Edit tour

Windows Analysis Report
https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiG9Rbj-2F-2BL5xBvCeRxrIAG77j9DkiM7Yr8M64Kg2izaa0OIZ5-2FATI-2Bc2anEPwc9wrQCD63MC6ONtwJ4SdtRTMnlVT73iHX1khCeCMxvfrJWFZE6xLgrG0WfeomHPSWGopkuujmYCDXjAoqEnyB4oApDJGaTO_sV0hy7-2BGXO3LZoFb45Ee9q2xovzSXG8XVZrbzeABE5y2

Overview

General Information

Sample URL:	https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiG9Rbj-2F-2BL5xBvCeRxrIAG77j9DkiM7Yr8M64Kg2izaa0OIZ5-2FATI-2Bc2anEPwc9wrQCD63MC6ONtwJ4SdtRTMnlVT73iHX1khCeCMxv
Analysis ID:	1540702
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected hidden input values containing email addresses (often used in phishing pages)

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4348 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5772 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1820,i,10354759190983247407,3748985830559989704,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6292 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiG9Rbj-2F-2BL5xBvCeRxrIAG77j9DkiM7Yr8M64Kg2izaa0OIZ5-2FATI-2Bc2anEPwc9wrQCD63MC6ONtwJ4SdtRTMnlVT73iHX1khCeCMxvfrJWFZE6xLgrG0WfeomHPSWGopkuujmYCDXjAoqEnyB4oApDJGaTO_sV0hy7-2BGXO3LZoFb45Ee9q2xovzSXG8XVZrbzeABE5y29PDMLq2ChSQAIHKNLazLUqewS5YZ9SPzKKABZQxE4M4JfqBBJaVIRJOU4Sh6BeF-2FTZq1GJ735ScAVdxn7RfonvJVAbLvtiFqwkqX-2F62IKr1OAohPOxBMvGUk2jA0e3czp4b-2F8ymy1eBYgp-2FaHuYw41VPqFDKnyXLCTkU3HvqNk5a9SYRWgFyoq-2BfZI2n13wiOK83-2FcmSneBQB32uHjeb5z-2F2gDfTARsRD9FRa9QhHbBeTz1oBHKHLZ-2B2UMpfjo-2FuDYqeQVClCbrjrwWivlNh2O8ah4bXzu6Hj69PJhvtHQ-3D-3D" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /eventRegistration/eventRegistrationServlet HTTP/1.1Host: event.on24.comConnection: keep-aliveContent-Length: 268Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://event.on24.comContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://event.on24.com/wcc/r/4729291/0DA9ADCB7D49E9C260A43DC00A038CD9?mode=login&email=melinda.outlaw@johnmuirhealth.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=NjJjMzRjZDktZGY5ZC00ODdlLWFlODYtZjJlZDM3NTMyNDBh; sa-4729291=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons4_prd_wl_LNX=!9xfBULRARkxsweyntfwALduEGSG61Whvo7NlYLQNGY4TfanSBdV7e0BA3CtSsSVFxiKOYMLRJFN5A6c=; ON24_Pool=cons4_prd_wl_LNX; BIGipServereventprd_apache=!Gsk98WigIsHg470eSVii2HqB/dyrqxtTxbc5w72zHK/c01+aS35Bhwr+GI4RjMQuZ1syNI7l0h8anDpt0GF7BgnyNZoQ3ysDlfFjIYb3MqXcIjtwa8klN8CyS+a4g1XqoPkoq/MoF0jEAywHdo1ScIIEv0i10zo=; TS0af49cbe027=082972b052ab2000f9d2fabc2212058562e7393b48bdfb24ba520a5fd860363fc2530ba252e71fde08500502f6113000c5f7444659071b29388b5aab0f4a2ec1eac2587bfe6d5cf5cb8905c228fdc84dec0e22f7976dd1a8d5689320b22c3c9e

Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: http://bitmovin.com
Source: chromecache_175.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_175.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: http://github.com/kenwheeler/slick
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: http://github.com/kenwheeler/slick/issues
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: http://jfbastien.github.io/papers/Math.signbit.html
Source: chromecache_175.2.dr	String found in binary or memory: http://jira.on24.com/browse/ELITE-13641
Source: chromecache_166.2.dr, chromecache_171.2.dr, chromecache_175.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_175.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/?scope=&folderName=base&cornerRadiusShadow=8px&offsetLeftShadow=0px&
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: http://jsperf.lnkit.com/fast-apply/5
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: http://kenwheeler.github.io
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: http://kenwheeler.github.io/slick
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: http://stackoverflow.com/a/28210364/1070244
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: http://www.fyneworks.com/
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: http://www.fyneworks.com/jquery/xml-to-json/
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: http://www.matts411.com/post/internet-explorer-9-oninput/
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=1049982
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=3334
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=773687
Source: chromecache_176.2.dr, chromecache_173.2.dr	String found in binary or memory: https://cloudconsole.on24.com
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://code.google.com/p/v8/issues/detail?id=3509
Source: chromecache_175.2.dr	String found in binary or memory: https://creativemarket.com/blog/the-missing-guide-to-font-formats)
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://developer.apple.com/library/content/documentation/AudioVideo/Conceptual/Using_HTML5_Audio_Vi
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/HTTP/Browser_detection_using_the_user_agent
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://flow.org/blog/2017/05/07/Strict-Function-Call-Arity/).
Source: chromecache_171.2.dr	String found in binary or memory: https://gist.github.com/BrendanEich/4294d5c212a6d2254703
Source: chromecache_171.2.dr	String found in binary or memory: https://github.com/DavidBruant/Map-Set.prototype.toJSON
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://github.com/benjamingr/RexExp.escape
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://github.com/es-shims.
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://github.com/es-shims/es5-shim/issues/150
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://github.com/facebook/flow/issues/285
Source: chromecache_175.2.dr	String found in binary or memory: https://github.com/kenwheeler/slick/issues/1158
Source: chromecache_175.2.dr	String found in binary or memory: https://github.com/kenwheeler/slick/issues/3662
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://github.com/kitcambridge/es5-shim/commit/4f738ac066346
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://github.com/ljharb/proposal-is-error
Source: chromecache_171.2.dr	String found in binary or memory: https://github.com/mathiasbynens/String.prototype.at
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://github.com/mozilla/rhino/issues/346
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://github.com/nfriend/ts-keycode-enum/blob/master/Key.enum.ts
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://github.com/paldepind/snabbdom/blob/master/LICENSE
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://github.com/rwaldron/tc39-notes/blob/master/es6/2014-09/sept-25.md#510-globalasap-for-enqueui
Source: chromecache_171.2.dr	String found in binary or memory: https://github.com/sebmarkbage/ecmascript-string-left-right-trim
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://github.com/tc39/Array.prototype.includes
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://github.com/tc39/proposal-array-filtering
Source: chromecache_171.2.dr	String found in binary or memory: https://github.com/tc39/proposal-global
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://github.com/tc39/proposal-object-getownpropertydescriptors
Source: chromecache_171.2.dr	String found in binary or memory: https://github.com/tc39/proposal-object-values-entries
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://github.com/tc39/proposal-promise-finally
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://github.com/tc39/proposal-promise-try
Source: chromecache_171.2.dr	String found in binary or memory: https://github.com/tc39/proposal-string-pad-start-end
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://github.com/vuejs/vue-devtools
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://github.com/vuejs/vue/pull/7730
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://github.com/vuejs/vuex/issues/1505
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.38.1/LICENSE
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/1008
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/1128
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/1130
Source: chromecache_171.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/280
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/306
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/339
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/475
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/677
Source: chromecache_171.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/86#issuecomment-115759028
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://hacks.mozilla.org/2013/04/detecting-touch-its-the-why-not-the-how/
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/dom.html#phrasing-content
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/indices.html#elements-3
Source: chromecache_174.2.dr, chromecache_158.2.dr	String found in binary or memory: https://on24static.akamaized.net
Source: chromecache_158.2.dr	String found in binary or memory: https://on24static.akamaized.net/view/react-console/build/wrapperHelper.js?b=58.0.0
Source: chromecache_171.2.dr	String found in binary or memory: https://rwaldron.github.io/proposal-math-extensions/
Source: chromecache_176.2.dr, chromecache_173.2.dr	String found in binary or memory: https://services.on24.com/
Source: chromecache_176.2.dr, chromecache_173.2.dr	String found in binary or memory: https://services.on24.com/api/
Source: chromecache_175.2.dr	String found in binary or memory: https://stackoverflow.com/questions/16443642/scroll-bars-showing-up-when-not-expecting-them-line-hei
Source: chromecache_175.2.dr	String found in binary or memory: https://stackoverflow.com/questions/35111090/text-in-a-flex-container-doesnt-wrap-in-ie11
Source: chromecache_130.2.dr, chromecache_150.2.dr	String found in binary or memory: https://support.on24.com/hc/en-us/articles/21420753748891-Webcast-Elite-Breakout-Rooms-Troubleshooti
Source: chromecache_130.2.dr, chromecache_150.2.dr	String found in binary or memory: https://support.on24.com/hc/en-us/articles/21420762487067-Forums-Troubleshooting
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot-aec
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-advancestringindex
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.every
Source: chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.filter
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.find
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.findIndex
Source: chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.foreach
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.includes
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.indexof
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.map
Source: chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.reduce
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.reduceright
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.some
Source: chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-arrayspeciescreate
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-function-instances-name
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-get-regexp.prototype.flags
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-getmethod
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-getsubstitution
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-hasownproperty
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-isarray
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-iscallable
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-isconstructor
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-lengthofarraylike
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-math.trunc
Source: chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.assign
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.create
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.defineproperties
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.defineproperty
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.getownpropertydescriptor
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.getownpropertynames
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.keys
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.prototype.propertyisenumerable
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-ordinarytoprimitive
Source: chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-parseint-string-radix
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-regexp.prototype-
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-regexp.prototype.exec
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-regexpexec
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-requireobjectcoercible
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.codepointat
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.match
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.trim
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.trimend
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.trimstart
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-tointegerorinfinity
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-tolength
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-toobject
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-toprimitive
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-topropertykey
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.github.io/String.prototype.matchAll/
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-advancestringindex
Source: chromecache_171.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-regexp.prototype-
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-regexpexec
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-string.prototype.match
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-string.prototype.search
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-toindex
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.github.io/proposal-flatMap/#sec-Array.prototype.flatMap
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.github.io/proposal-flatMap/#sec-Array.prototype.flatten
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.github.io/proposal-flatMap/#sec-FlattenIntoArray
Source: chromecache_171.2.dr	String found in binary or memory: https://tc39.github.io/proposal-setmap-offrom/
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.github.io/proposal-setmap-offrom/#sec-map.from
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.github.io/proposal-setmap-offrom/#sec-map.of
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.github.io/proposal-setmap-offrom/#sec-set.from
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.github.io/proposal-setmap-offrom/#sec-set.of
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.github.io/proposal-setmap-offrom/#sec-weakmap.from
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.github.io/proposal-setmap-offrom/#sec-weakmap.of
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.github.io/proposal-setmap-offrom/#sec-weakset.from
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://tc39.github.io/proposal-setmap-offrom/#sec-weakset.of
Source: chromecache_176.2.dr, chromecache_173.2.dr	String found in binary or memory: https://videoservice.on24.com/
Source: chromecache_176.2.dr, chromecache_173.2.dr	String found in binary or memory: https://vids-chat.on24.com
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://vuejs.org/guide/deployment.html
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://vuejs.org/guide/list.html#key
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://vuejs.org/v2/api/#data
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://vuejs.org/v2/guide/components.html#data-Must-Be-a-Function
Source: chromecache_166.2.dr, chromecache_171.2.dr	String found in binary or memory: https://vuejs.org/v2/guide/reactivity.html#Declaring-Reactive-Properties.
Source: chromecache_176.2.dr, chromecache_173.2.dr	String found in binary or memory: https://wcc.on24.com/secured/srvc/api/
Source: chromecache_153.2.dr, chromecache_169.2.dr	String found in binary or memory: https://www.on24.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 63405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63348 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 63325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63383 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 63508 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63463 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63520 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63441 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63336 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63521 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63395 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63427 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63475 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63509 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63499 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63518 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63338 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63393 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63326 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63361 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63415 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63371 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63426 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63403 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63519 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63465 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63405
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63404
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63525
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63407
Source: unknown	Network traffic detected: HTTP traffic on port 63357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63406
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63409
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63408
Source: unknown	Network traffic detected: HTTP traffic on port 63334 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63437 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63520
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63401
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63522
Source: unknown	Network traffic detected: HTTP traffic on port 63523 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63400
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63521
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63403
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63524
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63402
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63523
Source: unknown	Network traffic detected: HTTP traffic on port 63322 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63431 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63408 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63460 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63368 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63416
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63415
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63418
Source: unknown	Network traffic detected: HTTP traffic on port 63419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63417
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63419
Source: unknown	Network traffic detected: HTTP traffic on port 63495 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63410
Source: unknown	Network traffic detected: HTTP traffic on port 63392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63412
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63411
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63414
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63413
Source: unknown	Network traffic detected: HTTP traffic on port 63323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63449 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63427
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63426
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63429
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63428
Source: unknown	Network traffic detected: HTTP traffic on port 63381 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63494 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63421
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63420
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63423
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63422
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63425
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63424
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 63345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63438
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63437
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63319
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63439
Source: unknown	Network traffic detected: HTTP traffic on port 63501 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63356 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63438 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63472 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63430
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63432
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63431
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63434
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63433
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63436
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63435
Source: unknown	Network traffic detected: HTTP traffic on port 63430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63418 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63358 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63379 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63346 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63503
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63505
Source: unknown	Network traffic detected: HTTP traffic on port 63439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63508
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63507
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63509
Source: unknown	Network traffic detected: HTTP traffic on port 63391 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63500
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63502
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63501
Source: unknown	Network traffic detected: HTTP traffic on port 63406 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63511 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63515
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63517
Source: unknown	Network traffic detected: HTTP traffic on port 63417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63519
Source: unknown	Network traffic detected: HTTP traffic on port 63380 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63518
Source: unknown	Network traffic detected: HTTP traffic on port 63451 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63511
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63510
Source: unknown	Network traffic detected: HTTP traffic on port 63522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63513
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63512
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63490
Source: unknown	Network traffic detected: HTTP traffic on port 63319 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63371
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63492
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63370
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63491
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63373
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63494
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63372
Source: unknown	Network traffic detected: HTTP traffic on port 63457 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63493
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63492 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63489
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63367
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63380
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63382
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63381
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63384
Source: unknown	Network traffic detected: HTTP traffic on port 63343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63383
Source: unknown	Network traffic detected: HTTP traffic on port 63389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63446 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63375
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63496
Source: unknown	Network traffic detected: HTTP traffic on port 63354 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63374
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63495
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63377
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63498
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63376
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63379
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63378
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63499
Source: unknown	Network traffic detected: HTTP traffic on port 63411 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63391
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63390
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63393
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63392
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63395
Source: unknown	Network traffic detected: HTTP traffic on port 63342 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63394
Source: unknown	Network traffic detected: HTTP traffic on port 63365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63386
Source: unknown	Network traffic detected: HTTP traffic on port 63378 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63385
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63388
Source: unknown	Network traffic detected: HTTP traffic on port 63435 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63387
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63389
Source: unknown	Network traffic detected: HTTP traffic on port 63433 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63320 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63284
Source: unknown	Network traffic detected: HTTP traffic on port 63296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63515 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63469 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63397
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63396
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63399
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63398
Source: unknown	Network traffic detected: HTTP traffic on port 63285 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63321 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63344 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63482 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63367 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63449
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63448
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63329
Source: unknown	Network traffic detected: HTTP traffic on port 63447 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63320
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63441
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63440
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63322
Source: unknown	Network traffic detected: HTTP traffic on port 63376 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63442
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63445
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63323
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63444
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63447
Source: unknown	Network traffic detected: HTTP traffic on port 63284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63325
Source: unknown	Network traffic detected: HTTP traffic on port 63399 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63446
Source: unknown	Network traffic detected: HTTP traffic on port 63513 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63461
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63460
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63421 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63339
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63338
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63459
Source: unknown	Network traffic detected: HTTP traffic on port 63470 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63333 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63452
Source: unknown	Network traffic detected: HTTP traffic on port 63436 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63330
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63451
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63454
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63453
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63456
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63334
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63455
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63337
Source: unknown	Network traffic detected: HTTP traffic on port 63524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63457
Source: unknown	Network traffic detected: HTTP traffic on port 63432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63470
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63351
Source: unknown	Network traffic detected: HTTP traffic on port 63459 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63472
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63471
Source: unknown	Network traffic detected: HTTP traffic on port 63295 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63388 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63349
Source: unknown	Network traffic detected: HTTP traffic on port 63502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63332 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63355 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63463
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63462
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63344
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63465
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63464
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63345
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63469
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63347
Source: unknown	Network traffic detected: HTTP traffic on port 63525 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63360
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63482
Source: unknown	Network traffic detected: HTTP traffic on port 63448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63366 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63353
Source: unknown	Network traffic detected: HTTP traffic on port 63377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63474
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63473
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63476
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63475
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63357
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63478
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63356
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63477
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63479
Source: unknown	Network traffic detected: HTTP traffic on port 63386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63489 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63443 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63414 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63477 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63351 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63294 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63425 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63375 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63455 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63328 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63402 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63413 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63398 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63290
Source: unknown	Network traffic detected: HTTP traffic on port 63396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63373 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63295
Source: unknown	Network traffic detected: HTTP traffic on port 63424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63329 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63401 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63289
Source: unknown	Network traffic detected: HTTP traffic on port 63504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63330 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63364 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63491 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63385 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63445 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63490 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63397 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63479 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63423 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63363 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63505 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:63284 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.4:63285 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:63319 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.4:63320 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:63377 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@22/78@8/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1820,i,10354759190983247407,3748985830559989704,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiG9Rbj-2F-2BL5xBvCeRxrIAG77j9DkiM7Yr8M64Kg2izaa0OIZ5-2FATI-2Bc2anEPwc9wrQCD63MC6ONtwJ4SdtRTMnlVT73iHX1khCeCMxvfrJWFZE6xLgrG0WfeomHPSWGopkuujmYCDXjAoqEnyB4oApDJGaTO_sV0hy7-2BGXO3LZoFb45Ee9q2xovzSXG8XVZrbzeABE5y29PDMLq2ChSQAIHKNLazLUqewS5YZ9SPzKKABZQxE4M4JfqBBJaVIRJOU4Sh6BeF-2FTZq1GJ735ScAVdxn7RfonvJVAbLvtiFqwkqX-2F62IKr1OAohPOxBMvGUk2jA0e3czp4b-2F8ymy1eBYgp-2FaHuYw41VPqFDKnyXLCTkU3HvqNk5a9SYRWgFyoq-2BfZI2n13wiOK83-2FcmSneBQB32uHjeb5z-2F2gDfTARsRD9FRa9QhHbBeTz1oBHKHLZ-2B2UMpfjo-2FuDYqeQVClCbrjrwWivlNh2O8ah4bXzu6Hj69PJhvtHQ-3D-3D"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1820,i,10354759190983247407,3748985830559989704,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
http://fontawesome.io	0%	URL Reputation	safe
http://jqueryui.com	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-array.prototype.includes	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php	0%	URL Reputation	safe
http://kenwheeler.github.io	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-array.prototype.indexof	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.185.196	true	false	unknown
r-email.sg.on24event.com	199.83.44.68	true	false	unknown
r-event.on24.com	199.83.44.71	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
event.on24.com	unknown	unknown	false	unknown
email.sg.on24event.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://event.on24.com/wcc/r/4729291/0DA9ADCB7D49E9C260A43DC00A038CD9?mode=login&email=melinda.outlaw@johnmuirhealth.com	false	unknown
https://event.on24.com/apic/eventRegistration/EventServlet?eventid=4729291&sessionid=1&key=0DA9ADCB7D49E9C260A43DC00A038CD9&random=0.6268297194463379&filter=json	false	unknown
https://event.on24.com/apic/eventRegistration/webapi/regPage/displayElements?eventid=4729291&sessionid=1&key=0DA9ADCB7D49E9C260A43DC00A038CD9&code=registration&mode=login&random=0.5253155048612299	false	unknown
https://event.on24.com/favicon.ico	false	unknown
https://event.on24.com/view/react-console/build/24.4.1/const/index.js	false	unknown
https://event.on24.com/view/WidgetLib/builds/default/libs/media/bitdash/8.24.0/bitmovinplayer.prod.gz.js	false	unknown
https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiG9Rbj-2F-2BL5xBvCeRxrIAG77j9DkiM7Yr8M64Kg2izaa0OIZ5-2FATI-2Bc2anEPwc9wrQCD63MC6ONtwJ4SdtRTMnlVT73iHX1khCeCMxvfrJWFZE6xLgrG0WfeomHPSWGopkuujmYCDXjAoqEnyB4oApDJGaTO_sV0hy7-2BGXO3LZoFb45Ee9q2xovzSXG8XVZrbzeABE5y29PDMLq2ChSQAIHKNLazLUqewS5YZ9SPzKKABZQxE4M4JfqBBJaVIRJOU4Sh6BeF-2FTZq1GJ735ScAVdxn7RfonvJVAbLvtiFqwkqX-2F62IKr1OAohPOxBMvGUk2jA0e3czp4b-2F8ymy1eBYgp-2FaHuYw41VPqFDKnyXLCTkU3HvqNk5a9SYRWgFyoq-2BfZI2n13wiOK83-2FcmSneBQB32uHjeb5z-2F2gDfTARsRD9FRa9QhHbBeTz1oBHKHLZ-2B2UMpfjo-2FuDYqeQVClCbrjrwWivlNh2O8ah4bXzu6Hj69PJhvtHQ-3D-3D	false	unknown
https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4729291&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=0DA9ADCB7D49E9C260A43DC00A038CD9&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=710763113&contenttype=A&mediametricsessionid=612789951&mediametricid=6655886&usercd=710763113&mode=launch	false	unknown
https://event.on24.com/apic/eventRegistration/webapi/regPage/displayElements?eventid=4729291&sessionid=1&key=0DA9ADCB7D49E9C260A43DC00A038CD9&code=lobby&mode=login&random=0.9164374412364669	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/mozilla/rhino/issues/346	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://github.com/vuejs/vuex/issues/1505	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://tc39.es/ecma262/#sec-toobject	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
http://fontawesome.io	chromecache_175.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-arrayspeciescreate	chromecache_171.2.dr	false		unknown
http://www.fyneworks.com/jquery/xml-to-json/	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://tc39.github.io/proposal-setmap-offrom/#sec-weakmap.of	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://vuejs.org/guide/list.html#key	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://tc39.es/ecma262/#sec-object.getownpropertydescriptor	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://github.com/zloirock/core-js	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://tc39.es/ecma262/#sec-object.prototype.propertyisenumerable	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://html.spec.whatwg.org/multipage/indices.html#elements-3	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
http://jqueryui.com	chromecache_166.2.dr, chromecache_171.2.dr, chromecache_175.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype.includes	chromecache_166.2.dr, chromecache_171.2.dr	false	URL Reputation: safe	unknown
http://bitmovin.com	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://tc39.es/ecma262/#sec-string.prototype.trim	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
http://github.com/kenwheeler/slick	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://github.com/rwaldron/tc39-notes/blob/master/es6/2014-09/sept-25.md#510-globalasap-for-enqueui	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://github.com/tc39/proposal-string-pad-start-end	chromecache_171.2.dr	false		unknown
https://tc39.es/ecma262/#sec-hasownproperty	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://creativemarket.com/blog/the-missing-guide-to-font-formats)	chromecache_175.2.dr	false		unknown
https://github.com/tc39/proposal-object-getownpropertydescriptors	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://github.com/tc39/proposal-array-filtering	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_166.2.dr, chromecache_171.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype.filter	chromecache_171.2.dr	false		unknown
http://stackoverflow.com/a/28210364/1070244	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://vuejs.org/guide/deployment.html	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://tc39.github.io/proposal-setmap-offrom/#sec-map.from	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://vuejs.org/v2/api/#data	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://tc39.es/ecma262/#sec-object.defineproperties	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
http://jfbastien.github.io/papers/Math.signbit.html	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://tc39.es/ecma262/#sec-tointegerorinfinity	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://tc39.github.io/ecma262/#sec-toindex	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://tc39.es/ecma262/#sec-requireobjectcoercible	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://tc39.github.io/proposal-flatMap/#sec-Array.prototype.flatten	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://github.com/es-shims/es5-shim/issues/150	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://tc39.github.io/proposal-setmap-offrom/#sec-set.of	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://github.com/tc39/proposal-promise-finally	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://github.com/es-shims.	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://hacks.mozilla.org/2013/04/detecting-touch-its-the-why-not-the-how/	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://tc39.github.io/proposal-setmap-offrom/#sec-weakset.of	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://html.spec.whatwg.org/multipage/dom.html#phrasing-content	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://developer.mozilla.org/en-US/docs/Web/HTTP/Browser_detection_using_the_user_agent	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://tc39.es/ecma262/#sec-getmethod	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://github.com/zloirock/core-js/issues/306	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://tc39.github.io/proposal-setmap-offrom/#sec-weakmap.from	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
http://kenwheeler.github.io	chromecache_166.2.dr, chromecache_171.2.dr	false	URL Reputation: safe	unknown
https://github.com/vuejs/vue/pull/7730	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
http://jqueryui.com/themeroller/?scope=&folderName=base&cornerRadiusShadow=8px&offsetLeftShadow=0px&	chromecache_175.2.dr	false		unknown
https://tc39.github.io/proposal-flatMap/#sec-Array.prototype.flatMap	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://github.com/vuejs/vue-devtools	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://tc39.es/ecma262/#sec-array.prototype.findIndex	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://rwaldron.github.io/proposal-math-extensions/	chromecache_171.2.dr	false		unknown
https://tc39.es/ecma262/#sec-parseint-string-radix	chromecache_171.2.dr	false		unknown
https://github.com/ljharb/proposal-is-error	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://github.com/zloirock/core-js/issues/1130	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://tc39.github.io/ecma262/#sec-advancestringindex	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://github.com/zloirock/core-js/blob/v3.38.1/LICENSE	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://tc39.es/ecma262/#sec-array.prototype.map	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://tc39.es/ecma262/#sec-array.prototype.indexof	chromecache_166.2.dr, chromecache_171.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-tolength	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://tc39.github.io/String.prototype.matchAll/	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://tc39.github.io/proposal-setmap-offrom/#sec-map.of	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
http://www.gnu.org/licenses/gpl.html	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://tc39.es/ecma262/#sec-array.prototype.reduceright	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://github.com/mathiasbynens/String.prototype.at	chromecache_171.2.dr	false		unknown
https://support.on24.com/hc/en-us/articles/21420753748891-Webcast-Elite-Breakout-Rooms-Troubleshooti	chromecache_130.2.dr, chromecache_150.2.dr	false		unknown
https://tc39.github.io/proposal-flatMap/#sec-FlattenIntoArray	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://github.com/tc39/proposal-global	chromecache_171.2.dr	false		unknown
https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot	chromecache_166.2.dr, chromecache_171.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype.foreach	chromecache_171.2.dr	false		unknown
https://tc39.es/ecma262/#sec-string.prototype.trimstart	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://github.com/zloirock/core-js/issues/677	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://tc39.es/ecma262/#sec-lengthofarraylike	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot-aec	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://tc39.es/ecma262/#sec-iscallable	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://github.com/DavidBruant/Map-Set.prototype.toJSON	chromecache_171.2.dr	false		unknown
https://github.com/zloirock/core-js/issues/1128	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://github.com/zloirock/core-js/issues/1008	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://tc39.es/ecma262/#sec-object.defineproperty	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://github.com/zloirock/core-js/issues/280	chromecache_171.2.dr	false		unknown
https://tc39.es/ecma262/#sec-math.trunc	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://code.google.com/p/v8/issues/detail?id=3509	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://github.com/kenwheeler/slick/issues/1158	chromecache_175.2.dr	false		unknown
https://github.com/paldepind/snabbdom/blob/master/LICENSE	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://gist.github.com/BrendanEich/4294d5c212a6d2254703	chromecache_171.2.dr	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=773687	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://cloudconsole.on24.com	chromecache_176.2.dr, chromecache_173.2.dr	false		unknown
https://github.com/zloirock/core-js/issues/339	chromecache_166.2.dr, chromecache_171.2.dr	false		unknown
https://videoservice.on24.com/	chromecache_176.2.dr, chromecache_173.2.dr	false		unknown
https://github.com/tc39/proposal-object-values-entries	chromecache_171.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
199.83.44.71	r-event.on24.com	United States	18742	ON24-SACUS	false
142.250.185.196	www.google.com	United States	15169	GOOGLEUS	false
199.83.44.68	r-email.sg.on24event.com	United States	18742	ON24-SACUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540702
Start date and time:	2024-10-24 01:24:11 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 42s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiG9Rbj-2F-2BL5xBvCeRxrIAG77j9DkiM7Yr8M64Kg2izaa0OIZ5-2FATI-2Bc2anEPwc9wrQCD63MC6ONtwJ4SdtRTMnlVT73iHX1khCeCMxvfrJWFZE6xLgrG0WfeomHPSWGopkuujmYCDXjAoqEnyB4oApDJGaTO_sV0hy7-2BGXO3LZoFb45Ee9q2xovzSXG8XVZrbzeABE5y29PDMLq2ChSQAIHKNLazLUqewS5YZ9SPzKKABZQxE4M4JfqBBJaVIRJOU4Sh6BeF-2FTZq1GJ735ScAVdxn7RfonvJVAbLvtiFqwkqX-2F62IKr1OAohPOxBMvGUk2jA0e3czp4b-2F8ymy1eBYgp-2FaHuYw41VPqFDKnyXLCTkU3HvqNk5a9SYRWgFyoq-2BfZI2n13wiOK83-2FcmSneBQB32uHjeb5z-2F2gDfTARsRD9FRa9QhHbBeTz1oBHKHLZ-2B2UMpfjo-2FuDYqeQVClCbrjrwWivlNh2O8ah4bXzu6Hj69PJhvtHQ-3D-3D
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@22/78@8/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.67, 142.250.186.110, 142.250.110.84, 34.104.35.123, 2.16.164.57, 2.16.164.96, 93.184.221.240, 2.16.238.156, 2.16.238.162, 192.229.221.95, 20.3.187.198, 216.58.206.42, 142.250.184.202, 142.250.185.138, 142.250.184.234, 142.250.186.74, 216.58.206.74, 142.250.186.138, 142.250.186.170, 142.250.181.234, 142.250.185.170, 216.58.212.170, 142.250.185.202, 142.250.185.106, 142.250.185.74, 172.217.16.138, 142.250.185.234, 52.165.164.15, 216.58.206.35, 172.217.16.195
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, on24static.akamaized.net, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, fonts.gstatic.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, a744.dscw10.akamai.net, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiG9Rbj-2F-2BL5xBvCeRxrIAG77j9DkiM7Yr8M64Kg2izaa0OIZ5-2FATI-2Bc2anEPwc9wrQCD63MC6ONtwJ4SdtRTMnlVT73iHX1khCeCMxvfrJWFZE6xLgrG0WfeomHPSWGopkuujmYCDXjAoqEnyB4oApDJGaTO_sV0hy7-2BGXO3LZoFb45Ee9q2xovzSXG8XVZrbzeABE5y29PDMLq2ChSQAIHKNLazLUqewS5YZ9SPzKKABZQxE4M4JfqBBJaVIRJOU4Sh6BeF-2FTZq1GJ735ScAVdxn7RfonvJVAbLvtiFqwkqX-2F62IKr1OAohPOxBMvGUk2jA0e3czp4b-2F8ymy1eBYgp-2FaHuYw41VPqFDKnyXLCTkU3HvqNk5a9SYRWgFyoq-2BfZI2n13wiOK83-2FcmSneBQB32uHjeb5z-2F2gDfTARsRD9FRa9QhHbBeTz1oBHKHLZ-2B2UMpfjo-2FuDYqeQVClCbrjrwWivlNh2O8ah4bXzu6Hj69PJhvtHQ-3D-3D

Input	Output
URL: https://event.on24.com/wcc/r/4729291/0DA9ADCB7D49E9C260A43DC00A038CD9?mode=login&email=melinda.outlaw@johnmuirhealth.com Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Click here to view document", "prominent_button_name": "LOGIN", "text_input_field_labels": [ "Email" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://event.on24.com/wcc/r/4729291/0DA9ADCB7D49E9C260A43DC00A038CD9?mode=login&email=melinda.outlaw@johnmuirhealth.com Model: claude-3-haiku-20240307	```json { "brands": [ "Surescripts", "ON24" ] }
	```json { "brands": [ "Surescripts", "ON24" ] }
URL: https://event.on24.com/wcc/r/4729291/0DA9ADCB7D49E9C260A43DC00A038CD9?mode=login&email=melinda.outlaw@johnmuirhealth.com Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "To view secured document, click here", "prominent_button_name": "Already Registered?", "text_input_field_labels": [ "First Name", "Last Name", "Email", "Company", "Job Title" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false }

URL: https://event.on24.com/wcc/r/4729291/0DA9ADCB7D49E9C260A43DC00A038CD9?mode=login&email=melinda.outlaw@johnmuirhealth.com Model: gpt-4o	```json{ "legit_domain": "surescripts.com", "classification": "known", "reasons": [ "The brand 'Surescripts' is a known brand in the healthcare and e-prescription industry.", "The URL 'event.on24.com' does not match the legitimate domain 'surescripts.com'.", "ON24 is a known platform for webinars and virtual events, which might be used by Surescripts for hosting events.", "The URL does not contain any direct reference to 'Surescripts', which raises suspicion.", "The presence of an email input field is common in phishing attempts to collect user credentials.", "The domain 'on24.com' is legitimate, but without direct association to 'Surescripts', it is hard to verify the legitimacy of the event." ], "riskscore": 6}
URL: event.on24.com Brands: Surescripts Input Fields: Email
URL: https://event.on24.com/wcc/r/4729291/0DA9ADCB7D49E9C260A43DC00A038CD9?mode=login&email=melinda.outlaw@johnmuirhealth.com Model: claude-3-haiku-20240307	```json { "brands": [ "Surescripts" ] }
	```json { "brands": [ "Surescripts" ] }
URL: https://event.on24.com/wcc/r/4729291/0DA9ADCB7D49E9C260A43DC00A038CD9?mode=login&email=melinda.outlaw@johnmuirhealth.com Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "To view secured document, click here", "prominent_button_name": "LOGIN", "text_input_field_labels": [ "Email*" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://event.on24.com/wcc/r/4729291/0DA9ADCB7D49E9C260A43DC00A038CD9?mode=login&email=melinda.outlaw@johnmuirhealth.com Model: gpt-4o	```json{ "legit_domain": "surescripts.com", "classification": "known", "reasons": [ "The brand 'Surescripts' is a known brand in the healthcare and e-prescription industry.", "The URL 'event.on24.com' does not match the legitimate domain 'surescripts.com'.", "ON24 is a known platform for webinars and virtual events, which might be used by Surescripts for hosting events.", "The URL does not contain any direct reference to 'Surescripts', which could be a sign of phishing if not verified.", "The presence of generic input fields like 'First Name', 'Last Name', 'Email', 'Company', and 'Job Title' is common for event registration but could also be used for phishing." ], "riskscore": 5}
URL: event.on24.com Brands: Surescripts Input Fields: First Name, Last Name, Email, Company, Job Title
URL: https://event.on24.com/wcc/r/4729291/0DA9ADCB7D49E9C260A43DC00A038CD9?mode=login&email=melinda.outlaw@johnmuirhealth.com Model: claude-3-haiku-20240307	```json { "brands": [ "Surescripts" ] }
	```json { "brands": [ "Surescripts" ] }
URL: https://event.on24.com/wcc/r/4729291/0DA9ADCB7D49E9C260A43DC00A038CD9?mode=login&email=melinda.outlaw@johnmuirhealth.com Model: gpt-4o	```json{ "legit_domain": "surescripts.com", "classification": "known", "reasons": [ "The brand 'Surescripts' is a known brand in the healthcare and e-prescription industry.", "The URL 'event.on24.com' does not match the legitimate domain 'surescripts.com'.", "ON24 is a known platform for webinars and virtual events, which might be used by Surescripts for hosting events.", "The URL does not contain any obvious misspellings or suspicious elements, but it does not directly associate with the Surescripts brand.", "The presence of an email input field is common for event registration, but without direct brand association, it raises caution." ], "riskscore": 6}
URL: event.on24.com Brands: Surescripts Input Fields: Email*

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 18183, version 0.0
Category:	downloaded
Size (bytes):	18183
Entropy (8bit):	7.968707064488103
Encrypted:	false
SSDEEP:	384:I4//fg0ITD67HbwYbOHum4wjYlQVBr0ey0HhsKYNFNnLm1pUA6:I4//fg9C7cH14wjUQ7rBy0BsZNLm1pU3
MD5:	849FA436DB189B8D9CF642310C72DDEF
SHA1:	9C82FD533CE939F981478C3B08787BF821FB0024
SHA-256:	8A7EC5081FC127047D44E328D4FD82CB1462F382006FFD313DF01FFF8A3276B1
SHA-512:	FC86403858E91B81752DF56EA9F343EA923A23BAAA2EEE0043711D663CF4CD11F4474F5FC1328F4F35D134C41132D15AEBCC671C63405765DE595AD405920A3E
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/clients/assets/53580/fonts/Proxima-Bold.woff
Preview:	wOFF......G.......r.......DD................BASE.......W...pfa].GDEF.......V...x.]..GPOS...D........z.^.OS/2...\...Q...`....VDMX.......L....oov.cmap..............4.cvt .......(...(....fpgm...........+.HR.gasp...............#glyf......*...E....+head..;....6...6.&.ihhea..;........$....hmtx..<.............loca..>0............maxp..@.... ... .d..name..@,...L..../=..post..Cx....... ...2prep..C...........\|.x.c`d``..b..>........<...7............l....<...6..`d`b0b0C.0h .....x..<...#.l...p...x.M.A.FP.E...l.$.)....S%....e...w...K.2RJ~...@-.F"-....(....Uo.....n..6r..w.6/......x.W}h.U........s..r^g..4.+3+..,g...9.4....H..%...... ......f..U.e..r$.......Ca18=........s.s.{.s~..{.ob.HP~6.....2.]........e^....Dl...$>.x.t~L.....Q....Q.S1....,&...cR.xIIL./)...%.c......e..b....vk.[{....~...u.Cn....k7m..,_d...:..Yna...J.....r/..,.`S&....M.u...l.....l.......og....h.6..8.n}@L{.....cKD.....zU.....z.....m..`..'..Pw.F]Qm...f.SC...Yu....V..m....m.I.o...8/....e...-.......3.j

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	6676
Entropy (8bit):	4.853417499279645
Encrypted:	false
SSDEEP:	96:sV3yoDibiwLIQ85x+xA/p+krjGOegMPMouPD8/WAsaPUIycSLGlGfEat6:MvUkP+krjGO9MPJuPDLAsaPRydGlGsH
MD5:	3D035B8CC96517CE5958017C3528F97C
SHA1:	A3987A502E3B6FDAB074143D054598497365D696
SHA-256:	FF6DD3A8151ECE3F195F7B551AA0907D732092A4A1E7B89C7B8A6592C7EF8F93
SHA-512:	FF6A1E7C78B59BA63D32C48A450E721D0E54BC234887BD0F43C4B6B434CFE52A6D330762C08F6CE9BC7657B65301DA963A442367180C5944E005B0AEEF887ECB
Malicious:	false
Reputation:	low
Preview:	var searchParams = new URLSearchParams(window.location.search);..var preventMaximize = searchParams.get('preventMaximize') === 'true';....if (!window.on24) window.on24 = {};..window.on24.clientProperties = {..// mic and hls meta data delay for chrome.. hlsMetadataThresholdTime: 5000,.. hlsAMSToMicDifference: 5000,.. meetupTroubleshootURL: 'https://support.on24.com/hc/en-us/articles/21420762487067-Forums-Troubleshooting',.. borTroubleshootURL: 'https://support.on24.com/hc/en-us/articles/21420753748891-Webcast-Elite-Breakout-Rooms-Troubleshooting',.. useVirtualParticipantList: true,.. // Buffering defaults.. failoverBasedOnPercentage: true,.. failoverBasedOnBufferEventCount: true,.. // Setting a sampling time of 1min.. bufferSamplingTime: 60000,.. // Total buffer count default set per sampling time.. totalBufferingCountThreshold: 15,.. // Total rebuffering percentage set per sampling time.. bufferPercentageThreshold: 45,.. // This controls whe

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	5.212499153364691
Encrypted:	false
SSDEEP:	24:vpb3MS6vLi9yHAJG4+9BzQdeymSdQgapkgbqT:vpoJLi9yH8G1no3mDp+
MD5:	4EAAF322533442A7BEC61B0D8619999F
SHA1:	1BA08B6357930A6C98FE358029D51D7380F5C246
SHA-256:	9480A6181B9AA45EC64B615336B9EF5A970EE640E29D8A6C361B59F474E4E31C
SHA-512:	3CD01BF1625A8E46A1E02679F1B9E878ACC24E9CE715F157519833D6DF1A1D017F8D83ECFEC842F5720FBC3125AD07170CB0733771E19D6D3806B729B442AA13
Malicious:	false
Reputation:	low
URL:	https://event.on24.com/favicon.ico
Preview:	............ .h.......(....... ..... ..........................@0..@0..@0..A1..?/..2!..&...........&...2!..?/..A1..@0..@0..@0..@0..@0..C3..3"..$...OA...x...........w..O@..$...5$..C3..@0..@0..@0..C3..-...6&..................................1 ../...C3..@0..B2../...;..........................................0...3"..B2..=,..(...............u...u..............................$...>/..'...nb..........yn..;..................................cV..*...#...........................VG..#...#...,...~.............."...4$..........~..(.......h[......=-..?/..6&................3"..9(..........}r..1 ..\|q..6%..>...@0..@0..A1..4#..6%..........6%..)...................7&..=-..A1..@0..@0..@0..;+..$...........'...!.............6%..(...C3..@0..@0..B2..3"..:)..-........$...6%..;+..............$.......2!..3"......M>...t..K<......H8..9)..B2..%...fY..............sf..L=..I:..}......pd..G7..[M..1...B2..@0..@1..$...fY.............................%...@0..7'..A1..@0..@0..A1..@0..%...=,..~............N?..%

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	5.212499153364691
Encrypted:	false
SSDEEP:	24:vpb3MS6vLi9yHAJG4+9BzQdeymSdQgapkgbqT:vpoJLi9yH8G1no3mDp+
MD5:	4EAAF322533442A7BEC61B0D8619999F
SHA1:	1BA08B6357930A6C98FE358029D51D7380F5C246
SHA-256:	9480A6181B9AA45EC64B615336B9EF5A970EE640E29D8A6C361B59F474E4E31C
SHA-512:	3CD01BF1625A8E46A1E02679F1B9E878ACC24E9CE715F157519833D6DF1A1D017F8D83ECFEC842F5720FBC3125AD07170CB0733771E19D6D3806B729B442AA13
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... ..........................@0..@0..@0..A1..?/..2!..&...........&...2!..?/..A1..@0..@0..@0..@0..@0..C3..3"..$...OA...x...........w..O@..$...5$..C3..@0..@0..@0..C3..-...6&..................................1 ../...C3..@0..B2../...;..........................................0...3"..B2..=,..(...............u...u..............................$...>/..'...nb..........yn..;..................................cV..*...#...........................VG..#...#...,...~.............."...4$..........~..(.......h[......=-..?/..6&................3"..9(..........}r..1 ..\|q..6%..>...@0..@0..A1..4#..6%..........6%..)...................7&..=-..A1..@0..@0..@0..;+..$...........'...!.............6%..(...C3..@0..@0..B2..3"..:)..-........$...6%..;+..............$.......2!..3"......M>...t..K<......H8..9)..B2..%...fY..............sf..L=..I:..}......pd..G7..[M..1...B2..@0..@1..$...fY.............................%...@0..7'..A1..@0..@0..A1..@0..%...=,..~............N?..%

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2565
Entropy (8bit):	4.3035683829932
Encrypted:	false
SSDEEP:	24:vmx7Jtw0+uY7qFxSxHxZD9KcZ62HE+VG979AWlGoN9GE+9K2WsCW9KJztZil9KpP:75nQRP8p40ou+JGKnu4lw772/CFZQ7
MD5:	42F6C8006E481C0ADC69CA864C5D95CF
SHA1:	DA4C65918206F6E50B612F44FD3A22300C14E2C3
SHA-256:	9E100739E0B79C046113EA65397C7E2100A3DBECFFBE4EDDA7AFFB282AAF6FF6
SHA-512:	573BFC2BDAED2F41C8E3A1554E9B62EE073020FD27676C360DCB08C2C05E4934F9F3C98AF3E84204B14CB3D2C47247B0F972A83B88420558F3D686DBEFEF9EAB
Malicious:	false
Reputation:	low
Preview:	if (!window.on24) window.on24 = {};....window.on24.logoDomainsIgnore = {.. 'gmail.com': true,.. 'yahoo.com': true,.. 'hotmail.com': true,.. 'aol.com': true,.. 'hotmail.co.uk': true,.. 'hotmail.fr': true,.. 'msn.com': true,.. 'yahoo.fr': true,.. 'wanadoo.fr': true,.. 'orange.fr': true,.. 'comcast.net': true,.. 'yahoo.co.uk': true,.. 'yahoo.com.br': true,.. 'yahoo.co.in': true,.. 'live.com': true,.. 'rediffmail.com': true,.. 'free.fr': true,.. 'gmx.de': true,.. 'web.de': true,.. 'yandex.ru': true,.. 'ymail.com': true,.. 'libero.it': true,.. 'outlook.com': true,.. 'uol.com.br': true,.. 'bol.com.br': true,.. 'mail.ru': true,.. 'cox.net': true,.. 'hotmail.it': true,.. 'sbcglobal.net': true,.. 'sfr.fr': true,.. 'live.fr': true,.. 'verizon.net': true,.. 'live.co.uk': true,.. 'googlemail.com': true,.. 'yahoo.es': true,.. 'ig.com.br': true,.. 'live.nl': true,.. 'bigpond.com': true,.

