076077 CEST	443	49722	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.628240108 CEST	443	49722	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.628298998 CEST	49722	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.628451109 CEST	49722	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.628470898 CEST	443	49722	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.628645897 CEST	49722	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.628652096 CEST	443	49722	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.630891085 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.630951881 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.631067991 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.631195068 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.631211042 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.650746107 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.650783062 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.650837898 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.650850058 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.650866032 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.650882959 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.650928020 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.651134968 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.651148081 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.651156902 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.651163101 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.653687954 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.653733969 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.653865099 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.653954029 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.654016972 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.654041052 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.654057980 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.654067039 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.654077053 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.654133081 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.654196024 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.654206991 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.654243946 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.654267073 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.654267073 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.654283047 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.654287100 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.656764984 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.656791925 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.656888962 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.656989098 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.657001972 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.667659998 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.667737961 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.667793036 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.667891026 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.667900085 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.667908907 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.667912960 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.669576883 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.669589043 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.669903040 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.669994116 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:29.670003891 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:29.674803019 CEST	443	49716	4.175.87.197	192.168.2.5
Oct 23, 2024 21:13:29.674865007 CEST	443	49716	4.175.87.197	192.168.2.5
Oct 23, 2024 21:13:29.674885988 CEST	443	49716	4.175.87.197	192.168.2.5
Oct 23, 2024 21:13:29.674927950 CEST	49716	443	192.168.2.5	4.175.87.197
Oct 23, 2024 21:13:29.674963951 CEST	443	49716	4.175.87.197	192.168.2.5
Oct 23, 2024 21:13:29.674987078 CEST	49716	443	192.168.2.5	4.175.87.197
Oct 23, 2024 21:13:29.675014019 CEST	443	49716	4.175.87.197	192.168.2.5
Oct 23, 2024 21:13:29.675081968 CEST	49716	443	192.168.2.5	4.175.87.197
Oct 23, 2024 21:13:29.675095081 CEST	443	49716	4.175.87.197	192.168.2.5
Oct 23, 2024 21:13:29.675909042 CEST	443	49716	4.175.87.197	192.168.2.5
Oct 23, 2024 21:13:29.675998926 CEST	49716	443	192.168.2.5	4.175.87.197
Oct 23, 2024 21:13:29.676012039 CEST	443	49716	4.175.87.197	192.168.2.5
Oct 23, 2024 21:13:29.716715097 CEST	49716	443	192.168.2.5	4.175.87.197
Oct 23, 2024 21:13:29.800755024 CEST	443	49716	4.175.87.197	192.168.2.5
Oct 23, 2024 21:13:29.800884962 CEST	443	49716	4.175.87.197	192.168.2.5
Oct 23, 2024 21:13:29.800966024 CEST	49716	443	192.168.2.5	4.175.87.197
Oct 23, 2024 21:13:30.366134882 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.366833925 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.366862059 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.367290020 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.367295980 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.394644976 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.395093918 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.395118952 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.395526886 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.395531893 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.403690100 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.404073000 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.404120922 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.404647112 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.404658079 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.420140028 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.420609951 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.420630932 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.421026945 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.421031952 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.503407001 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.503582954 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.503734112 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.503777027 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.503777027 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.503798008 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.503808022 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.506309032 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.506341934 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.506561041 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.506690979 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.506704092 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.526681900 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.526745081 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.526806116 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.526984930 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.527004957 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.527020931 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.527026892 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.529764891 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.529798985 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.529926062 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.530118942 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.530131102 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.539293051 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.539366961 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.539504051 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.539537907 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.539537907 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.539555073 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.539563894 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.542146921 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.542186975 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.542321920 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.542473078 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.542489052 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.554505110 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.554672956 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.554733992 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.554769993 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.554786921 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.554800987 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.554805994 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.557583094 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.557620049 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.557678938 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.557832003 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:30.557842970 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:30.563348055 CEST	49716	443	192.168.2.5	4.175.87.197
Oct 23, 2024 21:13:30.563401937 CEST	443	49716	4.175.87.197	192.168.2.5
Oct 23, 2024 21:13:30.563432932 CEST	49716	443	192.168.2.5	4.175.87.197
Oct 23, 2024 21:13:30.563450098 CEST	443	49716	4.175.87.197	192.168.2.5
Oct 23, 2024 21:13:31.389786959 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:31.390697002 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:31.390717983 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:31.392731905 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:31.392745972 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:31.392771959 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:31.393033981 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:31.393543005 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:31.393543005 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:31.393587112 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:31.393604994 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:31.393861055 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:31.393874884 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:31.394387960 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:31.394393921 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:31.456504107 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:31.457568884 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:31.457568884 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:31.457583904 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:31.457602024 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:31.524059057 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:31.524224997 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:31.524317980 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:31.524391890 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:31.524420977 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:31.524449110 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:31.524449110 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:31.524465084 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:31.524470091 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:31.524511099 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:31.524813890 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:31.524835110 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:31.524888992 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:31.524894953 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:31.527738094 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:31.527755022 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:31.527785063 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:31.527803898 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:31.527898073 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:31.527899027 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:31.528055906 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:31.528074980 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:31.528167963 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:31.528182983 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:31.588001013 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:31.588090897 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:31.588463068 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:31.588463068 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:31.589106083 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:31.589118958 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:31.591963053 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:31.591996908 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:31.592097044 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:31.592299938 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:31.592308998 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.265340090 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.266004086 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.266063929 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.267884016 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.267899036 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.270148993 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.270464897 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.270498037 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.270811081 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.270826101 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.274048090 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.274348021 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.274436951 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.274506092 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.274549961 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.274595022 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.274612904 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.277630091 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.277671099 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.277748108 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.277873993 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.277888060 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.334440947 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.334990978 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.335074902 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.335278034 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.335293055 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.398196936 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.398351908 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.398499966 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.398534060 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.398555994 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.398570061 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.398576975 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.401571035 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.401664019 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.401750088 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.401911974 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.401945114 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.403460979 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.403628111 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.403810978 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.403810978 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.403810978 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.405627012 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.405653954 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.405761003 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.405886889 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.405898094 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.464246988 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.464519024 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.464745045 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.464745045 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.464745045 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.466648102 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.466669083 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.466823101 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.466949940 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.466959953 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.701257944 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.701303005 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.779290915 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.779361963 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.999130964 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:32.999880075 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:32.999905109 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.000427008 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.000433922 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.129123926 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.129196882 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.129331112 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.129620075 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.129641056 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.129653931 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.129659891 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.133244038 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.133286953 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.133380890 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.133569002 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.133583069 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.144160986 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.144648075 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.144706011 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.145138025 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.145153046 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.148237944 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.148504972 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.148516893 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.148838043 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.148844004 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.204821110 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.205595970 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.205631971 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.206233025 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.206248999 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.274099112 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.275465965 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.275564909 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.275650978 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.275692940 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.275722027 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.275737047 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.279860020 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.279902935 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.280000925 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.280193090 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.280210972 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.282450914 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.283262014 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.283339977 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.283375025 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.283396006 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.283406019 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.283410072 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.286819935 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.286854029 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.286952972 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.287117958 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.287132978 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.335159063 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.335225105 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.335285902 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.335496902 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.335505962 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.335546017 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.335551977 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.338449001 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.338490009 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.338583946 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.338757038 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.338778019 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.857837915 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.858715057 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.858732939 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.859412909 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.859417915 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.986490011 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.986691952 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.986764908 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.986973047 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.986989021 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.987027884 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.987032890 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.991106987 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.991177082 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:33.991306067 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.991533041 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:33.991566896 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.020927906 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.021447897 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.021496058 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.021743059 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.022061110 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.022069931 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.022119999 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.022133112 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.022716999 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.022721052 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.100243092 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.101707935 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.101758957 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.109078884 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.109102011 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.153312922 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.153915882 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.154002905 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.154067993 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.154092073 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.154109955 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.154118061 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.157866955 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.157912970 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.157999992 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.158178091 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.158191919 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.161117077 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.161277056 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.161341906 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.161384106 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.161398888 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.161412001 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.161417961 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.163959026 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.163996935 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.164102077 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.164254904 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.164271116 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.560657978 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.560731888 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.560921907 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.561120987 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.561145067 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.561170101 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.561177969 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.564687967 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.564738989 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.564824104 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.565009117 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.565025091 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.954807997 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.955542088 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.955564976 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.955688953 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.955996037 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.956005096 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.956074953 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.956079960 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.956418991 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.956424952 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.991852999 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.997411966 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.997457981 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:34.997909069 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:34.997917891 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.084197998 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.084840059 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.084932089 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.084990025 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.085032940 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.085063934 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.085081100 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.087778091 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.087956905 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.088056087 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.088056087 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.088093042 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.088105917 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.088407040 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.088442087 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.088526011 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.088639021 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.088653088 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.090305090 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.090393066 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.090481997 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.091286898 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.091304064 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.126183033 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.126497030 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.126586914 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.126622915 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.126624107 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.126645088 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.126658916 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.129358053 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.129390001 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.129488945 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.129605055 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.129641056 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.704873085 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.705600023 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.705627918 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.706079960 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.706084967 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.828840017 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.829371929 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.829415083 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.829765081 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.829777956 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.838196993 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.838553905 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.838628054 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.838656902 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.838669062 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.838677883 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.838682890 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.841123104 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.841181993 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.841260910 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.841367960 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.841383934 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.853811979 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.854166985 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.854192019 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.854511976 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.854517937 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.878144979 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.878560066 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.878585100 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.878796101 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.878803015 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.958374023 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.958831072 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.958901882 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.958936930 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.958950996 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.958959103 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.958964109 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.961179972 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.961219072 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.961296082 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.961426020 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.961432934 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.986377001 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.986536980 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.986700058 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.986700058 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.986700058 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.988552094 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.988579035 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:35.988646984 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.988795996 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:35.988812923 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.011435032 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.012027979 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.012186050 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.012186050 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.012186050 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.013930082 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.013946056 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.014014006 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.014137983 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.014159918 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.294919968 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.294953108 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.326287985 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.326312065 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.590049982 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.590786934 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.590815067 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.590981960 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.590998888 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.707973957 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.708616018 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.708648920 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.708826065 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.708832026 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.728975058 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.729185104 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.729252100 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.729409933 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.729409933 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.729424953 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.729433060 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.731625080 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.731653929 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.731724024 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.731827974 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.731839895 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.733700037 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.733997107 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.734004021 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.734339952 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.734344006 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.761440992 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.762017012 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.762067080 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.762259007 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.762271881 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.845904112 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.845948935 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.846143007 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.846626043 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.846674919 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.846707106 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.846724033 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.851617098 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.851646900 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.851732016 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.852329016 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.852339983 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.865390062 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.865601063 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.865680933 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.868417025 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.868437052 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.868448019 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.868453026 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.871071100 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.871115923 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.871218920 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.871752024 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.871766090 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.898102999 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.898288965 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.898458004 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.898458004 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.900882959 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.900891066 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.900896072 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.900924921 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:36.901024103 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.901179075 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:36.901192904 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.483958960 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.484998941 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.485014915 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.485394001 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.485400915 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.608302116 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.614140987 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.615719080 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.615895033 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.615993977 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.636646032 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.658665895 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.661780119 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.661809921 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.662017107 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.663386106 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.663391113 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.663781881 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.663810968 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.664314032 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.664325953 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.664591074 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.664594889 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.665085077 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.665090084 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.665275097 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.665294886 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.665304899 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.665309906 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.682080030 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.682109118 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.682182074 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.682677031 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.682691097 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.790124893 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.790615082 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.790678024 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.790735006 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.790746927 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.790762901 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.790767908 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.793405056 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.793426991 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.793483019 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.793576956 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.793683052 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.793709040 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.793786049 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.793926001 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.793926001 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.793962002 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.793977022 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.795162916 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.795911074 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.795989990 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.796024084 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.796027899 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.796045065 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.796050072 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.796112061 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.796148062 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.796206951 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.796359062 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.796370983 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.798096895 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.798118114 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:37.798203945 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.798363924 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:37.798383951 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.425848961 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.426280022 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:38.426309109 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.426657915 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:38.426664114 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.532121897 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.536596060 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:38.536660910 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.537748098 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:38.537761927 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.546742916 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.548291922 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:38.548311949 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.549263000 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:38.549282074 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.556184053 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.557926893 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:38.557940960 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.558959007 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:38.558964014 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.560326099 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.560499907 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.560585976 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:38.561072111 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:38.561119080 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.561151981 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:38.561167955 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.572827101 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:38.572854042 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.572935104 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:38.573213100 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:38.573224068 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.664935112 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.665110111 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.665198088 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:38.675666094 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.675822973 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.675894022 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:38.686208963 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:38.686254978 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.686260939 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.686291933 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:38.686307907 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.686441898 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.686494112 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:38.687856913 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:38.687870026 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.687879086 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:38.687884092 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.691601992 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:38.691601992 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:38.691620111 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.691639900 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.701463938 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:38.701550961 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.701637030 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:38.705662012 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:38.705698013 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.707889080 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:38.707926989 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:38.707988977 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:38.712316990 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:38.712336063 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:39.053842068 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:39.053888083 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:39.053961039 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:39.055737019 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:39.055767059 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:39.449449062 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:39.450850964 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:39.459750891 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:39.497941017 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:39.497956038 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:39.513573885 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:39.686825991 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:39.686860085 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:39.687855959 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:39.687860966 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:39.688697100 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:39.688716888 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:39.689305067 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:39.689311028 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:39.691246033 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:39.691308022 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:39.691696882 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:39.691711903 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:39.815125942 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:39.815300941 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:39.816482067 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:39.817589998 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:39.817784071 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:39.821732998 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:39.823038101 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:39.823117971 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:39.825752974 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:39.871783972 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:39.871809959 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:39.871824026 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:39.871829987 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:39.875318050 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:39.875334978 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:39.875348091 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:39.875354052 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:39.882497072 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:39.882497072 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:39.882564068 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:39.882594109 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:39.923690081 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:39.923724890 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:39.923830032 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.030051947 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.030080080 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.040601969 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.045145988 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.045200109 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.045684099 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.045695066 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.064125061 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.064161062 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.064260960 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.064620972 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.064637899 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.064770937 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.064811945 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.064867020 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.065069914 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.065083027 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.065413952 CEST	49775	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:40.065439939 CEST	443	49775	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:40.065726042 CEST	49775	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:40.066114902 CEST	49775	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:40.066127062 CEST	443	49775	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:40.172086954 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.172544956 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.172667027 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.172935009 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.172971010 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.172997952 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.173012972 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.175661087 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.175693989 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.175762892 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.175901890 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.175925970 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.760063887 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.760864019 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.760885954 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.761471987 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.761477947 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.797936916 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.798517942 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.798544884 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.799154043 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.799160957 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.809973001 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.810375929 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.810431004 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.810918093 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.810935020 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.856345892 CEST	443	49775	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:40.856817007 CEST	49775	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:40.856832981 CEST	443	49775	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:40.857682943 CEST	443	49775	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:40.857748985 CEST	49775	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:40.860232115 CEST	49775	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:40.860285997 CEST	443	49775	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:40.860533953 CEST	49775	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:40.860547066 CEST	443	49775	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:40.860671997 CEST	443	49775	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:40.860718012 CEST	49775	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:40.860902071 CEST	49775	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:40.860915899 CEST	443	49775	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:40.860929966 CEST	49775	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:40.860963106 CEST	49775	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:40.861669064 CEST	49779	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:40.861761093 CEST	443	49779	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:40.861838102 CEST	49779	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:40.862030983 CEST	49779	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:40.862066031 CEST	443	49779	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:40.890326023 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.890503883 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.890575886 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.890703917 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.890722990 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.890746117 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.890752077 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.894316912 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.894357920 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.894443035 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.894613981 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.894634008 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.923301935 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.923815012 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.923841953 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.924443007 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.924453974 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.947357893 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.947427034 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.947488070 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.947757959 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.947781086 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.947797060 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.947803974 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.950582981 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.950673103 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.950768948 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.950882912 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.950906038 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.954333067 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.954477072 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.954541922 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.954588890 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.954588890 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.954613924 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.954634905 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.959454060 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.959481001 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:40.959573030 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.959748030 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:40.959765911 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.070863008 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.071038008 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.071095943 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.071352959 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.071366072 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.071387053 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.071392059 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.076473951 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.076577902 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.076673985 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.076828003 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.076849937 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.642918110 CEST	443	49779	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:41.643781900 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.676306009 CEST	49779	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:41.676335096 CEST	443	49779	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:41.677535057 CEST	443	49779	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:41.677613974 CEST	49779	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:41.678535938 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.678558111 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.678797960 CEST	49779	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:41.679016113 CEST	49779	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:41.679028034 CEST	443	49779	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:41.679323912 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.679331064 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.681988001 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.682414055 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.682463884 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.682833910 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.682847023 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.714667082 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.715214014 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.715257883 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.715818882 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.715828896 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.719357967 CEST	443	49779	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:41.732553005 CEST	49779	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:41.732577085 CEST	443	49779	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:41.778445959 CEST	49779	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:41.811748981 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.812464952 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.812505960 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.812982082 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.812988043 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.814028978 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.814186096 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.814264059 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.814342022 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.814357042 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.814367056 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.814373016 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.817913055 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.818006992 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.818115950 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.818268061 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.818306923 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.852437973 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.853363991 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.853488922 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.853754997 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.853754997 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.853777885 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.853791952 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.857386112 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.857459068 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.857558012 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.857697010 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.857729912 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.887953997 CEST	443	49779	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:41.888098001 CEST	443	49779	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:41.888174057 CEST	49779	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:41.888186932 CEST	443	49779	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:41.888216019 CEST	443	49779	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:41.888284922 CEST	49779	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:41.888303995 CEST	443	49779	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:41.889566898 CEST	443	49779	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:41.889646053 CEST	49779	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:41.905664921 CEST	49779	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:41.905694962 CEST	443	49779	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:41.930937052 CEST	49786	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:13:41.930975914 CEST	443	49786	35.190.80.1	192.168.2.5