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text
Category:	downloaded
Size (bytes):	3793
Entropy (8bit):	4.665563207058073
Encrypted:	false
SSDEEP:	48:MzQC+PWERtOLbFuD/ooTlxbFyvN31lFN8HNfAOgWwGHVublHUAZ5vBTKjvQ1dq0g:POLu/tlxByvNTFWNwGH0lHvIydq0COH0
MD5:	97BB77D64308A621DEC4C210E23B600D
SHA1:	CC3DC0DA0E785C1F2A1626727FFACC3647D3A2D6
SHA-256:	BBD6B0B35A256201D3E47629BFCAEEDB6CB2EAA30FE802E21AE24BAAB1269736
SHA-512:	41BF76CC3CA5AD3A73ABC121849FB6B8C32B0B67B4F31DC8E7C32CD80800CB5E8EEF60D7BE19748D06315A7E9E8122FAEFFCBA3D6004E38BF9B92B7077115E7C
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/view/react-console/build/wrapperHelper.js?b=58.0.0
Preview:	(function main() {. const MAX_APPEND_ATTEMPTS = 5;. let attempt = 0;.. function getHtmlString() {. return fetch(`${customBuildPath \|\| '/view'}/react-console/build/`).then((htmlContent) => htmlContent.text());. }.. function getHtmlBlocks(htmlString) {. return {. headContent: (/<head[^>]>((.\|[\n\r]))<\/head>/im).exec(htmlString)[1],. bodyContent: (/<body[^>]>((.\|[\n\r]))<\/body>/im).exec(htmlString)[1],. };. }.. function parseHtml() {. return getHtmlString().then((htmlString) => getHtmlBlocks(htmlString));. }.. function replaceDomain(url, domain) {. const newUrl = new URL(url);. const targetUrl = new URL(domain);. newUrl.hostname = targetUrl.hostname;. return newUrl.href;. }.. function appendContent(children, parentEl) {. const cdnUrl = window.staticCDNURL \|\| '';. for (let i = 0; i < children.length; i++) {. if (children[i].tagName === 'SCRIPT') {.

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4294)
Category:	downloaded
Size (bytes):	4346
Entropy (8bit):	5.146388883818458
Encrypted:	false
SSDEEP:	96:FHDGM4mONJuRio8rkILpuAOTfWfkA+NHRZkCG:PMNJuB8rbpulWfkDlG
MD5:	AC3F1428E2E81A75D9F8823AE3F5A65F
SHA1:	AB2A1FC9EC68045FAE91B459C76CAF416973B6B9
SHA-256:	CD38F39B68C990246AD9389EECB5CD6B3273C80FD492ACC6C063A2689AF3D264
SHA-512:	1141E9BDD3E0F0FBBD3A064C3BA89B7A62BBDBB4E24785EF161FAB41B1997A367A4F8BE72565F0FF4E9FECFEE4DFCAE70BAC5F7F4AB3E8E853F51D84ABBF27BE
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/view/react-console/build/24.4.1/static/css/main.dbdfb501.chunk.gz.css
Preview:	#pegasus-left-panel{div[class^=TileDropDownstyles__Wrapper]{display:none}}@font-face{font-family:"geneva";src:url(/view/react-console/build/24.4.1/static/media/geneva.71f5cc40.woff2)}#ot-sdk-btn-floating{display:none}#menu-container{div:nth-child(2){display:none}}.button{padding:8px 12px!important;height:32px!important;font-size:14px!important;line-height:16px!important;font-weight:500!important}div[data-testid=window-breakout-room-join],div[data-testid=window-meetup]{display:block!important}#main-console-container.meetup-maximized div[data-testid=window-meetup]{-webkit-transform:translate(48px)!important;transform:translate(48px)!important;width:calc(100% - 96px)!important;height:calc(100% - 90px)!important}.react-draggable #active-meetup-room div[class=RoomHeader-module--room_header]{display:none}.react-draggable #active-breakout-room div[class=JoinPanel-module--brk_main-join_panel-content--],.react-draggable #active-breakout-room div[class^=JoinPanel-module--brk_main-join_panel-co

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2565
Entropy (8bit):	4.3035683829932
Encrypted:	false
SSDEEP:	24:vmx7Jtw0+uY7qFxSxHxZD9KcZ62HE+VG979AWlGoN9GE+9K2WsCW9KJztZil9KpP:75nQRP8p40ou+JGKnu4lw772/CFZQ7
MD5:	42F6C8006E481C0ADC69CA864C5D95CF
SHA1:	DA4C65918206F6E50B612F44FD3A22300C14E2C3
SHA-256:	9E100739E0B79C046113EA65397C7E2100A3DBECFFBE4EDDA7AFFB282AAF6FF6
SHA-512:	573BFC2BDAED2F41C8E3A1554E9B62EE073020FD27676C360DCB08C2C05E4934F9F3C98AF3E84204B14CB3D2C47247B0F972A83B88420558F3D686DBEFEF9EAB
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/view/react-console/build/24.4.1/const/logo-domains-ignore.js?b=58.0.0
Preview:	if (!window.on24) window.on24 = {};....window.on24.logoDomainsIgnore = {.. 'gmail.com': true,.. 'yahoo.com': true,.. 'hotmail.com': true,.. 'aol.com': true,.. 'hotmail.co.uk': true,.. 'hotmail.fr': true,.. 'msn.com': true,.. 'yahoo.fr': true,.. 'wanadoo.fr': true,.. 'orange.fr': true,.. 'comcast.net': true,.. 'yahoo.co.uk': true,.. 'yahoo.com.br': true,.. 'yahoo.co.in': true,.. 'live.com': true,.. 'rediffmail.com': true,.. 'free.fr': true,.. 'gmx.de': true,.. 'web.de': true,.. 'yandex.ru': true,.. 'ymail.com': true,.. 'libero.it': true,.. 'outlook.com': true,.. 'uol.com.br': true,.. 'bol.com.br': true,.. 'mail.ru': true,.. 'cox.net': true,.. 'hotmail.it': true,.. 'sbcglobal.net': true,.. 'sfr.fr': true,.. 'live.fr': true,.. 'verizon.net': true,.. 'live.co.uk': true,.. 'googlemail.com': true,.. 'yahoo.es': true,.. 'ig.com.br': true,.. 'live.nl': true,.. 'bigpond.com': true,.

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 2104805
Category:	downloaded
Size (bytes):	642061
Entropy (8bit):	7.999266146616715
Encrypted:	true
SSDEEP:	12288:M3NDEeZTtMNiW8I2ZmyfCiJew8eNAlgVltj13iNv8s/zs2axqQRLj8A/a2:MdDh5tZWx2D5AcAC3E5s2axqKn8A/V
MD5:	3C84E9E691A9608E19A62D3162B9CE2E
SHA1:	4FF82A307B7C38D9CAE321AE6A922F1BC99B590F
SHA-256:	885DB77D1A40D59D1E324041517E34C76E836996CDB1B73410A2C8E697FE8161
SHA-512:	C4E15E854E153DB8530D2B281442CE2E62A62652303D2B7186556FDB84A58B9725F93BEE1E6402C672A6487ADEA14DAA1DF34056372772A5C995CD49886E8DAD
Malicious:	false
Reputation:	low
URL:	https://event.on24.com/view/WidgetLib/builds/default/libs/media/bitdash/8.24.0/bitmovinplayer.prod.gz.js
Preview:	............r.8......=....Y..t..U!KrY.}+I..<.Z.$vR$..lk2.....y..-...P.]...}.+::-....u_..........?o..l.G...n.l5..ov..#1Oo.dw..._.n..x.Om..>/x~.C...gQ.U..\|..i..$..rQ...Q!..f!...R.....Xl.tK........Q.q...5-..\|.dY.....o._....9O.....y...<.z....l.~.<x........_.'.dL.n.l}.~m..,...N.[....i..y.O.D.l;OS.;..".;...Xf....Y......YQ.......z.S>y....w.......i^N=5...\|."..;..?.4..#.).v...e...>.y....~v......_.\|~......ag[..v5..;.s..y.e...(v>...V..".c..h/.>?..-.F#.9.....r>.m..{........G3..&z3........G...z....$........\|YT ..ca.^=.n.J.c..X...E\|$.....X....Vt\|1?R..[.v\[..f.... ^p.O..ae.......s.;..RCn.W.@J...;;./%;.(i.O3....h.3$.$..r.4z7.....e4..r..l......i%U......Z!}4.....5r...'."......~......o.....Rz..V..n...>..itj.P+\...Z^).v3.M....x.R.^/fAqy.h..D.w^.ev..j...W<{Q....<l.....Es..g.{E!.z..%Q.6JX\..r.....,..@......bV.......W..x..a..-..oj..8....4.y.l.3_A.f...j...a.._=hD...<..5..y..P.l...p.....\|..<..J..V7..\|....kk.$I.n8....`".....p.4.+hc.s..K.J...>t..Z.Z.Q.{..NZ..

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	58414
Entropy (8bit):	5.231150820580937
Encrypted:	false
SSDEEP:	768:qbjVnfbmL1JcTWaCegJ4hakT1wtv8w8/Ce8Tn7pFOaAizNlj9j/tM3pieeSSox:As/bTAi5lj9jVM3MHox
MD5:	AB9229402332653E6AA80A08828BF1BB
SHA1:	932CFA7FB9D9316315A0680160257B3D649BEFB4
SHA-256:	455F759BA4DDA6A5F86024125D1AA80C824C23CB26153A97942B07D0EA89B202
SHA-512:	2EB25F71AA0328EC87301F75A2F3B26D0343EF82FD28486812CD247AB40113906A7AEEE4F54EB578B378F3ABC8F24FBEB4B372EC58E236B2677B122CBF90C719
Malicious:	false
Reputation:	low
Preview:	{"event":{"id":"4729291","name":"null","description":"October 2024 Epic Spotlight Webinar: Change of Vendor, a Necessary Evil","localelanguagecode":"en","localecountrycode":"null","clientid":"53580","clientname":"Surescripts","displaytimezone":"Eastern Daylight Time","displaytimezoneshort":"EDT","goodafter":"1729616400000","playerurl":"https://event.on24.com/eventRegistration/console/EventConsoleNG.jsp?uimode=nextgeneration","registrationurl":"https://event.on24.com/eventRegistration/EventLobbyServlet?target=reg30.jsp","campaignCode":"null","itemsOfInterest":"null","formattedeventdate":"Tuesday, October 22, 2024 - 01:00 PM Eastern Daylight Time","localizedeventdate":"Available On Demand","localizedeventtime":"","lockRegScheduleOn":"true","isinarchiveperiod":"true","localizedarchivestartdate":"Tuesday, October 22, 2024","localizedarchivestarttime":"2:30 PM Eastern Daylight Time","localizedarchiveenddate":"Wednesday, October 22, 2025","localizedarchiveendtime":"2:30 PM Eastern Daylight T

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5809
Entropy (8bit):	5.014054206463842
Encrypted:	false
SSDEEP:	96:c3ElErh1/wPDjcPwoMP38kPbHkPoLl/5iLP5LrkPYmeLmQfF3jVOgVddzL7/NfCg:c3Eloh1/cX4DIsQLQ450JQ6iQfF3x7TZ
MD5:	BEA9112A17EA23BF8DEA0B497BF1089C
SHA1:	0FC789DD8FF4F7D67953E986EACBEC58A957BAFA
SHA-256:	D7488DCEC9C3CC922BA6314E09C50B530F469548CC1B78FBDF60F8D54B514D6A
SHA-512:	0EED40F58A38206FEE6A45FFE31796067B5927039228E29D619A6DE6531ABB1DCAE5E756AE36993BCBF5370C54EF36DE78572FD987A7C7467C3FF0DF7122CB4C
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/view/react-console/build/24.4.1/asset-manifest.json?ms=1729725987213
Preview:	{.. "files": {.. "main.css": "/view/react-console/build/24.4.1/static/css/main.dbdfb501.chunk.css",.. "main.js": "/view/react-console/build/24.4.1/static/js/main.16c4da24.chunk.js",.. "main.js.map": "/view/react-console/build/24.4.1/static/js/main.16c4da24.chunk.js.map",.. "runtime-main.js": "/view/react-console/build/24.4.1/static/js/runtime-main.d6e42c26.js",.. "runtime-main.js.map": "/view/react-console/build/24.4.1/static/js/runtime-main.d6e42c26.js.map",.. "static/css/2.73d5d984.chunk.css": "/view/react-console/build/24.4.1/static/css/2.73d5d984.chunk.css",.. "static/js/2.92f0ac71.chunk.js": "/view/react-console/build/24.4.1/static/js/2.92f0ac71.chunk.js",.. "static/js/2.92f0ac71.chunk.js.map": "/view/react-console/build/24.4.1/static/js/2.92f0ac71.chunk.js.map",.. "static/js/3.fc03352c.chunk.js": "/view/react-console/build/24.4.1/static/js/3.fc03352c.chunk.js",.. "static/js/3.fc03352c.chunk.js.map": "/view/react-console/build/24.4.1/static/js/3.fc03

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 1920x400, components 3
Category:	dropped
Size (bytes):	340427
Entropy (8bit):	7.978267035625038
Encrypted:	false
SSDEEP:	6144:btwZYQv3vY+CRN6R3pMh2hjAR8ZQ1C3MbpBMDrOD/C5CT0geL6AuX:btwZD/YLURZC2jo1C3gpBMfk/MTgeL6x
MD5:	7EC7AAF3235A25A2A9A38B7B1BE5FD24
SHA1:	9CC59E0F9F32074BC905EF36E69FEA4AABEECEC4
SHA-256:	BE95E67F1C82972313B7349990D95E791BE4872001696EDBF97B31A1F02755CD
SHA-512:	FF5C0CA3FFEA011C914BB81279FBF02BDBB7A9FD3191319C44261181C26BD82CF5CF67289B86F823E1FA1647D247600F5083E07A239E80A849B04CDE2FEDCF41
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 1920x400, components 3
Category:	downloaded
Size (bytes):	340427
Entropy (8bit):	7.978267035625038
Encrypted:	false
SSDEEP:	6144:btwZYQv3vY+CRN6R3pMh2hjAR8ZQ1C3MbpBMDrOD/C5CT0geL6AuX:btwZD/YLURZC2jo1C3gpBMfk/MTgeL6x
MD5:	7EC7AAF3235A25A2A9A38B7B1BE5FD24
SHA1:	9CC59E0F9F32074BC905EF36E69FEA4AABEECEC4
SHA-256:	BE95E67F1C82972313B7349990D95E791BE4872001696EDBF97B31A1F02755CD
SHA-512:	FF5C0CA3FFEA011C914BB81279FBF02BDBB7A9FD3191319C44261181C26BD82CF5CF67289B86F823E1FA1647D247600F5083E07A239E80A849B04CDE2FEDCF41
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/event/47/29/29/1/rt/1/logo/event/15325_epicwebinaron24banner.jpg?t=864862980000
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	19888
Entropy (8bit):	4.800559614212612
Encrypted:	false
SSDEEP:	192:44fvf8SvqKLJCTkVysZU56+HV3LBBP2DYTUfjB/YpjxY7UHyCa24UXcb3y9Q0:4t33l/7r9j
MD5:	6F925954DD604BA52EB2EF84F64D228C
SHA1:	B36172D3EA8E46B050905DD1F54CDB7CEA51F202
SHA-256:	5934F877C2D3E9DD766BB33D70F92B093F6F52D1E1C489383FDED3E7003E5326
SHA-512:	C220DA5A1F5EF8F0A95B48AD60C9907301DD1CD5BD8E52C53C2535209A9F448E9B4BB9C80C4529DCF5E75DAF6B60EA97612BE49809410248030FDCFB7DF979DD
Malicious:	false
Reputation:	low
URL:	https://event.on24.com/apic/eventRegistration/webapi/regPage/displayElements?eventid=4729291&sessionid=1&key=0DA9ADCB7D49E9C260A43DC00A038CD9&code=registration&mode=login&random=0.5253155048612299
Preview:	{"event":4729291,"session":1,"success":true,"errorMessage":null,"displayelement":[{"displayElementID":"240445291","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"#ffffff","displayElementValueCode":"reg_bg_color","validationTypeCode":"none","displaySequence":"0","topOffset":"-1","leftOffset":"-1","height":"-1","width":"-1","mediaURLID":"-1","index":"0","bottomPadding":12,"displaytypecode":"registration","displayelementoptioninfo":{"event":"4729291","session":"1"}},{"displayElementID":"240445292","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"Y","displayElementValueCode":"event_logo","validationTypeCode":"none","displaySequence":"1","topOffset":"-1","leftOffset":"-1","height":"-1","width":"-1","mediaURLID":"329032943","index":"1","bottomPadding":12,"displaytypecode":"registration","displayelementoptioninfo":{"event":"4729291","session":"1"}},{"display

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 500, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	320266
Entropy (8bit):	7.996060099739111
Encrypted:	true
SSDEEP:	6144:q1crxI/DrS61ORMJpOs1dH+n/ctG5uTZ/Gn8FsDST0z+lzqAez:t+n1OR68s1QUsuT1GEsDSTm+lm5
MD5:	6E26E36E7306861D1B23DD5B5B5F3B97
SHA1:	2FE82EBA3F2CCB0B0AF6B894E598457CF6527531
SHA-256:	7E2F43B9AC5E4DFF568AC0798C0EA8741B1B48B808AADC68185C4667B0900077
SHA-512:	39B3804D015C449B5EEAD4463D795423440473D543F76AEEB0A3912886EF870278CE8997D727DAF19FB2976CD6C208CEAE738AB03D3E584F6EDEF192721DCDD2
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/event/47/29/29/1/rt/1/images/speakerbiowidgetimage1723745049167/slide1.png?t=864862980000
Preview:	.PNG........IHDR.............D.H.....sRGB.........eXIfMM..............................J...........R.(...........i.........Z.......`.......`..............................................k.OD....pHYs..........+....@.IDATx..W.$I....GFF.....d...v.w.[.....z...j?.^...D..,....=.]...g..._...TU.t.n.LZe....)355uss.l.o.d2.LH..r......l.2f.....,..y....K...r6....$../3../..l....6.\.F..?.l&G[X..r.d.4T...\|.....r.....Z.K`r..?B.U.8tIA....x.....b.......Z....2.Ef.J.c..a...,j.,.d.ZU8....6...]..8.D.^.-....M.E.$fa&'V.\.....D(..%.....,..t..9..T).f.9..],a.e......z..TE..e.'.:././(.X.O..C.Q..Zl.T....._....D..9.9.%.@B.-..?.....!^]:.... n/~o5.#.:.a\..%..6`o..3..X.W0..V..$3.c\|..1.h.Q..h6.......&..xI.d...Q.%.t^.....2fe.d.:-...]~.....`.. ."3..y....'h.P... x....\|.E5VB...Oj2...Dr...oS...@[....Pf.......b.<.......9....'.S.8Z....x..X...a2.......z.kZ..$.0.76?.......E.....<.7j.8.n...ys1 F.AT.)p.Y.hh...@.#r`..Ia....h.@.8.g.Sq...,#...Y..........!2....$r..\.a.19C....T...).P%..LU.0.....'0.;^...5

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3341), with CRLF line terminators
Category:	downloaded
Size (bytes):	3392
Entropy (8bit):	5.3360159371834746
Encrypted:	false
SSDEEP:	96:E6Fhb6+CBiTlU3UcR8dA/TLmohpZmqX6b5:3b6+CITlU3UcydsT9pMa6b5
MD5:	97C347B7E994271D08B0C8470DAAE8E2
SHA1:	C63A9E1AA69EB8BCE7D3BA7D80CA04BC70A1B41A
SHA-256:	063168ECCF82BD8A291AB4EA5105A5036254086EE1826628DF977DC7B42073BC
SHA-512:	CA5D08927A58D5B91D62B523BBB11DB32C41D419F9AEC8DE91BC519980E80B9FFA4039E0A3D0932911FC65E56C09859441078E309C849A757402891B2E34323F
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/view/react-console/build/24.4.1/static/js/runtime-main.d6e42c26.js
Preview:	!function(e){function t(t){for(var n,o,c=t[0],i=t[1],l=t[2],f=0,d=[];f<c.length;f++)o=c[f],Object.prototype.hasOwnProperty.call(a,o)&&a[o]&&d.push(a[o][0]),a[o]=0;for(n in i)Object.prototype.hasOwnProperty.call(i,n)&&(e[n]=i[n]);for(s&&s(t);d.length;)d.shift()();return u.push.apply(u,l\|\|[]),r()}function r(){for(var e,t=0;t<u.length;t++){for(var r=u[t],n=!0,o=1;o<r.length;o++){var i=r[o];0!==a[i]&&(n=!1)}n&&(u.splice(t--,1),e=c(c.s=r[0]))}return e}var n={},o={1:0},a={1:0},u=[];function c(t){if(n[t])return n[t].exports;var r=n[t]={i:t,l:!1,exports:{}};return e[t].call(r.exports,r,r.exports,c),r.l=!0,r.exports}c.e=function(e){var t=[];o[e]?t.push(o[e]):0!==o[e]&&{7:1}[e]&&t.push(o[e]=new Promise((function(t,r){for(var n="static/css/"+({}[e]\|\|e)+"."+{3:"31d6cfe0",4:"31d6cfe0",5:"31d6cfe0",6:"31d6cfe0",7:"7b0168e2",8:"31d6cfe0"}[e]+".chunk.css",a=c.p+n,u=document.getElementsByTagName("link"),i=0;i<u.length;i++){var l=(s=u[i]).getAttribute("data-href")\|\|s.getAttribute("href");if("stylesheet"

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	19888
Entropy (8bit):	4.800559614212612
Encrypted:	false
SSDEEP:	192:44fvf8SvqKLJCTkVysZU56+HV3LBBP2DYTUfjB/YpjxY7UHyCa24UXcb3y9Q0:4t33l/7r9j
MD5:	6F925954DD604BA52EB2EF84F64D228C
SHA1:	B36172D3EA8E46B050905DD1F54CDB7CEA51F202
SHA-256:	5934F877C2D3E9DD766BB33D70F92B093F6F52D1E1C489383FDED3E7003E5326
SHA-512:	C220DA5A1F5EF8F0A95B48AD60C9907301DD1CD5BD8E52C53C2535209A9F448E9B4BB9C80C4529DCF5E75DAF6B60EA97612BE49809410248030FDCFB7DF979DD
Malicious:	false
Reputation:	low
Preview:	{"event":4729291,"session":1,"success":true,"errorMessage":null,"displayelement":[{"displayElementID":"240445291","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"#ffffff","displayElementValueCode":"reg_bg_color","validationTypeCode":"none","displaySequence":"0","topOffset":"-1","leftOffset":"-1","height":"-1","width":"-1","mediaURLID":"-1","index":"0","bottomPadding":12,"displaytypecode":"registration","displayelementoptioninfo":{"event":"4729291","session":"1"}},{"displayElementID":"240445292","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"Y","displayElementValueCode":"event_logo","validationTypeCode":"none","displaySequence":"1","topOffset":"-1","leftOffset":"-1","height":"-1","width":"-1","mediaURLID":"329032943","index":"1","bottomPadding":12,"displaytypecode":"registration","displayelementoptioninfo":{"event":"4729291","session":"1"}},{"display

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Category:	downloaded
Size (bytes):	77160
Entropy (8bit):	7.996509451516447
Encrypted:	true
SSDEEP:	1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2
MD5:	AF7AE505A9EED503F8B8E6982036873E
SHA1:	D6F48CBA7D076FB6F2FD6BA993A75B9DC1ECBF0C
SHA-256:	2ADEFCBC041E7D18FCF2D417879DC5A09997AA64D675B7A3C4B6CE33DA13F3FE
SHA-512:	838FEFDBC14901F41EDF995A78FDAC55764CD4912CCB734B8BEA4909194582904D8F2AFDF2B6C428667912CE4D65681A1044D045D1BC6DE2B14113F0315FC892
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/view/eventregistration/fonts/font-awesome_4.7/fonts/fontawesome-webfont.woff2?v=4.7.0
Preview:	wOF2......-h..........-.........................?FFTM.. .`..r.....(..X.6.$..p..... .....u[R.rGa......'.=.:..&..=r........].t..E.n.......1F...@....\|....f.m.`.$..@d[BQ.$([U<+(..@P.5..`....>.P..;.(..1..l..h...)..Yy..Ji......\|%..^..G..3..n........D..p\Yr .L.P.....t.)......6R.^"S.L~.YR.CXR...4...F.y\[..7n..\|.s.q..M..%K......,.....L.t.'....M.,..c..+b....O.s.^.$...z...m...h&gb...v.....'..6.:....s.m.b.1.m0"....*V.....c.$,0ATPT.1.....<..;...`..'.H.?.s.:..ND.....I..$..T..[..b4........,....bl6...IL.i}.&.4.m,'....#....Rw..bu..,K......v....m_-...\H....HH.......?...m..9P...)9.J..$.....8......~.;.r..n.=$.....Nddn.!'....;...8..'.N...!.-..J.........X.=.,......"`:....... {......K!'...-FH....#$~.Z_.......N5VU8F....%.P..........Cp..$.Q.......r.....k.k...3...:R.%....2{.....h%.)8..........ILK.6v.#......,;.6..N.2.hv...........OO..t#....xT..Bf....q^.#....?{.5b.I..%-WZ..b.A...^.1..n5.....NQ.Y'.........S.....!t" .`b3..%....35....fv;....l..9.:jgf?gr..p.x. ..\|.. $. e.

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	7339
Entropy (8bit):	4.757132560201604
Encrypted:	false
SSDEEP:	96:t4dnrqFlaVTQSMBedFWFeg9HKgWZVpC0wQLTSNd3mkT:tQnr2+kSddAFZq/700dvoI+
MD5:	E2CC60F3501705122B6E7523858D736C
SHA1:	16AD8CBF4FCE53E326CB99D79ACDF698A472EB7B
SHA-256:	BD21C1CF1D3BF3D5770A5FDE8FB401E2B1BDEE3F9EADF3721A73DA2EF3ADEA6D
SHA-512:	E8464562E54D7E0C8D69D8E969608CB23FAF153304624FB29529EBF67F15C3CCF998F3C61A5B8A755AD05B3487563573E66B6E8F36425DDCB5B37A0FE924AEFF
Malicious:	false
Reputation:	low
URL:	https://event.on24.com/apic/eventRegistration/webapi/regPage/displayElements?eventid=4729291&sessionid=1&key=0DA9ADCB7D49E9C260A43DC00A038CD9&code=lobby&mode=login&random=0.9164374412364669
Preview:	{"event":4729291,"session":1,"success":true,"errorMessage":null,"displayelement":[{"displayElementID":"240445260","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"#ffffff","displayElementValueCode":"lobby_bg_color","validationTypeCode":"none","displaySequence":"0","topOffset":"-1","leftOffset":"-1","height":"-1","width":"-1","mediaURLID":"-1","index":"0","bottomPadding":5,"displaytypecode":"lobby","displayelementoptioninfo":{"event":"4729291","session":"1"}},{"displayElementID":"240445261","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"Y","displayElementValueCode":"event_logo","validationTypeCode":"none","displaySequence":"1","topOffset":"-1","leftOffset":"-1","height":"-1","width":"-1","mediaURLID":"329032943","index":"1","bottomPadding":5,"displaytypecode":"lobby","displayelementoptioninfo":{"event":"4729291","session":"1"}},{"displayElementID":"24

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HoUinYn:IUyY
MD5:	903747EA4323C522742842A52CE710C9
SHA1:	9F806EA4288867A31A4AD53AC171AA4029DF182B
SHA-256:	4BD8B60F91849C936AE45615145A7B7BE2CF803322A30BABBAE7267A142CA5BB
SHA-512:	EEF73DC29A38ED70FFCFC321931BCB5B5A29FAAC356E8F6D84F57C532EEF44AE75021C341CF7DAE26B8211924A1C0E0EC4735F6BFC4AF3970A48EB63BFB7895F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkOx02xpAbBNxIFDYOoWz0=?alt=proto
Preview:	CgkKBw2DqFs9GgA=

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 500, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	320266
Entropy (8bit):	7.996060099739111
Encrypted:	true
SSDEEP:	6144:q1crxI/DrS61ORMJpOs1dH+n/ctG5uTZ/Gn8FsDST0z+lzqAez:t+n1OR68s1QUsuT1GEsDSTm+lm5
MD5:	6E26E36E7306861D1B23DD5B5B5F3B97
SHA1:	2FE82EBA3F2CCB0B0AF6B894E598457CF6527531
SHA-256:	7E2F43B9AC5E4DFF568AC0798C0EA8741B1B48B808AADC68185C4667B0900077
SHA-512:	39B3804D015C449B5EEAD4463D795423440473D543F76AEEB0A3912886EF870278CE8997D727DAF19FB2976CD6C208CEAE738AB03D3E584F6EDEF192721DCDD2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............D.H.....sRGB.........eXIfMM..............................J...........R.(...........i.........Z.......`.......`..............................................k.OD....pHYs..........+....@.IDATx..W.$I....GFF.....d...v.w.[.....z...j?.^...D..,....=.]...g..._...TU.t.n.LZe....)355uss.l.o.d2.LH..r......l.2f.....,..y....K...r6....$../3../..l....6.\.F..?.l&G[X..r.d.4T...\|.....r.....Z.K`r..?B.U.8tIA....x.....b.......Z....2.Ef.J.c..a...,j.,.d.ZU8....6...]..8.D.^.-....M.E.$fa&'V.\.....D(..%.....,..t..9..T).f.9..],a.e......z..TE..e.'.:././(.X.O..C.Q..Zl.T....._....D..9.9.%.@B.-..?.....!^]:.... n/~o5.#.:.a\..%..6`o..3..X.W0..V..$3.c\|..1.h.Q..h6.......&..xI.d...Q.%.t^.....2fe.d.:-...]~.....`.. ."3..y....'h.P... x....\|.E5VB...Oj2...Dr...oS...@[....Pf.......b.<.......9....'.S.8Z....x..X...a2.......z.kZ..$.0.76?.......E.....<.7j.8.n...ys1 F.AT.)p.Y.hh...@.#r`..Ia....h.@.8.g.Sq...,#...Y..........!2....$r..\.a.19C....T...).P%..LU.0.....'0.;^...5

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	6676
Entropy (8bit):	4.853417499279645
Encrypted:	false
SSDEEP:	96:sV3yoDibiwLIQ85x+xA/p+krjGOegMPMouPD8/WAsaPUIycSLGlGfEat6:MvUkP+krjGO9MPJuPDLAsaPRydGlGsH
MD5:	3D035B8CC96517CE5958017C3528F97C
SHA1:	A3987A502E3B6FDAB074143D054598497365D696
SHA-256:	FF6DD3A8151ECE3F195F7B551AA0907D732092A4A1E7B89C7B8A6592C7EF8F93
SHA-512:	FF6A1E7C78B59BA63D32C48A450E721D0E54BC234887BD0F43C4B6B434CFE52A6D330762C08F6CE9BC7657B65301DA963A442367180C5944E005B0AEEF887ECB
Malicious:	false
Reputation:	low
URL:	https://event.on24.com/view/react-console/build/24.4.1/const/index.js
Preview:	var searchParams = new URLSearchParams(window.location.search);..var preventMaximize = searchParams.get('preventMaximize') === 'true';....if (!window.on24) window.on24 = {};..window.on24.clientProperties = {..// mic and hls meta data delay for chrome.. hlsMetadataThresholdTime: 5000,.. hlsAMSToMicDifference: 5000,.. meetupTroubleshootURL: 'https://support.on24.com/hc/en-us/articles/21420762487067-Forums-Troubleshooting',.. borTroubleshootURL: 'https://support.on24.com/hc/en-us/articles/21420753748891-Webcast-Elite-Breakout-Rooms-Troubleshooting',.. useVirtualParticipantList: true,.. // Buffering defaults.. failoverBasedOnPercentage: true,.. failoverBasedOnBufferEventCount: true,.. // Setting a sampling time of 1min.. bufferSamplingTime: 60000,.. // Total buffer count default set per sampling time.. totalBufferingCountThreshold: 15,.. // Total rebuffering percentage set per sampling time.. bufferPercentageThreshold: 45,.. // This controls whe

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	12596
Entropy (8bit):	4.757176782653038
Encrypted:	false
SSDEEP:	192:iJ7wjc1c90nUNAUJ+FKHFdLH7sVHvm62tHT9D4W1zgaeCOXiG+BcwOplgjN7G6sA:8BGZLz7s1mJSaeCDBmDDMd
MD5:	CDC1DD374F940116BA63A86691394DBC
SHA1:	69D17B6099FC7C4362F793E3754D248852793FB0
SHA-256:	A901D54EDD59210C4FDAF72EA6FADF828C1FC0385A671487E7A7A98CE6BF10F1
SHA-512:	93EBC808EBC1E4CF98A79B726BA8AF4B73210796BDE911FE93217A2BE463EA96F056BDDA9A0979C71A41F79C867B101CAA51B3E231108E4EF5E51412CA4F8F1F
Malicious:	false
Reputation:	low
Preview:	{."add.event.to.calendar": "Add this event to your calendar",."add.event.to.google.calendar.html": "Google Calendar",."add.event.to.google.calendar.image.text": "Add Event to Google Calendar",."add.event.to.google.calendar.text": "To add this event to your Google calendar, please go to this URL:",."add.event.to.outlook.calendar.html": "Outlook/iCal",."add.event.to.outlook.calendar.image.text": "Add Event to Outlook/ICal Calendar",."add.event.to.outlook.calendar.text": "To add this event to your Outlook/iCal calendar, please go to this URL:",."already.registered": "If you have previously registered for this event, please login below:",."apply.coupons": "Please apply coupons before submitting",."best_webcast_experience": "For the best webcast experience, please use",."check.box.continue": "Please check the box to continue",."chrome_browser": "Chrome Browser",."company.banner.image.text": "Company Banner",."computer.speakers.image.active": "Listen With Computer Speakers",."computer.speake

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	7339
Entropy (8bit):	4.757132560201604
Encrypted:	false
SSDEEP:	96:t4dnrqFlaVTQSMBedFWFeg9HKgWZVpC0wQLTSNd3mkT:tQnr2+kSddAFZq/700dvoI+
MD5:	E2CC60F3501705122B6E7523858D736C
SHA1:	16AD8CBF4FCE53E326CB99D79ACDF698A472EB7B
SHA-256:	BD21C1CF1D3BF3D5770A5FDE8FB401E2B1BDEE3F9EADF3721A73DA2EF3ADEA6D
SHA-512:	E8464562E54D7E0C8D69D8E969608CB23FAF153304624FB29529EBF67F15C3CCF998F3C61A5B8A755AD05B3487563573E66B6E8F36425DDCB5B37A0FE924AEFF
Malicious:	false
Reputation:	low
Preview:	{"event":4729291,"session":1,"success":true,"errorMessage":null,"displayelement":[{"displayElementID":"240445260","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"#ffffff","displayElementValueCode":"lobby_bg_color","validationTypeCode":"none","displaySequence":"0","topOffset":"-1","leftOffset":"-1","height":"-1","width":"-1","mediaURLID":"-1","index":"0","bottomPadding":5,"displaytypecode":"lobby","displayelementoptioninfo":{"event":"4729291","session":"1"}},{"displayElementID":"240445261","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"Y","displayElementValueCode":"event_logo","validationTypeCode":"none","displaySequence":"1","topOffset":"-1","leftOffset":"-1","height":"-1","width":"-1","mediaURLID":"329032943","index":"1","bottomPadding":5,"displaytypecode":"lobby","displayelementoptioninfo":{"event":"4729291","session":"1"}},{"displayElementID":"24

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (546)
Category:	downloaded
Size (bytes):	38950
Entropy (8bit):	4.718834055394851
Encrypted:	false
SSDEEP:	768:uPAZTbTKmBi6976YgYcVT0NecVTyucwBA7XQw+7w8T:3xiw
MD5:	0F042782BB77E05BAC5C67683712C17F
SHA1:	9B0DE34D75DC5448AC773D3DFFFE40DF496F72D7
SHA-256:	33C1EBC20F0BAAEE7475FD82A3F1CE7307EBFCF166010A9C4C9140A48D427C88
SHA-512:	D2518269F917086C2EC2388EC6EABF53987B6472865ABB516E7F00E8F87D2E2FDA222D5822942C70304410992836A69961052751042FF56F0D6AA35C5BF44C2E
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/view/eventregistration/24.4.1/vue_templates.html?b=0007823747865
Preview:	<div id="vueTpl">. <div id="banner" v-if="!!bannerSrc">. <img id="bannerImg" :src="bannerSrc" :alt="bannerAlt" tabindex="0" />. </div>.. <div id="contentWrapper">. <overview :d="overviewData"></overview>.. <div id="layout-container" class="flex-container". :class="registerData.is2ColLayout && registerData.isRightAlign === false ? 'swapLR' : ''">. <div id="contentLeft" v-if="!hideLeftCol">. <div id="realLeftContent" class="realContent">. <summary2 v-if="registerData.is2ColLayout" ref="summaryy" :d="summaryData"></summary2>. <summaryy v-else ref="summaryy" :d="summaryData"></summaryy>. </div>. </div>. <div id="contentRight" :class="isHybridMode() && !isLobby && urlPara.showqrcode=='y'?'showQRcode large':''">. <div id="realRightContent" class="realContent">. <register v-if="errorData.errorCode=='loginlocked' && !nee

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17982, version 0.0
Category:	downloaded
Size (bytes):	17982
Entropy (8bit):	7.971537909654202
Encrypted:	false
SSDEEP:	384:awLMPHBY67dWPjQR5ygsd+vQAXlyCmO6JVYWirw0:o77dWLNGvQAXlyROvWit
MD5:	3EC1E19BAC17DB2A3BB8DAA0D9770CBA
SHA1:	2593E6EE9E4922616DAD4F43D7C61D4E59D03A6E
SHA-256:	50F89891BF78CA38A54757A14EA755E8206BA65B760691DDB234E0C070A2AE7F
SHA-512:	D45B676DC7EA62C6345AD751364321297DB3880CB446E7453FEF2F30E377D607D00152E7C8A73DEB4CB96AD69D8419A6C7F8B528C9B2EFA19CC011AC090CD5B3
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/clients/assets/53580/fonts/Proxima-SemiBold.woff
Preview:	wOFF......F>......r4......Cx................BASE.......W...pfa].GDEF.......V...x.]..GPOS...D........z.^$OS/2...,...O...`....VDMX...\|...K....oev.cmap..............4.cvt .......(...(....fpgm...........+.HR.gasp...............#glyf......$..E../.head..:....6...6....hhea..; .......$....hmtx..;@.........8..loca..=\.........;..maxp..?8... ... .d..name..?X...R........post..B........ ...2prep..B...........\|.x.c`d``..b..>........<...7............l....<...6..`d`b0b0C.0h .....x..<...#.l...p...x.M.A.FP.E...l.$.)....S%....e...w...K.2RJ~...@-.F"-....(....Uo.....n..6r..w.6/......x.X[l.U..ff/.Nw.[..b...E.........!.1ZH..HB.J.b4.1.bBb\|.....A*IA...>4.>..../E.....4f..7.2...D.e..9s.w..w.-,...n..H.c.......f,x....X.....#.1.<.c...6dQ......r....M.f.ncCc.u.k.....>......uK.{.k....as...w#A...X... ...>..n..!.......Y.;..S.......@.I.g.S..M..X.{os.+.h..f...t.X...?.>~...s.m..%..T]...Yfl.i.FP...O.........7r..)..[..\|..7......!3n.....Ps{...9...P...#n..0o^.3..e.}.K...z.c.4....X...A....=

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	58414
Entropy (8bit):	5.231163118294143
Encrypted:	false
SSDEEP:	768:qbjVnfRmL1JcTWaCegJ4hakT1wtv8w8/Ce8Tn7pFOaAizNlj9j/tM3pieeSSo9:qs/bTAi5lj9jVM3MHo9
MD5:	E068D4E850227AF61EBC7DE84D246154
SHA1:	DBA1B8F50F6EF84161284BFA7FAE2A4D513050F6
SHA-256:	35747158A37F1E1427071CE1ACE54A3FAEEB3050B379AC35E59EBA0085E62C56
SHA-512:	5AE2FC7B0A1E5EF9D264B9D61DAB0FF1D3C6EDC3374FF268DFAFDDD62207F1D33C61E4D620AD18EE2B1D814E5E69BA297B7036137EF2587A8293C0A0CC422600
Malicious:	false
Reputation:	low
URL:	https://event.on24.com/apic/eventRegistration/EventServlet?eventid=4729291&sessionid=1&key=0DA9ADCB7D49E9C260A43DC00A038CD9&random=0.6268297194463379&filter=json
Preview:	{"event":{"id":"4729291","name":"null","description":"October 2024 Epic Spotlight Webinar: Change of Vendor, a Necessary Evil","localelanguagecode":"en","localecountrycode":"null","clientid":"53580","clientname":"Surescripts","displaytimezone":"Eastern Daylight Time","displaytimezoneshort":"EDT","goodafter":"1729616400000","playerurl":"https://event.on24.com/eventRegistration/console/EventConsoleNG.jsp?uimode=nextgeneration","registrationurl":"https://event.on24.com/eventRegistration/EventLobbyServlet?target=reg30.jsp","campaignCode":"null","itemsOfInterest":"null","formattedeventdate":"Tuesday, October 22, 2024 - 01:00 PM Eastern Daylight Time","localizedeventdate":"Available On Demand","localizedeventtime":"","lockRegScheduleOn":"true","isinarchiveperiod":"true","localizedarchivestartdate":"Tuesday, October 22, 2024","localizedarchivestarttime":"2:30 PM Eastern Daylight Time","localizedarchiveenddate":"Wednesday, October 22, 2025","localizedarchiveendtime":"2:30 PM Eastern Daylight T

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5809
Entropy (8bit):	5.014054206463842
Encrypted:	false
SSDEEP:	96:c3ElErh1/wPDjcPwoMP38kPbHkPoLl/5iLP5LrkPYmeLmQfF3jVOgVddzL7/NfCg:c3Eloh1/cX4DIsQLQ450JQ6iQfF3x7TZ
MD5:	BEA9112A17EA23BF8DEA0B497BF1089C
SHA1:	0FC789DD8FF4F7D67953E986EACBEC58A957BAFA
SHA-256:	D7488DCEC9C3CC922BA6314E09C50B530F469548CC1B78FBDF60F8D54B514D6A
SHA-512:	0EED40F58A38206FEE6A45FFE31796067B5927039228E29D619A6DE6531ABB1DCAE5E756AE36993BCBF5370C54EF36DE78572FD987A7C7467C3FF0DF7122CB4C
Malicious:	false
Reputation:	low
Preview:	{.. "files": {.. "main.css": "/view/react-console/build/24.4.1/static/css/main.dbdfb501.chunk.css",.. "main.js": "/view/react-console/build/24.4.1/static/js/main.16c4da24.chunk.js",.. "main.js.map": "/view/react-console/build/24.4.1/static/js/main.16c4da24.chunk.js.map",.. "runtime-main.js": "/view/react-console/build/24.4.1/static/js/runtime-main.d6e42c26.js",.. "runtime-main.js.map": "/view/react-console/build/24.4.1/static/js/runtime-main.d6e42c26.js.map",.. "static/css/2.73d5d984.chunk.css": "/view/react-console/build/24.4.1/static/css/2.73d5d984.chunk.css",.. "static/js/2.92f0ac71.chunk.js": "/view/react-console/build/24.4.1/static/js/2.92f0ac71.chunk.js",.. "static/js/2.92f0ac71.chunk.js.map": "/view/react-console/build/24.4.1/static/js/2.92f0ac71.chunk.js.map",.. "static/js/3.fc03352c.chunk.js": "/view/react-console/build/24.4.1/static/js/3.fc03352c.chunk.js",.. "static/js/3.fc03352c.chunk.js.map": "/view/react-console/build/24.4.1/static/js/3.fc03

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	116
Entropy (8bit):	5.059713018843135
Encrypted:	false
SSDEEP:	3:Zd/ebnagVKYPKEnkcNWxlswnci+fHI2RTy3dVlk1:X8nagYYnlWrswD+fHIGkp+
MD5:	4F3F00634A27E2A0F86F66418DB79BB0
SHA1:	6C55796F0663D1C7C6858D07146E93C3C54970D9
SHA-256:	51363CA966060FFB55DAB0DE4BCEE3279C6FA5CDF2F899323FB476CBBE7F9E20
SHA-512:	A57C36DFC359F7D9A95FDED89146533D14A42257D84A4E2D3B2E1C701F399D23D358313E120062167C6C85C34C8E428475613C4B3EA847A86E930F756E350A10
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISOgmTPeaMIeseURIFDXrhT-ASBQ2cTkrQEgUNg6hbPRIFDZIFVM4SBQ1zgkLMEgUNvpZHxhIFDbPa96Q=?alt=proto
Preview:	ClMKCw164U/gGgQIAxgBCgsNnE5K0BoECAUYAQoLDYOoWz0aBAgJGAEKCw2SBVTOGgQIPBgBCgsNc4JCzBoECA0YAQoHDb6WR8YaAAoHDbPa96QaAA==

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2416
Entropy (8bit):	5.040288974617193
Encrypted:	false
SSDEEP:	48:ZE9JC9JwVBYJuSAAcuLCcOZ9AA/plw/puxHnu0uax08dbYr:u6CcQxHuIZdbk
MD5:	C2A512F35CF1B1BDAF4EE7BA068DA0BA
SHA1:	9670783310FE99413BB8D80B922B9A7E17BCA4E7
SHA-256:	EA8A7F7BA46EC6FF4BBCA6A544D304F25FE4D84973CD95A836AA53BF958C00E6
SHA-512:	2452ED0312F1933064F6D61DB13F0B85D2A00913593649BF362C752A0602291B6B212387D51C3D7B1D14B7097D06E05898B483BC3ADC8FD5AA5C52132B713506
Malicious:	false
Reputation:	low
URL:	https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4729291&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=0DA9ADCB7D49E9C260A43DC00A038CD9&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=710763113&contenttype=A&mediametricsessionid=612789951&mediametricid=6655886&usercd=710763113&mode=launch
Preview:	.............................<!DOCTYPE HTML>. [if lt IE 9 ]> <html class="not-supported-ie"> <![endif]-->. [if IE 9 ]> <html class="not-supported-ie"> <![endif]-->. [if (gt IE 9)\|!(IE)]> > <html lang="en"> <![endif]-->..<head>..<META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">...<style>#mediaContainer{display:none;}</style>...<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />...<script language="JavaScript">....function checkForCookies() {.....if (false && false) {......return true; // Preview User.....}.....if (location.href.indexOf("http") != 0) {......return true; // CD.....}......var eventCookieValue = 'true';.....if (eventCookieValue == 'undefined' \|\| eventCookieValue == '' \|\| eventCookieValue == 'false') {.......return false;........}.....return true;....}.. const isEmbedInIframe = top != self;.. if (!isEmbedInIframe && !checkForCookies()) {. if (false) {. location.href = location.prot

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.039148671903071
Encrypted:	false
SSDEEP:	3:B+hGAQR:B+6R
MD5:	0EAD5290EE11F36AF6A907C4EC3CBCBD
SHA1:	B69C0BE568E823942C78FAA0BFCCAE6E4AFF8EA2
SHA-256:	2584F4618A9A3901536BF4CDCB3B16C28E18D959AB406867605150F511880DD1
SHA-512:	9452486ADD12BE32791DD9C3DDF4DF48E4737A0B6CC1BC40918789F00CFBD4638AB07D1E8E30949133C722D1F24059671B16C186E48F77DCB8B3FC3AED387B08
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwk82t7xfyZZSxIFDb6WR8YSBQ2z2vek?alt=proto
Preview:	ChIKBw2+lkfGGgAKBw2z2vekGgA=

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1701)
Category:	downloaded
Size (bytes):	1702
Entropy (8bit):	5.2633544389537095
Encrypted:	false
SSDEEP:	24:kNdBMrV8GI3hrrtKhUx6T8yV9f68TeiDysEcXP9V8GI3hrrtKhUx6T8yV9f68TeY:IErBw2T8sAVyEcXlBw2T8sAVy7
MD5:	E4025C6484E9E4E129FEDB8644F3BF46
SHA1:	44C844F7E984B385A22D3FEB821838D0B0BD6A85
SHA-256:	B2F53F31F431F985F8C6BD392F89F0A7B756C6934DCDB1CEC63BB5C10CF5CBC0
SHA-512:	15883DF30B61416E87BF89E4F7614A5F3D87736ABD727C77354B3DAE93EAE8653DCE5F2705B21FCB8ECB51216827738C98FDD984E4FA3361FA5DF1D2B4EB7A22
Malicious:	false
Reputation:	low
URL:	https://event.on24.com/eventRegistration/eventRegistrationServlet
Preview:	<html><head></head><body onload='redirectIt();'><center> h6>Thank you. Please wait a few seconds while you are redirected (or <a href='/utilApp/MediaMetricServlet?mode=launch&mediametricid=6655886&eventid=4729291&eventuserid=710763113&usercd=710763113&mediametricsubid=1&mediaurl=https%3A%2F%2Fevent.on24.com%2FeventRegistration%2Fconsole%2Fapollox%2FmainEvent%3F%26eventid%3D4729291%26sessionid%3D1%26username%3D%26partnerref%3D%26format%3Dfhvideo1%26mobile%3D%26flashsupportedmobiledevice%3D%26helpcenter%3D%26key%3D0DA9ADCB7D49E9C260A43DC00A038CD9%26newConsole%3Dtrue%26nxChe%3Dtrue%26newTabCon%3Dtrue%26consoleEarEventConsole%3Dfalse%26consoleEarCloudApi%3Dfalse%26text_language_id%3Den%26playerwidth%3D748%26playerheight%3D526%26eventuserid%3D710763113%26contenttype%3DA&target=mediaurl&key=0DA9ADCB7D49E9C260A43DC00A038CD9'>click here</a> to continue.</h6--></center><script language='javascript'>function redirectIt() {var lobbyRedirectUrl='/utilApp/MediaMetricServlet?mode=launch&mediametr

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 18247, version 0.0
Category:	downloaded
Size (bytes):	18247
Entropy (8bit):	7.972176995425023
Encrypted:	false
SSDEEP:	384:0MR6467JnswlbHb1I0dfafeLEnVwtZnkriGOg1BH4UJ:0u6b7JnswJHh9faGLEnV8ObHRJ
MD5:	669A46DBC1317AF6E05BB242A51A0AA3
SHA1:	BAD1BCAF886FBE4F1D9961BA2E45878FC6243C1F
SHA-256:	7159EE201A021D78778B66BD69F1EE036858F6E4F220AE3927E7F64D56D31174
SHA-512:	60F3C2FADF8033584F4A0CDF926534103AE39A49A217F69766D6C8BF78FCC8D9AD67A2DBDBDA093B22FB6D2709671A39E5832603E29B5FE7EEAE91D14EA6DC1B
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/clients/assets/53580/fonts/Proxima-Regular.woff
Preview:	wOFF......GG......s.......D.................BASE.......W...pfa].GDEF.......V...x.]..GPOS...D...[....\|ne.OS/2.......Q...`....VDMX.......K....oVv.cmap...@..........4.cvt ...4...(...(....fpgm...\.......+.HR.gasp...,...........#glyf...<.....E...Ahead..;....6...6...~hhea..<4.......$...5hmtx..<T.........,.Qloca..>p.........\| #maxp..@L... ... .d..name..@l...I....P.;.post..C........ ...2prep..C...........\|.x.c`d``..b..>........<...7............l....<...6..`d`b0b0C.0h .....x..<...#.l...p...x.M.A.FP.E...l.$.)....S%....e...w...K.2RJ~...@-.F"-....(....Uo.....n..6r..w.6/......x..XilTU...{...L;mYZ.a....VET..(EL....A@...A..%..#j..F.ek.....%4TK ...b....H.B.@.^.=.QZ:.b.=.....v.w;b.HH...g.9y.1..\|.5.p.l..?u......R.5.......c...d.%.%.=.......1.'.%g.....=.3&..s'.....l.........\..z...~...m.mCnk.m..g.(.#OQ>C9..E.....oR....r%e..F.-0.....[....v...i']..{E.;..W../q...m..1.'Z..bz.h_z...I.n./...T...>.....Z.].O-P..sI]m\|..<...z.?.n7.........M./.....RU.J<.S....Nb.s....I\|>Q5.X...W-T..2..Z

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	6784
Entropy (8bit):	4.813696734253617
Encrypted:	false
SSDEEP:	192:nNtTy7zyprRAd++qqymKaKcZvKXNGPscx14ZRFrZrBqaW:N5y7epVALqsvq5Z96
MD5:	7F41394AFEDC394AF6D217A98A365484
SHA1:	E71D36D58C37371980F771535FA0F8590E41B981
SHA-256:	DDA61054A31CB53E1A8A2A87CD400442A305F6487A33AD05F0FC601C304EA474
SHA-512:	B971EFBA0D7251654ABBB32DD43860001F1BDB50839A4C46E83EDBBE3CA5F003763DC1F74FEB7619EB6F35CD830F62EC94B676F2A0E4405F47E572AD05D86DEC
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="utf-8" />. <meta name="viewport" content="width=device-width, initial-scale=1" />. <meta name="theme-color" content="#000000" />. <meta http-equiv="Pragma" content="no-cache" />. <meta http-equiv="cache-control" content="no-cache, no-store, must-revalidate" />. <script src="/view/WidgetLib/builds/default/libs/media/bitdash/8.24.0/bitmovinplayer.prod.gz.js"></script> -->. <script type="text/javascript">. var queryParams = new URLSearchParams(window.location.search);. var version = queryParams.get('version');. window.version = (version \|\| window.releaseVersion);. var rootPath = `${(window.staticCDNURL \|\| '')}${customBuildPath \|\| '/view'}/react-console/build/`;. var localHost = `${window.location.protocol}//${window.location.host}`;. var rootPathLocal = `${(window.location.protocol + '//' + window.location.host \|\| '')}${customBuildPath \|\| '/view'}/react-console/build/`;.

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 235472, version 0.0
Category:	downloaded
Size (bytes):	235472
Entropy (8bit):	7.995452823016873
Encrypted:	true
SSDEEP:	3072:Repl8aYiRWInj2XtWQVLUMggrEUrgcLVsnEjZulXZX1eBvNhv3yoA6BfmijnWN3T:R28dijkW0ggwUrJcCZwZFQPq5KfraME
MD5:	A1F67B3626AA6C1DDE47A21214A2BACD
SHA1:	FB5BFEF666DB079A581438CAFA4990A72CF60EF1
SHA-256:	4DE12927BA915B8E2C311F0F99DE411118D7C8143513CE3F78068F6F44B0C4B2
SHA-512:	223D1AD1B1BA7B4D267430F758F6DCC9DE618452A8EC68F7A4C4F3B81443B4757D66328CCCAAD6A0F236A6CA5A7B9E9855E667A0DDB4884FD17DAE13A9E84C58
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/view/eventregistration/fonts/font-segoe_ui/segoeui.woff
Preview:	wOFF........................................FFTM............6...GDEF..,....y.......tGPOS..6\|..a8.....v.GSUB...4...H......Z%OS/2.......`...`RUJ.cmap............X...cvt ..&....]....^lG.fpgm.......D.....<.glyf..D.........=.1Phead.......1...6....hhea.......!...$... hmtx...X......-PH.e.loca..(X...1..-T.t.maxp....... ... .}..name...X........8...post......3...w .5..prep..!............Hx.c`d```e....E(...+.4.........z......$.:.P..&...x.c`d`.X...#/....+..1.E..w.....Z........T....._......./.e.............i.........3.......3.....f................"........)....MS .@.......Q......`........... . ..x...pU.u.._O..(X..+"B.XP.d.....R..XQe..UEa.JT.0.J..+.bF!..+....f.e.eL)}.l...P.RJ..2....L..X......x.!<e...w...s...r.JB..;...J.t.a..zg..9..[#.._..qYo.5`.=S.r6..1v..B...i.../......[@S.n........X...n...-...0.M..e..C.K.>+Iw...$i.....;[../..x..J..YNsH..)..)..w.lu....R.....e..E...N..3v.{.-5.P.svH..b.;.xi.V.D.^%..E.{...f...$....{~.....2..).x.j..!.A.nw......;....s......G.G>..<

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 86 x 38, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1454
Entropy (8bit):	7.7959366611713214
Encrypted:	false
SSDEEP:	24:B/6hFMMDyc7qc8GNxf+T1V8oxIYeIMCRk/5OID9yYjYY8QM8rhvBXtdSz3E:B/6hF3DydcVU/QYl7yQID9jx8Q3VvBXP
MD5:	6CBF43F3AE1D079B7D7C90F1F73E9C97
SHA1:	6F51609F2F11FDE6C663AFFD85924DC01D4CC85C
SHA-256:	EE3F6AEC6430D78E4189049F3C4523D5448EF71759860BAA62A8202ED89F679C
SHA-512:	9684B3FF73075B1AB1893CDA345E6C9B126C1ED7C352EC36849E13179DE084255E9307F7B007E47DBF216A70BF663A41BA4E866A9F2416930792EF1B75BE0ADC
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/view/eventregistration/images/PoweredByIcon.png
Preview:	.PNG........IHDR...V...&.....^tl6....pHYs................`IDATx...M+;..S..6....B.4..@..@. ...}..^S...;"....?..\.koB...HVv....f<.{a2.L&''''].v]..u].L.X..`91.?....y?.N.z?vL.k.P>.K..y.\....../...f.....xx....................i..=..=.wvv....l....\|\|l..oT..i.v... _e......z..Cjs>......{...> :I....U..q.... ...K1$.R._.7.......V......b.U...V{p.....).qq..Pj0X.y.B...V..=.#..)._.u..9............0..a..8..].t...Vyt.rt...,...<..4....<mz..Xw?..:.\....U..a:J....,S].S..U..q...5....W....f...m. py..E.V..j...3@..^V....<..\|..u\|a.Q`..i6."....Ku.5.=.2.F...K....;(....&.Q.E...H.....V!G.'..{i..M....VI,p^....'....Y.Z....&....K#1..%:[+].[.K.}PJJb\.J...\|.8....`cl...h.s...}}}e-15P.}...............(.)....x.+p@..".7.V..].....rs}.q...!..e.. .v.....V..:..R..%.[.K...e.Y.osa!...6.(..N.+y6.vc.K....!.E..S...s.&#i..Z...*..A......W..)V.}..A.W...l<.(i.u.]....KE.)..O.....K...W.#..4.....6.....N.b..o...].CK-.Q..`}p.q.Z.s.%b....HX.w..Z.<.H..f.1...[j..k..N..x.........8.S.@Jv.....

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 86 x 38, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1454
Entropy (8bit):	7.7959366611713214
Encrypted:	false
SSDEEP:	24:B/6hFMMDyc7qc8GNxf+T1V8oxIYeIMCRk/5OID9yYjYY8QM8rhvBXtdSz3E:B/6hF3DydcVU/QYl7yQID9jx8Q3VvBXP
MD5:	6CBF43F3AE1D079B7D7C90F1F73E9C97
SHA1:	6F51609F2F11FDE6C663AFFD85924DC01D4CC85C
SHA-256:	EE3F6AEC6430D78E4189049F3C4523D5448EF71759860BAA62A8202ED89F679C
SHA-512:	9684B3FF73075B1AB1893CDA345E6C9B126C1ED7C352EC36849E13179DE084255E9307F7B007E47DBF216A70BF663A41BA4E866A9F2416930792EF1B75BE0ADC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...V...&.....^tl6....pHYs................`IDATx...M+;..S..6....B.4..@..@. ...}..^S...;"....?..\.koB...HVv....f<.{a2.L&''''].v]..u].L.X..`91.?....y?.N.z?vL.k.P>.K..y.\....../...f.....xx....................i..=..=.wvv....l....\|\|l..oT..i.v... _e......z..Cjs>......{...> :I....U..q.... ...K1$.R._.7.......V......b.U...V{p.....).qq..Pj0X.y.B...V..=.#..)._.u..9............0..a..8..].t...Vyt.rt...,...<..4....<mz..Xw?..:.\....U..a:J....,S].S..U..q...5....W....f...m. py..E.V..j...3@..^V....<..\|..u\|a.Q`..i6."....Ku.5.=.2.F...K....;(....&.Q.E...H.....V!G.'..{i..M....VI,p^....'....Y.Z....&....K#1..%:[+].[.K.}PJJb\.J...\|.8....`cl...h.s...}}}e-15P.}...............(.)....x.+p@..".7.V..].....rs}.q...!..e.. .v.....V..:..R..%.[.K...e.Y.osa!...6.(..N.+y6.vc.K....!.E..S...s.&#i..Z...*..A......W..)V.}..A.W...l<.(i.u.]....KE.)..O.....K...W.#..4.....6.....N.b..o...].CK-.Q..`}p.q.Z.s.%b....HX.w..Z.<.H..f.1...[j..k..N..x.........8.S.@Jv.....

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	5211175
Entropy (8bit):	5.506986422528907
Encrypted:	false
SSDEEP:	49152:Y/054QSxbqVyOCbxHf+ldFQKLzkoFJ7rcPMqdmbR2qrBhjEgoRYXnaqYUMGBNz0C:Y8O2d8U31BASD
MD5:	6D3B47EE2826BCA50572424CF77343E1
SHA1:	9F4930F72E80A98196743997333D9E669620C773
SHA-256:	48E5B8657138ECBB3D10EDFBC68E1636131B2160CC29E2554007078272D49155
SHA-512:	2A1E3B1EAD9D98995C801A8437FEB69776FA03A4DC3F654AEBF2CFCD47CD5169E80D0791DD5CBE553DFE203A364565FAFDD15E4B43F7E52BCF7995232CEB2583
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text
Category:	dropped
Size (bytes):	3793
Entropy (8bit):	4.665563207058073
Encrypted:	false
SSDEEP:	48:MzQC+PWERtOLbFuD/ooTlxbFyvN31lFN8HNfAOgWwGHVublHUAZ5vBTKjvQ1dq0g:POLu/tlxByvNTFWNwGH0lHvIydq0COH0
MD5:	97BB77D64308A621DEC4C210E23B600D
SHA1:	CC3DC0DA0E785C1F2A1626727FFACC3647D3A2D6
SHA-256:	BBD6B0B35A256201D3E47629BFCAEEDB6CB2EAA30FE802E21AE24BAAB1269736
SHA-512:	41BF76CC3CA5AD3A73ABC121849FB6B8C32B0B67B4F31DC8E7C32CD80800CB5E8EEF60D7BE19748D06315A7E9E8122FAEFFCBA3D6004E38BF9B92B7077115E7C
Malicious:	false
Reputation:	low
Preview:	(function main() {. const MAX_APPEND_ATTEMPTS = 5;. let attempt = 0;.. function getHtmlString() {. return fetch(`${customBuildPath \|\| '/view'}/react-console/build/`).then((htmlContent) => htmlContent.text());. }.. function getHtmlBlocks(htmlString) {. return {. headContent: (/<head[^>]>((.\|[\n\r]))<\/head>/im).exec(htmlString)[1],. bodyContent: (/<body[^>]>((.\|[\n\r]))<\/body>/im).exec(htmlString)[1],. };. }.. function parseHtml() {. return getHtmlString().then((htmlString) => getHtmlBlocks(htmlString));. }.. function replaceDomain(url, domain) {. const newUrl = new URL(url);. const targetUrl = new URL(domain);. newUrl.hostname = targetUrl.hostname;. return newUrl.href;. }.. function appendContent(children, parentEl) {. const cdnUrl = window.staticCDNURL \|\| '';. for (let i = 0; i < children.length; i++) {. if (children[i].tagName === 'SCRIPT') {.

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	6784
Entropy (8bit):	4.813696734253617
Encrypted:	false
SSDEEP:	192:nNtTy7zyprRAd++qqymKaKcZvKXNGPscx14ZRFrZrBqaW:N5y7epVALqsvq5Z96
MD5:	7F41394AFEDC394AF6D217A98A365484
SHA1:	E71D36D58C37371980F771535FA0F8590E41B981
SHA-256:	DDA61054A31CB53E1A8A2A87CD400442A305F6487A33AD05F0FC601C304EA474
SHA-512:	B971EFBA0D7251654ABBB32DD43860001F1BDB50839A4C46E83EDBBE3CA5F003763DC1F74FEB7619EB6F35CD830F62EC94B676F2A0E4405F47E572AD05D86DEC
Malicious:	false
Reputation:	low
URL:	https://event.on24.com/view/react-console/build/
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="utf-8" />. <meta name="viewport" content="width=device-width, initial-scale=1" />. <meta name="theme-color" content="#000000" />. <meta http-equiv="Pragma" content="no-cache" />. <meta http-equiv="cache-control" content="no-cache, no-store, must-revalidate" />. <script src="/view/WidgetLib/builds/default/libs/media/bitdash/8.24.0/bitmovinplayer.prod.gz.js"></script> -->. <script type="text/javascript">. var queryParams = new URLSearchParams(window.location.search);. var version = queryParams.get('version');. window.version = (version \|\| window.releaseVersion);. var rootPath = `${(window.staticCDNURL \|\| '')}${customBuildPath \|\| '/view'}/react-console/build/`;. var localHost = `${window.location.protocol}//${window.location.host}`;. var rootPathLocal = `${(window.location.protocol + '//' + window.location.host \|\| '')}${customBuildPath \|\| '/view'}/react-console/build/`;.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (546)
Category:	dropped
Size (bytes):	38950
Entropy (8bit):	4.718834055394851
Encrypted:	false
SSDEEP:	768:uPAZTbTKmBi6976YgYcVT0NecVTyucwBA7XQw+7w8T:3xiw
MD5:	0F042782BB77E05BAC5C67683712C17F
SHA1:	9B0DE34D75DC5448AC773D3DFFFE40DF496F72D7
SHA-256:	33C1EBC20F0BAAEE7475FD82A3F1CE7307EBFCF166010A9C4C9140A48D427C88
SHA-512:	D2518269F917086C2EC2388EC6EABF53987B6472865ABB516E7F00E8F87D2E2FDA222D5822942C70304410992836A69961052751042FF56F0D6AA35C5BF44C2E
Malicious:	false
Reputation:	low
Preview:	<div id="vueTpl">. <div id="banner" v-if="!!bannerSrc">. <img id="bannerImg" :src="bannerSrc" :alt="bannerAlt" tabindex="0" />. </div>.. <div id="contentWrapper">. <overview :d="overviewData"></overview>.. <div id="layout-container" class="flex-container". :class="registerData.is2ColLayout && registerData.isRightAlign === false ? 'swapLR' : ''">. <div id="contentLeft" v-if="!hideLeftCol">. <div id="realLeftContent" class="realContent">. <summary2 v-if="registerData.is2ColLayout" ref="summaryy" :d="summaryData"></summary2>. <summaryy v-else ref="summaryy" :d="summaryData"></summaryy>. </div>. </div>. <div id="contentRight" :class="isHybridMode() && !isLobby && urlPara.showqrcode=='y'?'showQRcode large':''">. <div id="realRightContent" class="realContent">. <register v-if="errorData.errorCode=='loginlocked' && !nee

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	12596
Entropy (8bit):	4.757176782653038
Encrypted:	false
SSDEEP:	192:iJ7wjc1c90nUNAUJ+FKHFdLH7sVHvm62tHT9D4W1zgaeCOXiG+BcwOplgjN7G6sA:8BGZLz7s1mJSaeCDBmDDMd
MD5:	CDC1DD374F940116BA63A86691394DBC
SHA1:	69D17B6099FC7C4362F793E3754D248852793FB0
SHA-256:	A901D54EDD59210C4FDAF72EA6FADF828C1FC0385A671487E7A7A98CE6BF10F1
SHA-512:	93EBC808EBC1E4CF98A79B726BA8AF4B73210796BDE911FE93217A2BE463EA96F056BDDA9A0979C71A41F79C867B101CAA51B3E231108E4EF5E51412CA4F8F1F
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/view/eventregistration/24.4.1/dictionary/dictionary.en.js?b=0007823747865
Preview:	{."add.event.to.calendar": "Add this event to your calendar",."add.event.to.google.calendar.html": "Google Calendar",."add.event.to.google.calendar.image.text": "Add Event to Google Calendar",."add.event.to.google.calendar.text": "To add this event to your Google calendar, please go to this URL:",."add.event.to.outlook.calendar.html": "Outlook/iCal",."add.event.to.outlook.calendar.image.text": "Add Event to Outlook/ICal Calendar",."add.event.to.outlook.calendar.text": "To add this event to your Outlook/iCal calendar, please go to this URL:",."already.registered": "If you have previously registered for this event, please login below:",."apply.coupons": "Please apply coupons before submitting",."best_webcast_experience": "For the best webcast experience, please use",."check.box.continue": "Please check the box to continue",."chrome_browser": "Chrome Browser",."company.banner.image.text": "Company Banner",."computer.speakers.image.active": "Listen With Computer Speakers",."computer.speake

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	5211175
Entropy (8bit):	5.506986422528907
Encrypted:	false
SSDEEP:	49152:Y/054QSxbqVyOCbxHf+ldFQKLzkoFJ7rcPMqdmbR2qrBhjEgoRYXnaqYUMGBNz0C:Y8O2d8U31BASD
MD5:	6D3B47EE2826BCA50572424CF77343E1
SHA1:	9F4930F72E80A98196743997333D9E669620C773
SHA-256:	48E5B8657138ECBB3D10EDFBC68E1636131B2160CC29E2554007078272D49155
SHA-512:	2A1E3B1EAD9D98995C801A8437FEB69776FA03A4DC3F654AEBF2CFCD47CD5169E80D0791DD5CBE553DFE203A364565FAFDD15E4B43F7E52BCF7995232CEB2583
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/view/eventregistration/24.4.1/dist/reg30BundleJS-0007823747865.gz.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1537
Entropy (8bit):	5.394021261260192
Encrypted:	false
SSDEEP:	24:b7SHLwxIx3Fx4tOxvDRHEaR1/RA6lgRMbDR6EpjduRIgxMN2u+yOMJG1rHNfh:b7SHLMkH4stEIvtRdKpaGdX
MD5:	9ECF88D5E8086934FA918E9CC19B5A44
SHA1:	024460EE5D9216B12778A95A02C015D2A5A2C2B7
SHA-256:	650E17C6F54CDF8733F9D5AA16DF19F0EB6D7340214B9ED248357A706110CC1B
SHA-512:	FBF17BCA10F842209F499F3A4FA5CE850B936AB39E60CD8A972ED020CC0F1961E3A076E22F58DB2D22B3350EDE1EC717AC182FC4AF0841CA377E2F8321ED1E8B
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/view/react-console/build/24.4.1/const/prod-const.js?b=58.0.0
Preview:	if (!window.on24) window.on24 = {};..if (!window.on24.appConstants) window.on24.appConstants = {};....window.on24.appConstants = {.. ...window.on24.appConstants,.. onDemandAudioPrefix: 'https://' + window.location.host + '/media/news/corporatevideo/events/',.. onDemandVideoPrefix: 'https://' + window.location.host + '/media/news/corporatevideo/events/',.. hlsSharedCount: 10,.. backgroundImagePrefix: 'https://' + window.location.host + '/event/',.. videoClipPrefix: 'https://' + window.location.host + '/media/news/corporatevideo/events/',.. GROUP_CHAT_WS: window.location.protocol.indexOf('http:') > -1 ? 'ws://wcc-chat.on24.com/xmpp/' : 'wss://wcc-chat.on24.com/xmpp/',.. GROUP_CHAT_HTTP: `${window.location.protocol}//wcc-chat.on24.com/http-bind/`,.. GROUP_CHAT_DOMAIN: 'wcc-chat.on24.com',.. BKR_CONTROL_SERVER_URL: 'https://videoservice.on24.com/',.. BKR_CHAT_MAX_CAPACITY: 500,.. REACTIONS_SERVICE_URL: 'https://vids-chat.on24.com',.. ON24_SERVICES_URL

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (576)
Category:	downloaded
Size (bytes):	3545
Entropy (8bit):	5.1400044114298495
Encrypted:	false
SSDEEP:	48:CXIbmcrbmSfbm93CPKIjCCHf1HDw+HzBDeDcCDD2Zh8mRwthg1qWQnNwVo0:C8PBHtDwADeDcCDD2Zh8mRwthghQOa0
MD5:	7F02702B7850ED52ADB5084AE38418DC
SHA1:	873AF0D32BEACF5CE6459FD48443A826F447DED7
SHA-256:	3A9B8225F92FCD3975EA7CEA0676AAD88146325059EC7962544A96A97D8AC8EC
SHA-512:	0D8D390A5B6D478125098534ED598BE287F161B8DBE8C188161A098B34FA940880505544CE887DFF9717D2F9DFC6EC464F5A0F09A2FA8E9DD99BD227C82ED628
Malicious:	false
Reputation:	low
URL:	https://event.on24.com/wcc/r/4729291/0DA9ADCB7D49E9C260A43DC00A038CD9?mode=login&email=melinda.outlaw@johnmuirhealth.com
Preview:	...........<!doctype html>.<html lang="en">..<head>...<meta charset="utf-8">...<meta http-equiv="X-UA-Compatible" content="IE=edge">...<title>October 2024 Epic Spotlight Webinar: Change of Vendor, a Necessary Evil</title>.. . ...........<meta name="viewport" content="width=device-width, initial-scale=1">........<base href="https://on24static.akamaized.net">..... ... <meta name="twitter:card" content="summary"/><meta name="twitter:title" content="October 2024 Epic Spotlight Webinar: Change of Vendor, a Necessary Evil" />... <meta property="og:title" content="October 2024 Epic Spotlight Webinar: Change of Vendor, a Necessary Evil" />... .. .. ... <meta name="description" content="Tuesday, October 22, 2024 at 1:00 PM Eastern Daylight Time. " >... <meta name="twitter:description" content="Tuesday, October 22, 2024 at 1:00 PM Eastern Daylight Time. " />... <meta property="og:description" content="Tuesday, October 22, 2024 at 1:00 PM Eastern Dayligh

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2363)
Category:	downloaded
Size (bytes):	110903
Entropy (8bit):	5.193631501736866
Encrypted:	false
SSDEEP:	1536:t1S2P6XtI+A4GDUI+Y9rpVljhiIEkj4jNb1jQl1me6zvZplZLOk8I:+XtI+AFDP+YVzljhiI4QkpDN
MD5:	2304E9C7BCB3CDF51B65AA8A2C9F8919
SHA1:	0CB026033AC28E683724F87925D299E3ECFC60C2
SHA-256:	009EA457FF3FF823D24E01032A8725E573018B35DDFBB7F28C67F6F58998E502
SHA-512:	35884C1F2F5A9EEA674630019F670B43453199961F3DACC25ACD8FEE5B2CF16CF8090154353D48D883080DC1ECD1CF6B0CF59CC008A775EA5999910F4585CDA3
Malicious:	false
Reputation:	low
URL:	https://on24static.akamaized.net/view/eventregistration/24.4.1/dist/reg30BundleCSS-0007823747865.gz.css
Preview:	/! jQuery UI - v1.12.1 - 2018-06-10. http://jqueryui.com.* Includes: draggable.css, core.css, resizable.css, selectable.css, sortable.css, accordion.css, autocomplete.css, menu.css, button.css, controlgroup.css, checkboxradio.css, datepicker.css, dialog.css, progressbar.css, selectmenu.css, slider.css, spinner.css, tabs.css, tooltip.css, theme.css.* To view and modify this theme, visit http://jqueryui.com/themeroller/?scope=&folderName=base&cornerRadiusShadow=8px&offsetLeftShadow=0px&offsetTopShadow=0px&thicknessShadow=5px&opacityShadow=30&bgImgOpacityShadow=0&bgTextureShadow=flat&bgColorShadow=666666&opacityOverlay=30&bgImgOpacityOverlay=0&bgTextureOverlay=flat&bgColorOverlay=aaaaaa&iconColorError=cc0000&fcError=5f3f3f&borderColorError=f1a899&bgTextureError=flat&bgColorError=fddfdf&iconColorHighlight=777620&fcHighlight=777620&borderColorHighlight=dad55e&bgTextureHighlight=flat&bgColorHighlight=fffa90&iconColorActive=ffffff&fcActive=ffffff&borderColorActive=003eff&bgTextureActive=fla

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1537
Entropy (8bit):	5.394021261260192
Encrypted:	false
SSDEEP:	24:b7SHLwxIx3Fx4tOxvDRHEaR1/RA6lgRMbDR6EpjduRIgxMN2u+yOMJG1rHNfh:b7SHLMkH4stEIvtRdKpaGdX
MD5:	9ECF88D5E8086934FA918E9CC19B5A44
SHA1:	024460EE5D9216B12778A95A02C015D2A5A2C2B7
SHA-256:	650E17C6F54CDF8733F9D5AA16DF19F0EB6D7340214B9ED248357A706110CC1B
SHA-512:	FBF17BCA10F842209F499F3A4FA5CE850B936AB39E60CD8A972ED020CC0F1961E3A076E22F58DB2D22B3350EDE1EC717AC182FC4AF0841CA377E2F8321ED1E8B
Malicious:	false
Reputation:	low
Preview:	if (!window.on24) window.on24 = {};..if (!window.on24.appConstants) window.on24.appConstants = {};....window.on24.appConstants = {.. ...window.on24.appConstants,.. onDemandAudioPrefix: 'https://' + window.location.host + '/media/news/corporatevideo/events/',.. onDemandVideoPrefix: 'https://' + window.location.host + '/media/news/corporatevideo/events/',.. hlsSharedCount: 10,.. backgroundImagePrefix: 'https://' + window.location.host + '/event/',.. videoClipPrefix: 'https://' + window.location.host + '/media/news/corporatevideo/events/',.. GROUP_CHAT_WS: window.location.protocol.indexOf('http:') > -1 ? 'ws://wcc-chat.on24.com/xmpp/' : 'wss://wcc-chat.on24.com/xmpp/',.. GROUP_CHAT_HTTP: `${window.location.protocol}//wcc-chat.on24.com/http-bind/`,.. GROUP_CHAT_DOMAIN: 'wcc-chat.on24.com',.. BKR_CONTROL_SERVER_URL: 'https://videoservice.on24.com/',.. BKR_CHAT_MAX_CAPACITY: 500,.. REACTIONS_SERVICE_URL: 'https://vids-chat.on24.com',.. ON24_SERVICES_URL

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 01:25:09.305423021 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 24, 2024 01:25:14.029803991 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 01:25:14.029911995 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 01:25:14.029973984 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 01:25:14.030016899 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 01:25:14.030030012 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 01:25:14.030098915 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 01:25:14.030457020 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 01:25:14.030518055 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 01:25:14.030703068 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 01:25:14.030725002 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 01:25:14.842065096 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 01:25:14.842446089 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 01:25:14.842477083 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 01:25:14.843746901 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 01:25:14.843954086 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 01:25:14.843986988 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 01:25:14.844156981 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 01:25:14.844217062 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 01:25:14.845099926 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 01:25:14.845192909 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 01:25:14.845312119 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 01:25:14.845321894 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 01:25:14.845624924 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 01:25:14.845695972 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 01:25:14.846493959 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 01:25:14.846589088 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 01:25:14.884938955 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 01:25:14.900196075 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 01:25:14.900221109 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 01:25:14.946798086 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 01:25:15.042443037 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 01:25:15.044434071 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 01:25:15.044517994 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 01:25:15.044626951 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 01:25:15.072999001 CEST	49738	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:15.073065996 CEST	443	49738	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:15.073134899 CEST	49738	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:15.073455095 CEST	49738	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:15.073476076 CEST	443	49738	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:15.750758886 CEST	443	49738	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:15.751167059 CEST	49738	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:15.751204967 CEST	443	49738	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:15.752860069 CEST	443	49738	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:15.752945900 CEST	49738	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:15.753921986 CEST	49738	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:15.754009962 CEST	443	49738	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:15.754091024 CEST	49738	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:15.754098892 CEST	443	49738	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:15.802953005 CEST	49738	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:16.001315117 CEST	443	49738	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:16.001382113 CEST	443	49738	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:16.001513958 CEST	443	49738	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:16.001544952 CEST	49738	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:16.001602888 CEST	49738	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:16.261528015 CEST	49738	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:16.261565924 CEST	443	49738	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:16.501744986 CEST	49742	443	192.168.2.4	142.250.185.196
Oct 24, 2024 01:25:16.501831055 CEST	443	49742	142.250.185.196	192.168.2.4
Oct 24, 2024 01:25:16.501926899 CEST	49742	443	192.168.2.4	142.250.185.196
Oct 24, 2024 01:25:16.502304077 CEST	49742	443	192.168.2.4	142.250.185.196
Oct 24, 2024 01:25:16.502365112 CEST	443	49742	142.250.185.196	192.168.2.4
Oct 24, 2024 01:25:17.227062941 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:25:17.227164984 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 01:25:17.227253914 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:25:17.228928089 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:25:17.228945017 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 01:25:17.367671013 CEST	443	49742	142.250.185.196	192.168.2.4
Oct 24, 2024 01:25:17.368026018 CEST	49742	443	192.168.2.4	142.250.185.196
Oct 24, 2024 01:25:17.368083954 CEST	443	49742	142.250.185.196	192.168.2.4
Oct 24, 2024 01:25:17.369647980 CEST	443	49742	142.250.185.196	192.168.2.4
Oct 24, 2024 01:25:17.369728088 CEST	49742	443	192.168.2.4	142.250.185.196
Oct 24, 2024 01:25:17.370584965 CEST	49742	443	192.168.2.4	142.250.185.196
Oct 24, 2024 01:25:17.370680094 CEST	443	49742	142.250.185.196	192.168.2.4
Oct 24, 2024 01:25:17.419157028 CEST	49742	443	192.168.2.4	142.250.185.196
Oct 24, 2024 01:25:17.419214964 CEST	443	49742	142.250.185.196	192.168.2.4
Oct 24, 2024 01:25:17.458447933 CEST	63282	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:25:17.464155912 CEST	53	63282	1.1.1.1	192.168.2.4
Oct 24, 2024 01:25:17.464238882 CEST	63282	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:25:17.464277983 CEST	63282	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:25:17.465614080 CEST	49742	443	192.168.2.4	142.250.185.196
Oct 24, 2024 01:25:17.469641924 CEST	53	63282	1.1.1.1	192.168.2.4
Oct 24, 2024 01:25:18.067491055 CEST	53	63282	1.1.1.1	192.168.2.4
Oct 24, 2024 01:25:18.068322897 CEST	63282	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:25:18.074215889 CEST	53	63282	1.1.1.1	192.168.2.4
Oct 24, 2024 01:25:18.074373007 CEST	63282	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:25:18.079777956 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 01:25:18.079880953 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:25:18.082981110 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:25:18.083009005 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 01:25:18.083534956 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 01:25:18.136596918 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:25:18.149447918 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:25:18.195336103 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 01:25:18.393697977 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 01:25:18.393871069 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 01:25:18.393922091 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:25:18.393922091 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:25:18.393922091 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:25:18.393970966 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 01:25:18.441895962 CEST	63284	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:25:18.441967964 CEST	443	63284	184.28.90.27	192.168.2.4
Oct 24, 2024 01:25:18.442039013 CEST	63284	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:25:18.442445993 CEST	63284	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:25:18.442481041 CEST	443	63284	184.28.90.27	192.168.2.4
Oct 24, 2024 01:25:18.700995922 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:25:18.701029062 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 01:25:19.287247896 CEST	443	63284	184.28.90.27	192.168.2.4
Oct 24, 2024 01:25:19.287345886 CEST	63284	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:25:19.289861917 CEST	63284	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:25:19.289879084 CEST	443	63284	184.28.90.27	192.168.2.4
Oct 24, 2024 01:25:19.290221930 CEST	443	63284	184.28.90.27	192.168.2.4
Oct 24, 2024 01:25:19.293107033 CEST	63284	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:25:19.339330912 CEST	443	63284	184.28.90.27	192.168.2.4
Oct 24, 2024 01:25:19.536334991 CEST	443	63284	184.28.90.27	192.168.2.4
Oct 24, 2024 01:25:19.536432981 CEST	443	63284	184.28.90.27	192.168.2.4
Oct 24, 2024 01:25:19.536510944 CEST	63284	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:25:19.537482023 CEST	63284	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:25:19.537517071 CEST	443	63284	184.28.90.27	192.168.2.4
Oct 24, 2024 01:25:19.537545919 CEST	63284	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:25:19.537561893 CEST	443	63284	184.28.90.27	192.168.2.4
Oct 24, 2024 01:25:21.664346933 CEST	49672	443	192.168.2.4	173.222.162.32
Oct 24, 2024 01:25:21.664381981 CEST	443	49672	173.222.162.32	192.168.2.4
Oct 24, 2024 01:25:22.708666086 CEST	63285	443	192.168.2.4	4.245.163.56
Oct 24, 2024 01:25:22.708710909 CEST	443	63285	4.245.163.56	192.168.2.4
Oct 24, 2024 01:25:22.708911896 CEST	63285	443	192.168.2.4	4.245.163.56
Oct 24, 2024 01:25:22.710381031 CEST	63285	443	192.168.2.4	4.245.163.56
Oct 24, 2024 01:25:22.710402966 CEST	443	63285	4.245.163.56	192.168.2.4
Oct 24, 2024 01:25:23.805413961 CEST	443	63285	4.245.163.56	192.168.2.4
Oct 24, 2024 01:25:23.805505037 CEST	63285	443	192.168.2.4	4.245.163.56
Oct 24, 2024 01:25:23.808331966 CEST	63285	443	192.168.2.4	4.245.163.56
Oct 24, 2024 01:25:23.808341026 CEST	443	63285	4.245.163.56	192.168.2.4
Oct 24, 2024 01:25:23.808665037 CEST	443	63285	4.245.163.56	192.168.2.4
Oct 24, 2024 01:25:23.849256992 CEST	63285	443	192.168.2.4	4.245.163.56
Oct 24, 2024 01:25:24.724510908 CEST	63285	443	192.168.2.4	4.245.163.56
Oct 24, 2024 01:25:24.771326065 CEST	443	63285	4.245.163.56	192.168.2.4
Oct 24, 2024 01:25:24.941909075 CEST	63289	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:24.941937923 CEST	443	63289	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:24.942101955 CEST	63289	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:24.942591906 CEST	63289	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:24.942617893 CEST	443	63289	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:24.943977118 CEST	63290	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:24.944000006 CEST	443	63290	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:24.944067955 CEST	63290	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:24.944209099 CEST	63290	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:24.944219112 CEST	443	63290	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:24.945333958 CEST	63291	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:24.945359945 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:24.945444107 CEST	63291	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:24.945585012 CEST	63291	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:24.945599079 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.084949970 CEST	443	63285	4.245.163.56	192.168.2.4
Oct 24, 2024 01:25:25.084975958 CEST	443	63285	4.245.163.56	192.168.2.4
Oct 24, 2024 01:25:25.084985018 CEST	443	63285	4.245.163.56	192.168.2.4
Oct 24, 2024 01:25:25.084992886 CEST	443	63285	4.245.163.56	192.168.2.4
Oct 24, 2024 01:25:25.085033894 CEST	443	63285	4.245.163.56	192.168.2.4
Oct 24, 2024 01:25:25.085068941 CEST	63285	443	192.168.2.4	4.245.163.56
Oct 24, 2024 01:25:25.085082054 CEST	443	63285	4.245.163.56	192.168.2.4
Oct 24, 2024 01:25:25.085129023 CEST	63285	443	192.168.2.4	4.245.163.56
Oct 24, 2024 01:25:25.085155010 CEST	63285	443	192.168.2.4	4.245.163.56
Oct 24, 2024 01:25:25.085712910 CEST	443	63285	4.245.163.56	192.168.2.4
Oct 24, 2024 01:25:25.085793018 CEST	63285	443	192.168.2.4	4.245.163.56
Oct 24, 2024 01:25:25.085798025 CEST	443	63285	4.245.163.56	192.168.2.4
Oct 24, 2024 01:25:25.132793903 CEST	63285	443	192.168.2.4	4.245.163.56
Oct 24, 2024 01:25:25.197079897 CEST	443	63285	4.245.163.56	192.168.2.4
Oct 24, 2024 01:25:25.197137117 CEST	443	63285	4.245.163.56	192.168.2.4
Oct 24, 2024 01:25:25.197242022 CEST	63285	443	192.168.2.4	4.245.163.56
Oct 24, 2024 01:25:25.595954895 CEST	443	63289	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.596524000 CEST	63289	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.596585035 CEST	443	63289	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.597232103 CEST	443	63289	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.597732067 CEST	63289	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.597826004 CEST	443	63289	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.597958088 CEST	63289	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.600610971 CEST	443	63290	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.600853920 CEST	63290	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.600878954 CEST	443	63290	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.601392984 CEST	443	63290	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.601459980 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.601895094 CEST	63290	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.601982117 CEST	443	63290	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.602021933 CEST	63291	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.602046013 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.602199078 CEST	63290	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.603539944 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.603619099 CEST	63291	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.604007006 CEST	63291	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.604093075 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.604120970 CEST	63291	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.639405966 CEST	443	63289	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.643367052 CEST	443	63290	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.649732113 CEST	63291	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.649765015 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.695667028 CEST	63291	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.764863014 CEST	443	63290	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.764897108 CEST	443	63290	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.764991045 CEST	443	63290	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.765032053 CEST	63290	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.765043974 CEST	443	63290	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.765110016 CEST	443	63290	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.765172958 CEST	63290	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.765180111 CEST	443	63290	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.765259027 CEST	443	63290	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.765381098 CEST	63290	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.767261982 CEST	63290	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.767275095 CEST	443	63290	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.777544975 CEST	443	63289	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.777620077 CEST	443	63289	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.777678013 CEST	63289	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.777699947 CEST	443	63289	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.777818918 CEST	63289	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.780215979 CEST	63294	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.780304909 CEST	443	63294	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.780402899 CEST	63294	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.780599117 CEST	63294	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.780636072 CEST	443	63294	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.796443939 CEST	443	63289	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.796541929 CEST	63289	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.807259083 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.807427883 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.807547092 CEST	63291	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.807563066 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.807626009 CEST	63291	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.825751066 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.825783014 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.825836897 CEST	63291	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.825894117 CEST	63291	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.896620035 CEST	443	63289	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.896699905 CEST	63289	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.897074938 CEST	443	63289	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.897152901 CEST	63289	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.897166967 CEST	443	63289	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.897223949 CEST	63289	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.897233963 CEST	443	63289	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.897300959 CEST	63289	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.898334980 CEST	63289	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.898360014 CEST	443	63289	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.901721001 CEST	63295	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.901766062 CEST	443	63295	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.901884079 CEST	63295	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.902046919 CEST	63295	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.902064085 CEST	443	63295	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.925941944 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.926021099 CEST	63291	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.926065922 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.926145077 CEST	63291	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.944724083 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.944753885 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.944792986 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.944840908 CEST	63291	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.944858074 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:25.944911003 CEST	63291	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:25.989734888 CEST	63285	443	192.168.2.4	4.245.163.56
Oct 24, 2024 01:25:25.989748955 CEST	443	63285	4.245.163.56	192.168.2.4
Oct 24, 2024 01:25:25.989774942 CEST	63285	443	192.168.2.4	4.245.163.56
Oct 24, 2024 01:25:25.989784956 CEST	443	63285	4.245.163.56	192.168.2.4
Oct 24, 2024 01:25:26.045190096 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.045280933 CEST	63291	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.045309067 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.045372963 CEST	63291	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.045403957 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.045466900 CEST	63291	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.164024115 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.164102077 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.164103985 CEST	63291	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.164124012 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.164464951 CEST	63291	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.182112932 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.182195902 CEST	63291	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.182203054 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.224109888 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.224236965 CEST	63291	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.224268913 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.224302053 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.224378109 CEST	63291	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.224615097 CEST	63291	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.224639893 CEST	443	63291	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.343036890 CEST	63296	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.343122005 CEST	443	63296	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.343236923 CEST	63296	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.343694925 CEST	63296	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.343732119 CEST	443	63296	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.430886984 CEST	443	63294	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.431555986 CEST	63294	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.431576014 CEST	443	63294	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.433011055 CEST	443	63294	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.433111906 CEST	63294	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.433612108 CEST	63294	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.433695078 CEST	443	63294	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.433881998 CEST	63294	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.433896065 CEST	443	63294	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.475786924 CEST	63294	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.548913002 CEST	443	63295	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.549210072 CEST	63295	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.549272060 CEST	443	63295	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.552558899 CEST	443	63295	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.552623034 CEST	63295	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.554212093 CEST	63295	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.554299116 CEST	443	63295	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.554965973 CEST	63295	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.554986000 CEST	443	63295	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.580159903 CEST	443	63294	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.580359936 CEST	443	63294	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.580419064 CEST	63294	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.580429077 CEST	443	63294	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.580461025 CEST	443	63294	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.580538034 CEST	443	63294	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.580696106 CEST	63294	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.580696106 CEST	63294	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.597071886 CEST	63295	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.600625038 CEST	63294	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.600671053 CEST	443	63294	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.704178095 CEST	443	63295	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.704241037 CEST	443	63295	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.704307079 CEST	63295	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.704365015 CEST	443	63295	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.704401016 CEST	443	63295	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.704440117 CEST	63295	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.704457045 CEST	443	63295	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.704508066 CEST	63295	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.820672035 CEST	443	63295	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.820878983 CEST	63295	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.820885897 CEST	443	63295	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.820947886 CEST	443	63295	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.820987940 CEST	63295	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.821324110 CEST	443	63295	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.821403980 CEST	63295	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.821419954 CEST	443	63295	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.821564913 CEST	443	63295	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.821626902 CEST	63295	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.822134972 CEST	63295	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.822163105 CEST	443	63295	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.999691010 CEST	443	63296	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:26.999913931 CEST	63296	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:26.999974012 CEST	443	63296	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:27.001471043 CEST	443	63296	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:27.001571894 CEST	63296	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:27.001933098 CEST	63296	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:27.002019882 CEST	443	63296	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:27.002217054 CEST	63296	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:27.002233982 CEST	443	63296	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:27.055108070 CEST	63296	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:27.226042032 CEST	443	63296	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:27.226123095 CEST	443	63296	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:27.226145983 CEST	443	63296	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:27.226170063 CEST	443	63296	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:27.226197958 CEST	63296	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:27.226205111 CEST	443	63296	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:27.226273060 CEST	443	63296	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:27.226285934 CEST	63296	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:27.226285934 CEST	63296	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:27.275980949 CEST	63296	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:27.345335007 CEST	443	63296	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:27.345365047 CEST	443	63296	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:27.345412016 CEST	443	63296	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:27.345431089 CEST	443	63296	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:27.345467091 CEST	63296	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:27.345467091 CEST	63296	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:27.345467091 CEST	63296	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:27.345467091 CEST	63296	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:27.345541000 CEST	443	63296	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:27.345588923 CEST	63296	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:27.358210087 CEST	443	49742	142.250.185.196	192.168.2.4
Oct 24, 2024 01:25:27.358287096 CEST	443	49742	142.250.185.196	192.168.2.4
Oct 24, 2024 01:25:27.358376026 CEST	49742	443	192.168.2.4	142.250.185.196
Oct 24, 2024 01:25:27.463344097 CEST	443	63296	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:27.463421106 CEST	63296	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:27.582226038 CEST	443	63296	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:27.582293987 CEST	443	63296	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:27.582331896 CEST	63296	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:27.582397938 CEST	443	63296	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:27.582434893 CEST	63296	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:27.582504988 CEST	63296	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:27.625194073 CEST	443	63296	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:27.625368118 CEST	443	63296	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:27.625416994 CEST	63296	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:27.625507116 CEST	63296	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:27.625600100 CEST	63296	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:27.625644922 CEST	443	63296	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:27.625673056 CEST	63296	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:27.625708103 CEST	63296	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:27.721913099 CEST	49742	443	192.168.2.4	142.250.185.196
Oct 24, 2024 01:25:27.721924067 CEST	443	49742	142.250.185.196	192.168.2.4
Oct 24, 2024 01:25:27.722451925 CEST	63303	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:27.722476959 CEST	443	63303	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:27.722531080 CEST	63303	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:27.722764969 CEST	63303	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:27.722778082 CEST	443	63303	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:28.368271112 CEST	443	63303	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:28.394133091 CEST	63303	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:28.394153118 CEST	443	63303	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:28.394870043 CEST	443	63303	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:28.395162106 CEST	63303	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:28.395292044 CEST	63303	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:28.395298958 CEST	443	63303	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:28.395432949 CEST	443	63303	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:28.440067053 CEST	63303	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:28.540278912 CEST	443	63303	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:28.540388107 CEST	443	63303	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:28.540469885 CEST	63303	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:28.542143106 CEST	63303	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:28.542171001 CEST	443	63303	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:28.546710968 CEST	63315	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:28.546741009 CEST	443	63315	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:28.546962023 CEST	63315	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:28.547152042 CEST	63315	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:28.547163963 CEST	443	63315	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:29.201193094 CEST	443	63315	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:29.201484919 CEST	63315	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:29.201541901 CEST	443	63315	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:29.202234983 CEST	443	63315	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:29.202666044 CEST	63315	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:29.202764034 CEST	443	63315	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:29.202845097 CEST	63315	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:29.243371010 CEST	443	63315	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:29.369546890 CEST	443	63315	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:29.369827986 CEST	443	63315	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:29.369915009 CEST	63315	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:29.391823053 CEST	63315	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:25:29.391853094 CEST	443	63315	199.83.44.71	192.168.2.4
Oct 24, 2024 01:25:59.900891066 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 01:25:59.900955915 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 01:26:01.620476007 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:01.620522976 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:01.620583057 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:01.621434927 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:01.621454954 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:02.375166893 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:02.375602961 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:02.380151987 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:02.380170107 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:02.380568981 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:02.391849041 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:02.435340881 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:02.601787090 CEST	63320	443	192.168.2.4	4.245.163.56
Oct 24, 2024 01:26:02.601876974 CEST	443	63320	4.245.163.56	192.168.2.4
Oct 24, 2024 01:26:02.602051973 CEST	63320	443	192.168.2.4	4.245.163.56
Oct 24, 2024 01:26:02.603868961 CEST	63320	443	192.168.2.4	4.245.163.56
Oct 24, 2024 01:26:02.603904963 CEST	443	63320	4.245.163.56	192.168.2.4
Oct 24, 2024 01:26:02.637526035 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:02.637567997 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:02.637588978 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:02.637651920 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:02.637670994 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:02.637758970 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:02.637775898 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:02.755099058 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:02.755145073 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:02.755189896 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:02.755203962 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:02.755227089 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:02.755466938 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:02.872895002 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:02.872956991 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:02.873011112 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:02.873034000 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:02.873054981 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:02.873280048 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:02.990499020 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:02.990559101 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:02.990602970 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:02.990622997 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:02.990673065 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:02.990673065 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.077676058 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.077747107 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.077785015 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.077799082 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.077847004 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.077847958 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.193463087 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.193526983 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.193641901 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.193641901 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.193666935 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.194310904 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.228734970 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.228806973 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.228847027 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.228859901 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.228885889 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.229043961 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.344729900 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.344794035 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.344834089 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.344851971 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.344873905 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.344903946 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.461899042 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.461961985 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.461978912 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.461999893 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.462018967 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.462045908 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.546979904 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.547029018 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.547059059 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.547075987 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.547111034 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.547132015 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.663997889 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.664060116 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.664083958 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.664094925 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.664135933 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.664158106 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.698056936 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.698128939 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.698146105 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.698156118 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.698199987 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.698214054 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.704214096 CEST	443	63320	4.245.163.56	192.168.2.4
Oct 24, 2024 01:26:03.704286098 CEST	63320	443	192.168.2.4	4.245.163.56
Oct 24, 2024 01:26:03.706127882 CEST	63320	443	192.168.2.4	4.245.163.56
Oct 24, 2024 01:26:03.706171989 CEST	443	63320	4.245.163.56	192.168.2.4
Oct 24, 2024 01:26:03.706573963 CEST	443	63320	4.245.163.56	192.168.2.4
Oct 24, 2024 01:26:03.715919971 CEST	63320	443	192.168.2.4	4.245.163.56
Oct 24, 2024 01:26:03.759371996 CEST	443	63320	4.245.163.56	192.168.2.4
Oct 24, 2024 01:26:03.815227032 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.815294981 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.815320969 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.815330982 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.815355062 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.815366983 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.815485001 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.815547943 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.815556049 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.815603971 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.815642118 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.815668106 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.815699100 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.815713882 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.815713882 CEST	63319	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.815723896 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.815731049 CEST	443	63319	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.889411926 CEST	63321	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.889524937 CEST	443	63321	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.889621019 CEST	63321	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.889954090 CEST	63322	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.889991045 CEST	443	63322	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.890042067 CEST	63322	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.890532970 CEST	63323	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.890556097 CEST	443	63323	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.890625000 CEST	63323	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.890652895 CEST	63324	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.890738010 CEST	443	63324	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.890799046 CEST	63324	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.890968084 CEST	63321	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.891005993 CEST	443	63321	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.891100883 CEST	63324	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.891135931 CEST	63322	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.891151905 CEST	443	63322	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.891160011 CEST	443	63324	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.891174078 CEST	63323	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.891199112 CEST	443	63323	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.892004013 CEST	63325	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.892030001 CEST	443	63325	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:03.892081976 CEST	63325	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.892240047 CEST	63325	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:03.892247915 CEST	443	63325	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.084187984 CEST	443	63320	4.245.163.56	192.168.2.4
Oct 24, 2024 01:26:04.084249973 CEST	443	63320	4.245.163.56	192.168.2.4
Oct 24, 2024 01:26:04.084352970 CEST	63320	443	192.168.2.4	4.245.163.56
Oct 24, 2024 01:26:04.084414959 CEST	443	63320	4.245.163.56	192.168.2.4
Oct 24, 2024 01:26:04.084500074 CEST	63320	443	192.168.2.4	4.245.163.56
Oct 24, 2024 01:26:04.197832108 CEST	443	63320	4.245.163.56	192.168.2.4
Oct 24, 2024 01:26:04.197956085 CEST	443	63320	4.245.163.56	192.168.2.4
Oct 24, 2024 01:26:04.198000908 CEST	63320	443	192.168.2.4	4.245.163.56
Oct 24, 2024 01:26:04.198075056 CEST	63320	443	192.168.2.4	4.245.163.56
Oct 24, 2024 01:26:04.199750900 CEST	63320	443	192.168.2.4	4.245.163.56
Oct 24, 2024 01:26:04.199793100 CEST	443	63320	4.245.163.56	192.168.2.4
Oct 24, 2024 01:26:04.199845076 CEST	63320	443	192.168.2.4	4.245.163.56
Oct 24, 2024 01:26:04.199861050 CEST	443	63320	4.245.163.56	192.168.2.4
Oct 24, 2024 01:26:04.658724070 CEST	443	63321	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.659235001 CEST	63321	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.659306049 CEST	443	63321	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.659707069 CEST	63321	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.659722090 CEST	443	63321	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.660167933 CEST	443	63323	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.660365105 CEST	443	63324	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.660537004 CEST	63323	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.660553932 CEST	443	63323	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.660969973 CEST	63323	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.660980940 CEST	443	63323	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.660995960 CEST	63324	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.661075115 CEST	443	63324	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.661393881 CEST	63324	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.661427021 CEST	443	63324	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.664025068 CEST	443	63322	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.664352894 CEST	63322	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.664371967 CEST	443	63322	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.664712906 CEST	63322	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.664721012 CEST	443	63322	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.665956020 CEST	443	63325	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.666376114 CEST	63325	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.666403055 CEST	443	63325	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.666812897 CEST	63325	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.666816950 CEST	443	63325	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.787797928 CEST	443	63321	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.787853956 CEST	443	63321	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.787909985 CEST	63321	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.787945986 CEST	443	63321	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.788014889 CEST	63321	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.788043022 CEST	443	63321	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.788168907 CEST	63321	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.788181067 CEST	443	63321	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.788207054 CEST	63321	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.788224936 CEST	443	63321	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.790246010 CEST	443	63324	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.790277004 CEST	443	63324	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.790338993 CEST	443	63324	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.790342093 CEST	63324	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.790404081 CEST	63324	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.790653944 CEST	63324	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.790654898 CEST	63324	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.790688038 CEST	443	63324	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.790712118 CEST	443	63324	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.790968895 CEST	63326	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.791009903 CEST	443	63326	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.791094065 CEST	63326	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.791225910 CEST	63326	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.791254044 CEST	443	63326	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.792249918 CEST	443	63323	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.792295933 CEST	443	63323	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.792359114 CEST	63323	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.792452097 CEST	63323	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.792486906 CEST	443	63323	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.792512894 CEST	63323	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.792527914 CEST	443	63323	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.793603897 CEST	63327	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.793622971 CEST	443	63327	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.793685913 CEST	63327	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.793834925 CEST	63327	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.793844938 CEST	443	63327	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.794374943 CEST	63328	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.794442892 CEST	443	63328	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.794517994 CEST	63328	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.794670105 CEST	63328	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.794702053 CEST	443	63328	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.796400070 CEST	443	63325	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.796524048 CEST	443	63325	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.796608925 CEST	63325	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.796650887 CEST	63325	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.796650887 CEST	63325	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.796658993 CEST	443	63325	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.796662092 CEST	443	63325	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.798470020 CEST	63329	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.798497915 CEST	443	63329	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.798697948 CEST	63329	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.798778057 CEST	63329	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.798793077 CEST	443	63329	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.927697897 CEST	443	63322	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.927753925 CEST	443	63322	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.927877903 CEST	63322	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.927881002 CEST	443	63322	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.928000927 CEST	63322	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.928054094 CEST	63322	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.928071022 CEST	443	63322	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.928083897 CEST	63322	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.928091049 CEST	443	63322	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.930634022 CEST	63330	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.930691957 CEST	443	63330	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:04.930907965 CEST	63330	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.931067944 CEST	63330	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:04.931088924 CEST	443	63330	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.545051098 CEST	443	63327	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.545670986 CEST	63327	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.545686007 CEST	443	63327	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.546251059 CEST	63327	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.546256065 CEST	443	63327	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.547923088 CEST	443	63329	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.548203945 CEST	63329	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.548233032 CEST	443	63329	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.548573017 CEST	63329	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.548592091 CEST	443	63329	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.548858881 CEST	443	63328	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.549149990 CEST	63328	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.549189091 CEST	443	63328	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.549711943 CEST	63328	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.549725056 CEST	443	63328	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.553129911 CEST	443	63326	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.553446054 CEST	63326	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.553503036 CEST	443	63326	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.553945065 CEST	63326	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.553956985 CEST	443	63326	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.672616959 CEST	443	63330	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.673243999 CEST	63330	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.673288107 CEST	443	63330	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.673898935 CEST	63330	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.673913956 CEST	443	63330	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.677164078 CEST	443	63329	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.677316904 CEST	443	63329	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.677407980 CEST	63329	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.677534103 CEST	63329	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.677534103 CEST	63329	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.677552938 CEST	443	63329	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.677557945 CEST	443	63329	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.679056883 CEST	443	63327	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.679214954 CEST	443	63327	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.679337025 CEST	63327	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.679378986 CEST	63327	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.679378986 CEST	63327	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.679393053 CEST	443	63327	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.679402113 CEST	443	63327	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.681375980 CEST	63331	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.681399107 CEST	443	63331	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.681572914 CEST	63331	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.681642056 CEST	63331	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.681648970 CEST	443	63331	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.681951046 CEST	443	63328	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.682141066 CEST	443	63328	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.682199955 CEST	63328	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.682341099 CEST	63332	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.682429075 CEST	443	63332	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.682435036 CEST	63328	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.682435036 CEST	63328	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.682470083 CEST	443	63328	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.682493925 CEST	443	63328	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.682496071 CEST	63332	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.682634115 CEST	63332	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.682667971 CEST	443	63332	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.684859991 CEST	63333	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.684902906 CEST	443	63333	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.684967995 CEST	63333	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.685106039 CEST	63333	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.685123920 CEST	443	63333	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.685489893 CEST	443	63326	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.685688972 CEST	443	63326	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.685760975 CEST	63326	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.685837984 CEST	63326	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.685837984 CEST	63326	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.685879946 CEST	443	63326	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.685909033 CEST	443	63326	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.687844992 CEST	63334	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.687879086 CEST	443	63334	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.687952995 CEST	63334	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.688061953 CEST	63334	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.688077927 CEST	443	63334	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.803427935 CEST	443	63330	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.803814888 CEST	443	63330	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.803900003 CEST	63330	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.803962946 CEST	63330	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.803962946 CEST	63330	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.803989887 CEST	443	63330	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.804013014 CEST	443	63330	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.806777000 CEST	63335	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.806819916 CEST	443	63335	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:05.806902885 CEST	63335	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.807028055 CEST	63335	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:05.807034969 CEST	443	63335	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.414721012 CEST	443	63332	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.415874004 CEST	63332	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.415874004 CEST	63332	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.415955067 CEST	443	63332	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.415986061 CEST	443	