Oct 23, 2024 21:13:41.931050062 CEST	49786	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:13:41.931901932 CEST	49786	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:13:41.931915998 CEST	443	49786	35.190.80.1	192.168.2.5
Oct 23, 2024 21:13:41.939637899 CEST	49787	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:41.939677000 CEST	443	49787	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:41.939752102 CEST	49787	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:41.940011978 CEST	49787	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:41.940026045 CEST	443	49787	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:41.955056906 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.955152988 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.955230951 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.955853939 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.955864906 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.955909967 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.955915928 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.958462000 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.958487034 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:41.958555937 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.958712101 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:41.958725929 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:42.017215967 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:42.017390013 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:42.017452955 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:42.030596018 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:42.030605078 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:42.030625105 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:42.030631065 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:42.062220097 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:42.062269926 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:42.062347889 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:42.063836098 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:42.063859940 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:42.564723969 CEST	443	49786	35.190.80.1	192.168.2.5
Oct 23, 2024 21:13:42.565150976 CEST	49786	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:13:42.565195084 CEST	443	49786	35.190.80.1	192.168.2.5
Oct 23, 2024 21:13:42.566732883 CEST	443	49786	35.190.80.1	192.168.2.5
Oct 23, 2024 21:13:42.566807032 CEST	49786	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:13:42.568197012 CEST	49786	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:13:42.568283081 CEST	443	49786	35.190.80.1	192.168.2.5
Oct 23, 2024 21:13:42.568484068 CEST	49786	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:13:42.568500042 CEST	443	49786	35.190.80.1	192.168.2.5
Oct 23, 2024 21:13:42.574959993 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:42.576211929 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:42.576287031 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:42.576797009 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:42.576812029 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:42.621048927 CEST	49786	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:13:42.956906080 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:42.957093000 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:42.957284927 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:42.957355976 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:42.957401037 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:42.957420111 CEST	443	49786	35.190.80.1	192.168.2.5
Oct 23, 2024 21:13:42.957427979 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:42.957444906 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:42.957628012 CEST	443	49786	35.190.80.1	192.168.2.5
Oct 23, 2024 21:13:42.957701921 CEST	49786	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:13:42.957858086 CEST	49786	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:13:42.957905054 CEST	443	49786	35.190.80.1	192.168.2.5
Oct 23, 2024 21:13:42.957941055 CEST	49786	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:13:42.957973003 CEST	49786	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:13:42.958810091 CEST	49791	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:13:42.958836079 CEST	443	49791	35.190.80.1	192.168.2.5
Oct 23, 2024 21:13:42.958913088 CEST	49791	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:13:42.959213018 CEST	49791	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:13:42.959225893 CEST	443	49791	35.190.80.1	192.168.2.5
Oct 23, 2024 21:13:42.961287975 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:42.961328030 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:42.961426973 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:42.961669922 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:42.961702108 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:42.964413881 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:42.964835882 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:42.964873075 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:42.965451002 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:42.965459108 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:42.967231035 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:42.967407942 CEST	443	49787	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:42.967561960 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:42.967600107 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:42.967703104 CEST	49787	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:42.967716932 CEST	443	49787	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:42.968055964 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:42.968061924 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:42.969137907 CEST	443	49787	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:42.969218969 CEST	49787	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:42.969506025 CEST	49787	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:42.969522953 CEST	49787	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:42.969563961 CEST	49787	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:42.969567060 CEST	443	49787	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:42.969615936 CEST	49787	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:42.969830990 CEST	49793	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:42.969867945 CEST	443	49793	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:42.969932079 CEST	49793	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:42.970094919 CEST	49793	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:42.970108986 CEST	443	49793	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:43.092617035 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.093274117 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.093305111 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.093743086 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.093749046 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.097332954 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.098546028 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.098649025 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.098649025 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.098718882 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.098754883 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.099081993 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.099231958 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.099292994 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.099494934 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.099494934 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.099513054 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.099522114 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.102737904 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.102777958 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.102869034 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.102931976 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.102988958 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.103142023 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.103259087 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.103282928 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.103387117 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.103409052 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.223828077 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.224004030 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.224066973 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.224392891 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.224416018 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.224430084 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.224437952 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.228058100 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.228081942 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.228147030 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.228385925 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.228400946 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.578638077 CEST	443	49791	35.190.80.1	192.168.2.5
Oct 23, 2024 21:13:43.578949928 CEST	49791	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:13:43.578973055 CEST	443	49791	35.190.80.1	192.168.2.5
Oct 23, 2024 21:13:43.579487085 CEST	443	49791	35.190.80.1	192.168.2.5
Oct 23, 2024 21:13:43.579768896 CEST	49791	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:13:43.579848051 CEST	443	49791	35.190.80.1	192.168.2.5
Oct 23, 2024 21:13:43.579900026 CEST	49791	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:13:43.623348951 CEST	443	49791	35.190.80.1	192.168.2.5
Oct 23, 2024 21:13:43.707277060 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.707818985 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.707901955 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.708234072 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.708249092 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.727976084 CEST	443	49791	35.190.80.1	192.168.2.5
Oct 23, 2024 21:13:43.728291988 CEST	49791	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:13:43.728383064 CEST	443	49791	35.190.80.1	192.168.2.5
Oct 23, 2024 21:13:43.728446007 CEST	49791	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:13:43.836884975 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.840315104 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.840364933 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.840733051 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.840748072 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.841602087 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.841829062 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.841891050 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.841928959 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.841929913 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.841952085 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.841963053 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.847667933 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.847714901 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.847803116 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.847959995 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.847970009 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.855823994 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.862396955 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.862448931 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.862782955 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.862795115 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.966250896 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.966547966 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.966639996 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:43.974740982 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.991163969 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.991415977 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:43.991487026 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.026401997 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.063816071 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.063854933 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.063903093 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.063913107 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.090301991 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.090318918 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.090909004 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.090955019 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.090974092 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.090982914 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.091145039 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.091150999 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.093868971 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.093899012 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.093982935 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.094057083 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.094114065 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.094124079 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.094124079 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.094189882 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.094355106 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.094398975 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.219243050 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.219355106 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.219422102 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.219548941 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.219571114 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.219595909 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.219603062 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.222085953 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.222134113 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.222218990 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.222403049 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.222414017 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.332602024 CEST	49801	443	192.168.2.5	216.58.206.68
Oct 23, 2024 21:13:44.332686901 CEST	443	49801	216.58.206.68	192.168.2.5
Oct 23, 2024 21:13:44.332793951 CEST	49801	443	192.168.2.5	216.58.206.68
Oct 23, 2024 21:13:44.332988977 CEST	49801	443	192.168.2.5	216.58.206.68
Oct 23, 2024 21:13:44.333004951 CEST	443	49801	216.58.206.68	192.168.2.5
Oct 23, 2024 21:13:44.588587046 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.589420080 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.589459896 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.589917898 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.589929104 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.719260931 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.720016956 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.720093012 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.720176935 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.720176935 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.720211029 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.720233917 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.722804070 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.722866058 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.722944975 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.723107100 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.723123074 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.749962091 CEST	443	49793	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:44.750287056 CEST	49793	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:44.750308037 CEST	443	49793	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:44.750786066 CEST	443	49793	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:44.751200914 CEST	49793	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:44.751287937 CEST	443	49793	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:44.751456976 CEST	49793	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:44.795324087 CEST	443	49793	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:44.846157074 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.846679926 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.846734047 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.847148895 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.847161055 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.965564013 CEST	443	49793	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:44.965692043 CEST	443	49793	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:44.965747118 CEST	49793	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:44.965759039 CEST	443	49793	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:44.965857983 CEST	443	49793	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:44.965903044 CEST	49793	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:44.965909004 CEST	443	49793	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:44.966707945 CEST	443	49793	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:44.966761112 CEST	49793	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:44.966766119 CEST	443	49793	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:44.967466116 CEST	443	49793	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:44.967518091 CEST	49793	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:44.967523098 CEST	443	49793	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:44.971385002 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.971808910 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.971832037 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.972209930 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.972217083 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.978775978 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.980739117 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.980978012 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.980978012 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.980978012 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.983347893 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.983392954 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:44.983488083 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.983598948 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:44.983613968 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.009293079 CEST	49793	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:45.009300947 CEST	443	49793	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:45.055272102 CEST	49793	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:45.067574978 CEST	443	49793	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:45.067754030 CEST	443	49793	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:45.067799091 CEST	49793	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:45.067807913 CEST	443	49793	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:45.068350077 CEST	443	49793	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:45.068401098 CEST	49793	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:45.068428040 CEST	443	49793	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:45.069082975 CEST	443	49793	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:45.069145918 CEST	49793	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:45.069165945 CEST	443	49793	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:45.069477081 CEST	443	49793	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:45.069542885 CEST	49793	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:45.069555998 CEST	443	49793	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:45.069626093 CEST	443	49793	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:45.069684982 CEST	49793	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:45.069978952 CEST	49793	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:45.070010900 CEST	443	49793	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:45.079447985 CEST	49806	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:45.079483986 CEST	443	49806	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:45.079533100 CEST	49806	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:45.080188990 CEST	49806	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:45.080199957 CEST	443	49806	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:45.104585886 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.105329037 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.105389118 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.107716084 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.107736111 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.107745886 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.107752085 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.115776062 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.115811110 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.115883112 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.116106987 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.116118908 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.213593960 CEST	443	49801	216.58.206.68	192.168.2.5
Oct 23, 2024 21:13:45.213857889 CEST	49801	443	192.168.2.5	216.58.206.68
Oct 23, 2024 21:13:45.213892937 CEST	443	49801	216.58.206.68	192.168.2.5
Oct 23, 2024 21:13:45.217263937 CEST	443	49801	216.58.206.68	192.168.2.5
Oct 23, 2024 21:13:45.217351913 CEST	49801	443	192.168.2.5	216.58.206.68
Oct 23, 2024 21:13:45.218224049 CEST	49801	443	192.168.2.5	216.58.206.68
Oct 23, 2024 21:13:45.218436003 CEST	443	49801	216.58.206.68	192.168.2.5
Oct 23, 2024 21:13:45.265537977 CEST	49801	443	192.168.2.5	216.58.206.68
Oct 23, 2024 21:13:45.265557051 CEST	443	49801	216.58.206.68	192.168.2.5
Oct 23, 2024 21:13:45.281404972 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.281454086 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.311774969 CEST	49801	443	192.168.2.5	216.58.206.68
Oct 23, 2024 21:13:45.464425087 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.465506077 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.465533018 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.465924978 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.465935946 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.598625898 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.598784924 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.598934889 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.598982096 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.598982096 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.599020004 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.599046946 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.601469994 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.601505995 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.601593018 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.601739883 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.601759911 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.733017921 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.733563900 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.733599901 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.733973980 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.733983994 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.863694906 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.864274025 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.864350080 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.864686012 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.864706993 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.867929935 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.868079901 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.868201017 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.868247032 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.868271112 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.868284941 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.868292093 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.870732069 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.870821953 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.870901108 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.871021032 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.871041059 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.995474100 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.995646000 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.995738029 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.995809078 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.995843887 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.995896101 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.995912075 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.997992039 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.998023987 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:45.998099089 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.998230934 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:45.998238087 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:46.339389086 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:46.391616106 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:46.550151110 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:46.550174952 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:46.550553083 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:46.550556898 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:46.610651016 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:46.611160040 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:46.611244917 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:46.611454010 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:46.611469030 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:46.687704086 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:46.688049078 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:46.688114882 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:46.688148022 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:46.688148022 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:46.688163996 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:46.688173056 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:46.690886021 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:46.690922976 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:46.691164017 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:46.691282988 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:46.691289902 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:46.739610910 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:46.739754915 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:46.739811897 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:46.739844084 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:46.739844084 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:46.739861012 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:46.739870071 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:46.740653992 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:46.740943909 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:46.740973949 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:46.741309881 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:46.741317987 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:46.741880894 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:46.741909027 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:46.741971016 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:46.742059946 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:46.742068052 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:46.873133898 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:46.873429060 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:46.873492956 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:46.873519897 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:46.873533010 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:46.873543978 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:46.873548985 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:46.876873016 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:46.876912117 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:46.876975060 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:46.877192020 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:46.877206087 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:47.788115025 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:47.789247036 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:47.789360046 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:47.796080112 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:47.796096087 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:47.796988010 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:47.796992064 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:47.797141075 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:47.797164917 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:47.797247887 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:47.797261000 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:47.797565937 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:47.797570944 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:47.797652006 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:47.797656059 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:47.947037935 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:47.947222948 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:47.947287083 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:47.947393894 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:47.947415113 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:47.947438955 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:47.947446108 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:47.947515965 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:47.947725058 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:47.947789907 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:47.948096037 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:47.948167086 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:47.948246002 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:47.948256016 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:47.948302031 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:47.948348999 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:47.949933052 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:47.949939966 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:47.949970961 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:47.949975014 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:47.951613903 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:47.951637030 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:47.951654911 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:47.951659918 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:47.955952883 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:47.955971003 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:47.956067085 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:47.957191944 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:47.957268953 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:47.957345009 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:47.957746029 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:47.957833052 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:47.957865953 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:47.957880974 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:47.957902908 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:47.958003044 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:47.958039999 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:47.958076000 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:47.958112001 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.696685076 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.697763920 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:48.697841883 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.698276043 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:48.698290110 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.714814901 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.715032101 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.715329885 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:48.715344906 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.715464115 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:48.715490103 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.715797901 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:48.715810061 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.716068029 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:48.716074944 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.827759981 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.827811003 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.827883005 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:48.827923059 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.828011990 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.828073025 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:48.828202009 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:48.828238010 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.828263998 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:48.828279018 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.831727982 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:48.831793070 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.831928968 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:48.832022905 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:48.832031965 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.846420050 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.846558094 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.846616030 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:48.846668005 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:48.846683979 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.846697092 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:48.846702099 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.848050117 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.848244905 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.848315001 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:48.848342896 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:48.848342896 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:48.848356009 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.848366022 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.850145102 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:48.850208044 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.850287914 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:48.850334883 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:48.850418091 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.850464106 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:48.850486040 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:48.850492954 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.850635052 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:48.850668907 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:48.989772081 CEST	443	49806	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:48.990138054 CEST	49806	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:48.990163088 CEST	443	49806	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:48.991597891 CEST	443	49806	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:48.991658926 CEST	49806	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:48.992055893 CEST	49806	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:48.992074966 CEST	49806	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:48.992135048 CEST	443	49806	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:48.992136955 CEST	49806	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:48.992182016 CEST	49806	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:48.992887974 CEST	49821	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:48.992912054 CEST	443	49821	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:48.992983103 CEST	49821	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:48.993546009 CEST	49821	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:48.993560076 CEST	443	49821	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:49.241308928 CEST	49723	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.244148970 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.244190931 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.244281054 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.244472027 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.244483948 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.570604086 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.571448088 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.571496010 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.571824074 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.571831942 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.585005999 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.585374117 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.585410118 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.585756063 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.585761070 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.598078012 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.598419905 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.598479986 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.598798990 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.598812103 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.702919960 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.702943087 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.703146935 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.703193903 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.703246117 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.703350067 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.703356028 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.703370094 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.703386068 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.703435898 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.706463099 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.706516027 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.706597090 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.706806898 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.706820965 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.713903904 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.714032888 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.714107037 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.714212894 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.714212894 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.714236975 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.714246988 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.716353893 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.716444016 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.716528893 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.716675997 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.716708899 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.739074945 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.739132881 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.739217997 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.739239931 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.739269018 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.739341974 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.739428997 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.739428997 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.739460945 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.739483118 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.741466045 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.741498947 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.741578102 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.741731882 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.741744995 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.768668890 CEST	443	49821	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:49.768970013 CEST	49821	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:49.768989086 CEST	443	49821	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:49.770417929 CEST	443	49821	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:49.770484924 CEST	49821	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:49.770802021 CEST	49821	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:49.770881891 CEST	443	49821	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:49.770962954 CEST	49821	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:49.770973921 CEST	443	49821	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:49.811244011 CEST	49821	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:49.978807926 CEST	443	49821	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:49.979001045 CEST	443	49821	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:49.979082108 CEST	49821	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:49.980133057 CEST	49821	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:49.980148077 CEST	443	49821	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:49.981661081 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.981758118 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.987086058 CEST	49826	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:49.987126112 CEST	443	49826	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:49.987206936 CEST	49826	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:49.987606049 CEST	49826	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:49.987620115 CEST	443	49826	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:49.992750883 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:49.992786884 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.993118048 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:49.995028019 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.009571075 CEST	49827	443	192.168.2.5	104.21.64.188
Oct 23, 2024 21:13:50.009608984 CEST	443	49827	104.21.64.188	192.168.2.5
Oct 23, 2024 21:13:50.009774923 CEST	49827	443	192.168.2.5	104.21.64.188
Oct 23, 2024 21:13:50.009967089 CEST	49827	443	192.168.2.5	104.21.64.188
Oct 23, 2024 21:13:50.009984016 CEST	443	49827	104.21.64.188	192.168.2.5
Oct 23, 2024 21:13:50.035382032 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.125494957 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.125633001 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.125722885 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.125900984 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.125924110 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.125936985 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.125945091 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.129358053 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.129398108 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.129489899 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.129657030 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.129667044 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.448393106 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.448527098 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.450259924 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.450292110 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.450695992 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.451553106 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.468226910 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.468347073 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.469826937 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.469837904 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.470315933 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.470989943 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.490911961 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.491023064 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.492456913 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.492464066 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.492782116 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.493654013 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.495337963 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.511370897 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.535355091 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.577446938 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.577521086 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.577589035 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.577898026 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.577948093 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.577975988 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.577994108 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.581476927 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.581502914 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.581588984 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.581801891 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.581813097 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.601053953 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.601217031 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.601285934 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.601388931 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.601409912 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.601419926 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.601424932 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.604218960 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.604254007 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.604346037 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.604526043 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.604533911 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.623960972 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.624356031 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.624433041 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.624485970 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.624500036 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.624510050 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.624514103 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.627048016 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.627060890 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.627152920 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.627258062 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.627265930 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.645837069 CEST	443	49826	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:50.647001028 CEST	49826	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:50.647039890 CEST	443	49826	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:50.647984982 CEST	443	49826	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:50.648085117 CEST	49826	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:50.648695946 CEST	49826	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:50.648730040 CEST	49826	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:50.648758888 CEST	443	49826	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:50.648842096 CEST	49826	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:50.648857117 CEST	443	49826	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:50.648879051 CEST	49826	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:50.648900986 CEST	49826	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:50.649576902 CEST	49832	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:50.649624109 CEST	443	49832	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:50.649703979 CEST	49832	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:50.649928093 CEST	49832	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:50.649945974 CEST	443	49832	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:50.760400057 CEST	443	49827	104.21.64.188	192.168.2.5
Oct 23, 2024 21:13:50.760720968 CEST	49827	443	192.168.2.5	104.21.64.188
Oct 23, 2024 21:13:50.760746002 CEST	443	49827	104.21.64.188	192.168.2.5
Oct 23, 2024 21:13:50.761693954 CEST	443	49827	104.21.64.188	192.168.2.5
Oct 23, 2024 21:13:50.761761904 CEST	49827	443	192.168.2.5	104.21.64.188
Oct 23, 2024 21:13:50.762028933 CEST	49827	443	192.168.2.5	104.21.64.188
Oct 23, 2024 21:13:50.762044907 CEST	49827	443	192.168.2.5	104.21.64.188
Oct 23, 2024 21:13:50.762084007 CEST	443	49827	104.21.64.188	192.168.2.5
Oct 23, 2024 21:13:50.762093067 CEST	49827	443	192.168.2.5	104.21.64.188
Oct 23, 2024 21:13:50.762136936 CEST	49827	443	192.168.2.5	104.21.64.188
Oct 23, 2024 21:13:50.762443066 CEST	49833	443	192.168.2.5	104.21.64.188
Oct 23, 2024 21:13:50.762492895 CEST	443	49833	104.21.64.188	192.168.2.5
Oct 23, 2024 21:13:50.762566090 CEST	49833	443	192.168.2.5	104.21.64.188
Oct 23, 2024 21:13:50.762748957 CEST	49833	443	192.168.2.5	104.21.64.188
Oct 23, 2024 21:13:50.762767076 CEST	443	49833	104.21.64.188	192.168.2.5
Oct 23, 2024 21:13:50.879934072 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.880683899 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.880714893 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:50.887814999 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:50.887826920 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.047854900 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.047981977 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.048063040 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.050848007 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.050867081 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.050879002 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.050884008 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.105886936 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.105936050 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.106023073 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.106332064 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.106364012 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.328820944 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.331656933 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.331671953 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.332114935 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.332118988 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.353976011 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.354520082 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.354552984 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.354942083 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.354947090 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.357945919 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.358448982 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.358481884 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.359047890 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.359052896 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.442333937 CEST	443	49832	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:51.442718029 CEST	49832	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:51.442753077 CEST	443	49832	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:51.443042994 CEST	443	49832	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:51.443340063 CEST	49832	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:51.443401098 CEST	443	49832	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:51.443516016 CEST	49832	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:51.463924885 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.464015961 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.464077950 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.464319944 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.464329958 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.464340925 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.464345932 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.468082905 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.468172073 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.468281031 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.468487024 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.468521118 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.487328053 CEST	443	49832	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:51.487473965 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.487562895 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.487621069 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.487915039 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.487932920 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.487946033 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.487951040 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.490531921 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.490616083 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.490711927 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.490824938 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.490833044 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.490858078 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.490994930 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.491059065 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.491075039 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.491082907 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.491092920 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.491097927 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.493308067 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.493345022 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.493417025 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.493536949 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.493550062 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.783196926 CEST	443	49833	104.21.64.188	192.168.2.5
Oct 23, 2024 21:13:51.783544064 CEST	49833	443	192.168.2.5	104.21.64.188
Oct 23, 2024 21:13:51.783602953 CEST	443	49833	104.21.64.188	192.168.2.5
Oct 23, 2024 21:13:51.785087109 CEST	443	49833	104.21.64.188	192.168.2.5
Oct 23, 2024 21:13:51.785170078 CEST	49833	443	192.168.2.5	104.21.64.188
Oct 23, 2024 21:13:51.785463095 CEST	49833	443	192.168.2.5	104.21.64.188
Oct 23, 2024 21:13:51.785552025 CEST	443	49833	104.21.64.188	192.168.2.5
Oct 23, 2024 21:13:51.785624027 CEST	49833	443	192.168.2.5	104.21.64.188
Oct 23, 2024 21:13:51.785646915 CEST	443	49833	104.21.64.188	192.168.2.5
Oct 23, 2024 21:13:51.836819887 CEST	49833	443	192.168.2.5	104.21.64.188
Oct 23, 2024 21:13:51.860558987 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.861887932 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.861922026 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.862607002 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.862615108 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.895497084 CEST	443	49832	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:51.895662069 CEST	443	49832	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:51.895736933 CEST	49832	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:51.897330999 CEST	49832	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:13:51.897357941 CEST	443	49832	172.67.187.94	192.168.2.5
Oct 23, 2024 21:13:51.991281986 CEST	443	49833	104.21.64.188	192.168.2.5
Oct 23, 2024 21:13:51.991420031 CEST	443	49833	104.21.64.188	192.168.2.5
Oct 23, 2024 21:13:51.991518021 CEST	49833	443	192.168.2.5	104.21.64.188
Oct 23, 2024 21:13:51.992480993 CEST	49833	443	192.168.2.5	104.21.64.188
Oct 23, 2024 21:13:51.992523909 CEST	443	49833	104.21.64.188	192.168.2.5