63332	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.418720961 CEST	443	63334	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.419061899 CEST	63334	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.419094086 CEST	443	63334	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.419459105 CEST	63334	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.419470072 CEST	443	63334	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.423082113 CEST	443	63333	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.424029112 CEST	63333	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.424029112 CEST	63333	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.424048901 CEST	443	63333	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.424067020 CEST	443	63333	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.430638075 CEST	443	63331	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.430973053 CEST	63331	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.430990934 CEST	443	63331	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.431443930 CEST	63331	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.431447983 CEST	443	63331	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.542556047 CEST	443	63335	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.543621063 CEST	63335	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.543621063 CEST	63335	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.543642044 CEST	443	63335	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.543652058 CEST	443	63335	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.544346094 CEST	443	63332	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.544377089 CEST	443	63334	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.544539928 CEST	443	63332	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.544651985 CEST	443	63334	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.544701099 CEST	63332	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.544764996 CEST	63334	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.544764996 CEST	63334	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.544765949 CEST	63334	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.544969082 CEST	63332	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.545001984 CEST	443	63332	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.545043945 CEST	63332	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.545059919 CEST	443	63332	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.547774076 CEST	63337	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.547822952 CEST	443	63337	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.547858953 CEST	63336	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.547890902 CEST	443	63336	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.547920942 CEST	63337	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.548089981 CEST	63336	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.548177004 CEST	63337	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.548177958 CEST	63336	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.548191071 CEST	443	63336	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.548196077 CEST	443	63337	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.554048061 CEST	443	63333	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.554263115 CEST	443	63333	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.554359913 CEST	63333	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.554359913 CEST	63333	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.554382086 CEST	63333	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.554397106 CEST	443	63333	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.556613922 CEST	63338	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.556636095 CEST	443	63338	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.556756973 CEST	63338	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.556827068 CEST	63338	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.556833982 CEST	443	63338	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.561041117 CEST	443	63331	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.561176062 CEST	443	63331	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.561336040 CEST	63331	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.561336040 CEST	63331	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.561430931 CEST	63331	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.561444998 CEST	443	63331	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.563493967 CEST	63339	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.563509941 CEST	443	63339	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.563663006 CEST	63339	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.563709974 CEST	63339	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.563716888 CEST	443	63339	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.673181057 CEST	443	63335	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.673322916 CEST	443	63335	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.673407078 CEST	63335	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.673566103 CEST	63335	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.673567057 CEST	63335	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.673579931 CEST	443	63335	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.673588991 CEST	443	63335	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.679992914 CEST	63340	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.680074930 CEST	443	63340	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.680255890 CEST	63340	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.682897091 CEST	63340	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.682935953 CEST	443	63340	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:06.854124069 CEST	63334	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:06.854185104 CEST	443	63334	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.282665968 CEST	443	63338	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.283319950 CEST	63338	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.283334017 CEST	443	63338	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.284028053 CEST	63338	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.284033060 CEST	443	63338	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.290570974 CEST	443	63336	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.290956974 CEST	63336	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.290966034 CEST	443	63336	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.297693968 CEST	443	63337	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.306369066 CEST	63336	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.306379080 CEST	443	63339	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.306381941 CEST	443	63336	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.306790113 CEST	63339	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.306823015 CEST	443	63339	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.323267937 CEST	63339	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.323278904 CEST	443	63339	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.323759079 CEST	63337	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.323767900 CEST	443	63337	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.324234962 CEST	63337	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.324249983 CEST	443	63337	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.407625914 CEST	443	63340	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.407983065 CEST	63340	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.408020973 CEST	443	63340	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.408519983 CEST	63340	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.408533096 CEST	443	63340	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.410878897 CEST	443	63338	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.411036968 CEST	443	63338	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.411134005 CEST	63338	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.411159039 CEST	63338	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.411170006 CEST	443	63338	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.411180019 CEST	63338	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.411185026 CEST	443	63338	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.414537907 CEST	63341	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.414561987 CEST	443	63341	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.414823055 CEST	63341	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.414823055 CEST	63341	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.414846897 CEST	443	63341	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.434973955 CEST	443	63336	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.435098886 CEST	443	63336	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.435142994 CEST	63336	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.435183048 CEST	63336	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.435189009 CEST	443	63336	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.435198069 CEST	63336	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.435200930 CEST	443	63336	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.437402010 CEST	63342	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.437455893 CEST	443	63342	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.437628984 CEST	63342	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.437757015 CEST	63342	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.437783957 CEST	443	63342	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.450155973 CEST	443	63339	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.450494051 CEST	443	63339	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.450542927 CEST	63339	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.450584888 CEST	63339	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.450584888 CEST	63339	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.450606108 CEST	443	63339	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.450617075 CEST	443	63339	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.452133894 CEST	443	63337	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.452250004 CEST	443	63337	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.452303886 CEST	63337	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.452378035 CEST	63337	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.452385902 CEST	443	63337	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.452395916 CEST	63337	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.452403069 CEST	443	63337	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.453269958 CEST	63343	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.453283072 CEST	443	63343	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.453388929 CEST	63343	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.453633070 CEST	63343	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.453644991 CEST	443	63343	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.454251051 CEST	63344	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.454291105 CEST	443	63344	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.454391956 CEST	63344	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.454490900 CEST	63344	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.454510927 CEST	443	63344	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.536652088 CEST	443	63340	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.536921978 CEST	443	63340	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.536981106 CEST	63340	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.537053108 CEST	63340	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.537053108 CEST	63340	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.537080050 CEST	443	63340	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.537106991 CEST	443	63340	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.539520979 CEST	63345	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.539549112 CEST	443	63345	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:07.539608002 CEST	63345	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.539762020 CEST	63345	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:07.539773941 CEST	443	63345	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.164529085 CEST	443	63341	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.165153027 CEST	63341	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.165169954 CEST	443	63341	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.165282011 CEST	443	63342	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.165844917 CEST	63341	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.165849924 CEST	443	63341	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.165920973 CEST	63342	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.165982962 CEST	443	63342	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.166207075 CEST	63342	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.166222095 CEST	443	63342	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.178057909 CEST	443	63343	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.178445101 CEST	63343	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.178456068 CEST	443	63343	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.178987026 CEST	63343	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.178991079 CEST	443	63343	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.190419912 CEST	443	63344	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.192378044 CEST	63344	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.192466974 CEST	443	63344	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.192724943 CEST	63344	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.192739964 CEST	443	63344	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.270379066 CEST	443	63345	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.270709038 CEST	63345	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.270730019 CEST	443	63345	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.271233082 CEST	63345	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.271238089 CEST	443	63345	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.294783115 CEST	443	63341	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.294939041 CEST	443	63341	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.295016050 CEST	63341	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.295041084 CEST	63341	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.295049906 CEST	443	63341	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.295058966 CEST	63341	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.295063972 CEST	443	63341	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.297719955 CEST	63346	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.297822952 CEST	443	63346	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.297903061 CEST	63346	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.297998905 CEST	63346	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.298019886 CEST	443	63346	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.299384117 CEST	443	63342	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.299599886 CEST	443	63342	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.299772024 CEST	63342	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.299772024 CEST	63342	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.299772024 CEST	63342	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.301670074 CEST	63347	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.301687956 CEST	443	63347	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.301793098 CEST	63347	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.301892996 CEST	63347	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.301902056 CEST	443	63347	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.321476936 CEST	443	63344	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.321646929 CEST	443	63344	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.321729898 CEST	63344	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.321800947 CEST	63344	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.321800947 CEST	63344	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.321829081 CEST	443	63344	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.321851015 CEST	443	63344	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.324014902 CEST	63348	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.324034929 CEST	443	63348	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.324090958 CEST	63348	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.324206114 CEST	63348	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.324217081 CEST	443	63348	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.405173063 CEST	443	63345	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.405309916 CEST	443	63345	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.405364037 CEST	63345	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.405472994 CEST	63345	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.405481100 CEST	443	63345	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.405497074 CEST	63345	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.405499935 CEST	443	63345	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.408406019 CEST	63349	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.408488989 CEST	443	63349	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.408576012 CEST	63349	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.408704042 CEST	63349	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.408736944 CEST	443	63349	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:08.600985050 CEST	63342	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:08.601047993 CEST	443	63342	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.037237883 CEST	443	63346	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.038616896 CEST	63346	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.038670063 CEST	443	63346	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.039680004 CEST	63346	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.039695024 CEST	443	63346	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.042723894 CEST	443	63347	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.043215990 CEST	63347	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.043241978 CEST	443	63347	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.043610096 CEST	63347	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.043615103 CEST	443	63347	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.050985098 CEST	443	63348	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.051291943 CEST	63348	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.051322937 CEST	443	63348	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.051798105 CEST	63348	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.051801920 CEST	443	63348	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.156953096 CEST	443	63349	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.157651901 CEST	63349	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.157705069 CEST	443	63349	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.158416033 CEST	63349	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.158428907 CEST	443	63349	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.165546894 CEST	443	63346	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.165774107 CEST	443	63346	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.165843964 CEST	63346	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.166007042 CEST	63346	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.166007042 CEST	63346	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.166062117 CEST	443	63346	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.166091919 CEST	443	63346	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.168699980 CEST	63350	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.168720007 CEST	443	63350	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.168935061 CEST	63350	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.169083118 CEST	63350	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.169092894 CEST	443	63350	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.176090956 CEST	443	63347	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.176189899 CEST	443	63347	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.176230907 CEST	63347	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.176399946 CEST	63347	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.176413059 CEST	443	63347	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.178709030 CEST	63351	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.178762913 CEST	443	63351	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.178880930 CEST	63351	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.179156065 CEST	63351	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.179183960 CEST	443	63351	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.182235003 CEST	443	63348	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.182627916 CEST	443	63348	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.182676077 CEST	63348	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.182748079 CEST	63348	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.182754040 CEST	443	63348	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.182812929 CEST	63348	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.182816982 CEST	443	63348	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.184653997 CEST	63352	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.184695959 CEST	443	63352	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.184758902 CEST	63352	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.184920073 CEST	63352	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.184936047 CEST	443	63352	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.288429976 CEST	443	63349	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.288570881 CEST	443	63349	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.288645029 CEST	63349	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.290755033 CEST	63349	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.290755033 CEST	63349	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.290796995 CEST	443	63349	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.290824890 CEST	443	63349	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.293314934 CEST	63353	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.293374062 CEST	443	63353	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.293540001 CEST	63353	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.293723106 CEST	63353	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.293745041 CEST	443	63353	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.590656042 CEST	443	63343	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.590821028 CEST	443	63343	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.590879917 CEST	63343	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.590956926 CEST	63343	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.590976954 CEST	443	63343	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.590991020 CEST	63343	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.590998888 CEST	443	63343	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.593786955 CEST	63354	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.593822002 CEST	443	63354	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.593905926 CEST	63354	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.594028950 CEST	63354	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.594043016 CEST	443	63354	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.896790981 CEST	443	63350	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.897303104 CEST	63350	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.897319078 CEST	443	63350	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.897737026 CEST	63350	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.897743940 CEST	443	63350	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.902535915 CEST	443	63351	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.902885914 CEST	63351	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.902959108 CEST	443	63351	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.903351068 CEST	63351	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.903364897 CEST	443	63351	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.911206961 CEST	443	63352	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.911472082 CEST	63352	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.911492109 CEST	443	63352	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:09.911917925 CEST	63352	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:09.911922932 CEST	443	63352	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.024916887 CEST	443	63350	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.025068998 CEST	443	63350	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.025130987 CEST	63350	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.025224924 CEST	63350	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.025237083 CEST	443	63350	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.025249958 CEST	63350	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.025259018 CEST	443	63350	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.028326988 CEST	63355	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.028410912 CEST	443	63355	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.028492928 CEST	63355	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.028672934 CEST	63355	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.028707027 CEST	443	63355	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.030426025 CEST	443	63351	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.030484915 CEST	443	63351	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.030534983 CEST	63351	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.030644894 CEST	63351	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.030679941 CEST	443	63351	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.030705929 CEST	63351	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.030721903 CEST	443	63351	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.032794952 CEST	63356	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.032835007 CEST	443	63356	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.032979012 CEST	63356	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.033132076 CEST	63356	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.033148050 CEST	443	63356	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.040385008 CEST	443	63352	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.040673018 CEST	443	63353	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.040690899 CEST	443	63352	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.040750980 CEST	63352	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.041279078 CEST	63352	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.041291952 CEST	443	63352	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.041429996 CEST	63353	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.041448116 CEST	443	63353	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.041899920 CEST	63353	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.041907072 CEST	443	63353	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.044403076 CEST	63357	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.044469118 CEST	443	63357	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.044540882 CEST	63357	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.044665098 CEST	63357	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.044698000 CEST	443	63357	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.173146009 CEST	443	63353	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.173291922 CEST	443	63353	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.173362970 CEST	63353	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.173475027 CEST	63353	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.173506021 CEST	443	63353	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.173532963 CEST	63353	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.173547983 CEST	443	63353	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.176204920 CEST	63358	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.176239967 CEST	443	63358	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.176318884 CEST	63358	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.176506042 CEST	63358	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.176521063 CEST	443	63358	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.354655981 CEST	443	63354	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.355173111 CEST	63354	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.355190992 CEST	443	63354	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.355619907 CEST	63354	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.355623960 CEST	443	63354	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.488259077 CEST	443	63354	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.488389969 CEST	443	63354	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.488451004 CEST	63354	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.488639116 CEST	63354	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.488655090 CEST	443	63354	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.488665104 CEST	63354	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.488671064 CEST	443	63354	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.491564989 CEST	63359	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.491648912 CEST	443	63359	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.491777897 CEST	63359	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.492218971 CEST	63359	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.492253065 CEST	443	63359	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.759578943 CEST	443	63356	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.763936043 CEST	63356	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.763968945 CEST	443	63356	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.764614105 CEST	63356	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.764620066 CEST	443	63356	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.773164034 CEST	443	63355	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.773529053 CEST	63355	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.773557901 CEST	443	63355	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.773986101 CEST	63355	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.773993015 CEST	443	63355	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.795773983 CEST	443	63357	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.796109915 CEST	63357	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.796155930 CEST	443	63357	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.796438932 CEST	63357	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.796451092 CEST	443	63357	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.889254093 CEST	443	63356	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.889641047 CEST	443	63356	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.889691114 CEST	63356	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.889717102 CEST	63356	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.889731884 CEST	443	63356	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.889743090 CEST	63356	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.889748096 CEST	443	63356	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.892312050 CEST	63360	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.892352104 CEST	443	63360	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.892422915 CEST	63360	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.892586946 CEST	63360	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.892601013 CEST	443	63360	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.904016972 CEST	443	63358	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.904331923 CEST	63358	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.904350042 CEST	443	63358	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.904681921 CEST	63358	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.904686928 CEST	443	63358	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.905584097 CEST	443	63355	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.905808926 CEST	443	63355	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.905899048 CEST	63355	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.905962944 CEST	63355	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.905962944 CEST	63355	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.905994892 CEST	443	63355	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.906018972 CEST	443	63355	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.908454895 CEST	63361	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.908499002 CEST	443	63361	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.908590078 CEST	63361	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.908720016 CEST	63361	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.908750057 CEST	443	63361	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.930450916 CEST	443	63357	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.930704117 CEST	443	63357	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.930773020 CEST	63357	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.930825949 CEST	63357	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.930825949 CEST	63357	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.930857897 CEST	443	63357	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.930902958 CEST	443	63357	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.932986975 CEST	63362	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.933002949 CEST	443	63362	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:10.933084011 CEST	63362	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.933239937 CEST	63362	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:10.933253050 CEST	443	63362	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.032464027 CEST	443	63358	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.032656908 CEST	443	63358	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.032713890 CEST	63358	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.032761097 CEST	63358	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.032761097 CEST	63358	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.032771111 CEST	443	63358	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.032778025 CEST	443	63358	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.034708023 CEST	63363	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.034791946 CEST	443	63363	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.034868956 CEST	63363	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.035000086 CEST	63363	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.035032988 CEST	443	63363	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.236953020 CEST	443	63359	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.237473011 CEST	63359	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.237514973 CEST	443	63359	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.237899065 CEST	63359	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.237912893 CEST	443	63359	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.374248028 CEST	443	63359	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.374485016 CEST	443	63359	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.374587059 CEST	63359	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.374661922 CEST	63359	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.374661922 CEST	63359	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.374701023 CEST	443	63359	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.374728918 CEST	443	63359	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.377402067 CEST	63364	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.377440929 CEST	443	63364	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.377504110 CEST	63364	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.377652884 CEST	63364	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.377667904 CEST	443	63364	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.641469955 CEST	443	63360	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.641876936 CEST	443	63361	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.642182112 CEST	63361	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.642226934 CEST	443	63361	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.642277956 CEST	63360	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.642290115 CEST	443	63360	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.642667055 CEST	63361	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.642680883 CEST	443	63361	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.642724037 CEST	63360	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.642729998 CEST	443	63360	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.673403025 CEST	443	63362	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.674055099 CEST	63362	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.674063921 CEST	443	63362	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.674721956 CEST	63362	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.674726963 CEST	443	63362	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.769546032 CEST	443	63363	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.770034075 CEST	63363	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.770071030 CEST	443	63363	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.770735979 CEST	63363	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.770742893 CEST	443	63363	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.771524906 CEST	443	63361	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.771713972 CEST	443	63361	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.771852970 CEST	63361	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.771951914 CEST	63361	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.771967888 CEST	443	63361	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.771981001 CEST	63361	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.771987915 CEST	443	63361	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.774606943 CEST	443	63360	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.774657011 CEST	443	63360	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.774811983 CEST	63360	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.775038958 CEST	63360	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.775055885 CEST	443	63360	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.775064945 CEST	63360	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.775070906 CEST	443	63360	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.776024103 CEST	63365	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.776108027 CEST	443	63365	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.776192904 CEST	63365	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.776400089 CEST	63365	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.776436090 CEST	443	63365	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.777549982 CEST	63366	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.777585030 CEST	443	63366	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.777653933 CEST	63366	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.777765036 CEST	63366	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.777780056 CEST	443	63366	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.805234909 CEST	443	63362	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.805584908 CEST	443	63362	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.805634975 CEST	63362	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.805655956 CEST	63362	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.805663109 CEST	443	63362	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.805671930 CEST	63362	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.805675983 CEST	443	63362	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.807420969 CEST	63367	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.807444096 CEST	443	63367	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.807692051 CEST	63367	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.807809114 CEST	63367	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.807841063 CEST	443	63367	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.899410963 CEST	443	63363	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.899507046 CEST	443	63363	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.899579048 CEST	63363	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.907437086 CEST	63363	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.907437086 CEST	63363	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.907474041 CEST	443	63363	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.907520056 CEST	443	63363	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.910084009 CEST	63368	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.910188913 CEST	443	63368	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:11.914025068 CEST	63368	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.916429996 CEST	63368	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:11.916465044 CEST	443	63368	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.110066891 CEST	443	63364	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.115356922 CEST	63364	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.115389109 CEST	443	63364	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.147466898 CEST	63364	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.147480965 CEST	443	63364	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.273093939 CEST	443	63364	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.273686886 CEST	443	63364	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.273741961 CEST	63364	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.274245977 CEST	63364	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.274266005 CEST	443	63364	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.274276018 CEST	63364	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.274281979 CEST	443	63364	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.284310102 CEST	63370	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.284415960 CEST	443	63370	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.284497023 CEST	63370	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.284634113 CEST	63370	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.284670115 CEST	443	63370	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.511610985 CEST	443	63366	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.512710094 CEST	63366	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.512726068 CEST	443	63366	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.514111996 CEST	63366	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.514117002 CEST	443	63366	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.525269032 CEST	443	63365	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.525814056 CEST	63365	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.525888920 CEST	443	63365	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.526681900 CEST	63365	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.526698112 CEST	443	63365	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.537461042 CEST	443	63367	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.537964106 CEST	63367	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.537981033 CEST	443	63367	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.538878918 CEST	63367	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.538889885 CEST	443	63367	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.641144037 CEST	443	63366	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.641308069 CEST	443	63366	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.641360998 CEST	63366	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.641726971 CEST	63366	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.641741991 CEST	443	63366	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.641753912 CEST	63366	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.641760111 CEST	443	63366	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.648205996 CEST	63371	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.648247004 CEST	443	63371	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.648317099 CEST	63371	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.648879051 CEST	63371	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.648895979 CEST	443	63371	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.649646997 CEST	443	63368	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.650376081 CEST	63368	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.650408030 CEST	443	63368	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.651484013 CEST	63368	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.651499033 CEST	443	63368	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.657228947 CEST	443	63365	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.657284975 CEST	443	63365	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.657341957 CEST	63365	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.657794952 CEST	63365	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.657834053 CEST	443	63365	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.657862902 CEST	63365	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.657879114 CEST	443	63365	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.661541939 CEST	63372	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.661571980 CEST	443	63372	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.661633015 CEST	63372	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.662000895 CEST	63372	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.662012100 CEST	443	63372	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.667428970 CEST	443	63367	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.667484999 CEST	443	63367	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.667538881 CEST	63367	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.667623997 CEST	63367	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.667642117 CEST	443	63367	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.671933889 CEST	63373	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.671967030 CEST	443	63373	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.672023058 CEST	63373	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.672255993 CEST	63373	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.672276974 CEST	443	63373	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.782000065 CEST	443	63368	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.782349110 CEST	443	63368	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.782401085 CEST	63368	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.794171095 CEST	63368	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.794219971 CEST	443	63368	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.794250965 CEST	63368	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.794267893 CEST	443	63368	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.798830986 CEST	63374	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.798844099 CEST	443	63374	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:12.798894882 CEST	63374	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.799217939 CEST	63374	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:12.799227953 CEST	443	63374	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.017791986 CEST	443	63370	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.060100079 CEST	63370	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.060134888 CEST	443	63370	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.060419083 CEST	63370	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.060435057 CEST	443	63370	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.190596104 CEST	443	63370	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.190665960 CEST	443	63370	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.192115068 CEST	63370	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.192540884 CEST	63370	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.192593098 CEST	443	63370	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.192624092 CEST	63370	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.192640066 CEST	443	63370	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.197834969 CEST	63375	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.197860003 CEST	443	63375	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.197917938 CEST	63375	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.198415995 CEST	63375	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.198430061 CEST	443	63375	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.387785912 CEST	443	63372	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.388287067 CEST	63372	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.388299942 CEST	443	63372	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.388751030 CEST	63372	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.388756037 CEST	443	63372	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.400736094 CEST	443	63371	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.401427031 CEST	63371	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.401427031 CEST	63371	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.401453018 CEST	443	63371	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.401464939 CEST	443	63371	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.412879944 CEST	443	63373	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.413191080 CEST	63373	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.413220882 CEST	443	63373	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.413604975 CEST	63373	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.413611889 CEST	443	63373	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.514935017 CEST	443	63372	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.515085936 CEST	443	63372	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.515250921 CEST	63372	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.515250921 CEST	63372	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.515275955 CEST	63372	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.515286922 CEST	443	63372	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.518279076 CEST	63376	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.518296957 CEST	443	63376	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.518548012 CEST	63376	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.518548012 CEST	63376	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.518574953 CEST	443	63376	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.531048059 CEST	443	63374	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.531415939 CEST	63374	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.531430006 CEST	443	63374	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.531835079 CEST	63374	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.531838894 CEST	443	63374	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.532505989 CEST	443	63371	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.545392990 CEST	443	63373	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.545916080 CEST	443	63373	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.546010017 CEST	63373	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.546010017 CEST	63373	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.546133041 CEST	63373	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.546152115 CEST	443	63373	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.547924042 CEST	63377	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.547979116 CEST	443	63377	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.548141956 CEST	63377	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.548247099 CEST	63377	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.548264980 CEST	443	63377	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.585355997 CEST	63371	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.585376978 CEST	443	63371	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.585477114 CEST	63371	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.585477114 CEST	63371	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.585491896 CEST	443	63371	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.585987091 CEST	443	63371	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.586086988 CEST	443	63371	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.586168051 CEST	63371	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.587627888 CEST	63378	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.587644100 CEST	443	63378	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.588131905 CEST	63378	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.588131905 CEST	63378	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.588150978 CEST	443	63378	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.661344051 CEST	443	63374	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.661377907 CEST	443	63374	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.661694050 CEST	63374	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.661694050 CEST	63374	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.661828995 CEST	63374	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.661838055 CEST	443	63374	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.664604902 CEST	63379	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.664704084 CEST	443	63379	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.664793015 CEST	63379	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.664978981 CEST	63379	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.664999962 CEST	443	63379	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.948402882 CEST	443	63375	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.949949026 CEST	63375	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.949979067 CEST	443	63375	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:13.951168060 CEST	63375	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:13.951174021 CEST	443	63375	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.079963923 CEST	443	63375	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.080152035 CEST	443	63375	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.080246925 CEST	63375	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.080845118 CEST	63375	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.080856085 CEST	443	63375	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.080888987 CEST	63375	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.080894947 CEST	443	63375	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.084534883 CEST	63380	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.084549904 CEST	443	63380	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.084675074 CEST	63380	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.087879896 CEST	63380	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.087893009 CEST	443	63380	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.300668955 CEST	443	63376	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.301331043 CEST	63376	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.301357985 CEST	443	63376	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.302206993 CEST	63376	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.302212954 CEST	443	63376	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.349397898 CEST	443	63378	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.349971056 CEST	63378	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.349981070 CEST	443	63378	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.350889921 CEST	63378	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.350898027 CEST	443	63378	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.416429043 CEST	443	63379	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.417071104 CEST	63379	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.417099953 CEST	443	63379	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.417490005 CEST	63379	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.417495012 CEST	443	63379	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.431154966 CEST	443	63376	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.431379080 CEST	443	63376	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.431432009 CEST	63376	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.431561947 CEST	63376	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.431576014 CEST	443	63376	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.431587934 CEST	63376	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.431593895 CEST	443	63376	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.437011957 CEST	63381	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.437036037 CEST	443	63381	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.437119007 CEST	63381	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.437418938 CEST	63381	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.437429905 CEST	443	63381	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.482388020 CEST	443	63378	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.482559919 CEST	443	63378	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.482624054 CEST	63378	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.482671976 CEST	63378	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.482681036 CEST	443	63378	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.482698917 CEST	63378	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.482703924 CEST	443	63378	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.487183094 CEST	63382	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.487200022 CEST	443	63382	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.487262964 CEST	63382	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.487489939 CEST	63382	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.487504005 CEST	443	63382	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.522383928 CEST	443	63377	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.523387909 CEST	63377	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.523400068 CEST	443	63377	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.524071932 CEST	63377	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.524076939 CEST	443	63377	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.554316998 CEST	443	63379	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.554812908 CEST	443	63379	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.554891109 CEST	63379	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.564429998 CEST	63379	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.564448118 CEST	443	63379	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.564457893 CEST	63379	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.564462900 CEST	443	63379	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.581546068 CEST	63383	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.581559896 CEST	443	63383	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.581748009 CEST	63383	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.581783056 CEST	63383	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.581788063 CEST	443	63383	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.651211977 CEST	443	63377	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.651371002 CEST	443	63377	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.651427031 CEST	63377	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.651603937 CEST	63377	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.651624918 CEST	443	63377	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.651648998 CEST	63377	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.651654005 CEST	443	63377	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.654428005 CEST	63384	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.654504061 CEST	443	63384	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.654819012 CEST	63384	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.655181885 CEST	63384	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.655215025 CEST	443	63384	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.820254087 CEST	443	63380	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.820821047 CEST	63380	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.820842981 CEST	443	63380	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.821319103 CEST	63380	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.821326017 CEST	443	63380	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.956916094 CEST	443	63380	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.956984997 CEST	443	63380	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.957035065 CEST	63380	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.957241058 CEST	63380	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.957254887 CEST	443	63380	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.957267046 CEST	63380	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.957273006 CEST	443	63380	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.960197926 CEST	63385	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.960241079 CEST	443	63385	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:14.960298061 CEST	63385	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.960741997 CEST	63385	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:14.960761070 CEST	443	63385	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.176130056 CEST	443	63381	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.177714109 CEST	63381	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.177721977 CEST	443	63381	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.178908110 CEST	63381	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.178911924 CEST	443	63381	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.230365992 CEST	443	63382	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.254544020 CEST	63382	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.254555941 CEST	443	63382	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.255605936 CEST	63382	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.255610943 CEST	443	63382	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.308849096 CEST	443	63381	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.308943987 CEST	443	63381	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.309012890 CEST	63381	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.309681892 CEST	63381	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.309690952 CEST	443	63381	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.309699059 CEST	63381	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.309704065 CEST	443	63381	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.319581032 CEST	63386	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.319653034 CEST	443	63386	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.319791079 CEST	63386	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.329760075 CEST	443	63383	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.336066961 CEST	63386	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.336113930 CEST	443	63386	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.336410046 CEST	63383	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.336416006 CEST	443	63383	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.336827993 CEST	63383	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.336832047 CEST	443	63383	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.388555050 CEST	443	63382	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.388643026 CEST	443	63382	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.388700008 CEST	63382	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.389293909 CEST	63382	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.389312029 CEST	443	63382	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.389339924 CEST	63382	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.389347076 CEST	443	63382	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.393325090 CEST	63387	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.393373013 CEST	443	63387	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.393513918 CEST	63387	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.393630028 CEST	63387	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.393649101 CEST	443	63387	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.399025917 CEST	443	63384	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.399559975 CEST	63384	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.399620056 CEST	443	63384	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.400136948 CEST	63384	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.400151968 CEST	443	63384	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.471668005 CEST	443	63383	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.471812010 CEST	443	63383	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.471867085 CEST	63383	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.472213030 CEST	63383	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.472218990 CEST	443	63383	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.472258091 CEST	63383	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.472261906 CEST	443	63383	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.476757050 CEST	63388	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.476788044 CEST	443	63388	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.476923943 CEST	63388	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.477174997 CEST	63388	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.477186918 CEST	443	63388	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.532552004 CEST	443	63384	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.532686949 CEST	443	63384	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.532860041 CEST	63384	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.532978058 CEST	63384	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.532979012 CEST	63384	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.532999039 CEST	443	63384	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.533013105 CEST	443	63384	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.536942005 CEST	63389	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.536983013 CEST	443	63389	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.537049055 CEST	63389	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.537388086 CEST	63389	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.537415028 CEST	443	63389	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.693914890 CEST	443	63385	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.694529057 CEST	63385	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.694555044 CEST	443	63385	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.695400953 CEST	63385	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.695408106 CEST	443	63385	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.824541092 CEST	443	63385	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.824673891 CEST	443	63385	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.824814081 CEST	63385	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.825368881 CEST	63385	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.825392962 CEST	443	63385	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.825480938 CEST	63385	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.825489044 CEST	443	63385	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.831048012 CEST	63390	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.831146002 CEST	443	63390	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:15.831300020 CEST	63390	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.831500053 CEST	63390	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:15.831535101 CEST	443	63390	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.086693048 CEST	443	63386	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.087331057 CEST	63386	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.087361097 CEST	443	63386	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.087733984 CEST	63386	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.087743044 CEST	443	63386	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.142996073 CEST	443	63387	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.143409014 CEST	63387	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.143419981 CEST	443	63387	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.143789053 CEST	63387	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.143794060 CEST	443	63387	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.214401960 CEST	443	63388	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.214776993 CEST	63388	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.214813948 CEST	443	63388	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.215138912 CEST	63388	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.215146065 CEST	443	63388	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.225023985 CEST	443	63386	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.225184917 CEST	443	63386	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.225370884 CEST	63386	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.225370884 CEST	63386	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.225370884 CEST	63386	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.228487015 CEST	63391	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.228534937 CEST	443	63391	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.228703976 CEST	63391	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.228830099 CEST	63391	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.228844881 CEST	443	63391	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.274888992 CEST	443	63387	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.275127888 CEST	443	63387	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.275197029 CEST	63387	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.275245905 CEST	63387	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.275260925 CEST	443	63387	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.275274038 CEST	63387	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.275279999 CEST	443	63387	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.277880907 CEST	63392	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.277920008 CEST	443	63392	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.278006077 CEST	63392	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.278163910 CEST	63392	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.278182983 CEST	443	63392	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.295402050 CEST	443	63389	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.295794964 CEST	63389	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.295813084 CEST	443	63389	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.296237946 CEST	63389	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.296246052 CEST	443	63389	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.343801022 CEST	443	63388	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.344003916 CEST	443	63388	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.344074965 CEST	63388	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.344135046 CEST	63388	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.344165087 CEST	443	63388	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.344208002 CEST	63388	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.344223022 CEST	443	63388	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.346479893 CEST	63393	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.346524954 CEST	443	63393	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.346676111 CEST	63393	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.346807003 CEST	63393	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.346823931 CEST	443	63393	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.431710005 CEST	443	63389	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.431859016 CEST	443	63389	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.431910038 CEST	63389	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.432307005 CEST	63389	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.432334900 CEST	443	63389	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.442284107 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 01:26:16.442349911 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 01:26:16.442451954 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 01:26:16.444847107 CEST	63386	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.444876909 CEST	443	63386	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.448266983 CEST	63394	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.448283911 CEST	443	63394	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.448373079 CEST	63394	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.449945927 CEST	63394	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.449971914 CEST	443	63394	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.544326067 CEST	63395	443	192.168.2.4	142.250.185.196
Oct 24, 2024 01:26:16.544370890 CEST	443	63395	142.250.185.196	192.168.2.4
Oct 24, 2024 01:26:16.544434071 CEST	63395	443	192.168.2.4	142.250.185.196
Oct 24, 2024 01:26:16.544696093 CEST	63395	443	192.168.2.4	142.250.185.196
Oct 24, 2024 01:26:16.544717073 CEST	443	63395	142.250.185.196	192.168.2.4
Oct 24, 2024 01:26:16.553354025 CEST	443	63390	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.553879976 CEST	63390	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.553896904 CEST	443	63390	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.554400921 CEST	63390	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.554406881 CEST	443	63390	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.681492090 CEST	443	63390	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.681704044 CEST	443	63390	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.681768894 CEST	63390	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.682208061 CEST	63390	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.682209015 CEST	63390	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.682245016 CEST	443	63390	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.682271957 CEST	443	63390	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.685678005 CEST	63396	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.685709953 CEST	443	63396	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.685771942 CEST	63396	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.685950041 CEST	63396	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.685966015 CEST	443	63396	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.975783110 CEST	443	63391	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.976538897 CEST	63391	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.976569891 CEST	443	63391	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:16.977118015 CEST	63391	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:16.977130890 CEST	443	63391	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.025029898 CEST	443	63392	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.025470972 CEST	63392	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.025484085 CEST	443	63392	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.025928020 CEST	63392	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.025934935 CEST	443	63392	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.106827974 CEST	443	63391	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.107024908 CEST	443	63391	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.107095957 CEST	63391	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.107198000 CEST	63391	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.107234955 CEST	443	63391	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.107274055 CEST	63391	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.107284069 CEST	443	63391	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.110544920 CEST	63397	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.110563993 CEST	443	63397	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.110779047 CEST	63397	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.110873938 CEST	63397	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.110878944 CEST	443	63397	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.153578043 CEST	443	63392	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.153912067 CEST	443	63392	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.154136896 CEST	63392	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.154268980 CEST	63392	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.154284000 CEST	443	63392	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.154298067 CEST	63392	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.154305935 CEST	443	63392	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.157782078 CEST	63398	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.157823086 CEST	443	63398	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.157881975 CEST	63398	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.158195972 CEST	63398	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.158214092 CEST	443	63398	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.185381889 CEST	443	63394	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.185817003 CEST	63394	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.185826063 CEST	443	63394	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.186265945 CEST	63394	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.186271906 CEST	443	63394	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.285463095 CEST	443	63393	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.286190987 CEST	63393	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.286274910 CEST	443	63393	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.286643028 CEST	63393	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.286659002 CEST	443	63393	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.314059019 CEST	443	63394	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.314256907 CEST	443	63394	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.314338923 CEST	63394	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.314443111 CEST	63394	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.314454079 CEST	443	63394	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.314486980 CEST	63394	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.314491987 CEST	443	63394	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.317418098 CEST	63399	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.317439079 CEST	443	63399	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.317703009 CEST	63399	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.317703009 CEST	63399	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.317728043 CEST	443	63399	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.397706985 CEST	443	63395	142.250.185.196	192.168.2.4
Oct 24, 2024 01:26:17.398026943 CEST	63395	443	192.168.2.4	142.250.185.196
Oct 24, 2024 01:26:17.398060083 CEST	443	63395	142.250.185.196	192.168.2.4
Oct 24, 2024 01:26:17.399138927 CEST	443	63395	142.250.185.196	192.168.2.4
Oct 24, 2024 01:26:17.399589062 CEST	63395	443	192.168.2.4	142.250.185.196
Oct 24, 2024 01:26:17.399768114 CEST	443	63395	142.250.185.196	192.168.2.4
Oct 24, 2024 01:26:17.414222956 CEST	443	63393	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.414746046 CEST	443	63393	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.414968014 CEST	63393	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.414968014 CEST	63393	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.414968967 CEST	63393	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.417553902 CEST	63400	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.417637110 CEST	443	63400	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.417721033 CEST	63400	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.417885065 CEST	63400	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.417907953 CEST	443	63400	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.424472094 CEST	443	63396	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.424918890 CEST	63396	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.424963951 CEST	443	63396	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.425379038 CEST	63396	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.425393105 CEST	443	63396	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.444778919 CEST	63395	443	192.168.2.4	142.250.185.196
Oct 24, 2024 01:26:17.554322004 CEST	443	63396	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.554477930 CEST	443	63396	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.554593086 CEST	63396	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.554639101 CEST	63396	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.554639101 CEST	63396	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.554662943 CEST	443	63396	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.554687977 CEST	443	63396	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.557327986 CEST	63401	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.557359934 CEST	443	63401	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.557574987 CEST	63401	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.557729959 CEST	63401	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.557735920 CEST	443	63401	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.726025105 CEST	63393	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.726089954 CEST	443	63393	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.842381001 CEST	443	63397	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.842983007 CEST	63397	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.842995882 CEST	443	63397	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.843600035 CEST	63397	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.843605995 CEST	443	63397	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.890625000 CEST	443	63398	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.890983105 CEST	63398	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.891064882 CEST	443	63398	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.891396046 CEST	63398	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.891411066 CEST	443	63398	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.972507954 CEST	443	63397	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.972667933 CEST	443	63397	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.972779989 CEST	63397	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.972851992 CEST	63397	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.972851992 CEST	63397	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.972861052 CEST	443	63397	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.972867966 CEST	443	63397	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.975665092 CEST	63402	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.975713968 CEST	443	63402	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:17.975874901 CEST	63402	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.976114988 CEST	63402	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:17.976147890 CEST	443	63402	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.017873049 CEST	443	63398	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.018142939 CEST	443	63398	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.018321991 CEST	443	63398	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.018348932 CEST	63398	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.018421888 CEST	63398	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.018421888 CEST	63398	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.018466949 CEST	63398	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.018502951 CEST	443	63398	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.021290064 CEST	63403	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.021332026 CEST	443	63403	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.021498919 CEST	63403	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.021682024 CEST	63403	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.021696091 CEST	443	63403	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.048224926 CEST	443	63399	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.048625946 CEST	63399	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.048636913 CEST	443	63399	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.049173117 CEST	63399	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.049176931 CEST	443	63399	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.141387939 CEST	443	63400	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.141964912 CEST	63400	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.141994953 CEST	443	63400	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.142462969 CEST	63400	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.142477036 CEST	443	63400	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.176490068 CEST	443	63399	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.178421021 CEST	443	63399	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.178525925 CEST	63399	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.178587914 CEST	63399	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.178589106 CEST	63399	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.178594112 CEST	443	63399	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.178600073 CEST	443	63399	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.181771994 CEST	63404	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.181813002 CEST	443	63404	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.181899071 CEST	63404	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.182106972 CEST	63404	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.182123899 CEST	443	63404	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.286175013 CEST	443	63400	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.286611080 CEST	443	63400	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.286791086 CEST	63400	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.286792040 CEST	63400	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.286792040 CEST	63400	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.293064117 CEST	63405	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.293092966 CEST	443	63405	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.293241978 CEST	63405	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.293436050 CEST	63405	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.293450117 CEST	443	63405	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.309305906 CEST	443	63401	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.309689999 CEST	63401	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.309706926 CEST	443	63401	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.310194969 CEST	63401	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.310199022 CEST	443	63401	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.441699982 CEST	443	63401	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.441750050 CEST	443	63401	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.441800117 CEST	63401	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.441812038 CEST	443	63401	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.441880941 CEST	443	63401	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.441934109 CEST	63401	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.442070961 CEST	63401	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.442081928 CEST	443	63401	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.442090988 CEST	63401	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.442095995 CEST	443	63401	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.444741011 CEST	63406	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.444811106 CEST	443	63406	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.445031881 CEST	63406	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.445235968 CEST	63406	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.445266962 CEST	443	63406	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.585388899 CEST	63400	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.585441113 CEST	443	63400	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.720247984 CEST	443	63402	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.720805883 CEST	63402	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.720823050 CEST	443	63402	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.721297026 CEST	63402	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.721302986 CEST	443	63402	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.763607979 CEST	443	63403	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.764008045 CEST	63403	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.764018059 CEST	443	63403	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.764463902 CEST	63403	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.764468908 CEST	443	63403	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.852220058 CEST	443	63402	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.852276087 CEST	443	63402	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.852335930 CEST	63402	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.852348089 CEST	443	63402	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.852395058 CEST	63402	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.852413893 CEST	443	63402	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.852466106 CEST	63402	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.852638960 CEST	63402	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.852650881 CEST	443	63402	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.852664948 CEST	63402	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.852669954 CEST	443	63402	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.855840921 CEST	63407	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.855880976 CEST	443	63407	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.855954885 CEST	63407	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.856080055 CEST	63407	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.856098890 CEST	443	63407	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.892925978 CEST	443	63403	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.892981052 CEST	443	63403	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.893037081 CEST	63403	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.893049002 CEST	443	63403	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.893255949 CEST	63403	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.893260002 CEST	443	63403	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.893269062 CEST	63403	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.893311024 CEST	443	63403	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.895612001 CEST	63408	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.895639896 CEST	443	63408	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.895737886 CEST	63408	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.895924091 CEST	63408	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.895939112 CEST	443	63408	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.932574987 CEST	443	63404	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.933063984 CEST	63404	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.933104992 CEST	443	63404	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:18.933532953 CEST	63404	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:18.933552027 CEST	443	63404	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.029805899 CEST	443	63405	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.034379005 CEST	63405	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.034399033 CEST	443	63405	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.034692049 CEST	63405	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.034697056 CEST	443	63405	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.067368984 CEST	443	63404	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.067523003 CEST	443	63404	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.067594051 CEST	63404	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.067698002 CEST	63404	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.067719936 CEST	443	63404	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.067738056 CEST	63404	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.067744017 CEST	443	63404	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.070827961 CEST	63409	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.070871115 CEST	443	63409	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.071038008 CEST	63409	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.071192980 CEST	63409	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.071229935 CEST	443	63409	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.164087057 CEST	443	63405	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.164244890 CEST	443	63405	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.164474010 CEST	63405	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.164474010 CEST	63405	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.164505005 CEST	63405	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.164520979 CEST	443	63405	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.167371035 CEST	63410	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.167408943 CEST	443	63410	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.167541981 CEST	63410	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.167714119 CEST	63410	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.167731047 CEST	443	63410	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.190853119 CEST	443	63406	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.192837954 CEST	63406	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.192867041 CEST	443	63406	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.193221092 CEST	63406	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.193229914 CEST	443	63406	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.321810007 CEST	443	63406	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.321969986 CEST	443	63406	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.322103024 CEST	63406	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.322310925 CEST	63406	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.322312117 CEST	63406	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.322372913 CEST	443	63406	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.322387934 CEST	443	63406	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.325294971 CEST	63411	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.325378895 CEST	443	63411	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.325722933 CEST	63411	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.325824022 CEST	63411	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.325854063 CEST	443	63411	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.593740940 CEST	443	63407	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.594938993 CEST	63407	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.594957113 CEST	443	63407	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.595328093 CEST	63407	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.595334053 CEST	443	63407	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.633470058 CEST	443	63408	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.633822918 CEST	63408	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.633836985 CEST	443	63408	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.634283066 CEST	63408	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.634288073 CEST	443	63408	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.724577904 CEST	443	63407	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.724739075 CEST	443	63407	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.724972010 CEST	63407	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.724972010 CEST	63407	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.724972010 CEST	63407	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.728060961 CEST	63412	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.728094101 CEST	443	63412	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.728229046 CEST	63412	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.728306055 CEST	63412	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.728312016 CEST	443	63412	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.762923956 CEST	443	63408	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.763082027 CEST	443	63408	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.763119936 CEST	63408	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.763194084 CEST	63408	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.763207912 CEST	443	63408	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.763217926 CEST	63408	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.763223886 CEST	443	63408	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.765398026 CEST	63413	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.765481949 CEST	443	63413	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.765588999 CEST	63413	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.765738964 CEST	63413	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.765758991 CEST	443	63413	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.800205946 CEST	443	63409	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.800707102 CEST	63409	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.800790071 CEST	443	63409	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.801063061 CEST	63409	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.801078081 CEST	443	63409	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.910079002 CEST	443	63410	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.910657883 CEST	63410	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.910669088 CEST	443	63410	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.911150932 CEST	63410	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.911156893 CEST	443	63410	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.928767920 CEST	443	63409	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.928927898 CEST	443	63409	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.929023981 CEST	63409	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.929101944 CEST	63409	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.929140091 CEST	443	63409	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.929172993 CEST	63409	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.929188967 CEST	443	63409	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.931921959 CEST	63414	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.931961060 CEST	443	63414	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:19.932146072 CEST	63414	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.932334900 CEST	63414	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:19.932347059 CEST	443	63414	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.038558960 CEST	63407	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.038583994 CEST	443	63407	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.039530039 CEST	443	63410	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.039932966 CEST	443	63410	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.040249109 CEST	63410	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.040366888 CEST	63410	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.040385008 CEST	443	63410	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.040395021 CEST	63410	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.040400028 CEST	443	63410	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.050899029 CEST	63415	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.050983906 CEST	443	63415	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.051101923 CEST	63415	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.051244020 CEST	63415	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.051263094 CEST	443	63415	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.075613022 CEST	443	63411	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.076091051 CEST	63411	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.076108932 CEST	443	63411	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.076546907 CEST	63411	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.076551914 CEST	443	63411	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.209635019 CEST	443	63411	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.209721088 CEST	443	63411	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.209795952 CEST	63411	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.210122108 CEST	63411	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.210130930 CEST	443	63411	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.210170984 CEST	63411	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.210176945 CEST	443	63411	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.213840008 CEST	63416	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.213900089 CEST	443	63416	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.214133024 CEST	63416	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.214315891 CEST	63416	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.214338064 CEST	443	63416	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.477169991 CEST	443	63412	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.477749109 CEST	63412	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.477770090 CEST	443	63412	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.478218079 CEST	63412	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.478224039 CEST	443	63412	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.521027088 CEST	443	63413	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.521689892 CEST	63413	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.521752119 CEST	443	63413	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.522188902 CEST	63413	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.522243977 CEST	443	63413	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.606256008 CEST	443	63412	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.606416941 CEST	443	63412	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.606493950 CEST	63412	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.606654882 CEST	63412	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.606654882 CEST	63412	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.606674910 CEST	443	63412	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.606686115 CEST	443	63412	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.609659910 CEST	63417	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.609688997 CEST	443	63417	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.609747887 CEST	63417	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.609992027 CEST	63417	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.610002995 CEST	443	63417	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.657260895 CEST	443	63413	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.657414913 CEST	443	63413	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.657565117 CEST	63413	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.657566071 CEST	63413	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.657566071 CEST	63413	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.660068989 CEST	63418	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.660152912 CEST	443	63418	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.660271883 CEST	63418	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.660511017 CEST	63418	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.660533905 CEST	443	63418	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.678805113 CEST	443	63414	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.679234982 CEST	63414	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.679250956 CEST	443	63414	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.679704905 CEST	63414	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.679712057 CEST	443	63414	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.944927931 CEST	443	63414	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.944998980 CEST	443	63414	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.945086002 CEST	63414	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.945099115 CEST	443	63414	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.945132971 CEST	443	63414	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.945187092 CEST	63414	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.945348978 CEST	63414	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.945365906 CEST	443	63414	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.945380926 CEST	63414	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.945386887 CEST	443	63414	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.945857048 CEST	443	63415	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.946593046 CEST	63415	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.946652889 CEST	443	63415	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.947040081 CEST	63415	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.947093964 CEST	443	63415	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.948532104 CEST	63419	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.948563099 CEST	443	63419	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.948621035 CEST	63419	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.948724985 CEST	63419	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.948731899 CEST	443	63419	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:20.960529089 CEST	63413	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:20.960592031 CEST	443	63413	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.076253891 CEST	443	63415	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.076306105 CEST	443	63415	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.076525927 CEST	63415	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.078047037 CEST	443	63416	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.078247070 CEST	63415	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.078294992 CEST	443	63415	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.078327894 CEST	63415	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.078344107 CEST	443	63415	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.078634024 CEST	63416	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.078666925 CEST	443	63416	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.079237938 CEST	63416	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.079245090 CEST	443	63416	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.081742048 CEST	63420	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.081770897 CEST	443	63420	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.081850052 CEST	63420	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.081989050 CEST	63420	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.082005024 CEST	443	63420	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.207334042 CEST	443	63416	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.207408905 CEST	443	63416	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.207516909 CEST	443	63416	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.207581043 CEST	63416	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.207581043 CEST	63416	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.207705975 CEST	63416	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.207731009 CEST	443	63416	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.207745075 CEST	63416	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.207757950 CEST	443	63416	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.211308956 CEST	63421	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.211394072 CEST	443	63421	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.211508036 CEST	63421	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.211783886 CEST	63421	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.211846113 CEST	443	63421	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.352828979 CEST	443	63417	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.353463888 CEST	63417	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.353496075 CEST	443	63417	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.353904963 CEST	63417	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.353931904 CEST	443	63417	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.397682905 CEST	443	63418	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.398153067 CEST	63418	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.398191929 CEST	443	63418	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.398600101 CEST	63418	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.398607969 CEST	443	63418	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.482652903 CEST	443	63417	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.482741117 CEST	443	63417	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.483095884 CEST	63417	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.483095884 CEST	63417	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.483095884 CEST	63417	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.485873938 CEST	63422	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.485903025 CEST	443	63422	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.486007929 CEST	63422	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.486324072 CEST	63422	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.486339092 CEST	443	63422	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.527223110 CEST	443	63418	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.527412891 CEST	443	63418	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.527472019 CEST	63418	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.527535915 CEST	63418	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.527535915 CEST	63418	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.527575970 CEST	443	63418	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.527599096 CEST	443	63418	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.529844999 CEST	63423	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.529930115 CEST	443	63423	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.530143023 CEST	63423	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.530143023 CEST	63423	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.530263901 CEST	443	63423	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.688165903 CEST	443	63419	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.688767910 CEST	63419	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.688808918 CEST	443	63419	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.689245939 CEST	63419	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.689275026 CEST	443	63419	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.783668995 CEST	63417	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.783699036 CEST	443	63417	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.822463036 CEST	443	63420	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.823009014 CEST	63420	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.823036909 CEST	443	63420	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.823546886 CEST	63420	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.823554039 CEST	443	63420	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.826899052 CEST	443	63419	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.827054977 CEST	443	63419	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.827244043 CEST	63419	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.827244043 CEST	63419	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.827244043 CEST	63419	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.830159903 CEST	63424	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.830216885 CEST	443	63424	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.830296993 CEST	63424	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.830435991 CEST	63424	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.830456972 CEST	443	63424	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.944938898 CEST	443	63421	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.945497990 CEST	63421	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.945574999 CEST	443	63421	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.946064949 CEST	63421	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.946079969 CEST	443	63421	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.952121973 CEST	443	63420	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.952142954 CEST	443	63420	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.952168941 CEST	443	63420	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.952203989 CEST	63420	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.952236891 CEST	63420	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.952472925 CEST	63420	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.952472925 CEST	63420	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.952487946 CEST	443	63420	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.952491999 CEST	443	63420	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.955259085 CEST	63425	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.955277920 CEST	443	63425	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:21.955341101 CEST	63425	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.955462933 CEST	63425	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:21.955471039 CEST	443	63425	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.075023890 CEST	443	63421	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.075083017 CEST	443	63421	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.075179100 CEST	63421	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.075350046 CEST	63421	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.075350046 CEST	63421	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.075392962 CEST	443	63421	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.075423002 CEST	443	63421	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.077931881 CEST	63426	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.077974081 CEST	443	63426	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.078048944 CEST	63426	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.078214884 CEST	63426	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.078247070 CEST	443	63426	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.143302917 CEST	63419	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.143335104 CEST	443	63419	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.231389999 CEST	443	63422	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.231980085 CEST	63422	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.232000113 CEST	443	63422	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.232518911 CEST	63422	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.232526064 CEST	443	63422	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.293457031 CEST	443	63423	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.294117928 CEST	63423	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.294178963 CEST	443	63423	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.294555902 CEST	63423	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.294570923 CEST	443	63423	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.361368895 CEST	443	63422	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.362010956 CEST	443	63422	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.362071991 CEST	63422	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.362170935 CEST	63422	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.362170935 CEST	63422	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.362183094 CEST	443	63422	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.362193108 CEST	443	63422	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.365102053 CEST	63427	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.365115881 CEST	443	63427	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.365335941 CEST	63427	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.365335941 CEST	63427	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.365358114 CEST	443	63427	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.424540043 CEST	443	63423	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.424738884 CEST	443	63423	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.424957991 CEST	63423	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.424957991 CEST	63423	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.424957991 CEST	63423	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.427360058 CEST	63428	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.427402020 CEST	443	63428	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.427634001 CEST	63428	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.427634954 CEST	63428	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.427696943 CEST	443	63428	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.573604107 CEST	443	63424	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.574148893 CEST	63424	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.574230909 CEST	443	63424	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.574635029 CEST	63424	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.574647903 CEST	443	63424	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.687237978 CEST	443	63425	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.687752008 CEST	63425	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.687778950 CEST	443	63425	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.688231945 CEST	63425	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.688240051 CEST	443	63425	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.704689980 CEST	443	63424	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.704756021 CEST	443	63424	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.704854012 CEST	443	63424	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.704935074 CEST	63424	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.705014944 CEST	63424	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.705014944 CEST	63424	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.705055952 CEST	443	63424	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.705085993 CEST	443	63424	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.707737923 CEST	63429	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.707787991 CEST	443	63429	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.707988977 CEST	63429	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.708046913 CEST	63429	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.708062887 CEST	443	63429	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.726202011 CEST	63423	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.726262093 CEST	443	63423	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.817259073 CEST	443	63425	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.817312002 CEST	443	63425	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.817392111 CEST	63425	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.817620039 CEST	63425	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.817632914 CEST	443	63425	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.817713022 CEST	63425	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.817718983 CEST	443	63425	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.820993900 CEST	63430	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.821034908 CEST	443	63430	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.821110010 CEST	63430	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.821283102 CEST	63430	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.821300030 CEST	443	63430	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.831979990 CEST	443	63426	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.832372904 CEST	63426	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.832448959 CEST	443	63426	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.832808018 CEST	63426	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.832823038 CEST	443	63426	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.968163013 CEST	443	63426	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.968198061 CEST	443	63426	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.968246937 CEST	443	63426	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.968390942 CEST	63426	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.968391895 CEST	63426	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.968585968 CEST	63426	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.968585968 CEST	63426	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.968626976 CEST	443	63426	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.968657970 CEST	443	63426	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.971765995 CEST	63431	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.971862078 CEST	443	63431	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:22.971930981 CEST	63431	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.972089052 CEST	63431	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:22.972107887 CEST	443	63431	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.122848988 CEST	443	63427	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.123334885 CEST	63427	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.123352051 CEST	443	63427	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.123800039 CEST	63427	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.123806000 CEST	443	63427	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.183976889 CEST	443	63428	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.184474945 CEST	63428	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.184520006 CEST	443	63428	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.184905052 CEST	63428	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.184912920 CEST	443	63428	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.314292908 CEST	443	63428	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.314465046 CEST	443	63428	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.314544916 CEST	63428	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.314773083 CEST	63428	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.314794064 CEST	443	63428	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.314800978 CEST	63428	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.314809084 CEST	443	63428	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.318222046 CEST	63432	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.318303108 CEST	443	63432	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.318550110 CEST	63432	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.318727016 CEST	63432	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.318763971 CEST	443	63432	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.441807985 CEST	443	63429	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.442245007 CEST	63429	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.442291975 CEST	443	63429	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.442682028 CEST	63429	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.442697048 CEST	443	63429	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.515755892 CEST	443	63427	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.516082048 CEST	443	63427	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.516168118 CEST	63427	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.516297102 CEST	63427	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.516309977 CEST	443	63427	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.516324997 CEST	63427	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.516330957 CEST	443	63427	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.519156933 CEST	63433	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.519197941 CEST	443	63433	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.519340038 CEST	63433	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.519542933 CEST	63433	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.519562006 CEST	443	63433	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.569818020 CEST	443	63430	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.570461035 CEST	63430	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.570502996 CEST	443	63430	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.570852041 CEST	63430	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.570859909 CEST	443	63430	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.572537899 CEST	443	63429	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.572683096 CEST	443	63429	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.572763920 CEST	63429	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.572845936 CEST	63429	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.572845936 CEST	63429	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.572890043 CEST	443	63429	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.572918892 CEST	443	63429	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.575143099 CEST	63434	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.575225115 CEST	443	63434	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.575351954 CEST	63434	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.575469017 CEST	63434	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.575489044 CEST	443	63434	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.701504946 CEST	443	63430	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.702116966 CEST	443	63430	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.702150106 CEST	443	63430	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.702261925 CEST	63430	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.702261925 CEST	63430	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.702303886 CEST	63430	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.702322960 CEST	443	63430	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.702337980 CEST	63430	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.702346087 CEST	443	63430	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.705262899 CEST	63435	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.705295086 CEST	443	63435	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.705390930 CEST	63435	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.705511093 CEST	63435	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.705530882 CEST	443	63435	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.770734072 CEST	443	63431	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.771171093 CEST	63431	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.771204948 CEST	443	63431	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.771617889 CEST	63431	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.771630049 CEST	443	63431	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.901070118 CEST	443	63431	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.901221037 CEST	443	63431	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.901349068 CEST	63431	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.901413918 CEST	63431	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.901460886 CEST	443	63431	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.901489973 CEST	63431	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.901506901 CEST	443	63431	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.904776096 CEST	63436	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.904829025 CEST	443	63436	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.904949903 CEST	63436	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.905102015 CEST	63436	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:23.905131102 CEST	443	63436	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:23.947866917 CEST	63437	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:23.947882891 CEST	443	63437	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:23.948066950 CEST	63437	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:23.948138952 CEST	63438	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:23.948170900 CEST	443	63438	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:23.948231936 CEST	63438	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:23.949505091 CEST	63438	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:23.949520111 CEST	443	63438	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:23.949755907 CEST	63437	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:23.949769974 CEST	443	63437	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:24.058372021 CEST	443	63432	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.059017897 CEST	63432	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.059103966 CEST	443	63432	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.059412956 CEST	63432	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.059427977 CEST	443	63432	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.192162991 CEST	443	63432	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.192272902 CEST	443	63432	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.192383051 CEST	63432	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.193547964 CEST	63432	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.193595886 CEST	443	63432	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.193625927 CEST	63432	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.193641901 CEST	443	63432	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.197962046 CEST	63439	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.197995901 CEST	443	63439	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.198052883 CEST	63439	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.198273897 CEST	63439	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.198287964 CEST	443	63439	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.252422094 CEST	443	63433	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.252806902 CEST	63433	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.252821922 CEST	443	63433	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.253253937 CEST	63433	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.253258944 CEST	443	63433	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.300729990 CEST	443	63434	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.301094055 CEST	63434	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.301119089 CEST	443	63434	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.301486015 CEST	63434	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.301501036 CEST	443	63434	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.381287098 CEST	443	63433	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.381676912 CEST	443	63433	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.381792068 CEST	63433	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.381792068 CEST	63433	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.381819963 CEST	63433	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.381835938 CEST	443	63433	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.385032892 CEST	63440	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.385054111 CEST	443	63440	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.385221958 CEST	63440	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.385370016 CEST	63440	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.385382891 CEST	443	63440	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.429485083 CEST	443	63434	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.429553032 CEST	443	63434	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.429646015 CEST	63434	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.429666042 CEST	443	63434	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.429744005 CEST	63434	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.429797888 CEST	63434	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.429797888 CEST	63434	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.429838896 CEST	443	63434	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.429852009 CEST	443	63434	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.432101965 CEST	63441	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.432146072 CEST	443	63441	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.432362080 CEST	63441	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.432478905 CEST	63441	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.432497978 CEST	443	63441	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.444859028 CEST	443	63435	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.445960045 CEST	63435	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.446048975 CEST	443	63435	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.446131945 CEST	63435	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.446147919 CEST	443	63435	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.580568075 CEST	443	63435	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.580635071 CEST	443	63435	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.580739021 CEST	63435	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.580971956 CEST	63435	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.580995083 CEST	443	63435	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.581012964 CEST	63435	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.581017971 CEST	443	63435	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.583872080 CEST	63442	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.583894968 CEST	443	63442	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.584003925 CEST	63442	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.584225893 CEST	63442	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.584240913 CEST	443	63442	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.588713884 CEST	443	63438	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:24.589029074 CEST	63438	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:24.589040995 CEST	443	63438	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:24.589338064 CEST	443	63438	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:24.589651108 CEST	63438	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:24.589709997 CEST	443	63438	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:24.589947939 CEST	63438	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:24.589981079 CEST	443	63438	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:24.590054989 CEST	63438	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:24.593358040 CEST	443	63437	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:24.593631029 CEST	63437	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:24.593658924 CEST	443	63437	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:24.594331026 CEST	443	63437	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:24.594819069 CEST	63437	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:24.594912052 CEST	443	63437	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:24.631339073 CEST	443	63438	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:24.647102118 CEST	443	63436	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.647670031 CEST	63436	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.647670984 CEST	63437	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:24.647691965 CEST	443	63436	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.649272919 CEST	63436	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.649283886 CEST	443	63436	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.779162884 CEST	443	63436	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.779309988 CEST	443	63436	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.779402018 CEST	63436	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.779864073 CEST	443	63438	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:24.785475969 CEST	443	63438	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:24.785550117 CEST	443	63438	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:24.785612106 CEST	63438	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:24.812614918 CEST	63436	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.812675953 CEST	443	63436	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.812721014 CEST	63436	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.812738895 CEST	443	63436	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.938400984 CEST	443	63439	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.982351065 CEST	63439	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.986649990 CEST	63443	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.986732960 CEST	443	63443	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.986819983 CEST	63443	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.987565041 CEST	63439	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.987588882 CEST	443	63439	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.988259077 CEST	63439	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.988264084 CEST	443	63439	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.988810062 CEST	63443	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:24.988847017 CEST	443	63443	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:24.992377996 CEST	63438	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:24.992396116 CEST	443	63438	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:25.080415010 CEST	63444	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:25.080455065 CEST	443	63444	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:25.080528975 CEST	63444	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:25.080780983 CEST	63444	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:25.080799103 CEST	443	63444	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:25.084405899 CEST	63437	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:25.084567070 CEST	443	63437	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:25.115389109 CEST	443	63439	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.115478992 CEST	443	63439	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.115586996 CEST	63439	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.115909100 CEST	63439	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.115922928 CEST	443	63439	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.115936041 CEST	63439	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.115941048 CEST	443	63439	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.126234055 CEST	63445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.126267910 CEST	443	63445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.126491070 CEST	63445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.126697063 CEST	63445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.126724958 CEST	443	63445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.130537987 CEST	443	63440	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.130965948 CEST	63440	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.130986929 CEST	443	63440	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.131658077 CEST	63440	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.131661892 CEST	443	63440	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.162877083 CEST	443	63441	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.163352966 CEST	63441	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.163439989 CEST	443	63441	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.164412022 CEST	63441	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.164427042 CEST	443	63441	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.246104002 CEST	443	63437	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:25.246165991 CEST	443	63437	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:25.246239901 CEST	63437	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:25.246253967 CEST	443	63437	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:25.246314049 CEST	443	63437	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:25.246552944 CEST	63437	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:25.257922888 CEST	63437	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:25.257934093 CEST	443	63437	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:25.274825096 CEST	443	63440	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.274878025 CEST	443	63440	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.274985075 CEST	63440	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.274998903 CEST	443	63440	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.275016069 CEST	443	63440	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.275118113 CEST	63440	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.275300026 CEST	63440	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.275316000 CEST	443	63440	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.275374889 CEST	63440	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.275382042 CEST	443	63440	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.279597998 CEST	63446	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.279629946 CEST	443	63446	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.279742002 CEST	63446	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.279937029 CEST	63446	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.279952049 CEST	443	63446	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.294524908 CEST	443	63441	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.294651985 CEST	443	63441	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.294718027 CEST	63441	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.294781923 CEST	63441	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.294781923 CEST	63441	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.294810057 CEST	443	63441	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.294833899 CEST	443	63441	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.297065973 CEST	63447	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.297106028 CEST	443	63447	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.297270060 CEST	63447	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.297405005 CEST	63447	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.297431946 CEST	443	63447	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.350183010 CEST	443	63442	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.350775003 CEST	63442	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.350828886 CEST	443	63442	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.351125002 CEST	63442	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.351133108 CEST	443	63442	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.481491089 CEST	443	63442	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.481811047 CEST	443	63442	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.481873989 CEST	63442	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.483738899 CEST	63442	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.483762026 CEST	443	63442	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.483828068 CEST	63442	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.483835936 CEST	443	63442	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.488353014 CEST	63448	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.488367081 CEST	443	63448	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.488459110 CEST	63448	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.489087105 CEST	63448	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.489095926 CEST	443	63448	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.718000889 CEST	443	63443	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.718810081 CEST	443	63444	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:25.758227110 CEST	63443	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.767232895 CEST	63443	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.767261028 CEST	443	63443	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.767482996 CEST	63444	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:25.770999908 CEST	63443	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.771013975 CEST	443	63443	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.774591923 CEST	63444	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:25.774601936 CEST	443	63444	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:25.774939060 CEST	443	63444	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:25.776128054 CEST	63444	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:25.776184082 CEST	443	63444	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:25.776535034 CEST	63444	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:25.776565075 CEST	443	63444	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:25.868325949 CEST	443	63445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.896143913 CEST	443	63443	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.896218061 CEST	443	63443	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.896404028 CEST	63443	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.896545887 CEST	63445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.896598101 CEST	443	63445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.897501945 CEST	63445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.897515059 CEST	443	63445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.898910999 CEST	63443	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.898957968 CEST	443	63443	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.898988962 CEST	63443	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.899004936 CEST	443	63443	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.905250072 CEST	63449	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.905316114 CEST	443	63449	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.905390978 CEST	