Oct 23, 2024 21:13:51.995398045 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.995464087 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.995656967 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.995822906 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.995843887 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.995853901 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.995861053 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.999548912 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.999604940 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:51.999696970 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.999927044 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:51.999953032 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.199453115 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.200236082 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.200330019 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.200736046 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.200754881 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.226969957 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.228009939 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.228070021 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.228600979 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.228610039 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.234075069 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.234888077 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.234930038 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.235421896 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.235430956 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.329966068 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.330009937 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.330066919 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.330172062 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.330487967 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.330533981 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.330565929 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.330584049 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.334007978 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.334075928 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.334192038 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.334389925 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.334409952 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.358201981 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.358259916 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.358325958 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.358491898 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.358624935 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.358850002 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.358875990 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.358890057 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.358897924 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.362878084 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.362966061 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.363075018 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.363307953 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.363357067 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.368343115 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.368419886 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.368475914 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.368654013 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.368671894 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.368688107 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.368693113 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.372335911 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.372395992 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.372503996 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.372680902 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.372697115 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.747556925 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.748420954 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.748456001 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.748939991 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.748946905 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.880675077 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.880938053 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.881021976 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.881114960 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.881161928 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.881194115 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.881210089 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.884923935 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.884959936 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:52.885045052 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.885188103 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:52.885194063 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.300384045 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.301218987 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:53.301266909 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.301909924 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:53.301917076 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.308933973 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.309345007 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:53.309375048 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.309890032 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:53.309896946 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.434458017 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.434621096 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.434689045 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:53.434894085 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:53.434919119 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.434937000 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:53.434943914 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.437875986 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:53.437903881 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.437985897 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:53.438138962 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:53.438146114 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.448195934 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.448292971 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.448345900 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:53.448373079 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.448447943 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.448478937 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:53.448501110 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.448512077 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:53.448512077 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:53.448519945 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.448528051 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.451823950 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:53.451859951 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.451920986 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:53.452078104 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:53.452092886 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.626351118 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.627227068 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:53.627238035 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.627811909 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:53.627818108 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.761554003 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.761640072 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.761702061 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:53.764601946 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:53.764641047 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.764669895 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:53.764686108 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.768146038 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:53.768212080 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:53.768287897 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:53.768444061 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:53.768460989 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:54.195930958 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:54.196154118 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:54.196567059 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:54.196630001 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:54.196787119 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:54.196815014 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:54.197228909 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:54.197235107 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:54.197313070 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:54.197328091 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:54.329113007 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:54.329195023 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:54.329268932 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:54.329437017 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:54.329452038 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:54.329473972 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:54.329500914 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:54.329514980 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:54.329591990 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:54.329638958 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:54.329693079 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:54.329706907 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:54.329718113 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:54.329725027 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:54.332340002 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:54.332402945 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:54.332489967 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:54.332506895 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:54.332526922 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:54.332582951 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:54.332663059 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:54.332680941 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:54.332748890 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:54.332762957 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:54.539375067 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:54.540126085 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:54.540149927 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:54.540862083 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:54.540874004 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:54.671585083 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:54.671740055 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:54.671817064 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:54.671818972 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:54.671873093 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:54.672069073 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:54.672089100 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:54.672100067 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:54.672106028 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:54.676039934 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:54.676091909 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:54.676237106 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:54.676415920 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:54.676438093 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.077280045 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.077941895 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:55.077967882 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.078705072 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:55.078722954 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.078862906 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.079154968 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:55.079221010 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.079605103 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:55.079619884 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.193866968 CEST	443	49801	216.58.206.68	192.168.2.5
Oct 23, 2024 21:13:55.194021940 CEST	443	49801	216.58.206.68	192.168.2.5
Oct 23, 2024 21:13:55.194080114 CEST	49801	443	192.168.2.5	216.58.206.68
Oct 23, 2024 21:13:55.208164930 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.208201885 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.208261013 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.208270073 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:55.208307028 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:55.208563089 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:55.208579063 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.208591938 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:55.208597898 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.211675882 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:55.211714983 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.211815119 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:55.212168932 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:55.212184906 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.212249041 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.212325096 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.212373018 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:55.214716911 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:55.214741945 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.214756012 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:55.214764118 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.218306065 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:55.218338013 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.218401909 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:55.218508959 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:55.218521118 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.257003069 CEST	49801	443	192.168.2.5	216.58.206.68
Oct 23, 2024 21:13:55.257024050 CEST	443	49801	216.58.206.68	192.168.2.5
Oct 23, 2024 21:13:55.443156958 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.443700075 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:55.443734884 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.444211960 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:55.444217920 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.577563047 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.577765942 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.577862024 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:55.578011036 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:55.578061104 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.578115940 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:55.578133106 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.581665039 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:55.581693888 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.581794024 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:55.582005978 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:55.582012892 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.951908112 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.952543974 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:55.952563047 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.953196049 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:55.953201056 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.969156981 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.969468117 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:55.969480991 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:55.969940901 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:55.969945908 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.084216118 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.084319115 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.084705114 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:56.084705114 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:56.084705114 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:56.087814093 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:56.087851048 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.087932110 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:56.088093042 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:56.088113070 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.109013081 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.109936953 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.109992981 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:56.110018015 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:56.110027075 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.110037088 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:56.110040903 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.112520933 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:56.112556934 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.112626076 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:56.112742901 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:56.112756968 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.305632114 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:56.305660009 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.319058895 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.319689035 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:56.319708109 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.320349932 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:56.320358038 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.450351000 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.450644016 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.450741053 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:56.450767994 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.450834036 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.451042891 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:56.451086998 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.451118946 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:56.451118946 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:56.451141119 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.451159000 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.454113007 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:56.454169989 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.454252005 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:56.454390049 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:56.454407930 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.835560083 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.836262941 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:56.836287022 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.836776018 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:56.836781979 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.862914085 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.863745928 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:56.863756895 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.864453077 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:56.864458084 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.996045113 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.996215105 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.996284008 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:56.996484041 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:56.996501923 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:56.996512890 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:56.996519089 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:57.000276089 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:57.000303984 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:57.000396013 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:57.000559092 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:57.000572920 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:57.205753088 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:57.206438065 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:57.206451893 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:57.207112074 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:57.207117081 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:57.337337971 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:57.337517977 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:57.337589025 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:57.337757111 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:57.337778091 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:57.337790966 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:57.337798119 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:57.338259935 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:57.338325977 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:57.338382959 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:57.338464975 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:57.338470936 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:57.338485956 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:57.338490009 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:57.341742992 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:57.341769934 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:57.341809988 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:57.341831923 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:57.341890097 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:57.341928959 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:57.342053890 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:57.342067003 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:57.342097044 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:57.342139006 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:57.958185911 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:57.958700895 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:57.958729029 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:57.959187984 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:57.959194899 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.087482929 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.088159084 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.088195086 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.088596106 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.088604927 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.090401888 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.091027975 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.091049910 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.091432095 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.091437101 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.091643095 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.091702938 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.091747999 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.091758013 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.091797113 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.091908932 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.091933966 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.091953993 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.091960907 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.094916105 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.094952106 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.095050097 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.095176935 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.095189095 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.219146967 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.221765995 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.221864939 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.221957922 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.221957922 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.222004890 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.222032070 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.224458933 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.224616051 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.224675894 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.224703074 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.224715948 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.224725008 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.224730015 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.225101948 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.225194931 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.225269079 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.225424051 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.225450993 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.226660967 CEST	49865	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.226701975 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.226768970 CEST	49865	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.226882935 CEST	49865	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.226897955 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.838660002 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.839366913 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.839381933 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.839886904 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.839894056 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.978297949 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.978777885 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.978846073 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.978888988 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.978904009 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.978913069 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.978918076 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.982240915 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.982280016 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:58.982356071 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.982559919 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:58.982568026 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:59.398921967 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:59.399605036 CEST	49865	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:59.399632931 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:59.400202990 CEST	49865	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:59.400208950 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:59.536475897 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:59.536629915 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:59.536689997 CEST	49865	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:59.536886930 CEST	49865	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:59.536911011 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:59.536925077 CEST	49865	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:59.536931038 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:59.542808056 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:59.542831898 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:59.542896032 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:59.543282986 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:59.543296099 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:59.708904028 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:59.709583044 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:59.709641933 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:59.710313082 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:59.710325956 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:59.727116108 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:59.727828026 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:59.727880001 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:59.728590965 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:59.728605032 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:59.840939999 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:59.841861010 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:59.841972113 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:59.842008114 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:59.842106104 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:59.842107058 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:59.843502045 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:59.843559027 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:59.846255064 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:59.846342087 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:59.846630096 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:59.846630096 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:59.846724033 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:59.868030071 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:59.868117094 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:59.868262053 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:59.868778944 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:59.868793964 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:59.868834972 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:59.868849993 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:59.872118950 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:59.872208118 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 23, 2024 21:13:59.872459888 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:59.872459888 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:13:59.872549057 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:00.276060104 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:00.277276993 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:00.277277946 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:00.277326107 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:00.277344942 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:00.406858921 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:00.407021999 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:00.407238007 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:00.407238007 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:00.409832001 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:00.409851074 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:00.410737038 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:00.410790920 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:00.411094904 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:00.411094904 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:00.411143064 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:00.592276096 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:00.593419075 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:00.593419075 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:00.593451977 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:00.593472004 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:00.613483906 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:00.614716053 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:00.614716053 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:00.614748955 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:00.614763975 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:00.729094982 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:00.729121923 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:00.729161024 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:00.729594946 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:00.729594946 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:00.729820013 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:00.729836941 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:00.732952118 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:00.732997894 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:00.733299017 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:00.733299017 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:00.733331919 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:00.745457888 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:00.745527029 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:00.745733023 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:00.745733023 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:00.745811939 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:00.745824099 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:00.748164892 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:00.748195887 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:00.748441935 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:00.748441935 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:00.748466015 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.139558077 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.140341043 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:01.140382051 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.140938997 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:01.140949011 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.271105051 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.271183968 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.271234035 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:01.271266937 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.271301985 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.271357059 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:01.271538973 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:01.271557093 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.271569967 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:01.271578074 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.275099039 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:01.275176048 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.275263071 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:01.275405884 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:01.275428057 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.469490051 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.470221996 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:01.470259905 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.470864058 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:01.470870018 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.494807959 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.495356083 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:01.495371103 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.495904922 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:01.495909929 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.601794004 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.601866007 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.601916075 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:01.602145910 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:01.602165937 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.602179050 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:01.602184057 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.606220007 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:01.606262922 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.606362104 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:01.606551886 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:01.606565952 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.631156921 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.631196022 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.631247044 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.631297112 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:01.631335974 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:01.631592035 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:01.631604910 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.631617069 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:01.631622076 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.636060953 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:01.636158943 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:01.636287928 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:01.636470079 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:01.636506081 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:02.019884109 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:02.020634890 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:02.020735979 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:02.021300077 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:02.021322012 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:02.352125883 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:02.352982998 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:02.353023052 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:02.353698969 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:02.353708982 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:02.369195938 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:02.369822979 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:02.369884968 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:02.370471001 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:02.370484114 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:02.504570961 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:02.504652977 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:02.504811049 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:02.504987001 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:02.505029917 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:02.505055904 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:02.505070925 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:02.508793116 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:02.508846045 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:02.508920908 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:02.509108067 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:02.509124994 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:02.518357992 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:02.518388033 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:02.518430948 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:02.518440962 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:02.518471956 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:02.518959045 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:02.518975973 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:02.519020081 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:02.519026995 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:02.521944046 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:02.522041082 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:02.522136927 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:02.522274971 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:02.522320986 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:03.242172003 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:03.243010998 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:03.243072987 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:03.243662119 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:03.243689060 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:03.255261898 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:03.255775928 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:03.255817890 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:03.256119967 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:03.256128073 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:03.374536037 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:03.374608994 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:03.374819994 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:03.378123999 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:03.378175974 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:03.378206015 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:03.378222942 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:03.381650925 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:03.381689072 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:03.381838083 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:03.381972075 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:03.381985903 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:03.388046026 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:03.388077974 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:03.388118982 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:03.388127089 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:03.388166904 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:03.388343096 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:03.388358116 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:03.388370037 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:03.388374090 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:03.390667915 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:03.390757084 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:03.390846968 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:03.390961885 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:03.390995979 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:04.122159958 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:04.122230053 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:04.122956991 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:04.122978926 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:04.122973919 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:04.123039961 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:04.123508930 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:04.123522997 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:04.123678923 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:04.123682976 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:04.254431963 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:04.254518032 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:04.254607916 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:04.254930973 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:04.254978895 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:04.255011082 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:04.255027056 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:04.255327940 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:04.255398035 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:04.255450964 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:04.255563021 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:04.255584955 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:04.255594969 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:04.255600929 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:04.258760929 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:04.258810043 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:04.258908987 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:04.258999109 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:04.259031057 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:04.259059906 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:04.259078026 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:04.259089947 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:04.259301901 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:04.259309053 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:04.986525059 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:04.986628056 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:04.986785889 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:04.987157106 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:04.987206936 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:04.987237930 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:04.987257004 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:04.991195917 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:04.991286993 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:04.991636038 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:04.991636038 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:04.991704941 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.001209021 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.001671076 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.001691103 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.002154112 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.002160072 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.005912066 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.006206036 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.006215096 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.006544113 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.006547928 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.136862040 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.136936903 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.137026072 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.137352943 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.137376070 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.137391090 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.137398005 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.141396046 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.141464949 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.141581059 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.141794920 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.141820908 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.145255089 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.145317078 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.145380974 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.145396948 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.145466089 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.145490885 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.145526886 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.145555019 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.145555019 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.145571947 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.145590067 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.147938967 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.147978067 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.148063898 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.148238897 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.148257971 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.243346930 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.246141911 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.246237993 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.246335983 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.246560097 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.246582985 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.740176916 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.740997076 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.741075993 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.741514921 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.741520882 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.870891094 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.871517897 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.871551991 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.872029066 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.872034073 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.873389006 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.873766899 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.873821020 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.873842001 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.873903990 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.873939991 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.873939991 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.873960972 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.873974085 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.877167940 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.877214909 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.877437115 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.877645969 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.877662897 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.884450912 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.884788036 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.884800911 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.885222912 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.885229111 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.993074894 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.994246006 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.994308949 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:05.994788885 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:05.994803905 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.002140999 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.002768993 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.002830029 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.002870083 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.002881050 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.002918959 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.002923965 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.006407976 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.006474972 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.006566048 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.006737947 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.006766081 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.017862082 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.017978907 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.018032074 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.018161058 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.018184900 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.018201113 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.018209934 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.020934105 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.020968914 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.021051884 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.021260023 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.021272898 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.126089096 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.126276016 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.126537085 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.129857063 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.129914045 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.129947901 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.129966974 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.133764029 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.133863926 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.133974075 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.134279013 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.134313107 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.615890980 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.616745949 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.616779089 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.617290020 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.617299080 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.743782997 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.744509935 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.744543076 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.744935989 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.744950056 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.748874903 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.748951912 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.749023914 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.749056101 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.749080896 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.749145985 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.749257088 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.749277115 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.749291897 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.749299049 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.752599955 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.752640963 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.752727985 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.752948999 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.752963066 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.753034115 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.753391027 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.753398895 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.753797054 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.753801107 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.875200987 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.875277042 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.875359058 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.875567913 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.875567913 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.875613928 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.875641108 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.878674984 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.878712893 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.878801107 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.879004955 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.879015923 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.882162094 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.882463932 CEST	49892	443	192.168.2.5	4.175.87.197
Oct 23, 2024 21:14:06.882494926 CEST	443	49892	4.175.87.197	192.168.2.5
Oct 23, 2024 21:14:06.882576942 CEST	49892	443	192.168.2.5	4.175.87.197
Oct 23, 2024 21:14:06.882628918 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.882644892 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.883032084 CEST	49892	443	192.168.2.5	4.175.87.197
Oct 23, 2024 21:14:06.883045912 CEST	443	49892	4.175.87.197	192.168.2.5
Oct 23, 2024 21:14:06.883126974 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.883133888 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.885632038 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.885664940 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.885718107 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.885725975 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.885740995 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.885804892 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.885994911 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.886004925 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.886013985 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.886018038 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.888566017 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.888590097 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:06.888667107 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.888863087 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:06.888875008 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.016459942 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.016633987 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.016756058 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:07.016961098 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:07.017010927 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.017040014 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:07.017057896 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.020921946 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:07.021013975 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.021142006 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:07.021356106 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:07.021389008 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.725152969 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.725719929 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:07.725744963 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.726372957 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:07.726378918 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.860187054 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.860519886 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.860651016 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.860721111 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:07.860722065 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:07.860744953 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.860904932 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:07.860925913 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.860935926 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:07.860944986 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.861237049 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:07.861242056 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.864053965 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:07.864082098 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.864170074 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:07.864315033 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:07.864326000 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.866396904 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.866697073 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:07.866712093 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.867115974 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:07.867120981 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.868876934 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.869131088 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:07.869203091 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.869477034 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:07.869491100 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.990207911 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.990456104 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.990535021 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:07.990709066 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:07.990725994 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.990735054 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:07.990740061 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.994342089 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:07.994417906 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:07.994513035 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:07.994657040 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:07.994693041 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:08.001983881 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:08.002109051 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:08.002176046 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:08.002237082 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:08.002237082 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:08.002274990 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:08.002300978 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:08.003029108 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:08.003196001 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:08.003271103 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:08.003376961 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:08.003376961 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:08.003420115 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:08.003448009 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:08.004800081 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:08.004833937 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:08.004904032 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:08.004971027 CEST	443	49892	4.175.87.197	192.168.2.5
Oct 23, 2024 21:14:08.005002022 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:08.005033016 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:08.005058050 CEST	49892	443	192.168.2.5	4.175.87.197
Oct 23, 2024 21:14:08.005142927 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:08.005244017 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:08.005258083 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:08.005260944 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:08.005274057 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:08.006671906 CEST	49892	443	192.168.2.5	4.175.87.197
Oct 23, 2024 21:14:08.006680012 CEST	443	49892	4.175.87.197	192.168.2.5
Oct 23, 2024 21:14:08.007005930 CEST	443	49892	4.175.87.197	192.168.2.5
Oct 23, 2024 21:14:08.015182018 CEST	49892	443	192.168.2.5	4.175.87.197
Oct 23, 2024 21:14:08.059335947 CEST	443	49892	4.175.87.197	192.168.2.5
Oct 23, 2024 21:14:08.391277075 CEST	443	49892	4.175.87.197	192.168.2.5
Oct 23, 2024 21:14:08.391330957 CEST	443	49892	4.175.87.197	192.168.2.5
Oct 23, 2024 21:14:08.391359091 CEST	443	49892	4.175.87.197	192.168.2.5
Oct 23, 2024 21:14:08.391484022 CEST	49892	443	192.168.2.5	4.175.87.197
Oct 23, 2024 21:14:08.391527891 CEST	443	49892	4.175.87.197	192.168.2.5
Oct 23, 2024 21:14:08.391599894 CEST	49892	443	192.168.2.5	4.175.87.197
Oct 23, 2024 21:14:08.392945051 CEST	443	49892	4.175.87.197	192.168.2.5
Oct 23, 2024 21:14:08.392997026 CEST	443	49892	4.175.87.197	192.168.2.5
Oct 23, 2024 21:14:08.393022060 CEST	49892	443	192.168.2.5	4.175.87.197
Oct 23, 2024 21:14:08.393033028 CEST	443	49892	4.175.87.197	192.168.2.5
Oct 23, 2024 21:14:08.393052101 CEST	49892	443	192.168.2.5	4.175.87.197
Oct 23, 2024 21:14:08.396208048 CEST	49892	443	192.168.2.5	4.175.87.197
Oct 23, 2024 21:14:08.396229029 CEST	443	49892	4.175.87.197	192.168.2.5
Oct 23, 2024 21:14:08.396239042 CEST	49892	443	192.168.2.5	4.175.87.197
Oct 23, 2024 21:14:08.396425962 CEST	443	49892	4.175.87.197	192.168.2.5
Oct 23, 2024 21:14:08.396473885 CEST	443	49892	4.175.87.197	192.168.2.5
Oct 23, 2024 21:14:08.396533966 CEST	49892	443	192.168.2.5	4.175.87.197
Oct 23, 2024 21:14:08.958359957 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:08.959342957 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:08.959368944 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:08.960020065 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:08.960032940 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:08.963628054 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:08.964503050 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:08.964528084 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:08.965115070 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:08.965127945 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:08.967647076 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:08.968096972 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:08.968108892 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:08.968604088 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:08.968609095 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:08.969116926 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:08.969748974 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:08.969789982 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:08.969981909 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:08.969989061 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.096199989 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.096272945 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.096419096 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.097461939 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.097461939 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.097486019 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.097501040 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.099880934 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.099929094 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.100003958 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.100147009 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.100164890 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.101706028 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.101819038 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.101890087 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.101998091 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.101998091 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.102013111 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.102024078 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.103981972 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.104013920 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.104080915 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.104199886 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.104213953 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.139833927 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.140007019 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.140137911 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.140530109 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.140530109 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.140577078 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.140605927 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.143130064 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.143222094 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.143352985 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.143459082 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.143480062 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.275227070 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.275259972 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.275307894 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.275331974 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.275369883 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.275655031 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.275675058 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.275686979 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.275692940 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.279145002 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.279177904 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.279378891 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.279602051 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.279630899 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.835678101 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.836618900 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.836637020 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.837222099 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.837227106 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.844396114 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.844825029 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.844840050 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.845161915 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.845165968 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.883074999 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.883655071 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.883708954 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.884211063 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.884222031 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.966976881 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.967070103 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.967202902 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.967514992 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.967528105 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.967541933 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.967549086 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.970588923 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.970675945 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.970765114 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.970909119 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.970937014 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.980631113 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.980700970 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.980751038 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.980983019 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.980998993 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.981008053 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.981012106 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.983434916 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.983452082 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:09.983517885 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.983645916 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:09.983654976 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.015789986 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.016093016 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.016119957 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.016181946 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.016267061 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.016284943 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.016289949 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.016289949 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.016422987 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.016422987 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.016465902 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.016499996 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.016740084 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.016746998 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.018910885 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.018943071 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.019120932 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.019157887 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.019164085 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.146172047 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.146259069 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.146317005 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.146368980 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.146413088 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.146713018 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.146728039 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.146745920 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.146752119 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.150252104 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.150294065 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.150369883 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.150527000 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.150535107 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.716481924 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.717077017 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.717108011 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.717540026 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.717546940 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.731223106 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.731571913 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.731601954 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.731913090 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.731920958 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.749305010 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.749677896 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.749701023 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.750020027 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.750025034 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.864456892 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.864631891 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.864713907 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.864860058 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.864878893 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.864888906 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.864895105 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.868424892 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.868458033 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.868550062 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.868721008 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.868736982 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.881334066 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.881366968 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.881428957 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.881443024 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.881485939 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.881731987 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.881742001 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.881752968 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.881757975 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.884540081 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.884624958 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.884706974 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.885032892 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.885059118 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.895983934 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.896466017 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.896497011 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:10.896956921 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:10.896962881 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:11.844614983 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:11.844671965 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:11.844746113 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:11.844769955 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:11.844866037 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:11.844871044 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:11.844928026 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:11.844933987 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:11.845196962 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:11.845213890 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:11.845227003 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:11.845232964 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:11.845232964 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:11.845232964 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:11.845274925 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:11.845307112 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:11.848963976 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:11.848988056 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:11.849031925 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:11.849066973 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:11.849071026 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:11.849257946 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:11.849270105 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:11.849276066 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:11.849276066 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:11.849323988 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:11.988961935 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:11.989639044 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:11.989681005 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:11.990123987 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:11.990130901 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:11.992361069 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:11.992810011 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:11.992839098 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:11.993264914 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:11.993269920 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.116856098 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.116889000 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.116976976 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.117120981 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.117121935 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.117386103 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.117409945 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.117424011 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.117432117 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.120934010 CEST	49911	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.120976925 CEST	443	49911	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.121079922 CEST	49911	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.121267080 CEST	49911	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.121283054 CEST	443	49911	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.123867989 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.131179094 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.131282091 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.131302118 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.131468058 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.131468058 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.131468058 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.131546021 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.134252071 CEST	49912	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.134344101 CEST	443	49912	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.134416103 CEST	49912	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.134633064 CEST	49912	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.134670973 CEST	443	49912	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.430804014 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.430872917 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.587949038 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.588754892 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.588816881 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.589261055 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.589274883 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.602654934 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.603149891 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.603182077 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.603349924 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.603357077 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.720701933 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.720742941 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.720796108 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.720946074 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.720946074 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.721287012 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.721287012 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.721303940 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.721326113 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.724831104 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.724910975 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.725111008 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.725204945 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.725224972 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.734297037 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.734412909 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.734591007 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.734591007 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.736036062 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.736069918 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.736999035 CEST	49914	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.737040043 CEST	443	49914	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.737131119 CEST	49914	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.737248898 CEST	49914	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.737260103 CEST	443	49914	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.868877888 CEST	443	49911	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.869654894 CEST	49911	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.869702101 CEST	443	49911	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.870047092 CEST	49911	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.870054960 CEST	443	49911	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.880678892 CEST	443	49912	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.880981922 CEST	49912	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.881026030 CEST	443	49912	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:12.881344080 CEST	49912	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:12.881351948 CEST	443	49912	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.001945019 CEST	443	49911	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.002106905 CEST	443	49911	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.002185106 CEST	49911	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.002386093 CEST	49911	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.002403975 CEST	443	49911	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.002480984 CEST	49911	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.002489090 CEST	443	49911	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.005570889 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.005614996 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.005692959 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.005815029 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.005824089 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.012305021 CEST	443	49912	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.012473106 CEST	443	49912	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.012722969 CEST	49912	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.012809038 CEST	49912	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.012809992 CEST	49912	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.012854099 CEST	443	49912	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.012883902 CEST	443	49912	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.015304089 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.015333891 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.015410900 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.015543938 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.015557051 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.243436098 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.245819092 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.245894909 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.245994091 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.246165037 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.246195078 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.473448038 CEST	443	49914	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.474179029 CEST	49914	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.474211931 CEST	443	49914	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.474709034 CEST	49914	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.474714041 CEST	443	49914	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.606194019 CEST	443	49914	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.606270075 CEST	443	49914	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.606348991 CEST	49914	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.606573105 CEST	49914	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.606621027 CEST	443	49914	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.606651068 CEST	49914	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.606667995 CEST	443	49914	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.609745979 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.609786034 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.609882116 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.610080957 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.610095024 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.743016005 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.744060040 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.744079113 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.744453907 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.744457960 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.759414911 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.759953976 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.759977102 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.760462999 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.760469913 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.873781919 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.873857021 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.873929977 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.873944044 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.873974085 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.874022007 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.874217987 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.874231100 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.874243021 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.874248028 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.877448082 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.877540112 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.877654076 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.877850056 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.877876997 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.890940905 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.891027927 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.891114950 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.891437054 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.891454935 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.891465902 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.891473055 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.893975973 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.894012928 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.894114017 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.894290924 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.894305944 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.992719889 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.992907047 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.995131969 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:13.995153904 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.995417118 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:13.996181011 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.043334007 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.124339104 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.124408960 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.124490023 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.124521017 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.124597073 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.124828100 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.124876976 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.124908924 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.124924898 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.127873898 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.127914906 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.127996922 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.128142118 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.128156900 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.336221933 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.336379051 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.337774038 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.337781906 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.338109016 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.338875055 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.379363060 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.464420080 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.464510918 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.464617014 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.464879990 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.464907885 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.464924097 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.464930058 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.468358040 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.468401909 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.468493938 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.468694925 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.468710899 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.490529060 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.491194010 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.491234064 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.491688013 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.491694927 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.636770010 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.636934042 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.638737917 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.638745070 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.639023066 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.639843941 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.661639929 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.661936045 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.663463116 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.663492918 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.663922071 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.664690971 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.683377981 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.707340956 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.767079115 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.768230915 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.768352032 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.768408060 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.768431902 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.768441916 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.768449068 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.772069931 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.772123098 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.772249937 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.772442102 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.772460938 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.808576107 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.810079098 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.810261011 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.810321093 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.810334921 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.810419083 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.810497046 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.810519934 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.812385082 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.812483072 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.812712908 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.812761068 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.812798977 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.812815905 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.815036058 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.815129042 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.815300941 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.815413952 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.815440893 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.816227913 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.816274881 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.816359043 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.816464901 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.816483021 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.861118078 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.862215996 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.862260103 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.862726927 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.862755060 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.993176937 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.994045019 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.994163990 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.994276047 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.994297028 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.994313955 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.994321108 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.997843981 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.997889042 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:14.997987986 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.998166084 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:14.998178959 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.208584070 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.209429979 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.209460974 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.209904909 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.209911108 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.339709044 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.339803934 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.339890957 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.340186119 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.340208054 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.340219021 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.340226889 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.343550920 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.343626022 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.343724966 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.343915939 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.343940020 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.517731905 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.518448114 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.518484116 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.518950939 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.518959045 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.558600903 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.559403896 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.559432983 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.559885979 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.559897900 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.581815958 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.582485914 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.582530022 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.582752943 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.582761049 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.689007044 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.689043999 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.689105034 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.689179897 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.689238071 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.689590931 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.689611912 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.689646959 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.689654112 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.693407059 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.693501949 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.693608046 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.693614960 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.693767071 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.693799019 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.693854094 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.693876982 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.693876982 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.693876982 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.696049929 CEST	49929	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.696096897 CEST	443	49929	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.696188927 CEST	49929	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.696388960 CEST	49929	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.696407080 CEST	443	49929	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.714905977 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.714942932 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.715010881 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.715111971 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.715111971 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.715219021 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.715238094 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.715260029 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.715267897 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.717278957 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.717309952 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.717454910 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.717557907 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.717585087 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:15.993285894 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:15.993324995 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.088006020 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.088587999 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.088644981 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.089272022 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.089281082 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.218740940 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.218777895 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.218839884 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.218848944 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.218907118 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.219125032 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.219152927 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.219168901 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.219176054 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.222376108 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.222434998 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.222512960 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.222655058 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.222666025 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.401585102 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.402229071 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.402265072 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.402894974 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.402905941 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.449584961 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.450314999 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.450376987 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.450965881 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.450979948 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.453339100 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.453710079 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.453727007 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.454202890 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.454216003 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.456809998 CEST	443	49929	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.457123041 CEST	49929	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.457155943 CEST	443	49929	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.457588911 CEST	49929	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.457600117 CEST	443	49929	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.580199003 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.580287933 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.580399036 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.580720901 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.580770016 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.580800056 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.580816984 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.584582090 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.584610939 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.584700108 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.584892988 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.584906101 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.586025000 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.586335897 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.586393118 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.586435080 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.586457014 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.586473942 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.586481094 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.589317083 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.589416981 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.589528084 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.589656115 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.589694023 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.591893911 CEST	443	49929	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.592032909 CEST	443	49929	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.592077017 CEST	443	49929	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.592082977 CEST	49929	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.592139959 CEST	49929	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.592175961 CEST	49929	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.592195988 CEST	443	49929	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.592211962 CEST	49929	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.592219114 CEST	443	49929	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.594372988 CEST	49934	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.594396114 CEST	443	49934	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.594472885 CEST	49934	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.594584942 CEST	49934	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.594594002 CEST	443	49934	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.594984055 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.595062017 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.595114946 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.595227003 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.595247984 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.595272064 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.595283031 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.597534895 CEST	49935	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.597558975 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.597649097 CEST	49935	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.597754002 CEST	49935	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.597779989 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.962148905 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.962847948 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.962867975 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:16.963505030 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:16.963510036 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.094654083 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.094681025 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.094753981 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.094810009 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.094959974 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.095330954 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.095352888 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.095366955 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.095372915 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.099138975 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.099165916 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.099256039 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.099453926 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.099467993 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.327485085 CEST	443	49934	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.328243017 CEST	49934	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.328304052 CEST	443	49934	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.329006910 CEST	49934	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.329020977 CEST	443	49934	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.330224991 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.330640078 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.330682039 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.331337929 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.331345081 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.334306955 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.334682941 CEST	49935	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.334691048 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.335273027 CEST	49935	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.335283041 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.337353945 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.337654114 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.337686062 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.338126898 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.338136911 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.462236881 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.462312937 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.462404966 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.462421894 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.462482929 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.462702990 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.462728977 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.462743998 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.462750912 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.466221094 CEST	49937	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.466267109 CEST	443	49937	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.466376066 CEST	49937	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.466536999 CEST	49937	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.466551065 CEST	443	49937	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.474936962 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.475004911 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.475061893 CEST	49935	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.475073099 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.475116014 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.475157976 CEST	49935	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.475287914 CEST	49935	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.475298882 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.475310087 CEST	49935	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.475315094 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.477982998 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.478023052 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.478101969 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.478245020 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.478255033 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.678267002 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.678329945 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.678587914 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.678611994 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.678844929 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.678877115 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.678900003 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.679131985 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.679164886 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.679214954 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.682034969 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.682077885 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.682178020 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.682353020 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.682364941 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.837376118 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.839140892 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.839171886 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.840221882 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.840231895 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.844614029 CEST	443	49934	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.844696045 CEST	443	49934	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.844757080 CEST	49934	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.844959974 CEST	49934	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.844978094 CEST	443	49934	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.845002890 CEST	49934	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.845009089 CEST	443	49934	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.848773956 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.848835945 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.848917961 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.849090099 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.849104881 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.985280037 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.985369921 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.985474110 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.985796928 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.985819101 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.985832930 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.985837936 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.989423037 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.989486933 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:17.989597082 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.989789009 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:17.989806890 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.237365961 CEST	443	49937	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.238049030 CEST	49937	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.238132000 CEST	443	49937	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.238502979 CEST	49937	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.238517046 CEST	443	49937	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.239356041 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.239715099 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.239743948 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.240109921 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.240117073 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.375293016 CEST	443	49937	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.375324965 CEST	443	49937	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.375365019 CEST	443	49937	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.375400066 CEST	49937	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.375454903 CEST	49937	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.375690937 CEST	49937	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.375690937 CEST	49937	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.375732899 CEST	443	49937	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.375761032 CEST	443	49937	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.378999949 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.379090071 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.379218102 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.379381895 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.379419088 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.397398949 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.399107933 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.399194002 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.399229050 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.399247885 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.399259090 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.399266005 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.401420116 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.401484013 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.401565075 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.401679039 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.401700020 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.409064054 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.409559011 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.409598112 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.410041094 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.410052061 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.539470911 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.539547920 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.539658070 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.539730072 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.539789915 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.540112972 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.540157080 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.540194988 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.540214062 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.544339895 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.544385910 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.544517040 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.544737101 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.544754028 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.590878963 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.591494083 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.591552973 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.592001915 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.592015982 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.723028898 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.723100901 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.723212957 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.723450899 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.723495007 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.723552942 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.723568916 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.726917028 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.726953030 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:18.727044106 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.727217913 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:18.727231026 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.123898983 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.124578953 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.124618053 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.125072956 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.125086069 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.254719019 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.257286072 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.257356882 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.257415056 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.257570982 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.257570982 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.257915020 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.275389910 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.275448084 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.275852919 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.275866985 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.276050091 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.276103020 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.276160002 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.276176929 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.276346922 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.276369095 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.276844978 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.276856899 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.289123058 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.289169073 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.289262056 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.289530993 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.289550066 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.290478945 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.290846109 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.290855885 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.291296005 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.291301966 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.402098894 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.402247906 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.402322054 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.402470112 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.402504921 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.402532101 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.402546883 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.405443907 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.405483007 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.405567884 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.405731916 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.405740976 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.415657997 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.416909933 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.416986942 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.417042017 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.417042017 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.417078972 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.417104959 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.419348001 CEST	49948	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.419379950 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.419449091 CEST	49948	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.419559002 CEST	49948	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.419574022 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.424349070 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.424423933 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.424475908 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.424489975 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.424541950 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.424554110 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.424576044 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.424591064 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.424591064 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.424599886 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.424608946 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.426501036 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.426543951 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.426615000 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.426727057 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.426743984 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.849942923 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.850713968 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.850735903 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.851233959 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.851239920 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.984698057 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.984926939 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.984996080 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.985105991 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.985126972 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.985141039 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.985148907 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.988565922 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.988605976 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:19.988677025 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.988823891 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:19.988837957 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.021915913 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.022418976 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.022435904 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.023080111 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.023087978 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.156820059 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.156930923 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.157087088 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.157270908 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.157305002 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.157396078 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.157412052 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.158288956 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.158976078 CEST	49948	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.159051895 