63449	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.905548096 CEST	63449	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:25.905571938 CEST	443	63449	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:25.964942932 CEST	443	63444	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:25.964956999 CEST	443	63444	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:25.964998960 CEST	443	63444	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:25.965029955 CEST	63444	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:25.965060949 CEST	63444	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:25.984842062 CEST	63444	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:25.984854937 CEST	443	63444	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:26.020169020 CEST	443	63446	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.026307106 CEST	443	63445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.026355982 CEST	443	63445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.026431084 CEST	443	63445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.026504040 CEST	63445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.043112040 CEST	63446	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.043138027 CEST	443	63446	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.043879986 CEST	63446	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.043885946 CEST	443	63446	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.043951988 CEST	443	63447	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.089112043 CEST	63447	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.095732927 CEST	63445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.095732927 CEST	63445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.095776081 CEST	443	63445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.095807076 CEST	443	63445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.102056026 CEST	63447	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.102077007 CEST	443	63447	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.104893923 CEST	63447	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.104908943 CEST	443	63447	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.170588017 CEST	443	63446	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.170763016 CEST	443	63446	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.170933008 CEST	63446	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.228493929 CEST	443	63448	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.233061075 CEST	443	63447	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.233134985 CEST	443	63447	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.233252048 CEST	443	63447	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.233280897 CEST	63447	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.233464956 CEST	63447	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.237705946 CEST	63451	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.237787008 CEST	443	63451	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.238006115 CEST	63451	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.238318920 CEST	63446	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.238339901 CEST	443	63446	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.238373995 CEST	63446	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.238380909 CEST	443	63446	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.240520000 CEST	63451	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.240552902 CEST	443	63451	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.241359949 CEST	63448	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.241374016 CEST	443	63448	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.242364883 CEST	63448	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.242368937 CEST	443	63448	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.242691040 CEST	63447	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.242731094 CEST	443	63447	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.242765903 CEST	63447	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.242782116 CEST	443	63447	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.359971046 CEST	63452	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.360065937 CEST	443	63452	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.360157013 CEST	63452	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.371526003 CEST	63452	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.371542931 CEST	443	63452	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.372528076 CEST	63453	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.372567892 CEST	443	63453	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.372638941 CEST	63453	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.372782946 CEST	63453	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.372792959 CEST	443	63453	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.390875101 CEST	443	63448	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.394984961 CEST	443	63448	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.395067930 CEST	63448	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.395159006 CEST	63448	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.395167112 CEST	443	63448	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.395183086 CEST	63448	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.395188093 CEST	443	63448	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.398025990 CEST	63454	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.398086071 CEST	443	63454	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.398227930 CEST	63454	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.398392916 CEST	63454	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.398432970 CEST	443	63454	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.642661095 CEST	443	63449	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.643240929 CEST	63449	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.643316031 CEST	443	63449	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.643785000 CEST	63449	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.643799067 CEST	443	63449	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.773684978 CEST	443	63449	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.773742914 CEST	443	63449	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.773823023 CEST	63449	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.773849964 CEST	443	63449	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.773900986 CEST	63449	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.774219036 CEST	63449	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.774256945 CEST	443	63449	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.778932095 CEST	63455	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.778951883 CEST	443	63455	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.779135942 CEST	63455	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.779337883 CEST	63455	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.779349089 CEST	443	63455	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.973141909 CEST	443	63451	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.974021912 CEST	63451	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.974097013 CEST	443	63451	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:26.975162029 CEST	63451	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:26.975178003 CEST	443	63451	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.105431080 CEST	443	63451	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.105577946 CEST	443	63451	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.105643034 CEST	63451	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.106035948 CEST	63451	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.106081009 CEST	443	63451	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.106112003 CEST	63451	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.106131077 CEST	443	63451	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.110210896 CEST	63456	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.110251904 CEST	443	63456	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.110343933 CEST	63456	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.110975981 CEST	63456	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.110996962 CEST	443	63456	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.120976925 CEST	443	63453	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.122134924 CEST	63453	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.122157097 CEST	443	63453	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.122986078 CEST	63453	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.122994900 CEST	443	63453	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.130712986 CEST	443	63454	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.131449938 CEST	63454	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.131535053 CEST	443	63454	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.132024050 CEST	63454	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.132038116 CEST	443	63454	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.147802114 CEST	443	63452	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.153635979 CEST	63452	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.153723001 CEST	443	63452	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.154140949 CEST	63452	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.154155016 CEST	443	63452	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.195632935 CEST	63457	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:27.195666075 CEST	443	63457	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:27.195888996 CEST	63457	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:27.197535992 CEST	63457	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:27.197551966 CEST	443	63457	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:27.251950026 CEST	443	63453	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.252094030 CEST	443	63453	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.252162933 CEST	63453	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.253098011 CEST	63453	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.253098011 CEST	63453	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.253112078 CEST	443	63453	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.253117085 CEST	443	63453	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.260000944 CEST	443	63454	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.260071993 CEST	443	63454	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.260159969 CEST	63454	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.260164022 CEST	443	63454	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.260587931 CEST	63454	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.265232086 CEST	63454	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.265232086 CEST	63454	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.265264988 CEST	443	63454	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.265289068 CEST	443	63454	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.281702995 CEST	63459	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.281759024 CEST	443	63459	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.281900883 CEST	63459	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.284945965 CEST	63460	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.284980059 CEST	443	63460	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.285319090 CEST	63460	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.285434961 CEST	63459	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.285464048 CEST	443	63459	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.287728071 CEST	63460	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.287745953 CEST	443	63460	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.510556936 CEST	443	63452	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.510631084 CEST	443	63452	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.510766983 CEST	443	63452	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.510878086 CEST	63452	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.510910034 CEST	443	63395	142.250.185.196	192.168.2.4
Oct 24, 2024 01:26:27.510966063 CEST	443	63395	142.250.185.196	192.168.2.4
Oct 24, 2024 01:26:27.510994911 CEST	63452	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.511058092 CEST	63395	443	192.168.2.4	142.250.185.196
Oct 24, 2024 01:26:27.562396049 CEST	63452	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.562460899 CEST	443	63452	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.562500000 CEST	63452	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.562516928 CEST	443	63452	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.620366096 CEST	63461	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.620431900 CEST	443	63461	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.620532036 CEST	63461	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.626645088 CEST	63461	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.626692057 CEST	443	63461	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.641216040 CEST	443	63455	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.641705036 CEST	63455	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.641733885 CEST	443	63455	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.642797947 CEST	63455	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.642803907 CEST	443	63455	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.774946928 CEST	443	63455	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.775000095 CEST	443	63455	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.775130987 CEST	63455	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.775366068 CEST	63455	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.775379896 CEST	443	63455	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.775388956 CEST	63455	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.775393963 CEST	443	63455	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.777968884 CEST	63462	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.778037071 CEST	443	63462	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.778107882 CEST	63462	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.778317928 CEST	63462	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.778340101 CEST	443	63462	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.847536087 CEST	443	63457	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:27.848108053 CEST	63457	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:27.848140001 CEST	443	63457	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:27.848653078 CEST	443	63457	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:27.848937035 CEST	63457	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:27.849025011 CEST	443	63457	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:27.849143982 CEST	63457	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:27.849175930 CEST	443	63457	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:27.891642094 CEST	443	63456	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.892129898 CEST	63456	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.892152071 CEST	443	63456	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:27.892602921 CEST	63456	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:27.892610073 CEST	443	63456	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.004983902 CEST	443	63457	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:28.005100965 CEST	443	63457	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:28.005156994 CEST	63457	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:28.005167961 CEST	443	63457	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:28.005215883 CEST	63457	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:28.005222082 CEST	443	63457	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:28.005383968 CEST	443	63457	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:28.005676985 CEST	63457	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:28.006087065 CEST	63457	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:28.006099939 CEST	443	63457	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:28.022206068 CEST	443	63456	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.022361994 CEST	443	63456	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.022428036 CEST	63456	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.022562027 CEST	63456	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.022569895 CEST	443	63456	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.022613049 CEST	63456	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.022619009 CEST	443	63456	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.025445938 CEST	63463	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.025479078 CEST	443	63463	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.025721073 CEST	63463	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.025872946 CEST	63463	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.025892019 CEST	443	63463	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.212024927 CEST	63395	443	192.168.2.4	142.250.185.196
Oct 24, 2024 01:26:28.212050915 CEST	443	63395	142.250.185.196	192.168.2.4
Oct 24, 2024 01:26:28.212399006 CEST	63464	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:28.212481976 CEST	443	63464	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:28.212658882 CEST	63464	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:28.212902069 CEST	63464	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:28.212935925 CEST	443	63464	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:28.214468956 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:28.214492083 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:28.214545012 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:28.214936972 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:28.214951992 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:28.249932051 CEST	63469	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:28.249954939 CEST	443	63469	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:28.250010967 CEST	63469	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:28.250482082 CEST	63469	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:28.250498056 CEST	443	63469	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:28.251943111 CEST	443	63459	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.257652044 CEST	443	63460	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.262128115 CEST	63459	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.262183905 CEST	443	63459	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.294305086 CEST	63459	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.294358969 CEST	443	63459	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.309497118 CEST	63460	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.318761110 CEST	63460	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.318772078 CEST	443	63460	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.330574989 CEST	63460	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.330580950 CEST	443	63460	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.363353968 CEST	443	63461	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.389693022 CEST	63461	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.389718056 CEST	443	63461	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.396724939 CEST	63461	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.396742105 CEST	443	63461	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.423218012 CEST	443	63459	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.423419952 CEST	443	63459	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.423475027 CEST	63459	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.423979998 CEST	63459	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.424005985 CEST	443	63459	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.424031019 CEST	63459	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.424043894 CEST	443	63459	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.429651022 CEST	63470	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.429699898 CEST	443	63470	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.429776907 CEST	63470	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.430299044 CEST	63470	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.430320024 CEST	443	63470	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.458901882 CEST	443	63460	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.458976984 CEST	443	63460	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.459028959 CEST	63460	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.459054947 CEST	443	63460	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.459088087 CEST	443	63460	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.459137917 CEST	63460	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.472534895 CEST	63460	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.472568035 CEST	443	63460	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.472572088 CEST	63460	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.472584009 CEST	443	63460	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.478617907 CEST	63471	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.478646994 CEST	443	63471	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.478728056 CEST	63471	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.479332924 CEST	63471	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.479357958 CEST	443	63471	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.506522894 CEST	443	63462	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.507589102 CEST	63462	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.507600069 CEST	443	63462	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.509054899 CEST	63462	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.509061098 CEST	443	63462	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.525479078 CEST	443	63461	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.525551081 CEST	443	63461	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.525613070 CEST	63461	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.525816917 CEST	63461	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.525832891 CEST	443	63461	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.525867939 CEST	63461	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.525875092 CEST	443	63461	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.529428959 CEST	63472	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.529511929 CEST	443	63472	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.529654980 CEST	63472	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.530412912 CEST	63472	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.530447006 CEST	443	63472	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.636821985 CEST	443	63462	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.636868000 CEST	443	63462	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.636914968 CEST	443	63462	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.636962891 CEST	63462	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.637258053 CEST	63462	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.637281895 CEST	443	63462	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.637296915 CEST	63462	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.637306929 CEST	443	63462	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.640975952 CEST	63473	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.641004086 CEST	443	63473	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.641076088 CEST	63473	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.641213894 CEST	63473	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.641227961 CEST	443	63473	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.759309053 CEST	443	63463	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.759948969 CEST	63463	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.759967089 CEST	443	63463	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.760852098 CEST	63463	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.760859966 CEST	443	63463	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.868446112 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:28.868966103 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:28.868982077 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:28.869434118 CEST	443	63464	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:28.869477034 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:28.869899035 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:28.869986057 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:28.870194912 CEST	63464	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:28.870256901 CEST	443	63464	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:28.870383978 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:28.870419025 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:28.871094942 CEST	443	63464	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:28.871686935 CEST	63464	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:28.871788979 CEST	443	63464	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:28.872052908 CEST	63464	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:28.872098923 CEST	443	63464	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:28.887989998 CEST	443	63463	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.888791084 CEST	443	63463	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.888856888 CEST	63463	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.889111042 CEST	63463	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.889127016 CEST	443	63463	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.889142036 CEST	63463	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.889148951 CEST	443	63463	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.894264936 CEST	63474	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.894321918 CEST	443	63474	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:28.894489050 CEST	63474	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.894778013 CEST	63474	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:28.894808054 CEST	443	63474	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.020036936 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.020148993 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.020204067 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.020222902 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.020363092 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.020880938 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.020967007 CEST	443	63464	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.020973921 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.021081924 CEST	443	63464	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.021147013 CEST	63464	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.021178961 CEST	443	63464	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.021207094 CEST	443	63464	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.021286011 CEST	63464	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.021322012 CEST	443	63464	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.021910906 CEST	443	63464	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.021977901 CEST	63464	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.026941061 CEST	63464	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.026968002 CEST	443	63464	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.030879021 CEST	443	63469	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.031681061 CEST	63469	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.031704903 CEST	443	63469	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.032176971 CEST	443	63469	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.032984972 CEST	63475	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.033068895 CEST	443	63475	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.033159971 CEST	63475	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.033601046 CEST	63469	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.033688068 CEST	443	63469	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.034038067 CEST	63469	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.034593105 CEST	63475	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.034674883 CEST	443	63475	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.039014101 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.039172888 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.039191961 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.039352894 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.075357914 CEST	443	63469	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.139043093 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.139211893 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.139277935 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.139292955 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.139534950 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.157984018 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.158051014 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.159255981 CEST	443	63470	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.160972118 CEST	63470	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.161005020 CEST	443	63470	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.161895037 CEST	63470	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.161901951 CEST	443	63470	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.181760073 CEST	443	63469	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.181884050 CEST	443	63469	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.181941032 CEST	63469	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.181952000 CEST	443	63469	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.181999922 CEST	63469	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.183129072 CEST	443	63469	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.183248043 CEST	63469	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.183255911 CEST	443	63469	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.183392048 CEST	443	63469	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.183434963 CEST	63469	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.192754984 CEST	63469	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.192773104 CEST	443	63469	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.228307009 CEST	443	63471	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.228701115 CEST	63471	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.228760004 CEST	443	63471	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.229126930 CEST	63471	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.229140997 CEST	443	63471	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.261377096 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.261437893 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.261661053 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.261770010 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.287914038 CEST	443	63470	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.287962914 CEST	443	63470	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.288099051 CEST	63470	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.288260937 CEST	63470	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.288269997 CEST	443	63470	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.288285971 CEST	63470	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.288292885 CEST	443	63470	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.288372040 CEST	443	63472	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.288717031 CEST	63472	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.288775921 CEST	443	63472	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.289233923 CEST	63472	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.289247036 CEST	443	63472	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.290997028 CEST	63476	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.291060925 CEST	443	63476	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.291196108 CEST	63476	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.291351080 CEST	63476	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.291366100 CEST	443	63476	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.318392038 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.318473101 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.363914013 CEST	443	63471	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.364145994 CEST	443	63471	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.364202023 CEST	63471	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.364237070 CEST	63471	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.364252090 CEST	443	63471	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.364264011 CEST	63471	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.364269018 CEST	443	63471	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.366275072 CEST	63477	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.366309881 CEST	443	63477	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.366408110 CEST	63477	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.366533995 CEST	63477	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.366554022 CEST	443	63477	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.380443096 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.380562067 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.380573034 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.380750895 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.380759954 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.380961895 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.395392895 CEST	443	63473	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.395734072 CEST	63473	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.395740986 CEST	443	63473	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.396138906 CEST	63473	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.396142006 CEST	443	63473	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.398044109 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.398108006 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.499452114 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.499553919 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.499607086 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.499675035 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.517386913 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.517452002 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.526787996 CEST	443	63473	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.526951075 CEST	443	63473	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.527009010 CEST	63473	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.527213097 CEST	63473	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.527220964 CEST	443	63473	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.527278900 CEST	63473	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.527282953 CEST	443	63473	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.530106068 CEST	63478	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.530189991 CEST	443	63478	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.530296087 CEST	63478	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.530447006 CEST	63478	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.530483961 CEST	443	63478	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.556926966 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.556993961 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.563770056 CEST	443	63472	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.563815117 CEST	443	63472	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.563891888 CEST	63472	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.563924074 CEST	443	63472	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.563997030 CEST	63472	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.564096928 CEST	63472	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.564141989 CEST	443	63472	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.564171076 CEST	63472	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.564188004 CEST	443	63472	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.566339970 CEST	63479	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.566376925 CEST	443	63479	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.566520929 CEST	63479	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.566680908 CEST	63479	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:29.566699028 CEST	443	63479	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:29.618899107 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.619095087 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.619211912 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.619220018 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.663919926 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.675663948 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.675685883 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.675761938 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.675761938 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.738918066 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.738940954 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.739027023 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.788945913 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.794466972 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.794476986 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.794516087 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.794528008 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.835813999 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.841048002 CEST	443	63475	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.841418028 CEST	63475	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.841448069 CEST	443	63475	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.841870070 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.841895103 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.841928959 CEST	443	63475	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.841954947 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.841981888 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.842005968 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.842344046 CEST	63475	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.842430115 CEST	443	63475	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.842560053 CEST	63475	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.874330044 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.874351025 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.874391079 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.874399900 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.874433041 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.874533892 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.882692099 CEST	63475	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.882751942 CEST	443	63475	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.914130926 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.914158106 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.914190054 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.914196014 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.914284945 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.960822105 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.976725101 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.976753950 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.976772070 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.976830006 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.976830006 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.996133089 CEST	443	63475	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.996282101 CEST	443	63475	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.996346951 CEST	63475	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.996371984 CEST	443	63475	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.996404886 CEST	443	63475	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.996434927 CEST	63475	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.996452093 CEST	443	63475	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.996509075 CEST	63475	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.996575117 CEST	443	63475	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:29.996633053 CEST	63475	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.997251987 CEST	63475	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:29.997263908 CEST	443	63475	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.026237965 CEST	443	63476	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.026779890 CEST	63476	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.026837111 CEST	443	63476	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.027215004 CEST	63476	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.027228117 CEST	443	63476	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.080957890 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.080990076 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.081022978 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.081033945 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.081056118 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.081079006 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.081079006 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.081085920 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.081106901 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.081130028 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.081130028 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.081134081 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.081290960 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.092164993 CEST	443	63477	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.092557907 CEST	63477	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.092588902 CEST	443	63477	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.093055010 CEST	63477	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.093061924 CEST	443	63477	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.169409037 CEST	443	63476	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.169452906 CEST	443	63476	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.169545889 CEST	63476	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.169792891 CEST	63476	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.169836044 CEST	443	63476	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.169866085 CEST	63476	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.169882059 CEST	443	63476	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.172847986 CEST	63482	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.172931910 CEST	443	63482	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.173016071 CEST	63482	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.173191071 CEST	63482	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.173224926 CEST	443	63482	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.194618940 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.194648027 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.194720984 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.194730043 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.194756031 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.194772959 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.225354910 CEST	443	63477	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.225420952 CEST	443	63477	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.225579977 CEST	63477	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.225673914 CEST	63477	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.225688934 CEST	443	63477	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.225702047 CEST	63477	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.225708961 CEST	443	63477	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.228518963 CEST	63489	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.228576899 CEST	443	63489	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.228718996 CEST	63489	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.228884935 CEST	63489	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.228915930 CEST	443	63489	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.268126965 CEST	443	63478	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.268585920 CEST	63478	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.268620968 CEST	443	63478	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.269010067 CEST	63478	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.269021988 CEST	443	63478	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.289130926 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.289175034 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.289206982 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.289216042 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.289252996 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.289267063 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.309716940 CEST	443	63479	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.310153961 CEST	63479	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.310184956 CEST	443	63479	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.310573101 CEST	63479	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.310586929 CEST	443	63479	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.344546080 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.344593048 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.344621897 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.344629049 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.344681025 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.344681025 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.399975061 CEST	443	63478	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.400104046 CEST	443	63478	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.400281906 CEST	63478	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.400281906 CEST	63478	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.400281906 CEST	63478	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.403456926 CEST	63490	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.403486967 CEST	443	63490	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.403609991 CEST	63490	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.403831959 CEST	63490	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.403848886 CEST	443	63490	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.438261986 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.438308954 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.438379049 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.438379049 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.438386917 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.438600063 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.439816952 CEST	443	63479	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.439970016 CEST	443	63479	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.440046072 CEST	63479	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.440176964 CEST	63479	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.440220118 CEST	443	63479	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.440248966 CEST	63479	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.440265894 CEST	443	63479	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.442492962 CEST	63491	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.442576885 CEST	443	63491	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.442711115 CEST	63491	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.442873955 CEST	63491	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.442909002 CEST	443	63491	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.528307915 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.528361082 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.528409958 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.528423071 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.528460979 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.528460979 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.583817959 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.583862066 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.583889008 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.583895922 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.583950996 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.583950996 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.672764063 CEST	443	63474	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.673290968 CEST	63474	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.673352957 CEST	443	63474	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.673727036 CEST	63474	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.673741102 CEST	443	63474	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.702007055 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.702035904 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.702096939 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.702102900 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.702146053 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.702146053 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.710481882 CEST	63478	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.710496902 CEST	443	63478	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.765307903 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.765335083 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.765624046 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.765624046 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.765633106 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.765753984 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.802153111 CEST	443	63474	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.802292109 CEST	443	63474	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.802395105 CEST	443	63474	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.802419901 CEST	63474	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.802463055 CEST	63474	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.802536011 CEST	63474	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.802551985 CEST	443	63474	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.802565098 CEST	63474	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.802571058 CEST	443	63474	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.805497885 CEST	63492	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.805532932 CEST	443	63492	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.805711985 CEST	63492	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.805912018 CEST	63492	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.805931091 CEST	443	63492	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.820981026 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.821012020 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.821089983 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.821089983 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.821096897 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.821314096 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.909743071 CEST	443	63482	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.910387993 CEST	63482	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.910471916 CEST	443	63482	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.910768032 CEST	63482	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.910782099 CEST	443	63482	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.912285089 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.912316084 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.912358046 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.912369013 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.912508965 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.940299034 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.940377951 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.940433979 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.940433979 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:30.940440893 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:30.980086088 CEST	443	63489	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.980566025 CEST	63489	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.980593920 CEST	443	63489	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.980986118 CEST	63489	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:30.980989933 CEST	443	63489	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:30.991744041 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.003467083 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.003489017 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.003591061 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.003591061 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.003598928 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.003705025 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.044615984 CEST	443	63482	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.044653893 CEST	443	63482	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.044799089 CEST	63482	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.044944048 CEST	63482	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.044959068 CEST	443	63482	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.044970036 CEST	63482	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.044975042 CEST	443	63482	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.048058033 CEST	63493	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.048080921 CEST	443	63493	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.048151970 CEST	63493	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.048342943 CEST	63493	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.048348904 CEST	443	63493	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.059366941 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.059390068 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.059474945 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.059474945 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.059482098 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.059643984 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.121726990 CEST	443	63489	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.121794939 CEST	443	63489	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.121870041 CEST	63489	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.122087002 CEST	63489	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.122100115 CEST	443	63489	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.122109890 CEST	63489	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.122114897 CEST	443	63489	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.124622107 CEST	63494	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.124653101 CEST	443	63494	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.124741077 CEST	63494	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.124861956 CEST	63494	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.124878883 CEST	443	63494	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.152539015 CEST	443	63490	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.152724981 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.152751923 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.152851105 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.152851105 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.152884007 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.153074026 CEST	63490	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.153080940 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.153086901 CEST	443	63490	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.153558969 CEST	63490	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.153565884 CEST	443	63490	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.205374002 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.205399036 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.205476046 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.205488920 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.205544949 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.205981016 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.211214066 CEST	443	63491	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.211806059 CEST	63491	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.211826086 CEST	443	63491	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.212249041 CEST	63491	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.212253094 CEST	443	63491	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.271588087 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.271610022 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.271667957 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.271678925 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.271899939 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.285896063 CEST	443	63490	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.285967112 CEST	443	63490	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.286154985 CEST	63490	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.286195993 CEST	63490	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.286195993 CEST	63490	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.286216974 CEST	443	63490	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.286230087 CEST	443	63490	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.289005995 CEST	63495	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.289031982 CEST	443	63495	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.289092064 CEST	63495	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.289206982 CEST	63495	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.289221048 CEST	443	63495	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.330579042 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.330610037 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.330672026 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.330682993 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.330704927 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.330734015 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.345273018 CEST	443	63491	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.345370054 CEST	443	63491	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.345479012 CEST	443	63491	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.345501900 CEST	63491	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.345551014 CEST	63491	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.345628977 CEST	63491	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.345628977 CEST	63491	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.345664978 CEST	443	63491	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.345690012 CEST	443	63491	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.348084927 CEST	63496	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.348113060 CEST	443	63496	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.348182917 CEST	63496	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.348409891 CEST	63496	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.348424911 CEST	443	63496	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.394351006 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.394375086 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.394447088 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.394455910 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.394597054 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.453089952 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.453142881 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.453201056 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.453210115 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.453277111 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.453277111 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.507524967 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.507591009 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.507622957 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.507642031 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.507687092 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.507687092 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.546479940 CEST	443	63492	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.547032118 CEST	63492	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.547041893 CEST	443	63492	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.547535896 CEST	63492	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.547540903 CEST	443	63492	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.568298101 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.568351030 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.568416119 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.568416119 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.568428040 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.568830013 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.608288050 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.608340025 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.608401060 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.608401060 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.608412981 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.608464003 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.629422903 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.629472017 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.629533052 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.629533052 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.629540920 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.679188967 CEST	443	63492	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.679367065 CEST	443	63492	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.679431915 CEST	63492	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.679534912 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.679757118 CEST	63492	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.679774046 CEST	443	63492	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.679779053 CEST	63492	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.679785967 CEST	443	63492	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.682854891 CEST	63498	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.682881117 CEST	443	63498	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.683294058 CEST	63498	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.683754921 CEST	63498	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.683769941 CEST	443	63498	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.688353062 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.688390970 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.688456059 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.688456059 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.688466072 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.688513041 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.748153925 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.748202085 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.748241901 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.748251915 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.748348951 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.748790026 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.805227995 CEST	443	63493	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.805677891 CEST	63493	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.805696011 CEST	443	63493	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.806168079 CEST	63493	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.806174040 CEST	443	63493	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.806552887 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.806580067 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.806627035 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.806647062 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.806699991 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.806699991 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.845930099 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.845954895 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.845999002 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.846014023 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.846071005 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.846071005 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.867185116 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.867204905 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.867263079 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.867274046 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.867455959 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.873127937 CEST	443	63494	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.873577118 CEST	63494	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.873594046 CEST	443	63494	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.874027967 CEST	63494	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.874032974 CEST	443	63494	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.926593065 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.926619053 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.926650047 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.926877975 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.926886082 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.926970005 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.937510014 CEST	443	63493	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.937581062 CEST	443	63493	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.937648058 CEST	63493	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.937856913 CEST	63493	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.937871933 CEST	443	63493	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.937901020 CEST	63493	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.937907934 CEST	443	63493	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.940952063 CEST	63499	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.941034079 CEST	443	63499	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.941124916 CEST	63499	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.941278934 CEST	63499	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:31.941313028 CEST	443	63499	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:31.985861063 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.985884905 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.985950947 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.985979080 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.986022949 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.986022949 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.986423969 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.986490011 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.986498117 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.986512899 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:31.986563921 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.987412930 CEST	63465	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:31.987426996 CEST	443	63465	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:32.003341913 CEST	443	63494	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.003401995 CEST	443	63494	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.003500938 CEST	63494	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.008835077 CEST	63494	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.008853912 CEST	443	63494	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.008862972 CEST	63494	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.008868933 CEST	443	63494	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.015209913 CEST	63500	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.015254021 CEST	443	63500	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.015470028 CEST	63500	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.015856028 CEST	63500	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.015885115 CEST	443	63500	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.030632973 CEST	443	63495	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.032202959 CEST	63495	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.032241106 CEST	443	63495	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.032896042 CEST	63495	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.032902002 CEST	443	63495	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.077159882 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:32.077213049 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:32.077321053 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:32.077548981 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:32.077570915 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:32.094461918 CEST	443	63496	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.113058090 CEST	63496	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.113090992 CEST	443	63496	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.113497972 CEST	63496	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.113503933 CEST	443	63496	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.161721945 CEST	443	63495	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.161755085 CEST	443	63495	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.161825895 CEST	63495	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.161835909 CEST	443	63495	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.161850929 CEST	443	63495	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.161896944 CEST	63495	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.162020922 CEST	63495	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.162034035 CEST	443	63495	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.162051916 CEST	63495	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.162056923 CEST	443	63495	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.165018082 CEST	63502	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.165112972 CEST	443	63502	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.165196896 CEST	63502	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.165324926 CEST	63502	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.165358067 CEST	443	63502	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.240111113 CEST	443	63496	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.240144014 CEST	443	63496	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.240195990 CEST	443	63496	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.240242004 CEST	63496	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.240242004 CEST	63496	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.240474939 CEST	63496	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.240474939 CEST	63496	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.240489960 CEST	443	63496	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.240503073 CEST	443	63496	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.243251085 CEST	63503	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.243349075 CEST	443	63503	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.243438959 CEST	63503	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.243581057 CEST	63503	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.243613958 CEST	443	63503	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.431704998 CEST	443	63498	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.432300091 CEST	63498	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.432316065 CEST	443	63498	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.433039904 CEST	63498	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.433046103 CEST	443	63498	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.562835932 CEST	443	63498	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.562887907 CEST	443	63498	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.562978983 CEST	443	63498	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.563051939 CEST	63498	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.563107014 CEST	63498	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.563311100 CEST	63498	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.563311100 CEST	63498	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.563328028 CEST	443	63498	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.563339949 