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.159459114 CEST	49948	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.159472942 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.161284924 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.161396980 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.161505938 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.161766052 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.161803007 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.168910980 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.170571089 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.170594931 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.171080112 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.171092033 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.171664953 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.171977043 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.171988010 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.172384024 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.172389984 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.293787003 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.293967962 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.294070005 CEST	49948	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.294244051 CEST	49948	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.294275999 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.294301987 CEST	49948	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.294313908 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.297736883 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.297833920 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.297946930 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.298095942 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.298116922 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.300874949 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.300949097 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.301059008 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.301095963 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.301132917 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.301152945 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.301177025 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.301196098 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.301204920 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.303437948 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.303522110 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.303617001 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.303755999 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.303788900 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.304689884 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.304758072 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.304814100 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.304835081 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.304919004 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.304932117 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.304959059 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.305001974 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.306843042 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.306864977 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.306953907 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.307079077 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.307097912 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.734388113 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.735399961 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.735461950 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.735862017 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.735915899 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.904320955 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.905025005 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.905076981 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.905519009 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.905527115 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.920607090 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.920690060 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.920758963 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.920857906 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.920902967 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.920933962 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.920949936 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.924427986 CEST	49955	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.924515009 CEST	443	49955	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:20.924613953 CEST	49955	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.924787998 CEST	49955	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:20.924814939 CEST	443	49955	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.039141893 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.039221048 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.039446115 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.039714098 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.039732933 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.039796114 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.039803982 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.041136980 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.041629076 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.041687965 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.042100906 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.042295933 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.042309999 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.042655945 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.042716026 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.043168068 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.043173075 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.043193102 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.043210030 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.043306112 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.043474913 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.043493986 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.048019886 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.048387051 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.048432112 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.048809052 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.048830032 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.173058987 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.173218012 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.173408985 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.173686028 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.173686028 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.173724890 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.173748016 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.176892996 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.176960945 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.177041054 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.177103996 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.177155972 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.177262068 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.177269936 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.177290916 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.177290916 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.177306890 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.177319050 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.177324057 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.179910898 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.179953098 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.180125952 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.180213928 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.180224895 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.181448936 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.181525946 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.181582928 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.181605101 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.181643009 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.181668043 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.181685925 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.181698084 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.181698084 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.181704044 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.181710005 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.183696985 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.183720112 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.183818102 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.183981895 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.184007883 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.662592888 CEST	443	49955	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.663407087 CEST	49955	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.663470984 CEST	443	49955	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.663800001 CEST	49955	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.663811922 CEST	443	49955	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.793411016 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.794294119 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.794354916 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.794668913 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.794682026 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.795334101 CEST	443	49955	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.795370102 CEST	443	49955	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.795423031 CEST	443	49955	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.795460939 CEST	49955	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.795495033 CEST	49955	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.795759916 CEST	49955	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.795778036 CEST	443	49955	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.795818090 CEST	49955	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.795835018 CEST	443	49955	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.799129963 CEST	49960	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.799174070 CEST	443	49960	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:21.799272060 CEST	49960	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.799474001 CEST	49960	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:21.799493074 CEST	443	49960	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.110008955 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.110093117 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.110410929 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.110531092 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.110579014 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.110610008 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.110626936 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.113471985 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.113910913 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.113945007 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.114326000 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.114331007 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.114521027 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.114553928 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.114599943 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.114638090 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.114891052 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.114903927 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.114943027 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.114965916 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.115242958 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.115252972 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.118700027 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.119092941 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.119102955 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.119436979 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.119442940 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.246712923 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.246844053 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.246889114 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.247066021 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.247066975 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.247507095 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.247508049 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.247575998 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.247610092 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.250543118 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.250586987 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.250688076 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.250785112 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.250814915 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.250824928 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.250916958 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.251013994 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.251013994 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.251013994 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.251526117 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.251722097 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.251792908 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.251888037 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.251909018 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.251935005 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.251950026 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.253983021 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.254005909 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.254075050 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.254314899 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.254327059 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.254933119 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.255018950 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.255114079 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.255264044 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.255300045 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.555984974 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.556049109 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.803352118 CEST	443	49960	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.804188967 CEST	49960	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.804220915 CEST	443	49960	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.804601908 CEST	49960	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.804610014 CEST	443	49960	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.946589947 CEST	443	49960	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.946636915 CEST	443	49960	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.946722984 CEST	49960	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.947300911 CEST	49960	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.947300911 CEST	49960	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.947329998 CEST	443	49960	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.947341919 CEST	443	49960	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.950388908 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.950484037 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.950700045 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.950845003 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.950881004 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.953872919 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.954354048 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.954377890 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.958020926 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.958025932 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.986674070 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.987270117 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.987299919 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.987586021 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.987593889 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.999201059 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:22.999885082 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:22.999974012 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.000081062 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.000096083 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.006520987 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.006850958 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.006866932 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.007167101 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.007172108 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.085731983 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.085813999 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.085901022 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.085915089 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.085936069 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.086025953 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.086237907 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.086251974 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.086261988 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.086267948 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.089601994 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.089689970 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.089813948 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.090010881 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.090049028 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.122041941 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.122236967 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.122421026 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.122421980 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.122421980 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.124881029 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.124942064 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.125020981 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.125189066 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.125215054 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.132194996 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.132340908 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.132424116 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.132489920 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.132512093 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.132529020 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.132536888 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.134881973 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.134938002 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.135031939 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.135179996 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.135210037 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.141092062 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.141163111 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.141227007 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.141248941 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.141278982 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.141328096 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.141361952 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.141390085 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.141390085 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.141407013 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.141426086 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.143697023 CEST	49969	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.143739939 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.143822908 CEST	49969	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.143989086 CEST	49969	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.144010067 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.430866003 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.430906057 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.669090986 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.669826031 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.669889927 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.670345068 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.670360088 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.798422098 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.798500061 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.798561096 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.798737049 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.798737049 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.799096107 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.799096107 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.799134970 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.799159050 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.802793026 CEST	49970	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.802875996 CEST	443	49970	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.803086996 CEST	49970	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.803205967 CEST	49970	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.803242922 CEST	443	49970	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.836494923 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.837491035 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.837524891 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.838232994 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.838238955 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.873311996 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.874003887 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.874033928 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.874358892 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.874371052 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.891655922 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.892566919 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.892625093 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.893101931 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.893116951 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.970813036 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.970992088 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.971117973 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.971276045 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.971298933 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.971323013 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.971330881 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.974772930 CEST	49971	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.974818945 CEST	443	49971	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:23.974910975 CEST	49971	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.975089073 CEST	49971	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:23.975106001 CEST	443	49971	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.002156973 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.004270077 CEST	49969	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.004328966 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.005064964 CEST	49969	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.005079985 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.005996943 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.006429911 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.006520987 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.006520987 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.006582022 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.006623983 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.010154963 CEST	49972	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.010252953 CEST	443	49972	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.010349035 CEST	49972	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.010530949 CEST	49972	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.010565042 CEST	443	49972	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.030319929 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.030488014 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.030709982 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.030951977 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.030951977 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.030981064 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.031006098 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.034213066 CEST	49973	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.034307003 CEST	443	49973	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.034429073 CEST	49973	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.034594059 CEST	49973	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.034629107 CEST	443	49973	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.134551048 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.134649992 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.134773970 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.134846926 CEST	49969	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.135010958 CEST	49969	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.135219097 CEST	49969	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.135219097 CEST	49969	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.135262966 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.135294914 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.138237953 CEST	49974	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.138288975 CEST	443	49974	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.138499022 CEST	49974	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.138592958 CEST	49974	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.138608932 CEST	443	49974	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.559616089 CEST	443	49970	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.560405970 CEST	49970	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.560426950 CEST	443	49970	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.560940027 CEST	49970	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.560944080 CEST	443	49970	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.693833113 CEST	443	49970	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.693990946 CEST	443	49970	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.694178104 CEST	49970	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.694407940 CEST	49970	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.694407940 CEST	49970	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.694427013 CEST	443	49970	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.694437027 CEST	443	49970	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.698100090 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.698195934 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.698544979 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.698544979 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.698681116 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.716322899 CEST	443	49971	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.717044115 CEST	49971	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.717103958 CEST	443	49971	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.717413902 CEST	49971	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.717428923 CEST	443	49971	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.759656906 CEST	443	49972	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.760215998 CEST	49972	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.760241032 CEST	443	49972	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.760632992 CEST	49972	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.760639906 CEST	443	49972	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.769192934 CEST	443	49973	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.769639969 CEST	49973	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.769704103 CEST	443	49973	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.770018101 CEST	49973	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.770072937 CEST	443	49973	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.847706079 CEST	443	49971	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.847882032 CEST	443	49971	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.848074913 CEST	49971	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.848346949 CEST	49971	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.848347902 CEST	49971	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.848371029 CEST	443	49971	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.848383904 CEST	443	49971	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.851913929 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.851959944 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.852185011 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.852262974 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.852272987 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.882095098 CEST	443	49974	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.882863045 CEST	49974	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.882884026 CEST	443	49974	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.883338928 CEST	49974	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.883343935 CEST	443	49974	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.896094084 CEST	443	49972	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.896244049 CEST	443	49972	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.896435022 CEST	49972	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.896435022 CEST	49972	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.896435022 CEST	49972	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.900227070 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.900304079 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.900449038 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.900609016 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.900636911 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.902199984 CEST	443	49973	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.902256966 CEST	443	49973	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.902432919 CEST	49973	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.902520895 CEST	49973	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.902520895 CEST	49973	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.902564049 CEST	443	49973	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.902596951 CEST	443	49973	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.904773951 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.904844046 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:24.904953957 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.905061007 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:24.905100107 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.014216900 CEST	443	49974	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.014383078 CEST	443	49974	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.014494896 CEST	49974	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.015341043 CEST	49974	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.015341043 CEST	49974	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.015383959 CEST	443	49974	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.015409946 CEST	443	49974	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.022679090 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.022744894 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.022831917 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.022996902 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.023010969 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.196506023 CEST	49972	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.196578026 CEST	443	49972	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.635237932 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.636260033 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.636352062 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.636949062 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.637003899 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.641362906 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.641743898 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.641807079 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.642299891 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.642314911 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.644370079 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.644674063 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.644689083 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.645241976 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.645252943 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.651458025 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.651792049 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.651827097 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.652337074 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.652343035 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.770068884 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.770786047 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.770802021 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.771550894 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.771557093 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.774741888 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.774894953 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.774979115 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.775088072 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.775144100 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.775176048 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.775191069 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.777672052 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.777745008 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.777812004 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.777940989 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.777959108 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.777983904 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.777993917 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.779354095 CEST	49980	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.779438972 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.779582977 CEST	49980	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.779727936 CEST	49980	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.779746056 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.780755997 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.780848026 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.780977964 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.781172037 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.781208992 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.784058094 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.784127951 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.784193993 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.784204006 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.784235954 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.784378052 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.784419060 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.784435987 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.784450054 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.784456015 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.787117004 CEST	49982	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.787144899 CEST	443	49982	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.787245035 CEST	49982	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.787415981 CEST	49982	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.787444115 CEST	443	49982	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.788902044 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.788976908 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.789064884 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.789207935 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.789257050 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.789288998 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.789304972 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.791997910 CEST	49983	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.792079926 CEST	443	49983	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.792398930 CEST	49983	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.792398930 CEST	49983	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.792529106 CEST	443	49983	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.923239946 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.923307896 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.923458099 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.923501968 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.923527002 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.923731089 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.923749924 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.923762083 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.923768044 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.927774906 CEST	49984	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.927867889 CEST	443	49984	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:25.928225040 CEST	49984	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.928225994 CEST	49984	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:25.928344965 CEST	443	49984	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.526226044 CEST	443	49982	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.527443886 CEST	49982	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.527477980 CEST	443	49982	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.528167963 CEST	49982	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.528179884 CEST	443	49982	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.529984951 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.530422926 CEST	49980	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.530437946 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.530982971 CEST	49980	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.530993938 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.536427975 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.536968946 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.537033081 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.537606001 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.537667036 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.657104969 CEST	443	49982	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.657341003 CEST	443	49982	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.657589912 CEST	49982	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.658013105 CEST	49982	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.658014059 CEST	49982	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.658055067 CEST	443	49982	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.658082008 CEST	443	49982	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.662375927 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.662606955 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.662811995 CEST	49980	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.662811995 CEST	49980	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.662811995 CEST	49980	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.664099932 CEST	49985	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.664124012 CEST	443	49985	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.664282084 CEST	49985	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.664453983 CEST	49985	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.664469004 CEST	443	49985	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.667279005 CEST	49986	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.667373896 CEST	443	49986	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.667612076 CEST	49986	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.668076992 CEST	49986	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.668162107 CEST	443	49986	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.671073914 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.671097994 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.671129942 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.671154976 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.671432018 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.671432972 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.671432972 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.673717976 CEST	49987	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.673749924 CEST	443	49987	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.673926115 CEST	49987	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.673971891 CEST	49987	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.673984051 CEST	443	49987	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.696559906 CEST	443	49984	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.697289944 CEST	49984	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.697376013 CEST	443	49984	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.697921038 CEST	49984	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.697974920 CEST	443	49984	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.737567902 CEST	443	49983	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.738641024 CEST	49983	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.738703012 CEST	443	49983	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.739263058 CEST	49983	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.739315987 CEST	443	49983	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.832065105 CEST	443	49984	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.832236052 CEST	443	49984	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.832549095 CEST	49984	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.833156109 CEST	49984	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.833156109 CEST	49984	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.833225012 CEST	443	49984	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.833261967 CEST	443	49984	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.839018106 CEST	49988	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.839056015 CEST	443	49988	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.839303970 CEST	49988	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.839493990 CEST	49988	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.839504957 CEST	443	49988	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.871378899 CEST	443	49983	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.872136116 CEST	443	49983	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.872318029 CEST	49983	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.872584105 CEST	49983	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.872585058 CEST	49983	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.872631073 CEST	443	49983	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.872668028 CEST	443	49983	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.876874924 CEST	49989	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.876959085 CEST	443	49989	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.877234936 CEST	49989	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.877511978 CEST	49989	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.877541065 CEST	443	49989	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.977670908 CEST	49980	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.977754116 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:26.977756977 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:26.977819920 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.395857096 CEST	443	49985	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.396658897 CEST	49985	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.396703005 CEST	443	49985	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.397536993 CEST	49985	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.397548914 CEST	443	49985	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.403074026 CEST	443	49986	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.403691053 CEST	49986	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.403778076 CEST	443	49986	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.404129028 CEST	49986	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.404182911 CEST	443	49986	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.525352955 CEST	443	49985	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.525424004 CEST	443	49985	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.525528908 CEST	443	49985	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.525630951 CEST	49985	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.525631905 CEST	49985	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.525974989 CEST	49985	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.525974989 CEST	49985	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.526011944 CEST	443	49985	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.526034117 CEST	443	49985	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.530169010 CEST	49990	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.530277014 CEST	443	49990	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.530507088 CEST	49990	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.530579090 CEST	49990	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.530597925 CEST	443	49990	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.533705950 CEST	443	49986	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.533838987 CEST	443	49986	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.534039021 CEST	49986	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.534126997 CEST	49986	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.534126997 CEST	49986	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.534171104 CEST	443	49986	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.534199953 CEST	443	49986	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.536648989 CEST	49991	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.536693096 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.536864042 CEST	49991	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.536907911 CEST	49991	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.536915064 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.580812931 CEST	443	49988	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.581475973 CEST	49988	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.581501007 CEST	443	49988	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.582143068 CEST	49988	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.582154989 CEST	443	49988	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.613071918 CEST	443	49989	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.613795042 CEST	49989	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.613827944 CEST	443	49989	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.614408970 CEST	49989	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.614419937 CEST	443	49989	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.713794947 CEST	443	49988	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.713855982 CEST	443	49988	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.713975906 CEST	443	49988	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.714076996 CEST	49988	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.714076996 CEST	49988	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.714370966 CEST	49988	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.714370966 CEST	49988	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.714402914 CEST	443	49988	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.714426041 CEST	443	49988	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.718041897 CEST	49992	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.718131065 CEST	443	49992	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.718542099 CEST	49992	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.718542099 CEST	49992	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.718672037 CEST	443	49992	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.744714022 CEST	443	49989	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.746064901 CEST	443	49989	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.746272087 CEST	49989	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.746273041 CEST	49989	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.746273041 CEST	49989	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.748819113 CEST	49993	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.748871088 CEST	443	49993	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.749051094 CEST	49993	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.749114037 CEST	49993	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.749136925 CEST	443	49993	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.751202106 CEST	443	49987	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.751596928 CEST	49987	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.751619101 CEST	443	49987	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.752322912 CEST	49987	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.752335072 CEST	443	49987	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.889369965 CEST	443	49987	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.889453888 CEST	443	49987	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.889627934 CEST	49987	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.889851093 CEST	49987	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.889893055 CEST	443	49987	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.889921904 CEST	49987	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.889938116 CEST	443	49987	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.893901110 CEST	49994	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.893985987 CEST	443	49994	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:27.894113064 CEST	49994	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.894325972 CEST	49994	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:27.894364119 CEST	443	49994	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.055778027 CEST	49989	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.055814981 CEST	443	49989	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.268712997 CEST	443	49990	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.269623995 CEST	49990	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.269690037 CEST	443	49990	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.270209074 CEST	49990	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.270221949 CEST	443	49990	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.293855906 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.294594049 CEST	49991	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.294625998 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.295114040 CEST	49991	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.295120955 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.402237892 CEST	443	49990	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.402291059 CEST	443	49990	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.402419090 CEST	443	49990	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.402625084 CEST	49990	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.402625084 CEST	49990	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.403026104 CEST	49990	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.403026104 CEST	49990	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.403062105 CEST	443	49990	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.403086901 CEST	443	49990	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.406699896 CEST	49995	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.406753063 CEST	443	49995	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.406954050 CEST	49995	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.407048941 CEST	49995	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.407064915 CEST	443	49995	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.427365065 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.427422047 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.427551985 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.427604914 CEST	49991	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.427813053 CEST	49991	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.428062916 CEST	49991	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.428062916 CEST	49991	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.428088903 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.428106070 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.431664944 CEST	49996	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.431704044 CEST	443	49996	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.431791067 CEST	49996	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.431974888 CEST	49996	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.431993961 CEST	443	49996	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.480496883 CEST	443	49993	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.481297970 CEST	49993	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.481363058 CEST	443	49993	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.481897116 CEST	49993	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.481913090 CEST	443	49993	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.589514971 CEST	443	49992	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.590441942 CEST	49992	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.590534925 CEST	443	49992	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.590960979 CEST	49992	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.591015100 CEST	443	49992	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.609513044 CEST	443	49993	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.609568119 CEST	443	49993	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.609694004 CEST	443	49993	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.609816074 CEST	49993	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.609983921 CEST	49993	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.610243082 CEST	49993	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.610244036 CEST	49993	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.610289097 CEST	443	49993	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.610318899 CEST	443	49993	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.613584042 CEST	49997	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.613621950 CEST	443	49997	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.613822937 CEST	49997	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.613912106 CEST	49997	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.613919973 CEST	443	49997	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.644872904 CEST	443	49994	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.645593882 CEST	49994	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.645665884 CEST	443	49994	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.645967007 CEST	49994	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.645981073 CEST	443	49994	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.725037098 CEST	443	49992	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.725099087 CEST	443	49992	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.725250959 CEST	443	49992	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.725389957 CEST	49992	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.725390911 CEST	49992	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.725729942 CEST	49992	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.725729942 CEST	49992	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.725774050 CEST	443	49992	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.725802898 CEST	443	49992	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.729388952 CEST	49998	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.729439974 CEST	443	49998	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.729628086 CEST	49998	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.729726076 CEST	49998	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.729737043 CEST	443	49998	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.782814026 CEST	443	49994	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.783320904 CEST	443	49994	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.783639908 CEST	49994	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.783641100 CEST	49994	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.783641100 CEST	49994	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.786623955 CEST	49999	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.786647081 CEST	443	49999	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:28.786762953 CEST	49999	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.786942005 CEST	49999	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:28.786948919 CEST	443	49999	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.087299109 CEST	49994	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.087407112 CEST	443	49994	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.151998043 CEST	443	49995	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.152870893 CEST	49995	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.152895927 CEST	443	49995	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.153311968 CEST	49995	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.153320074 CEST	443	49995	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.163435936 CEST	443	49996	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.163796902 CEST	49996	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.163835049 CEST	443	49996	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.164149046 CEST	49996	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.164156914 CEST	443	49996	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.284926891 CEST	443	49995	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.285249949 CEST	443	49995	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.285419941 CEST	49995	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.285727978 CEST	49995	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.285757065 CEST	443	49995	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.285825968 CEST	49995	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.285841942 CEST	443	49995	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.291156054 CEST	50000	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.291203976 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.291330099 CEST	50000	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.291554928 CEST	50000	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.291572094 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.293848038 CEST	443	49996	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.294778109 CEST	443	49996	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.295084953 CEST	49996	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.295084953 CEST	49996	