CEST	443	63498	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.566694021 CEST	63504	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.566715956 CEST	443	63504	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.566802025 CEST	63504	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.566962957 CEST	63504	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.566970110 CEST	443	63504	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.672911882 CEST	443	63499	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.673422098 CEST	63499	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.673460007 CEST	443	63499	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.673996925 CEST	63499	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.674001932 CEST	443	63499	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.715030909 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:32.715346098 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:32.715375900 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:32.716470003 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:32.716835976 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:32.716985941 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:32.716993093 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:32.717010021 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:32.757900000 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:32.758223057 CEST	443	63500	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.758604050 CEST	63500	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.758618116 CEST	443	63500	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.759041071 CEST	63500	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.759051085 CEST	443	63500	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.803333998 CEST	443	63499	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.803410053 CEST	443	63499	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.803504944 CEST	63499	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.803735971 CEST	63499	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.803747892 CEST	443	63499	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.803754091 CEST	63499	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.803760052 CEST	443	63499	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.806354046 CEST	63505	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.806384087 CEST	443	63505	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.806557894 CEST	63505	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.806557894 CEST	63505	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.806590080 CEST	443	63505	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.863534927 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:32.863743067 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:32.863842964 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:32.863886118 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:32.863945007 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:32.899488926 CEST	443	63500	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.899522066 CEST	443	63500	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.899569988 CEST	443	63500	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.899590015 CEST	63500	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.899604082 CEST	63500	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.899804115 CEST	63500	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.899812937 CEST	443	63500	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.899823904 CEST	63500	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.899832010 CEST	443	63500	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.902272940 CEST	63507	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.902302027 CEST	443	63507	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.902458906 CEST	63507	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.902575016 CEST	63507	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.902580976 CEST	443	63507	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.913475990 CEST	443	63502	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.913981915 CEST	63502	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.914004087 CEST	443	63502	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.914701939 CEST	63502	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.914709091 CEST	443	63502	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.977852106 CEST	443	63503	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.978382111 CEST	63503	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.978456020 CEST	443	63503	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:32.978883028 CEST	63503	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:32.978897095 CEST	443	63503	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.011354923 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.011419058 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.011451960 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.011486053 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.011503935 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.011724949 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.011778116 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.011785984 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.012727976 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.012780905 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.012789965 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.012831926 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.047005892 CEST	443	63502	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.048707962 CEST	443	63502	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.048782110 CEST	63502	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.048829079 CEST	63502	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.048858881 CEST	443	63502	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.048911095 CEST	63502	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.048928022 CEST	443	63502	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.051961899 CEST	63508	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.052018881 CEST	443	63508	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.052098036 CEST	63508	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.052237988 CEST	63508	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.052265882 CEST	443	63508	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.095642090 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.095733881 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.108239889 CEST	443	63503	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.108264923 CEST	443	63503	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.108333111 CEST	443	63503	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.108365059 CEST	63503	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.108397961 CEST	63503	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.108508110 CEST	63503	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.108508110 CEST	63503	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.108535051 CEST	443	63503	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.108556986 CEST	443	63503	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.110738039 CEST	63509	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.110769033 CEST	443	63509	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.110876083 CEST	63509	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.111011028 CEST	63509	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.111028910 CEST	443	63509	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.114156008 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.114219904 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.126563072 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.179763079 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.223268986 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.223304033 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.223346949 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.223382950 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.229721069 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.229793072 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.286824942 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.290721893 CEST	443	63504	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.291237116 CEST	63504	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.291277885 CEST	443	63504	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.291793108 CEST	63504	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.291800022 CEST	443	63504	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.326493025 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.326618910 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.326648951 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.345350027 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.345361948 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.345485926 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.345508099 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.398642063 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.417905092 CEST	443	63504	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.418031931 CEST	443	63504	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.418106079 CEST	63504	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.418159962 CEST	443	63504	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.418314934 CEST	63504	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.418453932 CEST	63504	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.418453932 CEST	63504	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.418494940 CEST	443	63504	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.418521881 CEST	443	63504	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.421904087 CEST	63510	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.421925068 CEST	443	63510	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.422203064 CEST	63510	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.422203064 CEST	63510	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.422221899 CEST	443	63510	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.460735083 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.460747957 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.460773945 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.460803032 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.461210966 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.461304903 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.461316109 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.461338043 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.461364985 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.461738110 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.517640114 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.549844027 CEST	443	63505	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.551815987 CEST	63505	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.551827908 CEST	443	63505	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.552531958 CEST	63505	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.552535057 CEST	443	63505	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.570476055 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.576267004 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.576277018 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.576427937 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.621269941 CEST	443	63507	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.621973991 CEST	63507	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.621984005 CEST	443	63507	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.622456074 CEST	63507	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.622461081 CEST	443	63507	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.633275032 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.633286953 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.633316040 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.633344889 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.633694887 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.691886902 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.691900969 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.691927910 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.691967964 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.721215963 CEST	443	63505	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.721363068 CEST	443	63505	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.721411943 CEST	443	63505	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.721451998 CEST	63505	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.721501112 CEST	63505	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.721599102 CEST	63505	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.721604109 CEST	443	63505	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.727914095 CEST	63511	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.727955103 CEST	443	63511	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.730850935 CEST	63511	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.731218100 CEST	63511	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.731240034 CEST	443	63511	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.742270947 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.748812914 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.748838902 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.748953104 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.748953104 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.750297070 CEST	443	63507	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.750350952 CEST	443	63507	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.750523090 CEST	63507	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.750555992 CEST	63507	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.750555992 CEST	63507	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.750565052 CEST	443	63507	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.750571966 CEST	443	63507	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.755933046 CEST	63512	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.756010056 CEST	443	63512	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.756239891 CEST	63512	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.756736040 CEST	63512	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.756768942 CEST	443	63512	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.795970917 CEST	443	63508	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.796549082 CEST	63508	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.796607971 CEST	443	63508	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.799981117 CEST	63508	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.799999952 CEST	443	63508	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.807502985 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.807535887 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.807569027 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.807581902 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.807615995 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.842432022 CEST	443	63509	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.843285084 CEST	63509	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.843348026 CEST	443	63509	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.843915939 CEST	63509	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.843929052 CEST	443	63509	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.851917982 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.855276108 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.855298996 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.855333090 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.855376005 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.855403900 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.904007912 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.904035091 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.904123068 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.904123068 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.923610926 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.928442001 CEST	443	63508	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.928596020 CEST	443	63508	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.928894997 CEST	63508	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.928895950 CEST	63508	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.928973913 CEST	63508	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.929011106 CEST	443	63508	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.935919046 CEST	63513	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.935966015 CEST	443	63513	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.936666965 CEST	63513	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.936829090 CEST	63513	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.936850071 CEST	443	63513	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.970824957 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.970858097 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.970896959 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.970925093 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:33.970952988 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:33.972132921 CEST	443	63509	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.972305059 CEST	443	63509	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.972373009 CEST	63509	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.972779036 CEST	63509	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.972800016 CEST	443	63509	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.972834110 CEST	63509	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.972846031 CEST	443	63509	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.976399899 CEST	63515	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.976422071 CEST	443	63515	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:33.976562977 CEST	63515	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.980182886 CEST	63515	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:33.980197906 CEST	443	63515	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.015640974 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.019635916 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.019675016 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.019721031 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.019731045 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.019757032 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.069674015 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.086184978 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.086222887 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.086257935 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.086292028 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.086383104 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.157310009 CEST	443	63510	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.157824039 CEST	63510	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.157843113 CEST	443	63510	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.158313036 CEST	63510	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.158317089 CEST	443	63510	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.201926947 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.201963902 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.202003956 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.202008009 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.202030897 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.202055931 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.202059984 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.202059984 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.202090025 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.202090979 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.202111959 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.202122927 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.202421904 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.289779902 CEST	443	63510	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.290008068 CEST	443	63510	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.290102959 CEST	443	63510	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.290299892 CEST	63510	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.290299892 CEST	63510	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.290364027 CEST	63510	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.290374994 CEST	443	63510	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.293102026 CEST	63517	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.293127060 CEST	443	63517	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.293339014 CEST	63517	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.293442965 CEST	63517	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.293462038 CEST	443	63517	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.317531109 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.317560911 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.317605972 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.317622900 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.317670107 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.317703009 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.317703009 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.317720890 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.317783117 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.432751894 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.432812929 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.432828903 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.432846069 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.432871103 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.432893991 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.471782923 CEST	443	63511	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.472250938 CEST	63511	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.472263098 CEST	443	63511	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.472738981 CEST	63511	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.472745895 CEST	443	63511	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.490782022 CEST	443	63512	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.491188049 CEST	63512	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.491246939 CEST	443	63512	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.491650105 CEST	63512	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.491664886 CEST	443	63512	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.548476934 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.548542023 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.548561096 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.548573971 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.548613071 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.548639059 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.600893974 CEST	443	63511	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.600996971 CEST	443	63511	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.601048946 CEST	63511	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.601311922 CEST	63511	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.601327896 CEST	443	63511	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.601356983 CEST	63511	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.601365089 CEST	443	63511	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.604289055 CEST	63518	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.604315996 CEST	443	63518	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.604377031 CEST	63518	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.604511023 CEST	63518	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.604523897 CEST	443	63518	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.625252008 CEST	443	63512	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.625303030 CEST	443	63512	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.625411987 CEST	443	63512	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.625511885 CEST	63512	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.625575066 CEST	63512	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.625575066 CEST	63512	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.625619888 CEST	443	63512	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.625643969 CEST	443	63512	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.628556967 CEST	63519	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.628582001 CEST	443	63519	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.628679991 CEST	63519	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.628823042 CEST	63519	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.628834963 CEST	443	63519	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.657906055 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.657974958 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.657991886 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.658009052 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.658036947 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.658058882 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.667675018 CEST	443	63513	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.668370008 CEST	63513	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.668380022 CEST	443	63513	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.668661118 CEST	63513	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.668668032 CEST	443	63513	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.729851007 CEST	443	63515	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.730511904 CEST	63515	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.730520964 CEST	443	63515	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.730806112 CEST	63515	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.730813026 CEST	443	63515	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.733000994 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.733027935 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.733072996 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.733088970 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.733118057 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.733140945 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.797852039 CEST	443	63513	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.797920942 CEST	443	63513	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.798012018 CEST	63513	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.798163891 CEST	63513	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.798163891 CEST	63513	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.798176050 CEST	443	63513	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.798186064 CEST	443	63513	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.801253080 CEST	63520	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.801292896 CEST	443	63520	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.801361084 CEST	63520	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.801559925 CEST	63520	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.801577091 CEST	443	63520	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.835797071 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.835827112 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.835933924 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.835959911 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.836009979 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.905193090 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.905241966 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.905284882 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.905303955 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:34.905323029 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.905344963 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:34.928716898 CEST	443	63515	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.928760052 CEST	443	63515	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.928807974 CEST	443	63515	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.928864956 CEST	63515	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.928864956 CEST	63515	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.929059982 CEST	63515	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.929059982 CEST	63515	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.929070950 CEST	443	63515	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.929080963 CEST	443	63515	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.932425022 CEST	63521	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.932449102 CEST	443	63521	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:34.932524920 CEST	63521	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.932676077 CEST	63521	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:34.932687044 CEST	443	63521	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.012685061 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.012732983 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.012777090 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.012810946 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.012825012 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.012865067 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.050885916 CEST	443	63517	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.051373005 CEST	63517	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.051394939 CEST	443	63517	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.051944971 CEST	63517	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.051950932 CEST	443	63517	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.120629072 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.120657921 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.120712042 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.120758057 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.120790958 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.120837927 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.185141087 CEST	443	63517	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.185192108 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.185262918 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.185280085 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.185292006 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.185317039 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.185338974 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.185811043 CEST	443	63517	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.185892105 CEST	63517	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.185934067 CEST	63517	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.185934067 CEST	63517	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.185946941 CEST	443	63517	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.185955048 CEST	443	63517	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.188709021 CEST	63522	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.188747883 CEST	443	63522	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.188968897 CEST	63522	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.191138983 CEST	63522	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.191154957 CEST	443	63522	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.243247032 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.243304968 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.243320942 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.243333101 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.243355036 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.288475037 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.351598978 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.351628065 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.351706982 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.351706982 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.351742029 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.351805925 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.355578899 CEST	443	63518	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.356307983 CEST	63518	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.356339931 CEST	443	63518	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.356595039 CEST	63518	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.356606007 CEST	443	63518	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.416018963 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.416042089 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.416126013 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.416155100 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.416635990 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.483613014 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.483634949 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.483719110 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.483719110 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.483748913 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.483813047 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.487862110 CEST	443	63518	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.487936020 CEST	443	63518	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.488204956 CEST	63518	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.488204956 CEST	63518	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.488204956 CEST	63518	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.491183996 CEST	63523	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.491206884 CEST	443	63523	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.491439104 CEST	63523	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.491439104 CEST	63523	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.491462946 CEST	443	63523	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.533652067 CEST	443	63520	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.534431934 CEST	63520	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.534432888 CEST	63520	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.534482002 CEST	443	63520	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.534519911 CEST	443	63520	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.583117962 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.583142996 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.583218098 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.583218098 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.583264112 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.583333969 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.647224903 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.647248030 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.647284031 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.647296906 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.647327900 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.647458076 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.664926052 CEST	443	63520	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.664999962 CEST	443	63520	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.665282011 CEST	63520	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.665282011 CEST	63520	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.665713072 CEST	63520	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.665743113 CEST	443	63520	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.668674946 CEST	63524	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.668704987 CEST	443	63524	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.668857098 CEST	63524	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.669059992 CEST	63524	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.669073105 CEST	443	63524	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.674226046 CEST	443	63521	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.675030947 CEST	63521	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.675030947 CEST	63521	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.675043106 CEST	443	63521	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.675052881 CEST	443	63521	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.715167999 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.715215921 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.715261936 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.715334892 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.715374947 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.715399981 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.773660898 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.773706913 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.773746967 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.773761988 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.773785114 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.773895025 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.780019999 CEST	63518	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.780041933 CEST	443	63518	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.806303024 CEST	443	63521	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.806356907 CEST	443	63521	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.806617975 CEST	63521	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.806617975 CEST	63521	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.807197094 CEST	63521	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.807204962 CEST	443	63521	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.809304953 CEST	63525	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.809338093 CEST	443	63525	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.809463978 CEST	63525	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.809660912 CEST	63525	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.809679985 CEST	443	63525	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.878942013 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.878969908 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.879049063 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.879049063 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.879089117 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.879156113 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.925723076 CEST	443	63522	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.926342964 CEST	63522	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.926388025 CEST	443	63522	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.926853895 CEST	63522	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:26:35.926870108 CEST	443	63522	13.107.246.45	192.168.2.4
Oct 24, 2024 01:26:35.946455956 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.946480036 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.946573973 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.946573973 CEST	63501	443	192.168.2.4	199.83.44.71
Oct 24, 2024 01:26:35.946604967 CEST	443	63501	199.83.44.71	192.168.2.4
Oct 24, 2024 01:26:35.946671009 CEST	63501	443	192.168.2.4	199.83.44.71

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 01:25:12.071223974 CEST	53	64433	1.1.1.1	192.168.2.4
Oct 24, 2024 01:25:12.160675049 CEST	53	57772	1.1.1.1	192.168.2.4
Oct 24, 2024 01:25:13.404391050 CEST	53	58244	1.1.1.1	192.168.2.4
Oct 24, 2024 01:25:14.018872023 CEST	49853	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:25:14.019171953 CEST	59345	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:25:14.026952028 CEST	53	49853	1.1.1.1	192.168.2.4
Oct 24, 2024 01:25:14.028858900 CEST	53	59345	1.1.1.1	192.168.2.4
Oct 24, 2024 01:25:15.051289082 CEST	57160	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:25:15.051428080 CEST	57403	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:25:15.059674978 CEST	53	57160	1.1.1.1	192.168.2.4
Oct 24, 2024 01:25:15.073226929 CEST	53	57403	1.1.1.1	192.168.2.4
Oct 24, 2024 01:25:16.493061066 CEST	59272	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:25:16.493155956 CEST	57108	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:25:16.500613928 CEST	53	59272	1.1.1.1	192.168.2.4
Oct 24, 2024 01:25:16.500974894 CEST	53	57108	1.1.1.1	192.168.2.4
Oct 24, 2024 01:25:17.457813025 CEST	53	51147	1.1.1.1	192.168.2.4
Oct 24, 2024 01:25:24.626993895 CEST	138	138	192.168.2.4	192.168.2.255
Oct 24, 2024 01:25:25.771909952 CEST	50953	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:25:25.772039890 CEST	55515	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:25:25.779263973 CEST	53	50953	1.1.1.1	192.168.2.4
Oct 24, 2024 01:25:25.779752970 CEST	53	55515	1.1.1.1	192.168.2.4
Oct 24, 2024 01:25:26.617351055 CEST	53	59383	1.1.1.1	192.168.2.4
Oct 24, 2024 01:26:12.039201021 CEST	53	59251	1.1.1.1	192.168.2.4
Oct 24, 2024 01:26:32.844727039 CEST	53	53223	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 24, 2024 01:25:15.073616982 CEST	192.168.2.4	1.1.1.1	c22a	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 01:25:14.018872023 CEST	192.168.2.4	1.1.1.1	0x7105	Standard query (0)	email.sg.on24event.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:25:14.019171953 CEST	192.168.2.4	1.1.1.1	0x67e8	Standard query (0)	email.sg.on24event.com	65	IN (0x0001)	false
Oct 24, 2024 01:25:15.051289082 CEST	192.168.2.4	1.1.1.1	0x51c3	Standard query (0)	event.on24.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:25:15.051428080 CEST	192.168.2.4	1.1.1.1	0xc758	Standard query (0)	event.on24.com	65	IN (0x0001)	false
Oct 24, 2024 01:25:16.493061066 CEST	192.168.2.4	1.1.1.1	0x36d4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:25:16.493155956 CEST	192.168.2.4	1.1.1.1	0x249a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 01:25:25.771909952 CEST	192.168.2.4	1.1.1.1	0x2bab	Standard query (0)	event.on24.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:25:25.772039890 CEST	192.168.2.4	1.1.1.1	0xaa12	Standard query (0)	event.on24.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 01:25:14.026952028 CEST	1.1.1.1	192.168.2.4	0x7105	No error (0)	email.sg.on24event.com	r-email.sg.on24event.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 01:25:14.026952028 CEST	1.1.1.1	192.168.2.4	0x7105	No error (0)	r-email.sg.on24event.com		199.83.44.68	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:25:14.028858900 CEST	1.1.1.1	192.168.2.4	0x67e8	No error (0)	email.sg.on24event.com	r-email.sg.on24event.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 01:25:15.059674978 CEST	1.1.1.1	192.168.2.4	0x51c3	No error (0)	event.on24.com	r-event.on24.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 01:25:15.059674978 CEST	1.1.1.1	192.168.2.4	0x51c3	No error (0)	r-event.on24.com		199.83.44.71	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:25:15.073226929 CEST	1.1.1.1	192.168.2.4	0xc758	No error (0)	event.on24.com	r-event.on24.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 01:25:16.500613928 CEST	1.1.1.1	192.168.2.4	0x36d4	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:25:16.500974894 CEST	1.1.1.1	192.168.2.4	0x249a	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 01:25:25.779263973 CEST	1.1.1.1	192.168.2.4	0x2bab	No error (0)	event.on24.com	r-event.on24.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 01:25:25.779263973 CEST	1.1.1.1	192.168.2.4	0x2bab	No error (0)	r-event.on24.com		199.83.44.71	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:25:25.779752970 CEST	1.1.1.1	192.168.2.4	0xaa12	No error (0)	event.on24.com	r-event.on24.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 01:25:26.348850012 CEST	1.1.1.1	192.168.2.4	0x4040	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 01:25:26.348850012 CEST	1.1.1.1	192.168.2.4	0x4040	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:25:38.425652027 CEST	1.1.1.1	192.168.2.4	0x7aba	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 01:25:38.425652027 CEST	1.1.1.1	192.168.2.4	0x7aba	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:26:01.619468927 CEST	1.1.1.1	192.168.2.4	0x5a9e	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 01:26:01.619468927 CEST	1.1.1.1	192.168.2.4	0x5a9e	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:26:25.813333035 CEST	1.1.1.1	192.168.2.4	0x90b6	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 01:26:25.813333035 CEST	1.1.1.1	192.168.2.4	0x90b6	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

email.sg.on24event.com

event.on24.com

fs.microsoft.com

slscr.update.microsoft.com

https:

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	199.83.44.68	443	5772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:25:14 UTC	1256	OUT	GET /ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiG9Rbj-2F-2BL5xBvCeRxrIAG77j9DkiM7Yr8M64Kg2izaa0OIZ5-2FATI-2Bc2anEPwc9wrQCD63MC6ONtwJ4SdtRTMnlVT73iHX1khCeCMxvfrJWFZE6xLgrG0WfeomHPSWGopkuujmYCDXjAoqEnyB4oApDJGaTO_sV0hy7-2BGXO3LZoFb45Ee9q2xovzSXG8XVZrbzeABE5y29PDMLq2ChSQAIHKNLazLUqewS5YZ9SPzKKABZQxE4M4JfqBBJaVIRJOU4Sh6BeF-2FTZq1GJ735ScAVdxn7RfonvJVAbLvtiFqwkqX-2F62IKr1OAohPOxBMvGUk2jA0e3czp4b-2F8ymy1eBYgp-2FaHuYw41VPqFDKnyXLCTkU3HvqNk5a9SYRWgFyoq-2BfZI2n13wiOK83-2FcmSneBQB32uHjeb5z-2F2gDfTARsRD9FRa9QhHbBeTz1oBHKHLZ-2B2UMpfjo-2FuDYqeQVClCbrjrwWivlNh2O8ah4bXzu6Hj69PJhvtHQ-3D-3D HTTP/1.1 Host: email.sg.on24event.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 23:25:15 UTC	319	IN	HTTP/1.1 302 Found Server: nginx Date: Wed, 23 Oct 2024 23:25:14 GMT Content-Type: text/html; charset=utf-8 Content-Length: 147 Connection: close Location: https://event.on24.com/wcc/r/4729291/0DA9ADCB7D49E9C260A43DC00A038CD9?mode=login&email=melinda.outlaw@johnmuirhealth.com X-Robots-Tag: noindex, nofollow
2024-10-23 23:25:15 UTC	147	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 76 65 6e 74 2e 6f 6e 32 34 2e 63 6f 6d 2f 77 63 63 2f 72 2f 34 37 32 39 32 39 31 2f 30 44 41 39 41 44 43 42 37 44 34 39 45 39 43 32 36 30 41 34 33 44 43 30 30 41 30 33 38 43 44 39 3f 6d 6f 64 65 3d 6c 6f 67 69 6e 26 61 6d 70 3b 65 6d 61 69 6c 3d 6d 65 6c 69 6e 64 61 2e 6f 75 74 6c 61 77 40 6a 6f 68 6e 6d 75 69 72 68 65 61 6c 74 68 2e 63 6f 6d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://event.on24.com/wcc/r/4729291/0DA9ADCB7D49E9C260A43DC00A038CD9?mode=login&email=melinda.outlaw@johnmuirhealth.com">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49738	199.83.44.71	443	5772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:25:15 UTC	754	OUT	GET /wcc/r/4729291/0DA9ADCB7D49E9C260A43DC00A038CD9?mode=login&email=melinda.outlaw@johnmuirhealth.com HTTP/1.1 Host: event.on24.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 23:25:15 UTC	1219	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:25:15 GMT Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 X-ORACLE-DMS-ECID: 97cda30c-685d-4cd6-8b70-4e167d211a4a-0009d808 X-ORACLE-DMS-RID: 0 Set-Cookie: JSESSIONID=NjJjMzRjZDktZGY5ZC00ODdlLWFlODYtZjJlZDM3NTMyNDBh; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: sa-4729291=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; domain=.on24.com; expires=Wed, 23-Oct-2024 23:55:15 GMT; path=/; HttpOnly; SameSite=None; Secure Connection: close Set-Cookie: BIGipServercons4_prd_wl_LNX=!9xfBULRARkxsweyntfwALduEGSG61Whvo7NlYLQNGY4TfanSBdV7e0BA3CtSsSVFxiKOYMLRJFN5A6c=; path=/; Httponly; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors *.on24.com Set-Cookie: ON24_Pool=cons4_prd_wl_LNX; Path=/; Secure; Httponly; SameSite=None Set-Cookie: TS0af49cbe027=082972b052ab20000c4556b71c4d701639567d05e00309096e4e9961769169d411edcdc66d3fa2c1081f8d34eb11300051703391f3887a3c26ce1a424be5eb51812ae80070266d135d30fa8d8a14bffe2f3bacaf40582510013dbd80d1acf61f; Path=/; SameSite=None; Secure
2024-10-23 23:25:15 UTC	2896	IN	Data Raw: 30 64 64 39 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 09 3c 74 69 74 6c 65 3e 4f 63 74 6f 62 65 72 20 32 30 32 34 20 45 70 69 63 20 53 70 6f 74 6c 69 67 68 74 20 57 65 62 69 6e 61 72 3a 20 43 68 61 6e 67 65 20 6f 66 20 56 65 6e 64 6f 72 2c 20 61 20 4e 65 63 65 73 73 61 72 79 20 45 76 69 6c 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 09 09 09 0a 09 09 0a Data Ascii: 0dd9<!doctype html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>October 2024 Epic Spotlight Webinar: Change of Vendor, a Necessary Evil</title>
2024-10-23 23:25:15 UTC	657	IN	Data Raw: 20 20 20 76 61 72 20 70 68 6f 6e 65 56 61 6c 69 64 61 74 69 6f 6e 50 72 6f 70 65 72 74 79 20 3d 20 27 4e 6f 72 74 68 20 41 6d 65 72 69 63 61 27 3b 0a 09 09 09 76 61 72 20 6e 65 77 43 6f 6e 64 69 74 69 6f 6e 61 6c 46 69 65 6c 64 73 20 3d 20 66 61 6c 73 65 3b 0a 09 09 09 76 61 72 20 76 69 72 74 75 61 6c 53 65 61 74 73 4c 65 66 74 20 3d 20 6e 75 6c 6c 3b 0a 09 09 09 76 61 72 20 69 6e 70 65 72 73 6f 6e 53 65 61 74 73 4c 65 66 74 20 3d 20 6e 75 6c 6c 3b 0a 09 09 20 20 20 20 76 61 72 20 75 72 6c 50 61 72 61 6d 73 41 74 74 72 69 62 75 74 65 20 3d 20 27 6e 75 6c 6c 27 3b 0a 09 09 3c 2f 73 63 72 69 70 74 3e 0a 09 09 0a 09 09 3c 73 63 72 69 70 74 3e 0a 09 09 09 76 61 72 20 65 76 65 6e 74 49 64 47 6c 6f 62 61 6c 20 3d 20 34 37 32 39 32 39 31 3b 0a 09 09 09 76 61 72 Data Ascii: var phoneValidationProperty = 'North America';var newConditionalFields = false;var virtualSeatsLeft = null;var inpersonSeatsLeft = null; var urlParamsAttribute = 'null';</script><script>var eventIdGlobal = 4729291;var
2024-10-23 23:25:15 UTC	8	IN	Data Raw: 30 30 30 30 0d 0a 0d 0a Data Ascii: 0000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:25:18 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 23:25:18 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=62454 Date: Wed, 23 Oct 2024 23:25:18 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	63284	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:25:19 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 23:25:19 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=62422 Date: Wed, 23 Oct 2024 23:25:19 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-23 23:25:19 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	63285	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:25:24 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=y+gZ68vFgt2GT3B&MD=s+9KPMLL HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-23 23:25:25 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 7dbdfad7-308e-444a-bfcf-277caa0dfda9 MS-RequestId: 6d13b856-96c6-4f75-a048-fd09dfa98c68 MS-CV: PsduXKCQJ0SA4YDa.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 23 Oct 2024 23:25:23 GMT Connection: close Content-Length: 24490
2024-10-23 23:25:25 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-23 23:25:25 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	63289	199.83.44.71	443	5772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:25:25 UTC	1295	OUT	GET /apic/eventRegistration/webapi/regPage/displayElements?eventid=4729291&sessionid=1&key=0DA9ADCB7D49E9C260A43DC00A038CD9&code=registration&mode=login&random=0.5253155048612299 HTTP/1.1 Host: event.on24.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://event.on24.com/wcc/r/4729291/0DA9ADCB7D49E9C260A43DC00A038CD9?mode=login&email=melinda.outlaw@johnmuirhealth.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NjJjMzRjZDktZGY5ZC00ODdlLWFlODYtZjJlZDM3NTMyNDBh; sa-4729291=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons4_prd_wl_LNX=!9xfBULRARkxsweyntfwALduEGSG61Whvo7NlYLQNGY4TfanSBdV7e0BA3CtSsSVFxiKOYMLRJFN5A6c=; ON24_Pool=cons4_prd_wl_LNX; TS0af49cbe027=082972b052ab20000c4556b71c4d701639567d05e00309096e4e9961769169d411edcdc66d3fa2c1081f8d34eb11300051703391f3887a3c26ce1a424be5eb51812ae80070266d135d30fa8d8a14bffe2f3bacaf40582510013dbd80d1acf61f
2024-10-23 23:25:25 UTC	596	IN	HTTP/1.1 200 OK Server: openresty/1.21.4.1 Date: Wed, 23 Oct 2024 23:25:25 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close ProX-Cache-Status: MISS ProX-Response-Time: 0.032 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Set-Cookie: TS0af49cbe027=082972b052ab2000611fcc557670755638e5aade11b637e69684020a8dbaec23473585319733e0290828582f8c1130006747f77445579945db79073a30ae0862a775b7dba795586076ef404d5a70eb51d13f9a28e68952bf1eab59c19f5c2b2b; Path=/; SameSite=None; Secure
2024-10-23 23:25:25 UTC	4124	IN	Data Raw: 34 64 62 30 0d 0a 7b 22 65 76 65 6e 74 22 3a 34 37 32 39 32 39 31 2c 22 73 65 73 73 69 6f 6e 22 3a 31 2c 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 65 72 72 6f 72 4d 65 73 73 61 67 65 22 3a 6e 75 6c 6c 2c 22 64 69 73 70 6c 61 79 65 6c 65 6d 65 6e 74 22 3a 5b 7b 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 34 30 34 34 35 32 39 31 22 2c 22 69 73 52 65 71 75 69 72 65 64 22 3a 22 66 61 6c 73 65 22 2c 22 69 73 41 63 74 69 76 65 22 3a 22 74 72 75 65 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 22 66 61 6c 73 65 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 54 79 70 65 43 6f 64 65 22 3a 22 66 72 65 65 74 65 78 74 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 22 3a 22 23 66 66 66 66 66 66 22 2c 22 64 69 73 70 6c 61 79 45 Data Ascii: 4db0{"event":4729291,"session":1,"success":true,"errorMessage":null,"displayelement":[{"displayElementID":"240445291","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"#ffffff","displayE
2024-10-23 23:25:25 UTC	7240	IN	Data Raw: 6e 66 6f 22 3a 7b 22 65 76 65 6e 74 22 3a 22 34 37 32 39 32 39 31 22 2c 22 73 65 73 73 69 6f 6e 22 3a 22 31 22 7d 7d 2c 7b 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 34 30 34 34 35 33 30 30 22 2c 22 69 73 52 65 71 75 69 72 65 64 22 3a 22 74 72 75 65 22 2c 22 69 73 41 63 74 69 76 65 22 3a 22 74 72 75 65 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 22 66 61 6c 73 65 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 54 79 70 65 43 6f 64 65 22 3a 22 74 65 78 74 62 6f 78 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 22 3a 22 45 6d 61 69 6c 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 43 6f 64 65 22 3a 22 65 6d 61 69 6c 22 2c 22 76 61 6c 69 64 61 74 69 6f 6e 54 79 70 65 43 6f 64 65 22 3a 22 65 6d 61 69 6c Data Ascii: nfo":{"event":"4729291","session":"1"}},{"displayElementID":"240445300","isRequired":"true","isActive":"true","isHidden":"false","displayElementTypeCode":"textbox","displayElementValue":"Email","displayElementValueCode":"email","validationTypeCode":"email
2024-10-23 23:25:25 UTC	1448	IN	Data Raw: 73 70 6c 61 79 65 6c 65 6d 65 6e 74 6f 70 74 69 6f 6e 69 6e 66 6f 22 3a 7b 22 65 76 65 6e 74 22 3a 22 34 37 32 39 32 39 31 22 2c 22 73 65 73 73 69 6f 6e 22 3a 22 31 22 7d 7d 2c 7b 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 34 30 34 34 35 33 31 35 22 2c 22 69 73 52 65 71 75 69 72 65 64 22 3a 22 74 72 75 65 22 2c 22 69 73 41 63 74 69 76 65 22 3a 22 74 72 75 65 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 22 66 61 6c 73 65 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 54 79 70 65 43 6f 64 65 22 3a 22 66 72 65 65 74 65 78 74 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 22 3a 22 32 34 70 78 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 43 6f 64 65 22 3a 22 74 65 6d 70 6c 61 74 65 5f 72 65 67 5f 73 65 Data Ascii: splayelementoptioninfo":{"event":"4729291","session":"1"}},{"displayElementID":"240445315","isRequired":"true","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"24px","displayElementValueCode":"template_reg_se
2024-10-23 23:25:25 UTC	7089	IN	Data Raw: 6f 6e 22 3a 22 31 22 7d 7d 2c 7b 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 34 30 34 34 35 33 31 38 22 2c 22 69 73 52 65 71 75 69 72 65 64 22 3a 22 74 72 75 65 22 2c 22 69 73 41 63 74 69 76 65 22 3a 22 74 72 75 65 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 22 66 61 6c 73 65 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 54 79 70 65 43 6f 64 65 22 3a 22 66 72 65 65 74 65 78 74 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 22 3a 22 59 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 43 6f 64 65 22 3a 22 74 65 6d 70 6c 61 74 65 5f 72 65 67 5f 33 30 5f 6c 61 79 6f 75 74 22 2c 22 76 61 6c 69 64 61 74 69 6f 6e 54 79 70 65 43 6f 64 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 69 73 70 6c 61 79 53 65 71 75 65 6e 63 Data Ascii: on":"1"}},{"displayElementID":"240445318","isRequired":"true","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"Y","displayElementValueCode":"template_reg_30_layout","validationTypeCode":"none","displaySequenc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	63290	199.83.44.71	443	5772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:25:25 UTC	1288	OUT	GET /apic/eventRegistration/webapi/regPage/displayElements?eventid=4729291&sessionid=1&key=0DA9ADCB7D49E9C260A43DC00A038CD9&code=lobby&mode=login&random=0.9164374412364669 HTTP/1.1 Host: event.on24.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://event.on24.com/wcc/r/4729291/0DA9ADCB7D49E9C260A43DC00A038CD9?mode=login&email=melinda.outlaw@johnmuirhealth.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NjJjMzRjZDktZGY5ZC00ODdlLWFlODYtZjJlZDM3NTMyNDBh; sa-4729291=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons4_prd_wl_LNX=!9xfBULRARkxsweyntfwALduEGSG61Whvo7NlYLQNGY4TfanSBdV7e0BA3CtSsSVFxiKOYMLRJFN5A6c=; ON24_Pool=cons4_prd_wl_LNX; TS0af49cbe027=082972b052ab20000c4556b71c4d701639567d05e00309096e4e9961769169d411edcdc66d3fa2c1081f8d34eb11300051703391f3887a3c26ce1a424be5eb51812ae80070266d135d30fa8d8a14bffe2f3bacaf40582510013dbd80d1acf61f
2024-10-23 23:25:25 UTC	590	IN	HTTP/1.1 200 OK Server: openresty/1.21.4.1 Date: Wed, 23 Oct 2024 23:25:25 GMT Content-Type: application/json Content-Length: 7339 Connection: close ProX-Cache-Status: MISS ProX-Response-Time: 0.015 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Set-Cookie: TS0af49cbe027=082972b052ab2000584f0c828fd88a708edcace9153bccc40a65438d4c451f03dcebfb2167a31a6a082406da1c1130002e1b779dd1ba7159db79073a30ae0862a775b7dba795586076ef404d5a70eb51d13f9a28e68952bf1eab59c19f5c2b2b; Path=/; SameSite=None; Secure
2024-10-23 23:25:25 UTC	2682	IN	Data Raw: 7b 22 65 76 65 6e 74 22 3a 34 37 32 39 32 39 31 2c 22 73 65 73 73 69 6f 6e 22 3a 31 2c 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 65 72 72 6f 72 4d 65 73 73 61 67 65 22 3a 6e 75 6c 6c 2c 22 64 69 73 70 6c 61 79 65 6c 65 6d 65 6e 74 22 3a 5b 7b 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 34 30 34 34 35 32 36 30 22 2c 22 69 73 52 65 71 75 69 72 65 64 22 3a 22 66 61 6c 73 65 22 2c 22 69 73 41 63 74 69 76 65 22 3a 22 74 72 75 65 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 22 66 61 6c 73 65 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 54 79 70 65 43 6f 64 65 22 3a 22 66 72 65 65 74 65 78 74 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 22 3a 22 23 66 66 66 66 66 66 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 Data Ascii: {"event":4729291,"session":1,"success":true,"errorMessage":null,"displayelement":[{"displayElementID":"240445260","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"#ffffff","displayElement
2024-10-23 23:25:25 UTC	1448	IN	Data Raw: 70 65 63 6f 64 65 22 3a 22 6c 6f 62 62 79 22 2c 22 64 69 73 70 6c 61 79 65 6c 65 6d 65 6e 74 6f 70 74 69 6f 6e 69 6e 66 6f 22 3a 7b 22 65 76 65 6e 74 22 3a 22 34 37 32 39 32 39 31 22 2c 22 73 65 73 73 69 6f 6e 22 3a 22 31 22 7d 7d 2c 7b 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 34 30 34 34 35 32 36 36 22 2c 22 69 73 52 65 71 75 69 72 65 64 22 3a 22 66 61 6c 73 65 22 2c 22 69 73 41 63 74 69 76 65 22 3a 22 74 72 75 65 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 22 66 61 6c 73 65 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 54 79 70 65 43 6f 64 65 22 3a 22 66 72 65 65 74 65 78 74 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 22 3a 22 59 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 43 6f 64 65 22 Data Ascii: pecode":"lobby","displayelementoptioninfo":{"event":"4729291","session":"1"}},{"displayElementID":"240445266","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"Y","displayElementValueCode"
2024-10-23 23:25:25 UTC	3209	IN	Data Raw: 65 6e 74 6f 70 74 69 6f 6e 69 6e 66 6f 22 3a 7b 22 65 76 65 6e 74 22 3a 22 34 37 32 39 32 39 31 22 2c 22 73 65 73 73 69 6f 6e 22 3a 22 31 22 7d 7d 2c 7b 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 34 30 34 34 35 32 36 39 22 2c 22 69 73 52 65 71 75 69 72 65 64 22 3a 22 66 61 6c 73 65 22 2c 22 69 73 41 63 74 69 76 65 22 3a 22 74 72 75 65 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 22 66 61 6c 73 65 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 54 79 70 65 43 6f 64 65 22 3a 22 66 72 65 65 74 65 78 74 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 22 3a 22 23 48 65 6c 70 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 43 6f 64 65 22 3a 22 6c 6f 62 62 79 5f 6f 6e 6c 69 6e 65 5f 68 65 6c 70 22 2c 22 76 61 Data Ascii: entoptioninfo":{"event":"4729291","session":"1"}},{"displayElementID":"240445269","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"#Help","displayElementValueCode":"lobby_online_help","va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	63291	199.83.44.71	443	5772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:25:25 UTC	1260	OUT	GET /apic/eventRegistration/EventServlet?eventid=4729291&sessionid=1&key=0DA9ADCB7D49E9C260A43DC00A038CD9&random=0.6268297194463379&filter=json HTTP/1.1 Host: event.on24.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://event.on24.com/wcc/r/4729291/0DA9ADCB7D49E9C260A43DC00A038CD9?mode=login&email=melinda.outlaw@johnmuirhealth.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NjJjMzRjZDktZGY5ZC00ODdlLWFlODYtZjJlZDM3NTMyNDBh; sa-4729291=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons4_prd_wl_LNX=!9xfBULRARkxsweyntfwALduEGSG61Whvo7NlYLQNGY4TfanSBdV7e0BA3CtSsSVFxiKOYMLRJFN5A6c=; ON24_Pool=cons4_prd_wl_LNX; TS0af49cbe027=082972b052ab20000c4556b71c4d701639567d05e00309096e4e9961769169d411edcdc66d3fa2c1081f8d34eb11300051703391f3887a3c26ce1a424be5eb51812ae80070266d135d30fa8d8a14bffe2f3bacaf40582510013dbd80d1acf61f
2024-10-23 23:25:25 UTC	611	IN	HTTP/1.1 200 OK Server: openresty/1.21.4.1 Date: Wed, 23 Oct 2024 23:25:25 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close ProX-Cache-Status: MISS ProX-Response-Time: 0.056 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Set-Cookie: TS0af49cbe027=082972b052ab200033c4c63ca16b2d7b921d8e0f3ddc26a1e12f812c2c881b64214e42b067effa0d08a1f61ec811300030d69999eeca8e8fdb79073a30ae0862a775b7dba795586076ef404d5a70eb51d13f9a28e68952bf1eab59c19f5c2b2b; Path=/; SameSite=None; Secure
2024-10-23 23:25:25 UTC	1213	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 65 76 65 6e 74 22 3a 7b 22 69 64 22 3a 22 34 37 32 39 32 39 31 22 2c 22 6e 61 6d 65 22 3a 22 6e 75 6c 6c 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 4f 63 74 6f 62 65 72 20 32 30 32 34 20 45 70 69 63 20 53 70 6f 74 6c 69 67 68 74 20 57 65 62 69 6e 61 72 3a 20 43 68 61 6e 67 65 20 6f 66 20 56 65 6e 64 6f 72 2c 20 61 20 4e 65 63 65 73 73 61 72 79 20 45 76 69 6c 22 2c 22 6c 6f 63 61 6c 65 6c 61 6e 67 75 61 67 65 63 6f 64 65 22 3a 22 65 6e 22 2c 22 6c 6f 63 61 6c 65 63 6f 75 6e 74 72 79 63 6f 64 65 22 3a 22 6e 75 6c 6c 22 2c 22 63 6c 69 65 6e 74 69 64 22 3a 22 35 33 35 38 30 22 2c 22 63 6c 69 65 6e 74 6e 61 6d 65 22 3a 22 53 75 72 65 73 63 72 69 70 74 73 22 2c 22 64 69 73 70 6c 61 79 74 69 6d 65 7a 6f 6e 65 22 3a 22 45 61 73 74 Data Ascii: 8000{"event":{"id":"4729291","name":"null","description":"October 2024 Epic Spotlight Webinar: Change of Vendor, a Necessary Evil","localelanguagecode":"en","localecountrycode":"null","clientid":"53580","clientname":"Surescripts","displaytimezone":"East
2024-10-23 23:25:25 UTC	2896	IN	Data Raw: 69 64 67 65 74 22 2c 22 74 65 78 74 22 3a 22 4e 6f 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 73 65 63 75 72 69 74 79 2d 6c 65 76 65 6c 22 2c 22 74 65 78 74 22 3a 22 31 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 70 6f 77 65 72 65 64 2d 62 79 2d 6f 6e 32 34 2d 76 69 73 69 62 69 6c 69 74 79 22 2c 22 74 65 78 74 22 3a 22 59 65 73 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 65 6c 69 74 65 2d 61 63 63 6f 75 6e 74 2d 74 79 70 65 22 2c 22 74 65 78 74 22 3a 22 45 6c 69 74 65 20 2b 20 45 6c 69 74 65 20 50 72 65 73 65 6e 74 61 74 69 6f 6e 73 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 65 6e 61 62 6c 65 2d 68 74 6d 6c 35 2d 63 6f 6e 73 6f 6c 65 22 2c 22 74 65 78 74 22 3a 22 59 65 73 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 65 6e 61 62 6c 65 2d 6d 6f 64 65 72 6e 2d 63 6f 6e 73 6f 6c 65 22 2c 22 74 65 Data Ascii: idget","text":"No"},{"name":"security-level","text":"1"},{"name":"powered-by-on24-visibility","text":"Yes"},{"name":"elite-account-type","text":"Elite + Elite Presentations"},{"name":"enable-html5-console","text":"Yes"},{"name":"enable-modern-console","te
2024-10-23 23:25:25 UTC	5792	IN	Data Raw: 22 70 6c 61 79 65 72 55 52 4c 22 2c 22 76 61 6c 75 65 22 3a 22 68 74 74 70 73 3a 2f 2f 65 76 65 6e 74 2e 6f 6e 32 34 2e 63 6f 6d 2f 65 76 65 6e 74 52 65 67 69 73 74 72 61 74 69 6f 6e 2f 63 6f 6e 73 6f 6c 65 2f 45 76 65 6e 74 43 6f 6e 73 6f 6c 65 4e 47 2e 6a 73 70 3f 75 69 6d 6f 64 65 3d 6e 65 78 74 67 65 6e 65 72 61 74 69 6f 6e 22 7d 2c 22 70 6d 4d 6f 64 65 22 3a 7b 22 69 64 22 3a 22 32 33 32 37 32 30 22 2c 22 74 79 70 65 63 6f 64 65 22 3a 22 70 6d 4d 6f 64 65 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 70 6d 4d 6f 64 65 22 2c 22 76 61 6c 75 65 22 3a 22 6d 6f 64 65 31 22 7d 2c 22 70 6f 6c 6c 69 6e 67 52 65 71 75 69 72 65 64 22 3a 7b 22 69 64 22 3a 22 32 33 32 36 35 31 22 2c 22 74 79 70 65 63 6f 64 65 22 3a 22 70 6f 6c 6c 69 6e 67 52 65 71 75 69 72 65 64 22 Data Ascii: "playerURL","value":"https://event.on24.com/eventRegistration/console/EventConsoleNG.jsp?uimode=nextgeneration"},"pmMode":{"id":"232720","typecode":"pmMode","category":"pmMode","value":"mode1"},"pollingRequired":{"id":"232651","typecode":"pollingRequired"
2024-10-23 23:25:25 UTC	2896	IN	Data Raw: 3d 5c 22 53 74 72 69 6e 67 5c 22 3e 72 65 70 6c 61 63 65 6c 6f 62 62 79 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 63 72 65 61 74 69 6f 6e 54 69 6d 65 73 74 61 6d 70 5c 22 20 74 79 70 65 3d 5c 22 4e 75 6d 62 65 72 5c 22 3e 31 33 32 33 38 38 39 39 34 32 30 35 32 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 64 6f 63 6b 49 63 6f 6e 4f 72 64 65 72 5c 22 20 74 79 70 65 3d 5c 22 41 72 72 61 79 5c 22 3e 32 34 30 34 34 35 32 37 38 2c 32 34 30 34 34 35 32 38 39 2c 32 34 30 34 34 35 32 38 30 2c 32 34 30 34 34 35 32 37 39 2c 32 34 30 34 34 35 32 38 31 2c 32 34 30 34 34 35 32 38 34 2c 32 34 30 34 34 35 32 38 36 2c 32 34 30 34 34 35 32 38 38 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 68 61 73 43 75 73 Data Ascii: =\"String\">replacelobby</param><param name=\"creationTimestamp\" type=\"Number\">1323889942052</param><param name=\"dockIconOrder\" type=\"Array\">240445278,240445289,240445280,240445279,240445281,240445284,240445286,240445288</param><param name=\"hasCus
2024-10-23 23:25:25 UTC	1448	IN	Data Raw: 6d 62 65 72 5c 22 3e 36 37 31 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 64 65 73 63 72 69 70 74 69 6f 6e 5c 22 20 74 79 70 65 3d 5c 22 53 74 72 69 6e 67 5c 22 3e 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 68 61 73 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 5c 22 20 74 79 70 65 3d 5c 22 42 6f 6f 6c 65 61 6e 5c 22 3e 74 72 75 65 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 73 65 6c 65 63 74 65 64 52 61 74 69 6f 5c 22 20 74 79 70 65 3d 5c 22 53 74 72 69 6e 67 5c 22 3e 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 76 65 72 73 69 6f 6e 5c 22 20 74 79 70 65 3d 5c 22 53 74 72 69 6e 67 5c 22 3e 31 2e 30 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 76 69 73 69 Data Ascii: mber\">671</param><param name=\"description\" type=\"String\"></param><param name=\"hasConfiguration\" type=\"Boolean\">true</param><param name=\"selectedRatio\" type=\"String\"></param><param name=\"version\" type=\"String\">1.0</param><param name=\"visi
2024-10-23 23:25:25 UTC	10136	IN	Data Raw: 74 68 5c 22 20 74 79 70 65 3d 5c 22 4e 75 6d 62 65 72 5c 22 3e 33 32 30 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 74 79 70 65 4b 65 79 5c 22 20 74 79 70 65 3d 5c 22 53 74 72 69 6e 67 5c 22 3e 70 6c 61 79 65 72 5f 6d 65 64 69 61 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 63 61 74 65 67 6f 72 79 5c 22 20 74 79 70 65 3d 5c 22 53 74 72 69 6e 67 5c 22 3e 4f 4e 32 34 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 63 6f 6e 74 65 6e 74 49 6d 61 67 65 5c 22 20 74 79 70 65 3d 5c 22 53 74 72 69 6e 67 5c 22 3e 75 6e 64 65 66 69 6e 65 64 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 73 68 6f 77 50 72 65 76 69 65 77 5c 22 20 74 79 70 65 3d 5c 22 42 6f 6f 6c 65 61 6e 5c 22 3e 66 61 6c Data Ascii: th\" type=\"Number\">320</param><param name=\"typeKey\" type=\"String\">player_media</param><param name=\"category\" type=\"String\">ON24</param><param name=\"contentImage\" type=\"String\">undefined</param><param name=\"showPreview\" type=\"Boolean\">fal
2024-10-23 23:25:26 UTC	4344	IN	Data Raw: 50 65 72 73 69 73 74 65 6e 63 65 53 74 61 74 65 55 70 64 61 74 65 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 61 6c 6c 6f 77 54 72 61 63 6b 48 69 74 5c 22 20 74 79 70 65 3d 5c 22 42 6f 6f 6c 65 61 6e 5c 22 3e 74 72 75 65 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 63 6f 6d 70 6f 6e 65 6e 74 54 79 70 65 5c 22 20 74 79 70 65 3d 5c 22 53 74 72 69 6e 67 5c 22 3e 70 61 6e 65 6c 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 70 65 72 73 69 73 74 65 6e 63 65 53 74 61 74 75 73 5c 22 20 74 79 70 65 3d 5c 22 53 74 72 69 6e 67 5c 22 3e 50 65 72 73 69 73 74 65 6e 63 65 53 74 61 74 75 73 53 61 76 65 43 6f 6d 70 6c 65 74 65 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 63 72 65 61 74 69 Data Ascii: PersistenceStateUpdate</param><param name=\"allowTrackHit\" type=\"Boolean\">true</param><param name=\"componentType\" type=\"String\">panel</param><param name=\"persistenceStatus\" type=\"String\">PersistenceStatusSaveComplete</param><param name=\"creati
2024-10-23 23:25:26 UTC	1448	IN	Data Raw: 75 6d 62 65 72 5c 22 3e 35 3c 2f 70 61 72 61 6d 3e 3c 2f 70 61 72 61 6d 73 3e 3c 2f 63 6f 6e 66 69 67 3e 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 54 79 70 65 43 6f 64 65 22 3a 22 66 72 65 65 74 65 78 74 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 43 6f 64 65 22 3a 22 70 6c 61 79 65 72 5f 73 70 65 61 6b 65 72 5f 62 69 6f 5f 77 69 64 67 65 74 22 2c 22 76 61 6c 69 64 61 74 69 6f 6e 54 79 70 65 43 6f 64 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 69 73 70 6c 61 79 53 65 71 75 65 6e 63 65 22 3a 22 35 22 2c 22 69 73 52 65 71 75 69 72 65 64 22 3a 22 66 61 6c 73 65 22 2c 22 69 73 41 63 74 69 76 65 22 3a 22 74 72 75 65 22 2c 22 74 6f 70 4f 66 66 73 65 74 22 3a 22 34 38 35 22 2c 22 6c 65 66 74 4f 66 66 73 65 74 22 3a 22 33 39 22 2c 22 68 65 Data Ascii: umber\">5</param></params></config>","displayElementTypeCode":"freetext","displayElementValueCode":"player_speaker_bio_widget","validationTypeCode":"none","displaySequence":"5","isRequired":"false","isActive":"true","topOffset":"485","leftOffset":"39","he
2024-10-23 23:25:26 UTC	2896	IN	Data Raw: 74 72 75 65 22 2c 22 74 6f 70 4f 66 66 73 65 74 22 3a 22 30 22 2c 22 6c 65 66 74 4f 66 66 73 65 74 22 3a 22 30 22 2c 22 68 65 69 67 68 74 22 3a 22 36 35 30 22 2c 22 77 69 64 74 68 22 3a 22 31 30 30 30 22 2c 22 6d 65 64 69 61 55 52 4c 49 44 22 3a 22 2d 31 22 2c 22 64 69 73 70 6c 61 79 65 6c 65 6d 65 6e 74 6f 70 74 69 6f 6e 69 6e 66 6f 22 3a 7b 22 64 69 73 70 6c 61 79 65 6c 65 6d 65 6e 74 6f 70 74 69 6f 6e 22 3a 5b 5d 7d 7d 2c 22 70 6c 61 79 65 72 5f 69 6d 61 67 65 22 3a 7b 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 34 30 34 34 35 32 38 33 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 22 3a 22 3c 63 6f 6e 66 69 67 3e 3c 70 61 72 61 6d 73 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 6c 6f 61 64 43 6f 6e 66 69 67 56 4f Data Ascii: true","topOffset":"0","leftOffset":"0","height":"650","width":"1000","mediaURLID":"-1","displayelementoptioninfo":{"displayelementoption":[]}},"player_image":{"displayElementID":"240445283","displayElementValue":"<config><params><param name=\"loadConfigVO
2024-10-23 23:25:26 UTC	10136	IN	Data Raw: 72 61 6d 20 6e 61 6d 65 3d 5c 22 61 6c 6c 6f 77 52 65 73 70 6f 6e 73 69 76 65 4f 74 68 65 72 54 6f 6f 6c 73 4f 76 65 72 6c 61 70 5c 22 20 74 79 70 65 3d 5c 22 42 6f 6f 6c 65 61 6e 5c 22 3e 66 61 6c 73 65 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 62 72 61 6e 64 4c 6f 67 6f 53 74 79 6c 65 5c 22 20 74 79 70 65 3d 5c 22 53 74 72 69 6e 67 5c 22 3e 64 61 72 6b 42 67 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 62 72 61 6e 64 4c 6f 67 6f 41 6c 74 5c 22 20 74 79 70 65 3d 5c 22 53 74 72 69 6e 67 5c 22 3e 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 62 72 61 6e 64 4c 6f 67 6f 4c 69 6e 6b 5c 22 20 74 79 70 65 3d 5c 22 53 74 72 69 6e 67 5c 22 3e 3c 2f 70 61 72 61 6d 3e 3c 2f 70 61 72 61 6d 73 3e 3c 2f Data Ascii: ram name=\"allowResponsiveOtherToolsOverlap\" type=\"Boolean\">false</param><param name=\"brandLogoStyle\" type=\"String\">darkBg</param><param name=\"brandLogoAlt\" type=\"String\"></param><param name=\"brandLogoLink\" type=\"String\"></param></params></

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	63294	199.83.44.71	443	5772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:25:26 UTC	977	OUT	GET /apic/eventRegistration/webapi/regPage/displayElements?eventid=4729291&sessionid=1&key=0DA9ADCB7D49E9C260A43DC00A038CD9&code=lobby&mode=login&random=0.9164374412364669 HTTP/1.1 Host: event.on24.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NjJjMzRjZDktZGY5ZC00ODdlLWFlODYtZjJlZDM3NTMyNDBh; sa-4729291=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons4_prd_wl_LNX=!9xfBULRARkxsweyntfwALduEGSG61Whvo7NlYLQNGY4TfanSBdV7e0BA3CtSsSVFxiKOYMLRJFN5A6c=; ON24_Pool=cons4_prd_wl_LNX; TS0af49cbe027=082972b052ab2000584f0c828fd88a708edcace9153bccc40a65438d4c451f03dcebfb2167a31a6a082406da1c1130002e1b779dd1ba7159db79073a30ae0862a775b7dba795586076ef404d5a70eb51d13f9a28e68952bf1eab59c19f5c2b2b