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.295084953 CEST	49996	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.298108101 CEST	50001	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.298198938 CEST	443	50001	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.298340082 CEST	50001	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.298516989 CEST	50001	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.298554897 CEST	443	50001	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.359611988 CEST	443	49997	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.360456944 CEST	49997	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.360492945 CEST	443	49997	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.361069918 CEST	49997	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.361083031 CEST	443	49997	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.488439083 CEST	443	49998	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.491777897 CEST	443	49997	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.491945028 CEST	443	49997	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.492048025 CEST	49997	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.510111094 CEST	49998	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.510133028 CEST	443	49998	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.510854006 CEST	49998	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.510862112 CEST	443	49998	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.511178970 CEST	49997	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.511231899 CEST	443	49997	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.511261940 CEST	49997	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.511280060 CEST	443	49997	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.514849901 CEST	50002	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.514934063 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.515032053 CEST	50002	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.515245914 CEST	50002	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.515273094 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.529903889 CEST	443	49999	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.530500889 CEST	49999	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.530533075 CEST	443	49999	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.531083107 CEST	49999	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.531097889 CEST	443	49999	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.602925062 CEST	49996	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.602962017 CEST	443	49996	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.641230106 CEST	443	49998	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.641289949 CEST	443	49998	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.641370058 CEST	443	49998	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.641505957 CEST	49998	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.641566038 CEST	49998	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.642141104 CEST	49998	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.642157078 CEST	443	49998	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.642200947 CEST	49998	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.642208099 CEST	443	49998	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.648346901 CEST	50003	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.648441076 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.648591995 CEST	50003	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.648782015 CEST	50003	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.648819923 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.661761045 CEST	443	49999	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.661829948 CEST	443	49999	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.661925077 CEST	49999	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.661957026 CEST	443	49999	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.662036896 CEST	443	49999	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.662132978 CEST	49999	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.662132978 CEST	49999	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.662183046 CEST	49999	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.662206888 CEST	443	49999	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.666829109 CEST	50004	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.666872978 CEST	443	50004	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:29.667022943 CEST	50004	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.667373896 CEST	50004	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:29.667396069 CEST	443	50004	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.034559011 CEST	443	50001	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.035929918 CEST	50001	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.035964966 CEST	443	50001	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.036659956 CEST	50001	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.036715031 CEST	443	50001	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.045835972 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.046504021 CEST	50000	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.046545029 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.047004938 CEST	50000	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.047020912 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.165572882 CEST	443	50001	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.165627956 CEST	443	50001	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.165765047 CEST	443	50001	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.165973902 CEST	50001	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.166692972 CEST	50001	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.166692972 CEST	50001	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.166693926 CEST	50001	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.172930002 CEST	50005	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.172986984 CEST	443	50005	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.173171997 CEST	50005	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.173293114 CEST	50005	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.173305035 CEST	443	50005	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.259386063 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.260584116 CEST	50002	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.260627031 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.261190891 CEST	50002	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.261204004 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.316221952 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.316287041 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.316430092 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.316495895 CEST	50000	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.316526890 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.316554070 CEST	50000	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.316591024 CEST	50000	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.365154982 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.365323067 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.365426064 CEST	50000	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.365427017 CEST	50000	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.365643978 CEST	50000	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.365643978 CEST	50000	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.365681887 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.365710974 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.369399071 CEST	50006	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.369493008 CEST	443	50006	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.369730949 CEST	50006	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.369946003 CEST	50006	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.369968891 CEST	443	50006	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.389206886 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.390290022 CEST	50003	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.390351057 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.390853882 CEST	50003	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.390908003 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.433599949 CEST	443	50004	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.434366941 CEST	50004	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.434387922 CEST	443	50004	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.434899092 CEST	50004	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.434905052 CEST	443	50004	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.477885962 CEST	50001	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.477957964 CEST	443	50001	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.515012026 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.515085936 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.515130043 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.515209913 CEST	50002	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.515283108 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.515342951 CEST	50002	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.515367031 CEST	50002	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.522994995 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.523029089 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.523164034 CEST	50003	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.523197889 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.523217916 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.523281097 CEST	50003	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.523336887 CEST	50003	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.542110920 CEST	50003	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.542110920 CEST	50003	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.542151928 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.542171001 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.546525955 CEST	50007	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.546618938 CEST	443	50007	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.546986103 CEST	50007	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.546986103 CEST	50007	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.547106981 CEST	443	50007	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.572527885 CEST	443	50004	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.572591066 CEST	443	50004	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.572731972 CEST	50004	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.572757959 CEST	443	50004	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.572860956 CEST	443	50004	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.572940111 CEST	50004	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.573072910 CEST	50004	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.573101044 CEST	443	50004	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.573152065 CEST	50004	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.573168039 CEST	443	50004	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.576941013 CEST	50008	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.576988935 CEST	443	50008	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.577213049 CEST	50008	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.577336073 CEST	50008	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.577348948 CEST	443	50008	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.632786036 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.632896900 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.632934093 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.633002996 CEST	50002	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.633060932 CEST	50002	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.633342981 CEST	50002	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.633388996 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.633419991 CEST	50002	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.633436918 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.637742043 CEST	50009	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.637854099 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.638287067 CEST	50009	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.638655901 CEST	50009	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.638731956 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.906838894 CEST	443	50005	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.907892942 CEST	50005	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.907924891 CEST	443	50005	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:30.908564091 CEST	50005	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:30.908571959 CEST	443	50005	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.038917065 CEST	443	50005	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.038980961 CEST	443	50005	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.039407015 CEST	50005	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.039853096 CEST	50005	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.039853096 CEST	50005	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.039890051 CEST	443	50005	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.039910078 CEST	443	50005	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.044158936 CEST	50010	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.044209003 CEST	443	50010	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.044543982 CEST	50010	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.044646978 CEST	50010	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.044658899 CEST	443	50010	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.117217064 CEST	443	50006	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.118264914 CEST	50006	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.118311882 CEST	443	50006	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.118985891 CEST	50006	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.118998051 CEST	443	50006	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.262891054 CEST	443	50006	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.263120890 CEST	443	50006	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.263351917 CEST	50006	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.263641119 CEST	50006	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.263641119 CEST	50006	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.263695002 CEST	443	50006	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.263719082 CEST	443	50006	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.267764091 CEST	50011	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.267859936 CEST	443	50011	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.268143892 CEST	50011	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.268235922 CEST	50011	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.268268108 CEST	443	50011	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.293282986 CEST	443	50007	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.294291973 CEST	50007	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.294325113 CEST	443	50007	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.294922113 CEST	50007	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.294948101 CEST	443	50007	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.322007895 CEST	443	50008	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.322681904 CEST	50008	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.322732925 CEST	443	50008	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.323211908 CEST	50008	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.323225021 CEST	443	50008	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.383771896 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.385034084 CEST	50009	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.385128021 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.385648012 CEST	50009	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.385701895 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.427582026 CEST	443	50007	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.427721977 CEST	443	50007	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.428177118 CEST	50007	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.428232908 CEST	50007	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.428232908 CEST	50007	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.428255081 CEST	443	50007	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.428270102 CEST	443	50007	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.432367086 CEST	50012	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.432413101 CEST	443	50012	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.432507992 CEST	50012	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.432681084 CEST	50012	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.432698011 CEST	443	50012	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.451905012 CEST	443	50008	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.452070951 CEST	443	50008	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.452263117 CEST	50008	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.452263117 CEST	50008	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.452263117 CEST	50008	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.455513000 CEST	50013	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.455554008 CEST	443	50013	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.455761909 CEST	50013	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.455848932 CEST	50013	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.455864906 CEST	443	50013	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.517704964 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.517744064 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.517841101 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.517920971 CEST	50009	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.517920971 CEST	50009	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.518142939 CEST	50009	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.518188000 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.518233061 CEST	50009	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.518249035 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:31.759080887 CEST	50008	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:31.759138107 CEST	443	50008	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:33.150470972 CEST	443	50011	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:33.150567055 CEST	443	50010	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:33.151424885 CEST	50010	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:33.151467085 CEST	443	50010	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:33.152019024 CEST	50011	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:33.152081013 CEST	443	50011	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:33.152087927 CEST	50010	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:33.152101040 CEST	443	50010	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:33.153464079 CEST	50011	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:33.153520107 CEST	443	50011	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:33.267858982 CEST	443	50012	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:33.268663883 CEST	50012	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:33.268747091 CEST	443	50012	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:33.269376040 CEST	50012	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:33.269382954 CEST	443	50012	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:33.274997950 CEST	443	50013	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:33.275542974 CEST	50013	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:33.275573015 CEST	443	50013	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:33.276151896 CEST	50013	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:33.276158094 CEST	443	50013	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:33.289855957 CEST	443	50011	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:33.290061951 CEST	443	50011	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:33.290316105 CEST	50011	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:33.290399075 CEST	443	50010	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:33.290636063 CEST	443	50010	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:33.290743113 CEST	50010	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:33.290887117 CEST	50010	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:33.290935040 CEST	443	50010	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:33.290963888 CEST	50010	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:33.290981054 CEST	443	50010	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:33.292736053 CEST	50011	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:33.292737007 CEST	50011	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:33.292792082 CEST	443	50011	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:33.292823076 CEST	443	50011	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:33.397376060 CEST	443	50012	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:33.397557020 CEST	443	50012	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:33.397672892 CEST	50012	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:33.397979021 CEST	50012	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:33.397979021 CEST	50012	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:33.398025036 CEST	443	50012	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:33.398056984 CEST	443	50012	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:33.409045935 CEST	443	50013	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:33.409209013 CEST	443	50013	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:33.409390926 CEST	50013	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:33.409673929 CEST	50013	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:33.409673929 CEST	50013	443	192.168.2.5	13.107.246.45
Oct 23, 2024 21:14:33.409720898 CEST	443	50013	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:33.409748077 CEST	443	50013	13.107.246.45	192.168.2.5
Oct 23, 2024 21:14:41.901940107 CEST	50015	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:14:41.902005911 CEST	443	50015	35.190.80.1	192.168.2.5
Oct 23, 2024 21:14:41.902164936 CEST	50015	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:14:41.902617931 CEST	50015	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:14:41.902647018 CEST	443	50015	35.190.80.1	192.168.2.5
Oct 23, 2024 21:14:42.515916109 CEST	443	50015	35.190.80.1	192.168.2.5
Oct 23, 2024 21:14:42.516638994 CEST	50015	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:14:42.516706944 CEST	443	50015	35.190.80.1	192.168.2.5
Oct 23, 2024 21:14:42.519916058 CEST	443	50015	35.190.80.1	192.168.2.5
Oct 23, 2024 21:14:42.520199060 CEST	50015	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:14:42.520663977 CEST	50015	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:14:42.520778894 CEST	443	50015	35.190.80.1	192.168.2.5
Oct 23, 2024 21:14:42.520857096 CEST	50015	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:14:42.563353062 CEST	443	50015	35.190.80.1	192.168.2.5
Oct 23, 2024 21:14:42.571468115 CEST	50015	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:14:42.571490049 CEST	443	50015	35.190.80.1	192.168.2.5
Oct 23, 2024 21:14:42.618518114 CEST	50015	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:14:42.663686991 CEST	443	50015	35.190.80.1	192.168.2.5
Oct 23, 2024 21:14:42.664513111 CEST	50015	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:14:42.664614916 CEST	443	50015	35.190.80.1	192.168.2.5
Oct 23, 2024 21:14:42.664865971 CEST	50015	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:14:42.665172100 CEST	50016	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:14:42.665210962 CEST	443	50016	35.190.80.1	192.168.2.5
Oct 23, 2024 21:14:42.665766954 CEST	50016	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:14:42.666085958 CEST	50016	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:14:42.666107893 CEST	443	50016	35.190.80.1	192.168.2.5
Oct 23, 2024 21:14:43.270214081 CEST	443	50016	35.190.80.1	192.168.2.5
Oct 23, 2024 21:14:43.270747900 CEST	50016	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:14:43.270828962 CEST	443	50016	35.190.80.1	192.168.2.5
Oct 23, 2024 21:14:43.272298098 CEST	443	50016	35.190.80.1	192.168.2.5
Oct 23, 2024 21:14:43.272545099 CEST	50016	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:14:43.272860050 CEST	50016	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:14:43.272945881 CEST	443	50016	35.190.80.1	192.168.2.5
Oct 23, 2024 21:14:43.273046017 CEST	50016	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:14:43.273062944 CEST	443	50016	35.190.80.1	192.168.2.5
Oct 23, 2024 21:14:43.321499109 CEST	50016	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:14:43.416888952 CEST	443	50016	35.190.80.1	192.168.2.5
Oct 23, 2024 21:14:43.417432070 CEST	50016	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:14:43.417527914 CEST	443	50016	35.190.80.1	192.168.2.5
Oct 23, 2024 21:14:43.417675018 CEST	50016	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:14:43.417679071 CEST	443	50016	35.190.80.1	192.168.2.5
Oct 23, 2024 21:14:43.417881012 CEST	50016	443	192.168.2.5	35.190.80.1
Oct 23, 2024 21:14:44.387397051 CEST	50017	443	192.168.2.5	216.58.206.68
Oct 23, 2024 21:14:44.387492895 CEST	443	50017	216.58.206.68	192.168.2.5
Oct 23, 2024 21:14:44.388042927 CEST	50017	443	192.168.2.5	216.58.206.68
Oct 23, 2024 21:14:44.388545036 CEST	50017	443	192.168.2.5	216.58.206.68
Oct 23, 2024 21:14:44.388624907 CEST	443	50017	216.58.206.68	192.168.2.5
Oct 23, 2024 21:14:45.256190062 CEST	443	50017	216.58.206.68	192.168.2.5
Oct 23, 2024 21:14:45.257395983 CEST	50017	443	192.168.2.5	216.58.206.68
Oct 23, 2024 21:14:45.257457018 CEST	443	50017	216.58.206.68	192.168.2.5
Oct 23, 2024 21:14:45.258862019 CEST	443	50017	216.58.206.68	192.168.2.5
Oct 23, 2024 21:14:45.261358023 CEST	50017	443	192.168.2.5	216.58.206.68
Oct 23, 2024 21:14:45.261488914 CEST	443	50017	216.58.206.68	192.168.2.5
Oct 23, 2024 21:14:45.306086063 CEST	50017	443	192.168.2.5	216.58.206.68
Oct 23, 2024 21:14:55.246681929 CEST	443	50017	216.58.206.68	192.168.2.5
Oct 23, 2024 21:14:55.246828079 CEST	443	50017	216.58.206.68	192.168.2.5
Oct 23, 2024 21:14:55.247030973 CEST	50017	443	192.168.2.5	216.58.206.68
Oct 23, 2024 21:14:56.216782093 CEST	50017	443	192.168.2.5	216.58.206.68
Oct 23, 2024 21:14:56.216850996 CEST	443	50017	216.58.206.68	192.168.2.5
Oct 23, 2024 21:16:10.289843082 CEST	50019	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:10.289911985 CEST	443	50019	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:10.290016890 CEST	50019	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:10.290215015 CEST	50020	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:10.290258884 CEST	443	50020	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:10.290343046 CEST	50020	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:10.290782928 CEST	50019	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:10.290823936 CEST	443	50019	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:10.291132927 CEST	50020	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:10.291169882 CEST	443	50020	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:11.607506990 CEST	443	50019	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:11.607917070 CEST	50019	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:11.608000040 CEST	443	50019	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:11.611255884 CEST	443	50019	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:11.611356020 CEST	50019	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:11.611799955 CEST	50019	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:11.611890078 CEST	443	50019	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:11.611893892 CEST	50019	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:11.611948967 CEST	50019	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:11.612029076 CEST	50019	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:11.612400055 CEST	50021	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:11.612442017 CEST	443	50021	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:11.612602949 CEST	50021	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:11.612947941 CEST	50021	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:11.612967968 CEST	443	50021	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:12.075489044 CEST	443	50020	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:12.103773117 CEST	50020	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:12.103812933 CEST	443	50020	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:12.107769966 CEST	443	50020	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:12.107872963 CEST	50020	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:12.110471010 CEST	50020	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:12.110471010 CEST	50020	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:12.110579967 CEST	50020	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:12.110830069 CEST	443	50020	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:12.110858917 CEST	50022	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:12.110917091 CEST	443	50022	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:12.110943079 CEST	50020	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:12.111006975 CEST	50022	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:12.111252069 CEST	50022	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:12.111265898 CEST	443	50022	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:12.386028051 CEST	443	50021	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:12.409502983 CEST	50021	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:12.409527063 CEST	443	50021	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:12.413059950 CEST	443	50021	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:12.413131952 CEST	50021	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:12.420291901 CEST	50021	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:12.420485973 CEST	443	50021	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:12.420922041 CEST	50021	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:12.420932055 CEST	443	50021	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:12.461443901 CEST	50021	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:13.078586102 CEST	443	50022	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:13.080272913 CEST	50022	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:13.080332041 CEST	443	50022	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:13.081979990 CEST	443	50022	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:13.082176924 CEST	50022	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:13.083363056 CEST	50022	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:13.083643913 CEST	443	50022	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:13.132642984 CEST	50022	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:13.132702112 CEST	443	50022	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:13.180049896 CEST	50022	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:13.663292885 CEST	443	50021	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:13.663487911 CEST	443	50021	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:13.663642883 CEST	50021	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:13.664011002 CEST	50021	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:13.664031982 CEST	443	50021	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:13.664062977 CEST	50021	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:13.664083958 CEST	50021	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:13.694853067 CEST	50022	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:13.739329100 CEST	443	50022	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:14.132805109 CEST	443	50022	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:14.132848978 CEST	443	50022	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:14.133021116 CEST	50022	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:14.133033991 CEST	443	50022	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:14.133367062 CEST	50022	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:14.147567034 CEST	50022	443	192.168.2.5	172.67.187.94
Oct 23, 2024 21:16:14.147629023 CEST	443	50022	172.67.187.94	192.168.2.5
Oct 23, 2024 21:16:14.202609062 CEST	50023	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:14.202651978 CEST	443	50023	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:14.202883959 CEST	50023	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:14.203191042 CEST	50023	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:14.203227043 CEST	443	50023	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:14.829735994 CEST	443	50023	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:14.832395077 CEST	50023	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:14.832428932 CEST	443	50023	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:14.833878040 CEST	443	50023	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:14.834019899 CEST	50023	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:14.860892057 CEST	50023	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:14.861207008 CEST	443	50023	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:14.861248016 CEST	50023	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:14.903413057 CEST	443	50023	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:14.914660931 CEST	50023	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:14.914690018 CEST	443	50023	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:14.966384888 CEST	50023	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:14.998400927 CEST	443	50023	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:14.998584032 CEST	443	50023	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:14.998781919 CEST	50023	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:15.039691925 CEST	50023	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:15.039725065 CEST	443	50023	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.041862965 CEST	50024	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:15.041924953 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.041991949 CEST	50024	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:15.042222023 CEST	50024	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:15.042232037 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.677427053 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.677702904 CEST	50024	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:15.677714109 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.678853035 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.679156065 CEST	50024	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:15.679280043 CEST	50024	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:15.679289103 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.679352999 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.720174074 CEST	50024	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:15.824542046 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.824662924 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.824744940 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.824795961 CEST	50024	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:15.824805975 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.824862003 CEST	50024	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:15.829569101 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.829689980 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.829793930 CEST	50024	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:15.829799891 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.835422039 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.835478067 CEST	50024	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:15.835483074 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.885674000 CEST	50024	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:15.885710955 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.932204962 CEST	50024	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:15.968708992 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.968908072 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.968978882 CEST	50024	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:15.968987942 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.969014883 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.969060898 CEST	50024	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:15.969094038 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.969160080 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.969384909 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.969432116 CEST	50024	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:15.969434023 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.969444036 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.969485044 CEST	50024	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:15.969491005 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.969530106 CEST	50024	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:15.970232964 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.970278025 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.970320940 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.970346928 CEST	50024	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:15.970355034 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.970541954 CEST	50024	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:15.971039057 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.971162081 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.971203089 CEST	50024	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:15.971208096 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.972064972 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.972100019 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.972114086 CEST	50024	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:15.972119093 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:15.972153902 CEST	50024	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:15.972158909 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:16.016144037 CEST	50024	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:16.062875986 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:16.063051939 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:16.063112020 CEST	50024	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:16.063119888 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:16.063188076 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:16.063230038 CEST	50024	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:16.063235044 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:16.063461065 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:16.063509941 CEST	50024	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:16.064858913 CEST	50024	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:16.064873934 CEST	443	50024	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:16.191890955 CEST	50025	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:16.191936016 CEST	443	50025	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:16.192002058 CEST	50025	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:16.192451954 CEST	50025	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:16.192465067 CEST	443	50025	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:16.234788895 CEST	50026	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:16.234816074 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:16.235027075 CEST	50026	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:16.235332012 CEST	50026	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:16.235337973 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:16.810528040 CEST	443	50025	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:16.810853004 CEST	50025	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:16.810916901 CEST	443	50025	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:16.812391043 CEST	443	50025	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:16.812463999 CEST	50025	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:16.812872887 CEST	50025	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:16.812969923 CEST	443	50025	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:16.813009024 CEST	50025	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:16.855341911 CEST	443	50025	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:16.856667995 CEST	50025	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:16.856713057 CEST	443	50025	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:16.856717110 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:16.857033014 CEST	50026	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:16.857043982 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:16.859225988 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:16.859291077 CEST	50026	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:16.859827995 CEST	50026	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:16.859915018 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:16.860141039 CEST	50026	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:16.860148907 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:16.904828072 CEST	50026	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:16.904917002 CEST	50025	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:16.975246906 CEST	443	50025	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:16.975359917 CEST	443	50025	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:16.975424051 CEST	50025	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:16.975462914 CEST	443	50025	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:16.975522041 CEST	443	50025	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:16.975542068 CEST	50025	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:16.975580931 CEST	443	50025	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:16.975764990 CEST	50025	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:16.975775957 CEST	443	50025	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:16.975908041 CEST	443	50025	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:16.975956917 CEST	50025	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:16.975965977 CEST	443	50025	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:16.976016045 CEST	50025	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:16.996944904 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:16.997072935 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:16.997148037 CEST	50026	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:16.997164011 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:16.997195005 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:16.997245073 CEST	50026	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:16.997307062 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:16.997462034 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:16.997549057 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:16.997596979 CEST	50026	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:16.997615099 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:16.997704983 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:16.997747898 CEST	50026	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:16.997756004 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:16.997791052 CEST	50026	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:17.093533039 CEST	443	50025	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:17.093633890 CEST	443	50025	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:17.093720913 CEST	443	50025	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:17.093770027 CEST	443	50025	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:17.093808889 CEST	443	50025	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:17.093835115 CEST	443	50025	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:17.093894958 CEST	50025	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:17.093895912 CEST	50025	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:17.093960047 CEST	443	50025	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:17.094022989 CEST	50025	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:17.094742060 CEST	443	50025	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:17.094824076 CEST	443	50025	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:17.094866037 CEST	443	50025	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:17.095006943 CEST	50025	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:17.095006943 CEST	50025	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:17.095074892 CEST	443	50025	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:17.095594883 CEST	443	50025	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:17.098727942 CEST	50025	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:17.113331079 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:17.113508940 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:17.113605976 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:17.113657951 CEST	50026	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:17.113678932 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:17.113717079 CEST	50026	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:17.114224911 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:17.114423037 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:17.114475965 CEST	50026	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:17.114483118 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:17.115235090 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:17.115375042 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:17.115426064 CEST	50026	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:17.115437031 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:17.115575075 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:17.115627050 CEST	50026	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:17.115634918 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:17.115673065 CEST	50026	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:17.115678072 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:17.115818024 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:17.115875006 CEST	50026	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:17.115880966 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:17.116575003 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:17.116682053 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:17.116728067 CEST	50026	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:17.116734982 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:17.116771936 CEST	50026	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:17.117012024 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:17.160027027 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:17.162606955 CEST	50026	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:17.162620068 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:17.213407040 CEST	50026	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:17.230710030 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:17.230854034 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:17.230910063 CEST	50026	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:17.230918884 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:17.230977058 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:17.231024981 CEST	50026	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:17.231030941 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:17.231209993 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:17.231261015 CEST	50026	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:17.265918016 CEST	50025	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:17.265949965 CEST	443	50025	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:17.268970966 CEST	50026	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:17.268994093 CEST	443	50026	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:17.818900108 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:17.818984985 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:17.819241047 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:17.819559097 CEST	50028	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:17.819621086 CEST	443	50028	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:17.819677114 CEST	50028	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:17.819797039 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:17.819848061 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:17.820029020 CEST	50028	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:17.820050001 CEST	443	50028	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.445514917 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.445995092 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.446058035 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.446599960 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.446845055 CEST	443	50028	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.446945906 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.447046041 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.447185040 CEST	50028	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.447187901 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.447222948 CEST	443	50028	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.447916985 CEST	443	50028	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.448174953 CEST	50028	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.448265076 CEST	50028	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.448278904 CEST	443	50028	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.448405981 CEST	443	50028	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.487417936 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.493891954 CEST	50028	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.584883928 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.585020065 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.585088015 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.585118055 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.585148096 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.585225105 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.585253954 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.585418940 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.585495949 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.585525990 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.585630894 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.585724115 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.585777044 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.585791111 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.585841894 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.588819027 CEST	443	50028	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.588895082 CEST	443	50028	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.588956118 CEST	50028	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.589611053 CEST	50028	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.589634895 CEST	443	50028	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.593651056 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:18.593696117 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:18.593786001 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:18.593971968 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:18.593992949 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:18.702187061 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.702364922 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.702459097 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.702531099 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.702552080 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.702583075 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.702739000 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.702747107 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.702799082 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.702822924 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.702914953 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.702996969 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.703042030 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.703052044 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.703383923 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.703733921 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.703872919 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.703933001 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.703947067 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.704519033 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.704576969 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.704591036 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.704680920 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.704734087 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.704746962 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.705295086 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.705346107 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.705359936 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.707542896 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.707632065 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.707643986 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.761456013 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.819444895 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.819638968 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.819727898 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.819822073 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.819829941 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.819895029 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.819996119 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.820054054 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.820189953 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.820239067 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.820302010 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.820302010 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.820327044 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.820353985 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.820440054 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.820477009 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.820512056 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.820578098 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.820594072 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.820619106 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.820672035 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.820686102 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.820802927 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.820858955 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.820872068 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.820908070 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.820959091 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.820974112 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.821019888 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.821070910 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.821085930 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.821110964 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.821161032 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.821172953 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.821451902 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.821986914 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.822058916 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.822127104 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.822176933 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.822211981 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.822268963 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.860683918 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.860846043 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.935971022 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.936115026 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.936148882 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.936182976 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.936207056 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.936244965 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.936319113 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.936458111 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.936556101 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.936676979 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.936703920 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.936747074 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.936798096 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.936850071 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.936880112 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.936906099 CEST	443	50027	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:18.936930895 CEST	50027	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:18.940385103 CEST	50031	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:18.940426111 CEST	443	50031	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:18.940690994 CEST	50031	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:18.940742016 CEST	50031	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:18.940756083 CEST	443	50031	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:19.097263098 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:19.097295046 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:19.097543955 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:19.097846031 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:19.097862005 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:19.568156958 CEST	443	50031	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:19.622596979 CEST	50031	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:19.710973024 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:19.750082970 CEST	50031	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:19.750135899 CEST	443	50031	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:19.750278950 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:19.750308037 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:19.751467943 CEST	443	50031	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:19.751969099 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:19.789746046 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:19.790256977 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:19.791536093 CEST	50031	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:19.791791916 CEST	443	50031	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:19.791845083 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:19.792130947 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:19.792191029 CEST	50031	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:19.792294979 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:19.835325003 CEST	443	50031	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:19.936399937 CEST	443	50031	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:19.936660051 CEST	443	50031	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:19.936814070 CEST	50031	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:19.938633919 CEST	50031	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:19.938676119 CEST	443	50031	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:19.994354963 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:19.994483948 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:19.994575024 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:19.994632959 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:19.994693995 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:19.994812012 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:19.994813919 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:19.994839907 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:19.994915009 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:19.994930983 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:19.995064020 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:19.995155096 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:19.995194912 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:19.995209932 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:19.995279074 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.112854004 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.113049984 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.113131046 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.113204956 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.113217115 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.113243103 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.113388062 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.113439083 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.113439083 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.113472939 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.114121914 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.114244938 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.114315033 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.114340067 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.114367008 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.114411116 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.114721060 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.114780903 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.114810944 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.114928007 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.114993095 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.115006924 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.115093946 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.115147114 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.115159035 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.115564108 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.115628958 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.115641117 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.115725040 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.115784883 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.115796089 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.165375948 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.216732979 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.217012882 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.217029095 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.217478991 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.217853069 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.217936039 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.218005896 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.229897022 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.230089903 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.230154991 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.230195045 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.230293036 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.230346918 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.230360985 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.230987072 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.231049061 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.231061935 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.231152058 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.231206894 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.231218100 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.231323957 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.231376886 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.231389046 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.231719017 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.231794119 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.231806040 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.231862068 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.232070923 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.232144117 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.232165098 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.232220888 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.232861042 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.232935905 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.232954979 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.233027935 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.233715057 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.233812094 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.233995914 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.234059095 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.234750986 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.234824896 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.234865904 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.234927893 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.236032963 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.236103058 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.236124992 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.236203909 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.259334087 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.259664059 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.348654985 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.348798037 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.348839045 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.348869085 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.348891020 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.348908901 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.348931074 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.348944902 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.348963976 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.349013090 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.349126101 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.349164963 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.349212885 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.349236012 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.349240065 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.349296093 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.349303961 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.349339962 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.349347115 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.349364042 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.349390984 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.349493027 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.349544048 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.349556923 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.349607944 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.349622011 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.349628925 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.349651098 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.349703074 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.349761009 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.349767923 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.349795103 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.349817991 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.349823952 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.349853992 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.350049019 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.350112915 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.350119114 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.350157022 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.350182056 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.350188017 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.350231886 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.350238085 CEST	443	50032	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:20.350251913 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.350291967 CEST	50032	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:20.367584944 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.367646933 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.367687941 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.367703915 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.367718935 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.367759943 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.490161896 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.490256071 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.490298986 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.490299940 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.490317106 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.490396976 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.490420103 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.490433931 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.490485907 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.490506887 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.490514994 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.490570068 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.490577936 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.537830114 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.611927032 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.612344980 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.612407923 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.612421036 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.612515926 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.612565041 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.612574100 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.614869118 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.614933014 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.614939928 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.615067005 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.615119934 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.615127087 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.615241051 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.615289927 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.615298033 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.615464926 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.615542889 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.615550995 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.615581036 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.615624905 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.615670919 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.661319017 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.661328077 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.682951927 CEST	50033	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.682998896 CEST	443	50033	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.683124065 CEST	50033	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.683332920 CEST	50033	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.683341026 CEST	443	50033	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.708128929 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.731043100 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.731272936 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.731328011 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.731339931 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.731472015 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.731534004 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.731543064 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.731635094 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.731692076 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.731700897 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.731791973 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.731839895 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.731847048 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.731965065 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.732013941 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.732022047 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.732127905 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.732178926 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.732184887 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.732878923 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.732958078 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.732966900 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.733016014 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.733952045 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.734040976 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.734088898 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.734154940 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.734508991 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.734566927 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.853055000 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.853146076 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.853203058 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.853276014 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.853302002 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.853360891 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.853363037 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.853380919 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.853416920 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.853431940 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.853435993 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.853446007 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.853493929 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.854294062 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.854365110 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.970596075 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.970671892 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.970706940 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.970762968 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.970763922 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.970782042 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.970813036 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.970840931 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.970890045 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.970899105 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.970938921 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.971776962 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.971846104 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.971857071 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.971863985 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.971925020 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.971931934 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.971944094 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:20.971988916 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.977006912 CEST	50030	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:20.977022886 CEST	443	50030	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:21.202740908 CEST	50034	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:21.202790022 CEST	443	50034	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:21.203032017 CEST	50034	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:21.206617117 CEST	50034	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:21.206691980 CEST	443	50034	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:21.296582937 CEST	443	50033	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:21.296936989 CEST	50033	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:21.296969891 CEST	443	50033	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:21.297422886 CEST	443	50033	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:21.297878981 CEST	50033	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:21.297878981 CEST	50033	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:21.297960043 CEST	443	50033	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:21.342586040 CEST	50033	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:22.494580984 CEST	443	50033	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:22.494690895 CEST	443	50033	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:22.494740009 CEST	50033	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:22.502311945 CEST	50033	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:22.502342939 CEST	443	50033	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:22.502592087 CEST	443	50034	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:22.503201008 CEST	50034	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:22.503235102 CEST	443	50034	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:22.504669905 CEST	443	50034	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:22.504956961 CEST	50034	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:22.505083084 CEST	50034	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:22.505091906 CEST	443	50034	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:22.505367994 CEST	443	50034	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:22.546549082 CEST	50034	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:22.657375097 CEST	443	50034	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:22.657543898 CEST	443	50034	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:22.657680035 CEST	50034	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:22.658233881 CEST	50034	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:22.658303022 CEST	443	50034	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:22.663678885 CEST	50035	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:22.663722038 CEST	443	50035	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:22.663793087 CEST	50035	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:22.664016008 CEST	50035	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:22.664026022 CEST	443	50035	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:22.664554119 CEST	50036	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:22.664650917 CEST	443	50036	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:22.664747953 CEST	50036	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:22.665041924 CEST	50036	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:22.665103912 CEST	443	50036	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:23.284862041 CEST	443	50035	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:23.285100937 CEST	50035	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:23.285114050 CEST	443	50035	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:23.285557985 CEST	443	50035	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:23.285820961 CEST	50035	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:23.285895109 CEST	443	50035	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:23.286020041 CEST	50035	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:23.308553934 CEST	443	50036	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:23.308976889 CEST	50036	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:23.309040070 CEST	443	50036	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:23.309740067 CEST	443	50036	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:23.310136080 CEST	50036	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:23.310136080 CEST	50036	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:23.310228109 CEST	443	50036	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:23.310415983 CEST	443	50036	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:23.327353954 CEST	443	50035	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:23.354477882 CEST	50036	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:23.454197884 CEST	443	50036	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:23.454394102 CEST	443	50036	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:23.454545021 CEST	443	50036	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:23.454608917 CEST	50036	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:23.454608917 CEST	50036	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:23.456007004 CEST	50036	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:23.456073999 CEST	443	50036	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:23.458156109 CEST	443	50035	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:23.458345890 CEST	443	50035	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:23.458417892 CEST	50035	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:23.466304064 CEST	50035	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:23.466317892 CEST	443	50035	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:23.777101994 CEST	50037	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:23.777213097 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:23.777297020 CEST	50037	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:23.777667046 CEST	50037	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:23.777707100 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:24.385857105 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:24.386512995 CEST	50037	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:24.386580944 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:24.387092113 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:24.387716055 CEST	50037	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:24.387814045 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:24.387963057 CEST	50037	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:24.388047934 CEST	50037	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:24.388081074 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:24.388191938 CEST	50037	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:24.388236046 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:24.718261957 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:24.718404055 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:24.718483925 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:24.718483925 CEST	50037	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:24.718525887 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:24.718590975 CEST	50037	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:24.718611956 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:24.718790054 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:24.718843937 CEST	50037	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:24.718857050 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:24.718933105 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:24.719024897 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:24.719070911 CEST	50037	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:24.719085932 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:24.722619057 CEST	50037	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:24.722631931 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:24.776663065 CEST	50037	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:24.836242914 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:24.836432934 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:24.836509943 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:24.836505890 CEST	50037	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:24.836558104 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:24.836622000 CEST	50037	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:24.836637974 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:24.836781025 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:24.836832047 CEST	50037	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:24.836846113 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:24.837585926 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:24.837660074 CEST	50037	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:24.837671995 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:24.837832928 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:24.837908030 CEST	50037	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:24.838299990 CEST	50037	443	192.168.2.5	104.18.94.41
Oct 23, 2024 21:16:24.838329077 CEST	443	50037	104.18.94.41	192.168.2.5
Oct 23, 2024 21:16:24.859913111 CEST	50038	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:24.860003948 CEST	443	50038	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:24.860313892 CEST	50038	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:24.860414982 CEST	50038	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:24.860445976 CEST	443	50038	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:25.476985931 CEST	443	50038	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:25.477773905 CEST	50038	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:25.477837086 CEST	443	50038	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:25.478322029 CEST	443	50038	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:25.478776932 CEST	50038	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:25.478883982 CEST	443	50038	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:25.478992939 CEST	50038	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:25.519371986 CEST	443	50038	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:25.628882885 CEST	443	50038	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:25.629059076 CEST	443	50038	104.18.95.41	192.168.2.5
Oct 23, 2024 21:16:25.629141092 CEST	50038	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:25.629676104 CEST	50038	443	192.168.2.5	104.18.95.41
Oct 23, 2024 21:16:25.629693985 CEST	443	50038	104.18.95.41	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 23, 2024 21:13:26.862046003 CEST	65481	53	192.168.2.5	1.1.1.1
Oct 23, 2024 21:13:40.048513889 CEST	54472	53	192.168.2.5	1.1.1.1
Oct 23, 2024 21:13:40.048655987 CEST	52918	53	192.168.2.5	1.1.1.1
Oct 23, 2024 21:13:40.054861069 CEST	53	60087	1.1.1.1	192.168.2.5
Oct 23, 2024 21:13:40.063663006 CEST	53	54472	1.1.1.1	192.168.2.5
Oct 23, 2024 21:13:40.065047979 CEST	53	52918	1.1.1.1	192.168.2.5
Oct 23, 2024 21:13:40.066610098 CEST	53	55755	1.1.1.1	192.168.2.5
Oct 23, 2024 21:13:41.366723061 CEST	53	57755	1.1.1.1	192.168.2.5
Oct 23, 2024 21:13:41.893250942 CEST	65156	53	192.168.2.5	1.1.1.1
Oct 23, 2024 21:13:41.895339966 CEST	60437	53	192.168.2.5	1.1.1.1
Oct 23, 2024 21:13:41.900810957 CEST	53	65156	1.1.1.1	192.168.2.5
Oct 23, 2024 21:13:41.902944088 CEST	53	60437	1.1.1.1	192.168.2.5
Oct 23, 2024 21:13:44.321456909 CEST	57040	53	192.168.2.5	1.1.1.1
Oct 23, 2024 21:13:44.321571112 CEST	58779	53	192.168.2.5	1.1.1.1
Oct 23, 2024 21:13:44.331825018 CEST	53	57040	1.1.1.1	192.168.2.5
Oct 23, 2024 21:13:44.331886053 CEST	53	58779	1.1.1.1	192.168.2.5
Oct 23, 2024 21:13:44.535124063 CEST	53	59532	1.1.1.1	192.168.2.5
Oct 23, 2024 21:13:49.992201090 CEST	62665	53	192.168.2.5	1.1.1.1
Oct 23, 2024 21:13:49.992475033 CEST	54822	53	192.168.2.5	1.1.1.1
Oct 23, 2024 21:13:50.005958080 CEST	53	62665	1.1.1.1	192.168.2.5
Oct 23, 2024 21:13:50.009063959 CEST	53	54822	1.1.1.1	192.168.2.5
Oct 23, 2024 21:13:58.518110037 CEST	53	58611	1.1.1.1	192.168.2.5
Oct 23, 2024 21:14:17.596143961 CEST	53	59764	1.1.1.1	192.168.2.5
Oct 23, 2024 21:14:39.539808989 CEST	53	59587	1.1.1.1	192.168.2.5
Oct 23, 2024 21:14:40.331717014 CEST	53	49966	1.1.1.1	192.168.2.5
Oct 23, 2024 21:15:08.348009109 CEST	53	64714	1.1.1.1	192.168.2.5
Oct 23, 2024 21:15:54.222434998 CEST	53	51652	1.1.1.1	192.168.2.5
Oct 23, 2024 21:16:14.190783978 CEST	62740	53	192.168.2.5	1.1.1.1
Oct 23, 2024 21:16:14.191119909 CEST	60010	53	192.168.2.5	1.1.1.1
Oct 23, 2024 21:16:14.199363947 CEST	53	60010	1.1.1.1	192.168.2.5
Oct 23, 2024 21:16:14.201453924 CEST	53	62740	1.1.1.1	192.168.2.5
Oct 23, 2024 21:16:16.176719904 CEST	52206	53	192.168.2.5	1.1.1.1
Oct 23, 2024 21:16:16.177469015 CEST	62270	53	192.168.2.5	1.1.1.1
Oct 23, 2024 21:16:16.185364962 CEST	53	52206	1.1.1.1	192.168.2.5
Oct 23, 2024 21:16:16.186593056 CEST	53	62270	1.1.1.1	192.168.2.5
Oct 23, 2024 21:16:16.224422932 CEST	53010	53	192.168.2.5	1.1.1.1
Oct 23, 2024 21:16:16.224767923 CEST	52287	53	192.168.2.5	1.1.1.1
Oct 23, 2024 21:16:16.233161926 CEST	53	53010	1.1.1.1	192.168.2.5
Oct 23, 2024 21:16:16.234160900 CEST	53	52287	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 23, 2024 21:13:26.862046003 CEST	192.168.2.5	1.1.1.1	0x458d	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:13:40.048513889 CEST	192.168.2.5	1.1.1.1	0xac7a	Standard query (0)	vibeforceji.sa.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:13:40.048655987 CEST	192.168.2.5	1.1.1.1	0x2f72	Standard query (0)	vibeforceji.sa.com	65	IN (0x0001)	false
Oct 23, 2024 21:13:41.893250942 CEST	192.168.2.5	1.1.1.1	0x13db	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:13:41.895339966 CEST	192.168.2.5	1.1.1.1	0x61dd	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 23, 2024 21:13:44.321456909 CEST	192.168.2.5	1.1.1.1	0x44ff	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:13:44.321571112 CEST	192.168.2.5	1.1.1.1	0x609a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 23, 2024 21:13:49.992201090 CEST	192.168.2.5	1.1.1.1	0xcf90	Standard query (0)	vibeforceji.sa.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:13:49.992475033 CEST	192.168.2.5	1.1.1.1	0xa602	Standard query (0)	vibeforceji.sa.com	65	IN (0x0001)	false
Oct 23, 2024 21:16:14.190783978 CEST	192.168.2.5	1.1.1.1	0x7b69	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:16:14.191119909 CEST	192.168.2.5	1.1.1.1	0x3d97	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 23, 2024 21:16:16.176719904 CEST	192.168.2.5	1.1.1.1	0x1037	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:16:16.177469015 CEST	192.168.2.5	1.1.1.1	0x3c32	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 23, 2024 21:16:16.224422932 CEST	192.168.2.5	1.1.1.1	0x3909	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:16:16.224767923 CEST	192.168.2.5	1.1.1.1	0x544a	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 23, 2024 21:13:26.871145010 CEST	1.1.1.1	192.168.2.5	0x458d	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 21:13:40.063663006 CEST	1.1.1.1	192.168.2.5	0xac7a	No error (0)	vibeforceji.sa.com		172.67.187.94	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:13:40.063663006 CEST	1.1.1.1	192.168.2.5	0xac7a	No error (0)	vibeforceji.sa.com		104.21.64.188	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:13:40.065047979 CEST	1.1.1.1	192.168.2.5	0x2f72	No error (0)	vibeforceji.sa.com			65	IN (0x0001)	false
Oct 23, 2024 21:13:41.900810957 CEST	1.1.1.1	192.168.2.5	0x13db	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:13:44.331825018 CEST	1.1.1.1	192.168.2.5	0x44ff	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:13:44.331886053 CEST	1.1.1.1	192.168.2.5	0x609a	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 23, 2024 21:13:50.005958080 CEST	1.1.1.1	192.168.2.5	0xcf90	No error (0)	vibeforceji.sa.com		104.21.64.188	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:13:50.005958080 CEST	1.1.1.1	192.168.2.5	0xcf90	No error (0)	vibeforceji.sa.com		172.67.187.94	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:13:50.009063959 CEST	1.1.1.1	192.168.2.5	0xa602	No error (0)	vibeforceji.sa.com			65	IN (0x0001)	false
Oct 23, 2024 21:16:14.199363947 CEST	1.1.1.1	192.168.2.5	0x3d97	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Oct 23, 2024 21:16:14.201453924 CEST	1.1.1.1	192.168.2.5	0x7b69	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:16:14.201453924 CEST	1.1.1.1	192.168.2.5	0x7b69	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:16:16.185364962 CEST	1.1.1.1	192.168.2.5	0x1037	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:16:16.185364962 CEST	1.1.1.1	192.168.2.5	0x1037	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:16:16.186593056 CEST	1.1.1.1	192.168.2.5	0x3c32	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Oct 23, 2024 21:16:16.233161926 CEST	1.1.1.1	192.168.2.5	0x3909	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:16:16.233161926 CEST	1.1.1.1	192.168.2.5	0x3909	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 23, 2024 21:16:16.234160900 CEST	1.1.1.1	192.168.2.5	0x544a	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

otelrules.azureedge.net

slscr.update.microsoft.com

vibeforceji.sa.com

a.nel.cloudflare.com

https:

challenges.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49712	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:21 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 19:13:21 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=77571 Date: Wed, 23 Oct 2024 19:13:21 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49713	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:22 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 19:13:22 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=77539 Date: Wed, 23 Oct 2024 19:13:22 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-23 19:13:22 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.5	49717	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:28 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:28 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:28 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 21 Oct 2024 13:21:21 GMT ETag: "0x8DCF1D34132B902" x-ms-request-id: 8e5348b2-101e-007a-1be5-24047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191328Z-15b8d89586fdmfsg1u7xrpfws000000002a0000000000eh7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:28 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-23 19:13:28 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-23 19:13:28 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-23 19:13:28 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-23 19:13:28 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-23 19:13:28 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-23 19:13:28 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-23 19:13:28 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-23 19:13:28 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-23 19:13:28 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49716	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:29 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Rz8NeoA+uv6Muot&MD=pVremttP HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-23 19:13:29 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: bbffc6cd-6416-4f52-a3ec-2410df0c94a3 MS-RequestId: d3c6cb9c-bad3-4d27-aca6-045abcf36a76 MS-CV: GlvdHV9/X0iU15Xa.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 23 Oct 2024 19:13:29 GMT Connection: close Content-Length: 24490
2024-10-23 19:13:29 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-23 19:13:29 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.5	49722	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:29 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:29 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:29 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 084b2ff6-801e-0067-68fd-24fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191329Z-r197bdfb6b4qpk6v9629ad4b5s0000000b8000000000cgkm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:13:29 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.5	49724	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:29 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:29 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:29 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 394abe64-001e-0028-050b-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191329Z-16849878b78jfqwd1dsrhqg3aw00000006r000000000ecfe x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:29 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.5	49721	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:29 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:29 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:29 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 331d1c77-401e-0029-354e-229b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191329Z-16849878b786vsxz21496wc2qn00000006n000000000uhts x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:13:29 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:29 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:29 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:29 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191329Z-16849878b785jsrm4477mv3ezn00000006kg00000000f9v7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:29 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.5	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:30 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:30 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:30 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 734838af-101e-0065-4be5-214088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191330Z-16849878b785f8wh85a0w3ennn00000006n00000000095wx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:30 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:30 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:30 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: f5ab32e4-501e-00a3-0f09-25c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191330Z-r197bdfb6b4kq4j5t834fh90qn00000009rg0000000061q3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:30 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:30 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:30 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:30 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 8d314a1c-701e-0097-3ae5-21b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191330Z-16849878b782558xg5kpzay6es00000006eg0000000101e2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:30 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:30 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:30 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:30 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 13d0e6d2-b01e-0053-47f4-24cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191330Z-15b8d89586fs9clcgrr6f2d6vg00000000f000000000b73a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:13:30 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:31 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:31 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:31 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 53592b39-c01e-0082-1ef3-24af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191331Z-15b8d89586ff5l62quxsfe8ugg0000000cvg00000000f3nh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:13:31 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:31 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:31 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 802631a9-901e-002a-57ad-247a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191331Z-15b8d89586frzkk2umu6w8qnt80000000d40000000009acx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:31 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:31 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:32 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:32 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 0d728fc6-301e-0000-17e3-21eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191332Z-16849878b785jsrm4477mv3ezn00000006k000000000gxqn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:32 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:31 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:31 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 5d02b83b-801e-008c-751b-247130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191331Z-15b8d89586fhl2qtatrz3vfkf000000003rg00000000fe03 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:31 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:32 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:32 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:32 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7de7ed35-901e-005b-7c14-222005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191332Z-16849878b78p6ttkmyustyrk8s00000006gg00000000ev44 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:32 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:32 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:32 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:32 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 6ca7d158-d01e-0014-15ac-21ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191332Z-16849878b78q4pnrt955f8nkx800000006f000000000n77b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:32 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:32 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:32 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 1a83195d-f01e-0071-40f5-24431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191332Z-r197bdfb6b49k6rsrbz098tg8000000003rg00000000mfbc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:32 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:32 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:33 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 89a40e36-b01e-00ab-18ad-24dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191333Z-15b8d89586fxdh48qknu9dqk2g00000001v000000000kts3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:33 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:33 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:33 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4cd68789-d01e-0017-448e-21b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191333Z-16849878b7842t5ke0k7mzbt3c00000006eg00000000fa8x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:33 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:33 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:33 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:33 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: ec40f21c-901e-0067-494d-22b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191333Z-16849878b786vsxz21496wc2qn00000006p000000000r99m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:33 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:33 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:33 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: b478c109-d01e-00ad-3dad-24e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191333Z-15b8d89586f8nxpt5xx0pk7du800000003tg00000000aynp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:33 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:33 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:33 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 1a7ba294-f01e-0071-2df2-24431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191333Z-r197bdfb6b4kkm8440c459r6k800000000v0000000000nrz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:33 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:34 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:34 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: fc96bee5-501e-00a3-3f0b-22c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191334Z-16849878b785jsrm4477mv3ezn00000006p0000000004khz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:34 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:34 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:34 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:34 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: bb725c57-501e-005b-0eab-21d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191334Z-16849878b78jfqwd1dsrhqg3aw00000006u0000000001tcy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:34 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:34 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:34 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:34 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 8e7d8b57-101e-007a-1df4-24047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191334Z-r197bdfb6b4b582bwynewx7zgn0000000bbg00000000a3ug x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:34 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:34 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:35 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: b11d926e-c01e-00a2-50f4-242327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191335Z-r197bdfb6b4k6h5j1g5mvtmsmn0000000ax000000000vtua x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:35 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:34 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:35 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: ff743265-301e-000c-1ff2-24323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191335Z-r197bdfb6b46gt25anfa5gg2fw000000020g00000000w1p6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:35 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:34 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:35 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:35 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: f88dc7cb-b01e-0001-23f2-2446e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191335Z-r197bdfb6b4kkrkjudg185sarw00000000hg00000000w0mr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:13:35 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:35 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:35 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: ff77512b-301e-000c-17f4-24323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191335Z-15b8d89586frzkk2umu6w8qnt80000000d3000000000c7qm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:35 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:35 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:35 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: e4926461-e01e-0099-2c18-24da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191335Z-15b8d89586fwzdd8urmg0p1ebs000000081g00000000sy96 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:35 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:35 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:35 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:35 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 26284338-e01e-0052-664d-22d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191335Z-16849878b78jfqwd1dsrhqg3aw00000006ng00000000sh52 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:35 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:35 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:36 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:35 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: c4337264-b01e-0070-640b-221cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191335Z-16849878b78fmrkt2ukpvh9wh400000006f000000000wm0s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:36 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:36 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:36 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:36 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 759c8b5d-301e-003f-27f2-24266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191336Z-15b8d89586fst84k5f3z220tec0000000db0000000004fs6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:13:36 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:36 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:36 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:36 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 5167a131-c01e-0082-697a-25af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191336Z-15b8d89586fqj7k5uht6e8nnew0000000csg00000000m2pe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:13:36 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:36 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:36 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:36 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 27632888-301e-0096-61d8-21e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191336Z-16849878b782558xg5kpzay6es00000006m000000000d2x9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:36 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:36 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:36 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:36 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: e7f2251b-001e-0017-4fad-240c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191336Z-15b8d89586fnsf5zm1ryrxu0bc000000027g0000000019pz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:36 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:37 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:37 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 221e1266-901e-0016-4cfc-24efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191337Z-r197bdfb6b49k6rsrbz098tg8000000003sg00000000ffp8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:37 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:37 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:37 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:37 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 07f9ef03-d01e-0014-614d-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191337Z-16849878b7842t5ke0k7mzbt3c00000006cg00000000r2hr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:13:37 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:37 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:37 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 43d69f68-001e-00ad-61b4-24554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191337Z-15b8d89586fqckbz0ssbuzzp1n000000016g000000000631 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:37 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:37 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:37 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:37 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 2d861f62-501e-0064-3bf5-241f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191337Z-15b8d89586fs9clcgrr6f2d6vg00000000gg00000000btht x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:13:37 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:38 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:38 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 44f017bc-601e-000d-6df3-242618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191338Z-15b8d89586f989rks44whx5v7s0000000d4g000000001skv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:38 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:38 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:38 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:38 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 40ca5ebb-901e-0048-7827-21b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191338Z-16849878b78q4pnrt955f8nkx800000006gg00000000e6bp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:38 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:38 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:38 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:38 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 7a637aca-b01e-0002-3c05-221b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191338Z-16849878b785f8wh85a0w3ennn00000006p0000000004zxf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:38 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:38 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:38 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:38 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: f6d2fe15-801e-007b-74f2-21e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191338Z-16849878b78lhh9t0fb3392enw00000006eg00000000pc0q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:38 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:39 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:39 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:39 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: d4d27aa7-601e-0002-1812-22a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191339Z-16849878b78z5q7jpbgf6e9mcw00000006sg00000000821b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:39 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:39 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:39 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:39 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 71d2c1fc-001e-00a2-01de-21d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191339Z-16849878b78q4pnrt955f8nkx800000006f000000000n82x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:39 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:39 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:39 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:39 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: b92258e0-a01e-00ab-2aab-219106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191339Z-16849878b78k46f8kzwxznephs00000006hg00000000bbyx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:39 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:40 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:40 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 9f494126-c01e-008e-09f4-247381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191340Z-15b8d89586f4zwgbz365q03b0c0000000d7g00000000peph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:40 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:40 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:40 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:40 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 7082da1f-601e-003d-073e-226f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191340Z-16849878b78p4hmjy4vha5ddqw00000006h000000000dgsz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:40 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:40 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:40 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 33ade019-101e-0028-30f5-248f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191340Z-15b8d89586frzkk2umu6w8qnt80000000d2000000000fq9k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:40 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:40 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:40 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:40 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 2653a72e-001e-005a-26e6-21c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191340Z-16849878b78rjhv97f3nhawr7s00000006f000000000y7vz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:40 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:40 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:41 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:41 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 4c87ede1-d01e-0065-6b9c-21b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191340Z-16849878b785f8wh85a0w3ennn00000006f000000000x9ge x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:41 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49779	172.67.187.94	443	5572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:41 UTC	666	OUT	GET /CZsV/ HTTP/1.1 Host: vibeforceji.sa.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 19:13:41 UTC	562	IN	HTTP/1.1 403 Forbidden Date: Wed, 23 Oct 2024 19:13:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FT2IjVgsSymexo%2BW1r4GBlZKBdeAOwk%2F1kE6fnqpoJ8g0XmzWZAMtGPwF6gYMR0hWTzd3zetQAzcVF%2FJ68fd1e6EMMOBAp4qqzoAnu299UVXGLZKbSxerLx8ChlhaLYQX%2FGK9mg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d740bbbeda14785-DFW
2024-10-23 19:13:41 UTC	807	IN	Data Raw: 31 31 35 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1156<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-10-23 19:13:41 UTC	1369	IN	Data Raw: 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e Data Ascii: cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElemen
2024-10-23 19:13:41 UTC	1369	IN	Data Raw: 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 20 65 6e 63 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ess-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain">
2024-10-23 19:13:41 UTC	901	IN	Data Raw: 30 2e 39 30 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 Data Ascii: 0.90</span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-la
2024-10-23 19:13:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:41 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:42 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:41 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 02f2a2dc-901e-0064-11fc-24e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191341Z-15b8d89586f42m673h1quuee4s0000000220000000006v1t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:13:42 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:41 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:41 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:41 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 1d9ab00d-a01e-0002-3af4-245074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191341Z-r197bdfb6b46gt25anfa5gg2fw000000027g000000000dek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:13:41 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:41 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:41 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:41 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 3892b43a-301e-0051-71f4-2438bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191341Z-15b8d89586fvk4kmwqg9fgbkn8000000022g00000000rxwb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:13:41 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:41 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:41 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:41 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 09cb71da-201e-0033-6911-22b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191341Z-16849878b78rjhv97f3nhawr7s00000006m000000000d5mm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:41 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49786	35.190.80.1	443	5572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:42 UTC	547	OUT	OPTIONS /report/v4?s=%2FT2IjVgsSymexo%2BW1r4GBlZKBdeAOwk%2F1kE6fnqpoJ8g0XmzWZAMtGPwF6gYMR0hWTzd3zetQAzcVF%2FJ68fd1e6EMMOBAp4qqzoAnu299UVXGLZKbSxerLx8ChlhaLYQX%2FGK9mg%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://vibeforceji.sa.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 19:13:42 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Wed, 23 Oct 2024 19:13:42 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:42 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:42 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 7844842a-001e-0034-8015-25dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191342Z-r197bdfb6b46gt25anfa5gg2fw000000022000000000pu5w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:42 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:42 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:43 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:43 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: e3ffbf99-001e-0014-2c05-255151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191343Z-r197bdfb6b4ld6jc5asqwvvz0w00000000f000000000b45a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:43 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:42 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:43 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:43 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: f8de0035-b01e-005c-23fc-244c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191343Z-r197bdfb6b4kzncf21qcaynxz800000000u000000000d4y0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:13:43 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:43 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:43 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:43 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ee7a308c-c01e-00a1-620b-227e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191343Z-16849878b7862vlcc7m66axrs000000006ng00000000gan7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:43 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49791	35.190.80.1	443	5572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:43 UTC	486	OUT	POST /report/v4?s=%2FT2IjVgsSymexo%2BW1r4GBlZKBdeAOwk%2F1kE6fnqpoJ8g0XmzWZAMtGPwF6gYMR0hWTzd3zetQAzcVF%2FJ68fd1e6EMMOBAp4qqzoAnu299UVXGLZKbSxerLx8ChlhaLYQX%2FGK9mg%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 394 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 19:13:43 UTC	394	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 38 33 31 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 38 37 2e 39 34 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 76 69 62 65 66 6f 72 63 65 6a 69 2e 73 61 2e Data Ascii: [{"age":1,"body":{"elapsed_time":1831,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.187.94","status_code":403,"type":"http.error"},"type":"network-error","url":"https://vibeforceji.sa.
2024-10-23 19:13:43 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 23 Oct 2024 19:13:43 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:43 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:43 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:43 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 6a9fe61e-e01e-001f-0a16-251633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191343Z-r197bdfb6b4kzncf21qcaynxz800000000q000000000wbdt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:43 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:43 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:43 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:43 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 8b572347-501e-008c-80f2-21cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191343Z-16849878b787psctgubawhx7k800000006h0000000004g4d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:43 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:43 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:43 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:43 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 143ffe56-901e-0067-3a0b-22b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191343Z-16849878b78k46f8kzwxznephs00000006m0000000004m1s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:43 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:44 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:44 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:44 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 965686a0-401e-008c-4bf2-2486c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191344Z-15b8d89586fqj7k5uht6e8nnew0000000ctg00000000fcnb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:13:44 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:44 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:44 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:44 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: e7a8c7ed-d01e-00ad-4ff5-24e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191344Z-r197bdfb6b4ld6jc5asqwvvz0w00000000q00000000018yb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:13:44 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49793	172.67.187.94	443	5572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:44 UTC	568	OUT	GET /cdn-cgi/styles/cf.errors.css HTTP/1.1 Host: vibeforceji.sa.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://vibeforceji.sa.com/CZsV/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 19:13:44 UTC	411	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:44 GMT Content-Type: text/css Content-Length: 24051 Connection: close Last-Modified: Fri, 18 Oct 2024 19:08:24 GMT ETag: "6712b228-5df3" Server: cloudflare CF-RAY: 8d740bcf2f4545ea-DFW X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Wed, 23 Oct 2024 21:13:44 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2024-10-23 19:13:44 UTC	958	IN	Data Raw: 23 63 66 2d 77 72 61 70 70 65 72 20 61 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 62 62 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 72 74 69 63 6c 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 73 69 64 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 69 67 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 6f 64 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 61 6e 76 61 73 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 61 70 74 69 6f 6e 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 65 6e 74 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 69 74 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 6f 64 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 64 64 2c 23 63 66 2d 77 72 61 70 70 Data Ascii: #cf-wrapper a,#cf-wrapper abbr,#cf-wrapper article,#cf-wrapper aside,#cf-wrapper b,#cf-wrapper big,#cf-wrapper blockquote,#cf-wrapper body,#cf-wrapper canvas,#cf-wrapper caption,#cf-wrapper center,#cf-wrapper cite,#cf-wrapper code,#cf-wrapper dd,#cf-wrapp
2024-10-23 19:13:44 UTC	1369	IN	Data Raw: 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 74 72 6f 6e 67 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 62 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 6d 6d 61 72 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 61 62 6c 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 62 6f 64 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 66 6f 6f 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 68 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 68 65 61 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 75 2c 23 63 66 2d 77 72 61 70 70 65 72 20 75 6c 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f Data Ascii: e,#cf-wrapper strong,#cf-wrapper sub,#cf-wrapper summary,#cf-wrapper sup,#cf-wrapper table,#cf-wrapper tbody,#cf-wrapper td,#cf-wrapper tfoot,#cf-wrapper th,#cf-wrapper thead,#cf-wrapper tr,#cf-wrapper tt,#cf-wrapper u,#cf-wrapper ul{margin:0;padding:0;bo
2024-10-23 19:13:44 UTC	1369	IN	Data Raw: 31 2e 35 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 34 36 2c 31 33 39 2c 33 31 2c 2e 33 29 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 73 65 63 74 69 6f 6e 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 65 63 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 65 6d Data Ascii: 1.5!important;text-decoration:none!important;letter-spacing:normal;-webkit-tap-highlight-color:rgba(246,139,31,.3);-webkit-font-smoothing:antialiased}#cf-wrapper .cf-section,#cf-wrapper section{background:0 0;display:block;margin-bottom:2em;margin-top:2em
2024-10-23 19:13:44 UTC	1369	IN	Data Raw: 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 74 77 6f 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 32 2e 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 32 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 Data Ascii: ld(2n),#cf-wrapper .cf-columns.cols-4>.cf-column:nth-child(2n),#cf-wrapper .cf-columns.four>.cf-column:nth-child(2n),#cf-wrapper .cf-columns.two>.cf-column:nth-child(2n){padding-left:22.5px;padding-right:0}#cf-wrapper .cf-columns.cols-2>.cf-column:nth-chi
2024-10-23 19:13:44 UTC	1369	IN	Data Raw: 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 6f 64 64 29 7b 63 6c 65 61 72 3a 6e 6f 6e 65 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 34 6e 2b 31 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 Data Ascii: ),#cf-wrapper .cf-columns.four>.cf-column:nth-child(odd){clear:none}#cf-wrapper .cf-columns.cols-4>.cf-column:first-child,#cf-wrapper .cf-columns.cols-4>.cf-column:nth-child(4n+1),#cf-wrapper .cf-columns.four>.cf-column:first-child,#cf-wrapper .cf-columns
2024-10-23 19:13:44 UTC	1369	IN	Data Raw: 30 3b 70 61 64 64 69 6e 67 3a 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 31 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 34 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 7d 23 63 66 2d 77 72 61 70 70 65 Data Ascii: 0;padding:0}#cf-wrapper h1,#cf-wrapper h2,#cf-wrapper h3{font-weight:400}#cf-wrapper h4,#cf-wrapper h5,#cf-wrapper h6,#cf-wrapper strong{font-weight:600}#cf-wrapper h1{font-size:36px;line-height:1.2}#cf-wrapper h2{font-size:30px;line-height:1.3}#cf-wrappe
2024-10-23 19:13:44 UTC	1369	IN	Data Raw: 68 32 2b 68 34 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2b 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2b 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 34 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 6f 6c 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 65 6d 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 3b 63 6f 6c Data Ascii: h2+h4,#cf-wrapper h2+h5,#cf-wrapper h2+h6,#cf-wrapper h3+h5,#cf-wrapper h3+h6,#cf-wrapper h3+p,#cf-wrapper h4+p,#cf-wrapper h5+ol,#cf-wrapper h5+p,#cf-wrapper h5+ul{margin-top:.5em}#cf-wrapper .cf-btn{background-color:transparent;border:1px solid #999;col
2024-10-23 19:13:44 UTC	1369	IN	Data Raw: 3a 23 36 32 61 31 64 38 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 31 36 33 39 35 39 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 65 72 72 6f 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 69 6d 70 6f 72 74 61 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 62 64 32 34 32 36 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 3a 68 6f 76 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 65 72 72 6f 72 3a 68 6f 76 65 72 2c 23 Data Ascii: :#62a1d8;border:1px solid #163959;color:#fff}#cf-wrapper .cf-btn-danger,#cf-wrapper .cf-btn-error,#cf-wrapper .cf-btn-important{background-color:#bd2426;border-color:transparent;color:#fff}#cf-wrapper .cf-btn-danger:hover,#cf-wrapper .cf-btn-error:hover,#
2024-10-23 19:13:44 UTC	1369	IN	Data Raw: 61 63 65 3a 6e 6f 77 72 61 70 7d 23 63 66 2d 77 72 61 70 70 65 72 20 69 6e 70 75 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 65 6c 65 63 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 65 78 74 61 72 65 61 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 23 34 30 34 30 34 30 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 36 36 36 37 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 34 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e Data Ascii: ace:nowrap}#cf-wrapper input,#cf-wrapper select,#cf-wrapper textarea{background:#fff!important;border:1px solid #999!important;color:#404040!important;font-size:.86667em!important;line-height:1.24!important;margin:0 0 1em!important;max-width:100%!importan
2024-10-23 19:13:45 UTC	1369	IN	Data Raw: 3a 23 34 30 34 30 34 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 70 61 64 64 69 6e 67 3a 37 2e 35 70 78 20 31 35 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 61 6c 65 72 74 3a 65 6d 70 74 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 61 6c 65 72 74 20 2e 63 66 2d 63 6c 6f 73 65 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 2e 37 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 70 61 64 64 69 6e Data Ascii: :#404040;font-size:13px;padding:7.5px 15px;position:relative;vertical-align:middle;border-radius:2px}#cf-wrapper .cf-alert:empty{display:none}#cf-wrapper .cf-alert .cf-close{border:1px solid transparent;color:inherit;font-size:18.75px;line-height:1;paddin

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:44 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:44 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:44 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: f2361012-b01e-003e-18e4-218e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191344Z-16849878b78hz7zj8u0h2zng1400000006sg000000008fra x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:44 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:44 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:45 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:45 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 18d6d76d-f01e-0052-73f2-249224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191345Z-15b8d89586fx2hlt035xdehq580000000dc0000000007r2p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:13:45 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:45 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:45 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:45 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 931f542e-301e-000c-75f2-21323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191345Z-16849878b789m94j7902zfvfr000000006g000000000h2zx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:45 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:45 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:45 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:45 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: a2e914b6-401e-0029-5fce-219b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191345Z-16849878b78rjhv97f3nhawr7s00000006mg00000000bnss x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:45 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:45 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:45 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 135f94f0-d01e-002b-2a55-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191345Z-16849878b7862vlcc7m66axrs000000006q000000000994t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:45 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:46 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:46 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:46 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: c561987e-801e-0015-0d0b-22f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191346Z-16849878b78ngdnlw4w0762cms00000006rg00000000c8pw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:46 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:46 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:46 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:46 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: a983d246-401e-005b-124e-229c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191346Z-16849878b78lhh9t0fb3392enw00000006gg00000000eshw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:46 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:46 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:46 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:46 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: bd3356e8-b01e-0002-6afb-241b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191346Z-15b8d89586fzhrwgk23ex2bvhw00000000rg000000005k6u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:13:46 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:47 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:47 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:47 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 013f0f94-801e-00ac-2ef3-24fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191347Z-15b8d89586fmhkw4gksnr1w3ds0000000d5000000000mfw7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:13:47 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:47 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:47 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:47 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 2f548e5b-201e-003c-5d24-2130f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191347Z-16849878b78lhh9t0fb3392enw00000006kg000000006hxy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:47 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:47 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:47 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:47 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 5a53efb7-001e-0034-5556-23dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191347Z-r197bdfb6b4ld6jc5asqwvvz0w00000000gg00000000b8e3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:47 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:48 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:48 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:48 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 0eea03f1-d01e-0066-098a-21ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191348Z-16849878b7842t5ke0k7mzbt3c00000006f000000000c8s6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:48 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:48 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:48 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 3e8b3e47-701e-006f-544e-22afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191348Z-16849878b78plcdqu15wsb886400000006h000000000p0g6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:48 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:48 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:48 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:48 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f09c1d25-d01e-0082-52f3-21e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191348Z-16849878b785jsrm4477mv3ezn00000006g000000000texz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:48 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:49 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:49 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:49 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: d9905de8-801e-0083-31a7-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191349Z-15b8d89586ffsjj9qb0gmb1stn000000022g00000000k0q7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:49 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:49 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:49 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:49 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: a956e522-e01e-0020-405a-23de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191349Z-r197bdfb6b4kzncf21qcaynxz800000000s000000000nqns x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:49 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:49 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:49 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:49 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 273a8d1a-001e-0034-0d8c-21dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191349Z-16849878b786wvrz321uz1cknn00000006m000000000qtec x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:49 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49821	172.67.187.94	443	5572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:49 UTC	655	OUT	GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1 Host: vibeforceji.sa.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://vibeforceji.sa.com/cdn-cgi/styles/cf.errors.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 19:13:49 UTC	409	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:49 GMT Content-Type: image/png Content-Length: 452 Connection: close Last-Modified: Fri, 18 Oct 2024 19:08:24 GMT ETag: "6712b228-1c4" Server: cloudflare CF-RAY: 8d740bee8a244659-DFW X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Wed, 23 Oct 2024 21:13:49 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2024-10-23 19:13:49 UTC	452	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 36 00 00 00 36 08 03 00 00 00 bb 9b 9a ef 00 00 00 33 50 4c 54 45 c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f ab b2 22 ed 00 00 00 11 74 52 4e 53 00 40 30 10 60 8f bf ff ef 7f af 9f df 20 50 cf 70 60 82 c8 9b 00 00 01 2f 49 44 41 54 78 01 bd d3 05 d2 b4 30 10 06 e1 8e 6c de c1 36 dc ff b2 9f 2b 95 c9 12 7e 79 4a 91 46 22 b8 c2 8b c8 80 94 6f 45 1f ac 4c 81 33 f2 ac 03 5b 1e 95 69 32 b5 94 6e 98 57 79 4a c4 91 8a 7a 26 9a 82 a9 af a4 46 95 f5 d0 1a fb 95 c7 62 bf b2 f2 e9 70 7e e3 a7 a0 df ee 7c 3a 74 35 f1 6d b3 b3 99 66 70 af 69 f2 2f 65 ef c7 fa 99 25 de 25 1b c9 b4 f0 6e d2 50 a6 ed fb 65 Data Ascii: PNGIHDR663PLTEE?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?"tRNS@0` Pp`/IDATx0l6+~yJF"oEL3[i2nWyJz&Fbp~\|:t5mfpi/e%%nPe

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:49 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:50 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:50 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c29108f7-201e-0000-1ff5-24a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191350Z-r197bdfb6b4kzncf21qcaynxz800000000wg000000003dv0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:50 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:50 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:50 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:50 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 55d9b643-201e-003f-330b-226d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191350Z-16849878b786wvrz321uz1cknn00000006s0000000001pzx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:50 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:50 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:50 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:50 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 999b9529-701e-001e-53f4-24f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191350Z-r197bdfb6b4kzncf21qcaynxz800000000w000000000579b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:50 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:50 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:50 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:50 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 1f9beeb1-d01e-0014-170b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191350Z-16849878b78rjhv97f3nhawr7s00000006ng0000000076yz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:50 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:50 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:51 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:50 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 20049dc1-d01e-0014-1b33-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191350Z-16849878b78dsttbr1qw36rxs800000006gg000000010etp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:51 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:51 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:51 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:51 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: b140c98b-501e-000a-75f9-240180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191351Z-15b8d89586f42m673h1quuee4s00000001x000000000uak3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:13:51 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:51 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:51 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:51 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 67684ae8-901e-0016-58ee-21efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191351Z-16849878b782h9tt5z2wa5rfxg00000006kg00000000f9pw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:51 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:51 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:51 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:51 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 02d1aaf3-901e-0064-34f2-24e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191351Z-r197bdfb6b46gt25anfa5gg2fw000000027g000000000egq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:51 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49832	172.67.187.94	443	5572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:51 UTC	597	OUT	GET /favicon.ico HTTP/1.1 Host: vibeforceji.sa.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://vibeforceji.sa.com/CZsV/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 19:13:51 UTC	841	IN	HTTP/1.1 404 Not Found Date: Wed, 23 Oct 2024 19:13:51 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close cache-control: private, no-cache, max-age=0 pragma: no-cache vary: Accept-Encoding CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3bxHcscmsuXq33QRZGVzCDFG8KllcQdC5XtAVhIR5egFeuZsU40Vfcaikdd23pj81keurv6Lopmm2ehiSXCPspUq9DlVynTGjhuWT9yXk%2Fhg6GR3Ce4DlnUqcc1%2FjzVSAh9tCbU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d740bf8fdaf6b1c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=74049&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2847&recv_bytes=1175&delivery_rate=37842&cwnd=251&unsent_bytes=0&cid=f716181704c847db&ts=461&x=0"
2024-10-23 19:13:51 UTC	528	IN	Data Raw: 34 65 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f Data Ascii: 4e1<!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><title> 404 Not Found</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</
2024-10-23 19:13:51 UTC	728	IN	Data Raw: 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 34 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 Data Ascii: ; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">404</h1><h2 style="margin-top:20px;font-size: 30px;">Not Found</h2><p>The resource requested could not be found on this server!</p></div></div
2024-10-23 19:13:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49833	104.21.64.188	443	5572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:51 UTC	388	OUT	GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1 Host: vibeforceji.sa.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 19:13:51 UTC	409	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:51 GMT Content-Type: image/png Content-Length: 452 Connection: close Last-Modified: Fri, 18 Oct 2024 19:08:24 GMT ETag: "6712b228-1c4" Server: cloudflare CF-RAY: 8d740bfb1e38474a-DFW X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Wed, 23 Oct 2024 21:13:51 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2024-10-23 19:13:51 UTC	452	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 36 00 00 00 36 08 03 00 00 00 bb 9b 9a ef 00 00 00 33 50 4c 54 45 c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f ab b2 22 ed 00 00 00 11 74 52 4e 53 00 40 30 10 60 8f bf ff ef 7f af 9f df 20 50 cf 70 60 82 c8 9b 00 00 01 2f 49 44 41 54 78 01 bd d3 05 d2 b4 30 10 06 e1 8e 6c de c1 36 dc ff b2 9f 2b 95 c9 12 7e 79 4a 91 46 22 b8 c2 8b c8 80 94 6f 45 1f ac 4c 81 33 f2 ac 03 5b 1e 95 69 32 b5 94 6e 98 57 79 4a c4 91 8a 7a 26 9a 82 a9 af a4 46 95 f5 d0 1a fb 95 c7 62 bf b2 f2 e9 70 7e e3 a7 a0 df ee 7c 3a 74 35 f1 6d b3 b3 99 66 70 af 69 f2 2f 65 ef c7 fa 99 25 de 25 1b c9 b4 f0 6e d2 50 a6 ed fb 65 Data Ascii: PNGIHDR663PLTEE?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?"tRNS@0` Pp`/IDATx0l6+~yJF"oEL3[i2nWyJz&Fbp~\|:t5mfpi/e%%nPe

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:51 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:51 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:51 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 4faef820-a01e-0053-6a4e-228603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191351Z-16849878b78dsttbr1qw36rxs800000006qg0000000078ys x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:13:51 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:52 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:52 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:52 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 9791ae07-d01e-0066-7bf2-24ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191352Z-r197bdfb6b4h2vctng0a0nubg800000009s0000000009s9r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:52 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:52 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:52 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:52 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: f9655ebd-a01e-0098-64f2-248556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191352Z-r197bdfb6b4t7wszdvrfk02ah4000000088000000000318m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:52 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:52 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:52 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:52 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 333c19fd-801e-00ac-16e3-21fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191352Z-16849878b785g992cz2s9gk35c00000006hg00000000vuk0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:52 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:52 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:52 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:52 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 31e4fe8c-301e-0033-38f2-21fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191352Z-16849878b786vsxz21496wc2qn00000006r000000000fewt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:52 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:53 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:53 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:53 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 2a979a5c-f01e-003f-77f7-21d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191353Z-16849878b78p4hmjy4vha5ddqw00000006eg00000000rw7m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:53 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:53 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:53 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:53 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: cbb0b495-901e-005b-56e4-212005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191353Z-16849878b78dghrpt8v731n7r400000006kg000000006m6x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:53 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:53 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:53 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:53 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 9aa7f8dd-901e-0048-781b-24b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191353Z-r197bdfb6b4lkrtc7na2dkay28000000021g000000008769 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:53 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:54 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:54 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:54 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 106adab5-b01e-0001-11da-2046e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191354Z-16849878b78fmrkt2ukpvh9wh400000006h000000000pmcm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:54 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:54 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:54 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:54 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 95bc9e17-201e-0051-77f2-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191354Z-15b8d89586fbt6nf34bm5uw08n00000001qg00000000pnar x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:54 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:54 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:54 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:54 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 4c920d0e-c01e-008d-4cca-202eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191354Z-16849878b78p6ttkmyustyrk8s00000006gg00000000ewn2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:54 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:55 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:55 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:55 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 654233af-a01e-001e-0b27-2149ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191355Z-16849878b78k46f8kzwxznephs00000006e000000000t1ke x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:55 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:55 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:55 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:55 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 094c1a0f-c01e-0066-77f2-24a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191355Z-15b8d89586fnsf5zm1ryrxu0bc000000024g00000000bkxh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:55 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:55 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:55 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:55 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 97ea84b8-d01e-005a-0430-217fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191355Z-16849878b785g992cz2s9gk35c00000006n000000000kdh3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:55 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:55 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:56 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:56 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 714dabad-d01e-0065-43fc-24b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191356Z-r197bdfb6b4qpk6v9629ad4b5s0000000b6000000000mum0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:13:56 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:55 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:56 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:56 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: a7868e79-001e-0049-77f2-245bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191356Z-r197bdfb6b4gdlhqw6kbe0ekvs00000009pg00000000bfau x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:56 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:56 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:56 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:56 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 062c286a-b01e-005c-0c8e-214c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191356Z-16849878b78k46f8kzwxznephs00000006fg00000000kpe7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:56 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:56 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:57 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:57 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 21a6354f-801e-00a0-33ae-242196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191356Z-15b8d89586fbt6nf34bm5uw08n00000001wg000000002f0s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:57 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:56 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:56 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:56 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: d2bdf8af-801e-0078-25f4-24bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191356Z-r197bdfb6b4kzncf21qcaynxz800000000rg00000000rc5v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:13:56 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:57 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:57 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:57 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: c2bf3a2c-401e-0047-4d9c-248597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191357Z-15b8d89586fwzdd8urmg0p1ebs000000085g00000000b1tp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:57 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:57 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:58 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:57 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: c944a0c5-101e-005a-7340-22882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191357Z-16849878b78s2lqfdex4tmpp7800000006r0000000005xx0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:58 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:58 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:58 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:58 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: baa41b4f-401e-00ac-2c28-210a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191358Z-16849878b78c5zx4gw8tcga1b400000006gg00000000e6nq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:58 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:58 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:58 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:58 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: e014a2e3-501e-0035-060b-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191358Z-16849878b78gvgmlcfru6nuc5400000006ng000000007p67 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:58 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:58 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:58 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:58 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: bfa31533-301e-0020-4b7f-256299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191358Z-15b8d89586fnsf5zm1ryrxu0bc000000026g0000000054g6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:13:58 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:59 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:59 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:59 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: af610e67-501e-007b-1855-225ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191359Z-16849878b78bkvbz1ry47zvsas00000006gg0000000103d6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:13:59 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:59 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:59 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:59 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 9b3a7460-601e-003e-70a8-243248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191359Z-15b8d89586fzhrwgk23ex2bvhw00000000ng00000000fgtt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:59 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:13:59 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:13:59 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:13:59 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 8522a688-a01e-0084-2768-219ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191359Z-16849878b78mhkkf6kbvry07q000000006g000000000gn8c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:13:59 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:14:00 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:14:00 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:14:00 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: efa6dde7-e01e-0071-750c-2208e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191400Z-16849878b782558xg5kpzay6es00000006mg00000000bm3m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:14:00 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:14:00 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:14:00 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:14:00 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 44e5e715-301e-001f-6416-24aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191400Z-15b8d89586fwzdd8urmg0p1ebs0000000870000000005kua x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:14:00 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:14:00 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:14:00 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:14:00 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 474bc074-b01e-0002-67b0-201b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191400Z-16849878b78plcdqu15wsb886400000006f000000000wc5q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:14:00 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:14:01 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:14:01 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:14:01 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 8b373834-501e-008c-26e4-21cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191401Z-16849878b78k8q5pxkgux3mbgg00000006k000000000hm15 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:14:01 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:14:01 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:14:01 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:14:01 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 4fea8089-201e-0071-08f4-24ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191401Z-r197bdfb6b4lkrtc7na2dkay28000000022g0000000045be x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:14:01 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:14:01 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:14:01 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:14:01 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 264b7e39-001e-0028-804e-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191401Z-16849878b78gvgmlcfru6nuc5400000006g000000000taqa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:14:01 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:14:02 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:14:04 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:14:04 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 94ed9306-801e-0083-6af2-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191404Z-15b8d89586fxdh48qknu9dqk2g000000020g000000001cgw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:14:04 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:14:02 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:14:02 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:14:02 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: e081a540-501e-0035-2133-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191402Z-16849878b78bkvbz1ry47zvsas00000006s0000000001b9f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:14:02 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:14:02 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:14:02 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:14:02 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: efcf68a2-a01e-0084-11f2-249ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191402Z-15b8d89586f989rks44whx5v7s0000000cy000000000qhxt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:14:02 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:14:03 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:14:03 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:14:03 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 06d7a471-401e-0029-1427-219b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191403Z-16849878b7842t5ke0k7mzbt3c00000006cg00000000r4g4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:14:03 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:14:03 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:14:03 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:14:03 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 03ef3c5b-d01e-007a-4ff2-24f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191403Z-15b8d89586fzhrwgk23ex2bvhw00000000pg00000000c0z7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:14:03 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:14:04 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:14:04 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:14:04 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 759e46bd-301e-003f-2df2-24266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191404Z-15b8d89586fqckbz0ssbuzzp1n000000010g00000000mxa0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:14:04 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:14:04 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:14:04 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:14:04 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e3c76c04-001e-0014-77f3-245151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191404Z-r197bdfb6b4t7wszdvrfk02ah4000000081g00000000vqy0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:14:04 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:14:04 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:14:05 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:14:05 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: ba3ed362-301e-0099-2f30-216683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191405Z-16849878b78bkvbz1ry47zvsas00000006pg00000000bqav x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:14:05 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:14:05 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:14:05 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:14:05 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: c362eb52-101e-0017-38f3-2447c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191405Z-15b8d89586fnsf5zm1ryrxu0bc000000022g00000000ht71 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:14:05 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:14:05 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:14:05 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:14:05 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 0064e569-401e-0067-43f2-2409c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191405Z-r197bdfb6b4lbgfqheuaxfm7xn0000000g9000000000aehg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:14:05 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:14:05 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:14:05 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:14:05 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: dfbb9110-801e-008f-2ef4-242c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191405Z-15b8d89586f8l5961kfst8fpb0000000083g00000000hg7f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:14:05 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:14:05 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:14:06 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:14:05 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: b0947076-901e-0067-17f4-24b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191405Z-15b8d89586fs9clcgrr6f2d6vg00000000g000000000bete x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 19:14:06 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:14:05 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:14:06 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:14:06 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 9175bbc6-101e-0028-0656-238f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191406Z-r197bdfb6b4kkm8440c459r6k800000000tg000000006051 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:14:06 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:14:06 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:14:06 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:14:06 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: c53c8a19-f01e-0096-07f7-2110ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191406Z-16849878b78q4pnrt955f8nkx800000006cg00000000x6ey x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:14:06 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:14:06 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:14:06 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:14:06 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: f0353451-e01e-0071-7340-2208e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191406Z-16849878b78jfqwd1dsrhqg3aw00000006u0000000001w0f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:14:06 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:14:06 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:14:06 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:14:06 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 0ee1a661-001e-000b-6e0b-2215a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191406Z-16849878b78lhh9t0fb3392enw00000006m0000000004b2g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:14:06 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:14:06 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:14:07 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:14:06 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: e4ee02ab-c01e-00ad-3df9-24a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191406Z-r197bdfb6b4ld6jc5asqwvvz0w00000000f000000000b5fa x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:14:07 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 19:14:07 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 19:14:07 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 19:14:07 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: 77e14ed8-001e-0034-1cf3-24dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T191407Z-15b8d89586f42m673h1quuee4s000000021g0000000092c0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 19:14:07 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Target ID:	0
Start time:	15:13:12
Start date:	23/10/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\email-email-pandad....pdf"
Imagebase:	0x7ff686a00000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	15:13:13
Start date:	23/10/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff6413e0000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	15:13:13
Start date:	23/10/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2096 --field-trial-handle=1576,i,5142166503301341022,5512777148727592726,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff6413e0000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	15:13:37
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://vibeforceji.sa.com/CZsV/"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	15:13:38
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1980,i,3645715694664674740,1691753166203851061,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may send spearphishing emails with a malicious link in an attempt to gain access to victim systems. Spearphishing with a link is a specific variant of spearphishing. It is different from other forms of spearphishing in that it employs the use of links to download malware contained in email, instead of attaching malicious files to the email itself, to avoid defenses that may inspect email attachments. Spearphishing may also involve social engineering techniques, such as posing as a trusted source.
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Google Workspace, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report email-email-pandad....pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\4d8ebde1-4c0e-4d4c-b5d2-55f2d9b1f29d.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241023191317Z-162.bmp

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.6768

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Windows Analysis Report
email-email-pandad....pdf