2024-10-23 23:25:26 UTC	671	IN	HTTP/1.1 200 OK Server: openresty/1.21.4.1 Date: Wed, 23 Oct 2024 23:25:26 GMT Content-Type: application/json Content-Length: 7339 Connection: close ProX-Cache-Status: HIT ProX-Response-Time: 0.000 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors *.on24.com Set-Cookie: TS0af49cbe027=082972b052ab20001d706a740164c9b6ae0cf6b0cdc60e2ed0c52816f124341f3abb3fc992fe5e9c08f1e995931130008d579fb2b0c78ad4ea76dbca435680ae2cd689efcacea9a3b040628a4c8fcf6541366a98518db6fdf455680437c247fa; Path=/; SameSite=None; Secure
2024-10-23 23:25:26 UTC	1235	IN	Data Raw: 7b 22 65 76 65 6e 74 22 3a 34 37 32 39 32 39 31 2c 22 73 65 73 73 69 6f 6e 22 3a 31 2c 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 65 72 72 6f 72 4d 65 73 73 61 67 65 22 3a 6e 75 6c 6c 2c 22 64 69 73 70 6c 61 79 65 6c 65 6d 65 6e 74 22 3a 5b 7b 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 34 30 34 34 35 32 36 30 22 2c 22 69 73 52 65 71 75 69 72 65 64 22 3a 22 66 61 6c 73 65 22 2c 22 69 73 41 63 74 69 76 65 22 3a 22 74 72 75 65 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 22 66 61 6c 73 65 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 54 79 70 65 43 6f 64 65 22 3a 22 66 72 65 65 74 65 78 74 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 22 3a 22 23 66 66 66 66 66 66 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 Data Ascii: {"event":4729291,"session":1,"success":true,"errorMessage":null,"displayelement":[{"displayElementID":"240445260","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"#ffffff","displayElement
2024-10-23 23:25:26 UTC	2896	IN	Data Raw: 66 66 73 65 74 22 3a 22 2d 31 22 2c 22 6c 65 66 74 4f 66 66 73 65 74 22 3a 22 2d 31 22 2c 22 68 65 69 67 68 74 22 3a 22 2d 31 22 2c 22 77 69 64 74 68 22 3a 22 2d 31 22 2c 22 6d 65 64 69 61 55 52 4c 49 44 22 3a 22 2d 31 22 2c 22 69 6e 64 65 78 22 3a 22 32 22 2c 22 62 6f 74 74 6f 6d 50 61 64 64 69 6e 67 22 3a 35 2c 22 64 69 73 70 6c 61 79 74 79 70 65 63 6f 64 65 22 3a 22 6c 6f 62 62 79 22 2c 22 64 69 73 70 6c 61 79 65 6c 65 6d 65 6e 74 6f 70 74 69 6f 6e 69 6e 66 6f 22 3a 7b 22 65 76 65 6e 74 22 3a 22 34 37 32 39 32 39 31 22 2c 22 73 65 73 73 69 6f 6e 22 3a 22 31 22 7d 7d 2c 7b 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 34 30 34 34 35 32 36 33 22 2c 22 69 73 52 65 71 75 69 72 65 64 22 3a 22 66 61 6c 73 65 22 2c 22 69 73 41 63 74 69 76 65 Data Ascii: ffset":"-1","leftOffset":"-1","height":"-1","width":"-1","mediaURLID":"-1","index":"2","bottomPadding":5,"displaytypecode":"lobby","displayelementoptioninfo":{"event":"4729291","session":"1"}},{"displayElementID":"240445263","isRequired":"false","isActive
2024-10-23 23:25:26 UTC	3208	IN	Data Raw: 6e 74 6f 70 74 69 6f 6e 69 6e 66 6f 22 3a 7b 22 65 76 65 6e 74 22 3a 22 34 37 32 39 32 39 31 22 2c 22 73 65 73 73 69 6f 6e 22 3a 22 31 22 7d 7d 2c 7b 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 34 30 34 34 35 32 36 39 22 2c 22 69 73 52 65 71 75 69 72 65 64 22 3a 22 66 61 6c 73 65 22 2c 22 69 73 41 63 74 69 76 65 22 3a 22 74 72 75 65 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 22 66 61 6c 73 65 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 54 79 70 65 43 6f 64 65 22 3a 22 66 72 65 65 74 65 78 74 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 22 3a 22 23 48 65 6c 70 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 43 6f 64 65 22 3a 22 6c 6f 62 62 79 5f 6f 6e 6c 69 6e 65 5f 68 65 6c 70 22 2c 22 76 61 6c Data Ascii: ntoptioninfo":{"event":"4729291","session":"1"}},{"displayElementID":"240445269","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"#Help","displayElementValueCode":"lobby_online_help","val

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	63295	199.83.44.71	443	5772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:25:26 UTC	984	OUT	GET /apic/eventRegistration/webapi/regPage/displayElements?eventid=4729291&sessionid=1&key=0DA9ADCB7D49E9C260A43DC00A038CD9&code=registration&mode=login&random=0.5253155048612299 HTTP/1.1 Host: event.on24.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NjJjMzRjZDktZGY5ZC00ODdlLWFlODYtZjJlZDM3NTMyNDBh; sa-4729291=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons4_prd_wl_LNX=!9xfBULRARkxsweyntfwALduEGSG61Whvo7NlYLQNGY4TfanSBdV7e0BA3CtSsSVFxiKOYMLRJFN5A6c=; ON24_Pool=cons4_prd_wl_LNX; TS0af49cbe027=082972b052ab200033c4c63ca16b2d7b921d8e0f3ddc26a1e12f812c2c881b64214e42b067effa0d08a1f61ec811300030d69999eeca8e8fdb79073a30ae0862a775b7dba795586076ef404d5a70eb51d13f9a28e68952bf1eab59c19f5c2b2b
2024-10-23 23:25:26 UTC	677	IN	HTTP/1.1 200 OK Server: openresty/1.21.4.1 Date: Wed, 23 Oct 2024 23:25:26 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close ProX-Cache-Status: HIT ProX-Response-Time: 0.000 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors *.on24.com Set-Cookie: TS0af49cbe027=082972b052ab2000e3b933e18fd532fda5e138b061d4a1eaa4a1cb4ce513ea2d92137cf479d47c12082d7a242611300079bdf180b3a58267ea76dbca435680ae2cd689efcacea9a3b040628a4c8fcf6541366a98518db6fdf455680437c247fa; Path=/; SameSite=None; Secure
2024-10-23 23:25:26 UTC	4125	IN	Data Raw: 34 64 62 30 0d 0a 7b 22 65 76 65 6e 74 22 3a 34 37 32 39 32 39 31 2c 22 73 65 73 73 69 6f 6e 22 3a 31 2c 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 65 72 72 6f 72 4d 65 73 73 61 67 65 22 3a 6e 75 6c 6c 2c 22 64 69 73 70 6c 61 79 65 6c 65 6d 65 6e 74 22 3a 5b 7b 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 34 30 34 34 35 32 39 31 22 2c 22 69 73 52 65 71 75 69 72 65 64 22 3a 22 66 61 6c 73 65 22 2c 22 69 73 41 63 74 69 76 65 22 3a 22 74 72 75 65 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 22 66 61 6c 73 65 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 54 79 70 65 43 6f 64 65 22 3a 22 66 72 65 65 74 65 78 74 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 22 3a 22 23 66 66 66 66 66 66 22 2c 22 64 69 73 70 6c 61 79 45 Data Ascii: 4db0{"event":4729291,"session":1,"success":true,"errorMessage":null,"displayelement":[{"displayElementID":"240445291","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"#ffffff","displayE
2024-10-23 23:25:26 UTC	1448	IN	Data Raw: 66 6f 22 3a 7b 22 65 76 65 6e 74 22 3a 22 34 37 32 39 32 39 31 22 2c 22 73 65 73 73 69 6f 6e 22 3a 22 31 22 7d 7d 2c 7b 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 34 30 34 34 35 33 30 30 22 2c 22 69 73 52 65 71 75 69 72 65 64 22 3a 22 74 72 75 65 22 2c 22 69 73 41 63 74 69 76 65 22 3a 22 74 72 75 65 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 22 66 61 6c 73 65 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 54 79 70 65 43 6f 64 65 22 3a 22 74 65 78 74 62 6f 78 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 22 3a 22 45 6d 61 69 6c 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 43 6f 64 65 22 3a 22 65 6d 61 69 6c 22 2c 22 76 61 6c 69 64 61 74 69 6f 6e 54 79 70 65 43 6f 64 65 22 3a 22 65 6d 61 69 6c 22 Data Ascii: fo":{"event":"4729291","session":"1"}},{"displayElementID":"240445300","isRequired":"true","isActive":"true","isHidden":"false","displayElementTypeCode":"textbox","displayElementValue":"Email","displayElementValueCode":"email","validationTypeCode":"email"
2024-10-23 23:25:26 UTC	7240	IN	Data Raw: 7b 22 65 76 65 6e 74 22 3a 22 34 37 32 39 32 39 31 22 2c 22 73 65 73 73 69 6f 6e 22 3a 22 31 22 7d 7d 2c 7b 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 34 30 34 34 35 33 30 33 22 2c 22 69 73 52 65 71 75 69 72 65 64 22 3a 22 66 61 6c 73 65 22 2c 22 69 73 41 63 74 69 76 65 22 3a 22 74 72 75 65 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 22 66 61 6c 73 65 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 54 79 70 65 43 6f 64 65 22 3a 22 66 72 65 65 74 65 78 74 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 22 3a 22 68 74 74 70 73 3a 2f 2f 65 76 65 6e 74 2e 6f 6e 32 34 2e 63 6f 6d 2f 65 76 65 6e 74 52 65 67 69 73 74 72 61 74 69 6f 6e 2f 69 6d 61 67 65 73 2f 72 65 67 69 73 74 65 72 2d 62 75 74 74 6f 6e 2e 67 69 66 22 2c 22 64 Data Ascii: {"event":"4729291","session":"1"}},{"displayElementID":"240445303","isRequired":"false","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"https://event.on24.com/eventRegistration/images/register-button.gif","d
2024-10-23 23:25:26 UTC	2896	IN	Data Raw: 6e 22 3a 22 31 22 7d 7d 2c 7b 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 34 30 34 34 35 33 31 38 22 2c 22 69 73 52 65 71 75 69 72 65 64 22 3a 22 74 72 75 65 22 2c 22 69 73 41 63 74 69 76 65 22 3a 22 74 72 75 65 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 22 66 61 6c 73 65 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 54 79 70 65 43 6f 64 65 22 3a 22 66 72 65 65 74 65 78 74 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 22 3a 22 59 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 43 6f 64 65 22 3a 22 74 65 6d 70 6c 61 74 65 5f 72 65 67 5f 33 30 5f 6c 61 79 6f 75 74 22 2c 22 76 61 6c 69 64 61 74 69 6f 6e 54 79 70 65 43 6f 64 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 69 73 70 6c 61 79 53 65 71 75 65 6e 63 65 Data Ascii: n":"1"}},{"displayElementID":"240445318","isRequired":"true","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"Y","displayElementValueCode":"template_reg_30_layout","validationTypeCode":"none","displaySequence
2024-10-23 23:25:26 UTC	2896	IN	Data Raw: 31 32 2c 22 64 69 73 70 6c 61 79 74 79 70 65 63 6f 64 65 22 3a 22 72 65 67 69 73 74 72 61 74 69 6f 6e 22 2c 22 64 69 73 70 6c 61 79 65 6c 65 6d 65 6e 74 6f 70 74 69 6f 6e 69 6e 66 6f 22 3a 7b 22 65 76 65 6e 74 22 3a 22 34 37 32 39 32 39 31 22 2c 22 73 65 73 73 69 6f 6e 22 3a 22 31 22 7d 7d 2c 7b 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 49 44 22 3a 22 32 34 30 34 34 35 33 32 34 22 2c 22 69 73 52 65 71 75 69 72 65 64 22 3a 22 74 72 75 65 22 2c 22 69 73 41 63 74 69 76 65 22 3a 22 74 72 75 65 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 22 66 61 6c 73 65 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 54 79 70 65 43 6f 64 65 22 3a 22 66 72 65 65 74 65 78 74 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 22 3a 22 68 6f 72 69 7a 6f 6e 74 61 Data Ascii: 12,"displaytypecode":"registration","displayelementoptioninfo":{"event":"4729291","session":"1"}},{"displayElementID":"240445324","isRequired":"true","isActive":"true","isHidden":"false","displayElementTypeCode":"freetext","displayElementValue":"horizonta
2024-10-23 23:25:26 UTC	1296	IN	Data Raw: 65 6e 74 54 79 70 65 43 6f 64 65 22 3a 22 66 72 65 65 74 65 78 74 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 22 3a 22 4e 22 2c 22 64 69 73 70 6c 61 79 45 6c 65 6d 65 6e 74 56 61 6c 75 65 43 6f 64 65 22 3a 22 74 65 6d 70 6c 61 74 65 5f 70 72 6f 6d 6f 5f 73 75 6d 6d 61 72 79 5f 6c 6f 62 62 79 5f 70 61 67 65 22 2c 22 76 61 6c 69 64 61 74 69 6f 6e 54 79 70 65 43 6f 64 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 69 73 70 6c 61 79 53 65 71 75 65 6e 63 65 22 3a 22 33 38 22 2c 22 74 6f 70 4f 66 66 73 65 74 22 3a 22 2d 31 22 2c 22 6c 65 66 74 4f 66 66 73 65 74 22 3a 22 2d 31 22 2c 22 68 65 69 67 68 74 22 3a 22 2d 31 22 2c 22 77 69 64 74 68 22 3a 22 2d 31 22 2c 22 6d 65 64 69 61 55 52 4c 49 44 22 3a 22 2d 31 22 2c 22 69 6e 64 65 78 22 3a 22 33 38 22 Data Ascii: entTypeCode":"freetext","displayElementValue":"N","displayElementValueCode":"template_promo_summary_lobby_page","validationTypeCode":"none","displaySequence":"38","topOffset":"-1","leftOffset":"-1","height":"-1","width":"-1","mediaURLID":"-1","index":"38"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	63296	199.83.44.71	443	5772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:25:26 UTC	949	OUT	GET /apic/eventRegistration/EventServlet?eventid=4729291&sessionid=1&key=0DA9ADCB7D49E9C260A43DC00A038CD9&random=0.6268297194463379&filter=json HTTP/1.1 Host: event.on24.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NjJjMzRjZDktZGY5ZC00ODdlLWFlODYtZjJlZDM3NTMyNDBh; sa-4729291=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons4_prd_wl_LNX=!9xfBULRARkxsweyntfwALduEGSG61Whvo7NlYLQNGY4TfanSBdV7e0BA3CtSsSVFxiKOYMLRJFN5A6c=; ON24_Pool=cons4_prd_wl_LNX; TS0af49cbe027=082972b052ab200033c4c63ca16b2d7b921d8e0f3ddc26a1e12f812c2c881b64214e42b067effa0d08a1f61ec811300030d69999eeca8e8fdb79073a30ae0862a775b7dba795586076ef404d5a70eb51d13f9a28e68952bf1eab59c19f5c2b2b
2024-10-23 23:25:27 UTC	693	IN	HTTP/1.1 200 OK Server: openresty/1.21.4.1 Date: Wed, 23 Oct 2024 23:25:27 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close ProX-Cache-Status: MISS ProX-Response-Time: 0.056 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors *.on24.com Set-Cookie: TS0af49cbe027=082972b052ab20006bae89d2c8aad970ee6e7f3e077abd4360e3bb33abe8ccb3cf49a68439f94cc008cd164204113000cdd936670cc9cd893a413c461c66cc3ecb91168642f6ff9d3f39c5b08ef06b68a5a9b2c58eac6cf2421d4fc9b2e1e0f1; Path=/; SameSite=None; Secure
2024-10-23 23:25:27 UTC	11349	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 65 76 65 6e 74 22 3a 7b 22 69 64 22 3a 22 34 37 32 39 32 39 31 22 2c 22 6e 61 6d 65 22 3a 22 6e 75 6c 6c 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 4f 63 74 6f 62 65 72 20 32 30 32 34 20 45 70 69 63 20 53 70 6f 74 6c 69 67 68 74 20 57 65 62 69 6e 61 72 3a 20 43 68 61 6e 67 65 20 6f 66 20 56 65 6e 64 6f 72 2c 20 61 20 4e 65 63 65 73 73 61 72 79 20 45 76 69 6c 22 2c 22 6c 6f 63 61 6c 65 6c 61 6e 67 75 61 67 65 63 6f 64 65 22 3a 22 65 6e 22 2c 22 6c 6f 63 61 6c 65 63 6f 75 6e 74 72 79 63 6f 64 65 22 3a 22 6e 75 6c 6c 22 2c 22 63 6c 69 65 6e 74 69 64 22 3a 22 35 33 35 38 30 22 2c 22 63 6c 69 65 6e 74 6e 61 6d 65 22 3a 22 53 75 72 65 73 63 72 69 70 74 73 22 2c 22 64 69 73 70 6c 61 79 74 69 6d 65 7a 6f 6e 65 22 3a 22 45 61 73 74 Data Ascii: 8000{"event":{"id":"4729291","name":"null","description":"October 2024 Epic Spotlight Webinar: Change of Vendor, a Necessary Evil","localelanguagecode":"en","localecountrycode":"null","clientid":"53580","clientname":"Surescripts","displaytimezone":"East
2024-10-23 23:25:27 UTC	16384	IN	Data Raw: 6f 2f 6c 6f 62 62 79 6d 75 73 69 63 2f 64 65 66 61 75 6c 74 2e 6d 70 33 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 77 69 6e 64 6f 77 54 68 65 6d 65 5c 22 20 74 79 70 65 3d 5c 22 53 74 72 69 6e 67 5c 22 3e 74 72 61 6e 73 6c 75 63 65 6e 74 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 77 69 6e 64 6f 77 43 6f 6c 6f 72 5c 22 20 74 79 70 65 3d 5c 22 53 74 72 69 6e 67 5c 22 3e 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 77 69 6e 64 6f 77 4f 70 61 63 69 74 79 5c 22 20 74 79 70 65 3d 5c 22 4e 75 6d 62 65 72 5c 22 3e 32 30 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 76 69 64 65 6f 57 69 6e 64 6f 77 4f 70 61 63 69 74 79 5c 22 20 74 79 70 65 3d 5c 22 4e 75 6d 62 65 72 5c 22 3e 3c Data Ascii: o/lobbymusic/default.mp3</param><param name=\"windowTheme\" type=\"String\">translucent</param><param name=\"windowColor\" type=\"String\"></param><param name=\"windowOpacity\" type=\"Number\">20</param><param name=\"videoWindowOpacity\" type=\"Number\"><
2024-10-23 23:25:27 UTC	6784	IN	Data Raw: 69 6e 6b 65 64 69 6e 43 6f 6e 74 61 63 74 43 68 65 63 6b 65 64 26 67 74 3b 26 6c 74 3b 21 5b 43 44 41 54 41 5b 74 72 75 65 5d 5d 26 67 74 3b 26 6c 74 3b 2f 6c 69 6e 6b 65 64 69 6e 43 6f 6e 74 61 63 74 43 68 65 63 6b 65 64 26 67 74 3b 26 6c 74 3b 74 69 74 6c 65 26 67 74 3b 26 6c 74 3b 21 5b 43 44 41 54 41 5b 50 72 69 6e 63 69 70 61 6c 20 53 65 67 6d 65 6e 74 20 4d 61 72 6b 65 74 69 6e 67 20 4d 61 6e 61 67 65 72 5d 5d 26 67 74 3b 26 6c 74 3b 2f 74 69 74 6c 65 26 67 74 3b 26 6c 74 3b 66 61 63 65 42 6f 6f 6b 43 6f 6e 74 61 63 74 43 68 65 63 6b 65 64 26 67 74 3b 26 6c 74 3b 21 5b 43 44 41 54 41 5b 66 61 6c 73 65 5d 5d 26 67 74 3b 26 6c 74 3b 2f 66 61 63 65 42 6f 6f 6b 43 6f 6e 74 61 63 74 43 68 65 63 6b 65 64 26 67 74 3b 26 6c 74 3b 65 6d 61 69 6c 43 6f 6e 74 Data Ascii: inkedinContactChecked><![CDATA[true]]></linkedinContactChecked><title><![CDATA[Principal Segment Marketing Manager]]></title><faceBookContactChecked><![CDATA[false]]></faceBookContactChecked><emailCont
2024-10-23 23:25:27 UTC	16384	IN	Data Raw: 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 6c 6f 63 6b 41 73 70 65 63 74 52 61 74 69 6f 5c 22 20 74 79 70 65 3d 5c 22 42 6f 6f 6c 65 61 6e 5c 22 3e 66 61 6c 73 65 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 69 64 5c 22 20 74 79 70 65 3d 5c 22 4e 75 6d 62 65 72 5c 22 3e 32 34 30 34 34 35 32 38 34 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 6e 61 6d 65 5c 22 20 74 79 70 65 3d 5c 22 53 74 72 69 6e 67 5c 22 3e 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d 20 6e 61 6d 65 3d 5c 22 77 69 64 67 65 74 55 72 6c 5c 22 20 74 79 70 65 3d 5c 22 53 74 72 69 6e 67 5c 22 3e 53 75 72 76 65 79 57 69 64 67 65 74 2e 73 77 66 3f 6d 6f 64 65 3d 61 64 6d 69 6e 26 61 6d 70 3b 76 69 65 77 3d 73 6c 69 64 65 3c 2f 70 61 72 61 6d 3e 3c 70 61 72 61 6d Data Ascii: aram name=\"lockAspectRatio\" type=\"Boolean\">false</param><param name=\"id\" type=\"Number\">240445284</param><param name=\"name\" type=\"String\"></param><param name=\"widgetUrl\" type=\"String\">SurveyWidget.swf?mode=admin&view=slide</param><param
2024-10-23 23:25:27 UTC	7534	IN	Data Raw: 69 7a 65 3a 20 31 38 70 78 3b 5c 22 3e 3c 70 3e 54 68 65 20 43 68 61 6e 67 65 20 6f 66 20 56 65 6e 64 6f 72 20 70 72 6f 63 65 73 73 20 61 6e 64 20 69 74 73 20 69 6d 70 6f 72 74 61 6e 63 65 20 69 6e 20 6d 61 69 6e 74 61 69 6e 69 6e 67 20 52 65 66 69 6c 6c 20 61 6e 64 2f 6f 72 20 43 68 61 6e 67 65 20 73 65 72 76 69 63 65 20 6c 65 76 65 6c 73 2e 26 6e 62 73 70 3b 3c 2f 70 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 5c 22 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 64 72 61 67 3a 20 6e 6f 6e 65 3b 20 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 20 6d 61 72 67 69 6e 3a 20 30 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 Data Ascii: ize: 18px;\"><p>The Change of Vendor process and its importance in maintaining Refill and/or Change service levels. </p></li></ul></div></div><div><div style=\"-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; margin: 0px; padding: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	63303	199.83.44.71	443	5772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:25:28 UTC	1154	OUT	GET /favicon.ico HTTP/1.1 Host: event.on24.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://event.on24.com/wcc/r/4729291/0DA9ADCB7D49E9C260A43DC00A038CD9?mode=login&email=melinda.outlaw@johnmuirhealth.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NjJjMzRjZDktZGY5ZC00ODdlLWFlODYtZjJlZDM3NTMyNDBh; sa-4729291=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons4_prd_wl_LNX=!9xfBULRARkxsweyntfwALduEGSG61Whvo7NlYLQNGY4TfanSBdV7e0BA3CtSsSVFxiKOYMLRJFN5A6c=; ON24_Pool=cons4_prd_wl_LNX; TS0af49cbe027=082972b052ab20006bae89d2c8aad970ee6e7f3e077abd4360e3bb33abe8ccb3cf49a68439f94cc008cd164204113000cdd936670cc9cd893a413c461c66cc3ecb91168642f6ff9d3f39c5b08ef06b68a5a9b2c58eac6cf2421d4fc9b2e1e0f1
2024-10-23 23:25:28 UTC	833	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:25:28 GMT Server: Apache Last-Modified: Thu, 05 Dec 2019 23:00:06 GMT Accept-Ranges: bytes Content-Length: 1150 Content-Type: image/x-icon Connection: close Set-Cookie: BIGipServereventprd_apache=!Gsk98WigIsHg470eSVii2HqB/dyrqxtTxbc5w72zHK/c01+aS35Bhwr+GI4RjMQuZ1syNI7l0h8anDpt0GF7BgnyNZoQ3ysDlfFjIYb3MqXcIjtwa8klN8CyS+a4g1XqoPkoq/MoF0jEAywHdo1ScIIEv0i10zo=; path=/; Httponly; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Set-Cookie: TS0af49cbe027=082972b052ab20008bf84be6f8f697c80444a1abb15d16fd01737d798b8fdfce8c2f74cc88767193089c5f469411300024cb02a9bd187d5da0164f7f5a6a3bba8ce9c18c704b548873690a1c6ad8a747b8e0cce29c134a21b69858b25d928abb; Path=/; SameSite=None; Secure
2024-10-23 23:25:28 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 40 30 e6 e8 40 30 f2 e8 40 30 f2 e8 41 31 f2 e8 3f 2f f2 e6 32 21 f2 e5 26 14 f2 e4 1f 0c f2 e4 1f 0d f2 e5 26 14 f2 e6 32 21 f2 e8 3f 2f f2 e8 41 31 f2 e8 40 30 f2 e8 40 30 f2 e8 40 30 e6 e8 40 30 ff e8 40 30 ff e8 43 33 ff e7 33 22 ff e5 24 11 ff ea 4f 41 ff f0 82 78 ff f4 a0 97 ff f4 9f 97 ff f0 81 77 ff ea 4f 40 ff e5 24 12 ff e7 35 24 ff e8 43 33 ff e8 40 30 ff e8 40 30 ff e8 40 30 f2 e8 43 33 ff e6 2d 1b ff e7 36 26 ff f4 a2 9a ff fe fa f9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe f6 f5 ff f4 a0 98 ff e6 31 20 ff e6 2f 1d ff e8 43 33 ff e8 40 30 f2 e8 Data Ascii: h( @0@0@0A1?/2!&&2!?/A1@0@0@0@0@0C33"$OAxwO@$5$C3@0@0@0C3-6&1 /C3@0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	63315	199.83.44.71	443	5772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:25:29 UTC	1012	OUT	GET /favicon.ico HTTP/1.1 Host: event.on24.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NjJjMzRjZDktZGY5ZC00ODdlLWFlODYtZjJlZDM3NTMyNDBh; sa-4729291=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons4_prd_wl_LNX=!9xfBULRARkxsweyntfwALduEGSG61Whvo7NlYLQNGY4TfanSBdV7e0BA3CtSsSVFxiKOYMLRJFN5A6c=; ON24_Pool=cons4_prd_wl_LNX; BIGipServereventprd_apache=!Gsk98WigIsHg470eSVii2HqB/dyrqxtTxbc5w72zHK/c01+aS35Bhwr+GI4RjMQuZ1syNI7l0h8anDpt0GF7BgnyNZoQ3ysDlfFjIYb3MqXcIjtwa8klN8CyS+a4g1XqoPkoq/MoF0jEAywHdo1ScIIEv0i10zo=; TS0af49cbe027=082972b052ab20008bf84be6f8f697c80444a1abb15d16fd01737d798b8fdfce8c2f74cc88767193089c5f469411300024cb02a9bd187d5da0164f7f5a6a3bba8ce9c18c704b548873690a1c6ad8a747b8e0cce29c134a21b69858b25d928abb
2024-10-23 23:25:29 UTC	672	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:25:29 GMT Server: Apache Last-Modified: Thu, 05 Dec 2019 23:00:06 GMT Accept-Ranges: bytes Content-Length: 1150 Content-Type: image/x-icon Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors *.on24.com Set-Cookie: TS0af49cbe027=082972b052ab2000f9d2fabc2212058562e7393b48bdfb24ba520a5fd860363fc2530ba252e71fde08500502f6113000c5f7444659071b29388b5aab0f4a2ec1eac2587bfe6d5cf5cb8905c228fdc84dec0e22f7976dd1a8d5689320b22c3c9e; Path=/; SameSite=None; Secure
2024-10-23 23:25:29 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 40 30 e6 e8 40 30 f2 e8 40 30 f2 e8 41 31 f2 e8 3f 2f f2 e6 32 21 f2 e5 26 14 f2 e4 1f 0c f2 e4 1f 0d f2 e5 26 14 f2 e6 32 21 f2 e8 3f 2f f2 e8 41 31 f2 e8 40 30 f2 e8 40 30 f2 e8 40 30 e6 e8 40 30 ff e8 40 30 ff e8 43 33 ff e7 33 22 ff e5 24 11 ff ea 4f 41 ff f0 82 78 ff f4 a0 97 ff f4 9f 97 ff f0 81 77 ff ea 4f 40 ff e5 24 12 ff e7 35 24 ff e8 43 33 ff e8 40 30 ff e8 40 30 ff e8 40 30 f2 e8 43 33 ff e6 2d 1b ff e7 36 26 ff f4 a2 9a ff fe fa f9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe f6 f5 ff f4 a0 98 ff e6 31 20 ff e6 2f 1d ff e8 43 33 ff e8 40 30 f2 e8 Data Ascii: h( @0@0@0A1?/2!&&2!?/A1@0@0@0@0@0C33"$OAxwO@$5$C3@0@0@0C3-6&1 /C3@0

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	63319	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:02 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:02 UTC	561	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:02 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 21 Oct 2024 13:21:21 GMT ETag: "0x8DCF1D34132B902" x-ms-request-id: 04de7e24-801e-008f-0e20-242c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232602Z-16849878b78plcdqu15wsb886400000006s000000000sv99 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:26:02 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-23 23:26:02 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-23 23:26:02 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-23 23:26:02 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-23 23:26:03 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-23 23:26:03 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-23 23:26:03 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-23 23:26:03 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-23 23:26:03 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-23 23:26:03 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	63320	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:03 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=y+gZ68vFgt2GT3B&MD=s+9KPMLL HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-23 23:26:04 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: e735c818-bebb-4894-8ed6-d643d58ca060 MS-RequestId: 1925fa54-6a18-492b-864e-2d95a00e9b60 MS-CV: UywsiUAE0024veMb.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 23 Oct 2024 23:26:03 GMT Connection: close Content-Length: 30005
2024-10-23 23:26:04 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-23 23:26:04 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	63321	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:04 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:04 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:04 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 8bb6e00a-f01e-003c-3fef-248cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232604Z-15b8d89586f42m673h1quuee4s000000029000000000a42y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:04 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	63323	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:04 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:04 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 52fc638d-b01e-0070-36c5-201cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232604Z-16849878b78jfqwd1dsrhqg3aw00000006y000000000hn20 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:04 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	63324	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:04 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:04 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:04 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 394abe64-001e-0028-050b-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232604Z-16849878b785g992cz2s9gk35c00000006x000000000ctbe x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:04 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	63322	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:04 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:04 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:04 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fdb61705-b01e-0001-2f09-2246e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232604Z-16849878b782h9tt5z2wa5rfxg00000006u000000000h01x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:04 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	63325	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:04 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:04 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 712ec88a-d01e-0065-26f2-24b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232604Z-r197bdfb6b4kq4j5t834fh90qn0000000a20000000002kuh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:04 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	63327	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:05 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:05 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e1deb6d3-201e-006e-700b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232605Z-16849878b782h9tt5z2wa5rfxg00000006wg000000006x5w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:05 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	63329	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:05 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:05 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 13d0e6d2-b01e-0053-47f4-24cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232605Z-15b8d89586fdmfsg1u7xrpfws000000002eg00000000b1r3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:05 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	63328	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:05 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:05 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:05 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 8d314a1c-701e-0097-3ae5-21b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232605Z-16849878b787psctgubawhx7k800000006u0000000001c2u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:05 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	63326	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:05 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:05 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 83a5bbbc-601e-005c-5bad-24f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232605Z-15b8d89586f8nxpt5xx0pk7du800000003y000000000q220 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:05 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	63330	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:05 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:05 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:05 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: bcb88dd7-c01e-0079-47cd-21e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232605Z-16849878b787c9z7hb8u9yysp0000000070g000000007v7a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:05 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	63332	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:06 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:06 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 53592b39-c01e-0082-1ef3-24af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232606Z-15b8d89586f8l5961kfst8fpb000000008fg0000000084gv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:06 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	63334	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:06 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:06 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 43a53b7c-f01e-005d-24fc-2413ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232606Z-15b8d89586fx2hlt035xdehq580000000dng00000000c2fn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:06 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	63333	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:06 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:06 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:06 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1b2fb3ba-201e-0033-65ce-20b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232606Z-16849878b787sbpl0sv29sm89s00000006xg00000000mv02 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:06 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	63331	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:06 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:06 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 1ae852e8-d01e-008e-29f5-24387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232606Z-15b8d89586fzhrwgk23ex2bvhw0000000110000000001czt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:06 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	63335	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:06 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:06 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 6a28da67-901e-0029-53f3-24274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232606Z-r197bdfb6b4rt57kw3q0f43mqg0000000b7g000000008qxs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:06 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	63338	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:07 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:07 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4cd68789-d01e-0017-448e-21b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232607Z-16849878b78z5q7jpbgf6e9mcw000000071g0000000045en x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:07 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	63336	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:07 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:07 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:07 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 04b89afe-e01e-0003-7c15-250fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232607Z-r197bdfb6b4kkrkjudg185sarw00000000wg00000000nf70 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:26:07 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	63339	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:07 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:07 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 241b467f-801e-0015-2b13-25f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232607Z-r197bdfb6b4kkm8440c459r6k800000000zg00000000cydp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:07 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	63337	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:07 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:07 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 847e2871-001e-0079-66e3-2112e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232607Z-16849878b788tnsxzb2smucwdc00000006ug00000000pz3b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:07 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	63340	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:07 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:07 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 968807c2-e01e-0052-0805-22d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232607Z-16849878b78p4hmjy4vha5ddqw00000006sg00000000ezzw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:07 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	63341	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:08 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:08 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 1a7ba294-f01e-0071-2df2-24431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232608Z-r197bdfb6b4h2vctng0a0nubg800000009yg00000000hahk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:08 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	63342	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:08 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:08 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 1cb97257-a01e-0070-50f3-24573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232608Z-15b8d89586f989rks44whx5v7s0000000dd00000000010s5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:08 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	63343	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:08 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:09 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 5074b8ce-701e-005c-627a-25bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232609Z-15b8d89586fvk4kmwqg9fgbkn800000002dg00000000ea3t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:09 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	63344	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:08 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:08 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 00f7314e-e01e-0052-48ac-21d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232608Z-16849878b78z5q7jpbgf6e9mcw00000006xg00000000mpeq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:08 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	63345	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:08 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:08 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:08 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: e5cf95c3-101e-0046-32f2-2491b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232608Z-15b8d89586fx2hlt035xdehq580000000dsg000000000073 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:26:08 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	63346	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:09 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:09 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 33373380-a01e-003d-4cf5-2498d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232609Z-15b8d89586f8nxpt5xx0pk7du8000000044g000000001826 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:09 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	63347	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:09 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:09 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:09 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3cf1b782-701e-0001-32e5-21b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232609Z-16849878b78gvgmlcfru6nuc5400000006y000000000237c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:09 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	63348	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:09 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:09 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: ff77512b-301e-000c-17f4-24323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232609Z-15b8d89586fxdh48qknu9dqk2g000000024g00000000eg9q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:09 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	63349	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:09 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:09 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 26284338-e01e-0052-664d-22d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232609Z-16849878b786vsxz21496wc2qn0000000720000000002zf4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:09 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	63350	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:09 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:09 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 999b7e79-701e-001e-6bf4-24f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232609Z-r197bdfb6b4gdlhqw6kbe0ekvs00000009yg00000000759b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:10 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	63351	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:09 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:09 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: e79f0600-d01e-00ad-4ef2-24e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232609Z-15b8d89586f989rks44whx5v7s0000000dcg00000000260z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:10 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	63352	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:09 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:09 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: d2baa5f3-801e-0078-3ff3-24bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232609Z-r197bdfb6b4gdlhqw6kbe0ekvs00000009w000000000g67z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:10 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	63353	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:10 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:10 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 46af3d48-701e-0032-6627-21a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232610Z-16849878b788tnsxzb2smucwdc00000006vg00000000m565 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:10 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	63354	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:10 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:10 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:10 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 27632888-301e-0096-61d8-21e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232610Z-16849878b78z5q7jpbgf6e9mcw0000000700000000009syp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:10 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	63356	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:10 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:10 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 25f4145c-101e-005a-559b-24882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232610Z-15b8d89586fcvr6p5956n5d0rc00000003v000000000q8zu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:10 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	63355	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:10 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:10 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: b13276b3-c01e-00a2-52fc-242327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232610Z-r197bdfb6b49k6rsrbz098tg80000000043g000000005yv2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:10 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	63357	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:10 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:10 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:10 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 3f3879b0-501e-0035-0b40-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232610Z-16849878b786wvrz321uz1cknn00000006ug00000000t2wd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:10 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	63358	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:10 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:10 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: be98e2c6-601e-0001-2b87-21faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232610Z-16849878b782558xg5kpzay6es00000006u000000000g2a0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:11 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	63359	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:11 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:11 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:11 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: f96c54c1-a01e-0098-5bf5-248556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232611Z-r197bdfb6b46gt25anfa5gg2fw00000002f00000000035ew x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:11 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	63361	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:11 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:11 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:11 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: b59cacea-101e-000b-76f2-245e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232611Z-15b8d89586flzzks5bs37v2b9000000002gg000000005t5h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:26:11 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	63360	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:11 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:11 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 3e897e27-701e-006f-014d-22afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232611Z-16849878b786wvrz321uz1cknn00000006x000000000em8k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:11 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	63362	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:11 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:11 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:11 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 9658a421-401e-008c-7ff3-2486c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232611Z-15b8d89586ffsjj9qb0gmb1stn00000002bg00000000dc8d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:26:11 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	63363	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:11 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:11 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 80264404-901e-002a-13ad-247a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232611Z-15b8d89586f8nxpt5xx0pk7du8000000040g00000000dy9t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:11 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	63364	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:12 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:12 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 2d77a7fe-501e-0064-68ef-241f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232612Z-15b8d89586frzkk2umu6w8qnt80000000dbg00000000cxgv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:12 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	63366	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:12 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:12 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: f6bed088-301e-0000-1a9a-24eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232612Z-15b8d89586ff5l62quxsfe8ugg0000000d50000000009qtw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:12 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	63365	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:12 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:12 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 95c67357-201e-0051-60f5-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232612Z-15b8d89586f4zwgbz365q03b0c0000000drg000000004tvg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:12 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	63367	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:12 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:12 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 250cc9c1-301e-000c-4ec3-20323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232612Z-16849878b785g992cz2s9gk35c00000006y00000000094uu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:12 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	63368	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:12 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:12 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 7082da1f-601e-003d-073e-226f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232612Z-16849878b785jsrm4477mv3ezn00000006xg000000003ek4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:12 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	63370	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:13 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:13 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 94ed83ec-801e-0083-4bf2-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232613Z-15b8d89586flspj6y6m5fk442w00000003yg000000006d2m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:13 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	63372	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:13 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:13 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 03f0aa2d-d01e-007a-29f2-24f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232613Z-15b8d89586flzzks5bs37v2b9000000002dg00000000eqwt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:13 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	63371	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:13 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:13 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e692d532-001e-00a2-3ae7-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232613Z-16849878b785g992cz2s9gk35c00000006x000000000ctu4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:13 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	63373	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:13 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:13 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:13 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 7fcc546d-701e-001e-80a3-21f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232613Z-16849878b782h9tt5z2wa5rfxg00000006r000000000ycdm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:13 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	63374	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:13 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:13 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 14f65908-801e-008f-32d6-202c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232613Z-16849878b78hz7zj8u0h2zng1400000006xg00000000nqqk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:13 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	63375	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:13 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:14 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:14 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 100b0a78-f01e-0003-754e-224453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232614Z-16849878b78dkr6tqerbnpg1zc00000006x000000000f20h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:14 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	63376	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:14 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:14 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 6113d354-c01e-00a1-29f4-247e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232614Z-15b8d89586f8nxpt5xx0pk7du8000000041g00000000a0ae x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:14 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	63378	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:14 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:14 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 7cfbc72c-d01e-0082-6d55-22e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232614Z-16849878b78dkr6tqerbnpg1zc00000006z0000000005g30 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:14 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	63379	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:14 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:14 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: f8de0035-b01e-005c-23fc-244c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232614Z-r197bdfb6b46gt25anfa5gg2fw00000002cg00000000a95q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:14 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	63377	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:14 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:14 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 04ff5eee-d01e-0049-7af2-24e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232614Z-15b8d89586f42m673h1quuee4s000000025000000000t7sk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:14 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	63380	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:14 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:14 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ee7a308c-c01e-00a1-620b-227e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232614Z-16849878b78plcdqu15wsb886400000006u000000000fqr8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:14 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	63381	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:15 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:15 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: fc13fe58-401e-000a-0af3-244a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232615Z-15b8d89586f42m673h1quuee4s000000027g00000000f5f6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:15 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	63382	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:15 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:15 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:15 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 7a3803bc-a01e-0021-4af4-24814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232615Z-15b8d89586f42m673h1quuee4s000000024g00000000umb1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:26:15 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	63383	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:15 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:15 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:15 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 8b572347-501e-008c-80f2-21cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232615Z-16849878b78rjhv97f3nhawr7s00000006rg00000000uunq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:15 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	63384	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:15 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:15 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: c0884099-101e-0046-3a40-2291b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232615Z-16849878b78dkr6tqerbnpg1zc000000070g000000000mt0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:15 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	63385	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:15 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:15 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ac69ef67-e01e-001f-7714-221633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232615Z-16849878b78k46f8kzwxznephs00000006v0000000004u4q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:15 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	63386	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:16 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:16 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: fffa9526-501e-0035-49f2-24c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232616Z-r197bdfb6b4lbgfqwkqbrm672s00000000hg00000000hp39 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:16 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	63387	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:16 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:16 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: efcdf68a-a01e-0084-49f2-249ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232616Z-15b8d89586flspj6y6m5fk442w00000003x000000000cew1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:16 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	63388	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:16 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:16 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:16 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 5441351c-201e-000c-2bf5-2479c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232616Z-r197bdfb6b46gt25anfa5gg2fw00000002g00000000002gp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:26:16 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	63389	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:16 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:16 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 096df01f-c01e-0066-45fd-24a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232616Z-r197bdfb6b4qpk6v9629ad4b5s0000000bcg00000000suzv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:16 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	63390	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:16 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:16 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:16 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 4fea5f70-201e-0071-57f4-24ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232616Z-r197bdfb6b4lkrtc7na2dkay2800000002b00000000030p5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:26:16 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	63391	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:16 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:17 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 952379c8-801e-0083-0604-25f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232617Z-15b8d89586fqckbz0ssbuzzp1n00000001c0000000007x84 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:17 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	63392	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:17 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:17 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: c82c03e6-f01e-001f-0cf2-245dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232617Z-15b8d89586fst84k5f3z220tec0000000dkg000000009f9y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:17 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	63394	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:17 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:17 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: bd3356e8-b01e-0002-6afb-241b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232617Z-15b8d89586ff5l62quxsfe8ugg0000000d4g000000009xg0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:17 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	63393	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:17 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:17 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 497f5b85-801e-00a3-28f2-247cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232617Z-r197bdfb6b49k6rsrbz098tg80000000042g0000000093d4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:17 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	63396	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:17 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:17 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 2f548e5b-201e-003c-5d24-2130f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232617Z-16849878b78gvgmlcfru6nuc5400000006x00000000053sm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:17 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	63397	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:17 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:17 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2df5d45d-601e-003e-40f7-213248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232617Z-16849878b78gvgmlcfru6nuc5400000006r000000000yffr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:17 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	63398	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:17 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:18 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:17 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 8c481607-b01e-0053-3f2b-21cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232617Z-16849878b78jfqwd1dsrhqg3aw00000006x000000000p7ap x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:18 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	63399	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:18 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:18 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 3e8b3e47-701e-006f-544e-22afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232618Z-16849878b78fmrkt2ukpvh9wh400000006y0000000002csb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:18 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	63400	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:18 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:18 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: b96d8484-001e-005a-2cf4-24c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232618Z-15b8d89586fsx9lfqmgrbzpgmg0000000dg000000000nwm5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:18 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	63401	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:18 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:18 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:18 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 0eea03f1-d01e-0066-098a-21ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232618Z-16849878b784cpcc2dr9ch74ng000000071g000000004b5t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:18 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	63402	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:18 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:18 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:18 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: aaf6fada-701e-0053-683a-223a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232618Z-16849878b78c5zx4gw8tcga1b400000006w00000000017p7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:18 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	63403	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:18 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:18 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:18 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 273a8d1a-001e-0034-0d8c-21dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232618Z-16849878b78c2tmb7nhatnd68s00000006wg00000000fvpd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:18 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	63404	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:18 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:19 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:18 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d0d0f8e5-601e-000d-298c-212618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232618Z-16849878b785jsrm4477mv3ezn00000006yg0000000007wh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:19 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	63405	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:19 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:19 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:19 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 39bddb46-501e-0016-72f5-24181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232619Z-15b8d89586fwzdd8urmg0p1ebs00000008cg00000000df3y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:19 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	63406	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:19 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:19 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:19 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 999b9529-701e-001e-53f4-24f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232619Z-r197bdfb6b4b582bwynewx7zgn0000000bk000000000gaec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:19 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	63407	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:19 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:19 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:19 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 55d9b643-201e-003f-330b-226d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232619Z-16849878b78fmrkt2ukpvh9wh400000006y0000000002d33 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:19 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	63408	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:19 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:19 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:19 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cd6db9b0-d01e-002b-01ae-2425fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232619Z-15b8d89586f4zwgbz365q03b0c0000000dpg00000000bkaa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:19 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	63409	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:19 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:19 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:19 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 1cf67cf7-e01e-000c-32f3-248e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232619Z-r197bdfb6b4rt57kw3q0f43mqg0000000b8g0000000061q4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:19 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	63410	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:19 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:20 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:19 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 14811fc9-901e-0016-298e-21efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232619Z-16849878b78ngdnlw4w0762cms000000071g000000004nhm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:20 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	63411	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:20 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:20 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:20 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 81a8cf75-401e-0047-2d15-258597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232620Z-r197bdfb6b42sc4ddemybqpm140000000nm0000000005y6v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:20 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	63412	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:20 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:20 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:20 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 4e110991-201e-0033-6186-25b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232620Z-r197bdfb6b49k6rsrbz098tg8000000004400000000056h0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:20 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	63413	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:20 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:20 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:20 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 4faef820-a01e-0053-6a4e-228603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232620Z-16849878b787sbpl0sv29sm89s00000007100000000069p4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:20 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	63414	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:20 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:20 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:20 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 998f428a-101e-007a-649d-24047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232620Z-15b8d89586flzzks5bs37v2b9000000002b000000000s2t0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:20 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	63415	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:20 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:21 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:21 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 04521c86-e01e-0003-3ff4-240fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232621Z-15b8d89586f6nn8zquf2vw6t540000000440000000001wc2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:21 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	63416	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:21 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:21 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:21 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: f9655ebd-a01e-0098-64f2-248556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232621Z-r197bdfb6b4ld6jc5asqwvvz0w00000000yg000000000vfb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:21 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	63417	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:21 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:21 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:21 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 94ed8cc5-801e-0083-11f2-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232621Z-15b8d89586fmhkw4gksnr1w3ds0000000dg000000000fng2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:21 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	63418	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:21 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:21 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:21 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 2a979a5c-f01e-003f-77f7-21d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232621Z-16849878b78fmrkt2ukpvh9wh400000006rg00000000wrew x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:21 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	63419	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:21 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:21 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:21 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: e092e42d-501e-0035-603a-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232621Z-16849878b78plcdqu15wsb886400000006ug00000000f1tk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:21 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	63420	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:21 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:21 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:21 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 8e7afceb-101e-007a-50f3-24047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232621Z-r197bdfb6b4lbgfqwkqbrm672s00000000qg000000006fg9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:21 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	63421	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:21 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:22 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:21 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: f9504115-401e-0083-703b-22075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232621Z-16849878b78c2tmb7nhatnd68s00000006vg00000000kfvh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:22 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	63422	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:22 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:22 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:22 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 106adab5-b01e-0001-11da-2046e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232622Z-16849878b786vsxz21496wc2qn00000006y000000000ggds x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:22 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	63423	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:22 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:22 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:22 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: a2099384-101e-008d-760b-2292e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232622Z-16849878b78lhh9t0fb3392enw00000006qg00000000qam9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:22 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	63424	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:22 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:22 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:22 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 4c920d0e-c01e-008d-4cca-202eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232622Z-16849878b78rjhv97f3nhawr7s00000006w00000000096pp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:22 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	63425	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:22 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:22 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:22 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 332ff9ef-a01e-003d-42f3-2498d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232622Z-r197bdfb6b4tq6ldv3s2dcykm800000000s0000000007tgz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:22 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	63426	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:22 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:22 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:22 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 654233af-a01e-001e-0b27-2149ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232622Z-16849878b78p4hmjy4vha5ddqw00000006wg000000000f2d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:22 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	63427	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:23 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:23 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 39b0b4e4-501e-0016-23f2-24181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232623Z-15b8d89586fx2hlt035xdehq580000000dsg0000000000ht x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:23 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	63428	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:23 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:23 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 5342d47f-d01e-0028-2f83-217896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232623Z-16849878b78bkvbz1ry47zvsas00000007000000000022v7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:23 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	63429	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:23 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:23 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 2192cf97-401e-0016-59aa-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232623Z-16849878b78plcdqu15wsb886400000006v000000000ccxm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:23 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	63430	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:23 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:23 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 062c286a-b01e-005c-0c8e-214c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232623Z-16849878b786wvrz321uz1cknn00000006xg00000000b952 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:23 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	63431	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:23 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:23 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 21a6354f-801e-00a0-33ae-242196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232623Z-15b8d89586fqckbz0ssbuzzp1n000000019g00000000gvts x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:23 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	63432	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:24 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:24 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:24 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: d2bdf8af-801e-0078-25f4-24bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232624Z-r197bdfb6b4h2vctng0a0nubg800000009y000000000n4f1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:24 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	63433	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:24 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:24 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:24 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 62a19e75-a01e-0032-1bf3-241949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232624Z-r197bdfb6b4b582bwynewx7zgn0000000bgg00000000nx9s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:24 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	63434	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:24 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:24 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:24 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: a3259b44-001e-0065-2af2-240b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232624Z-r197bdfb6b4cz6xrsdncwtgzd40000000np0000000007nn3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:24 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	63435	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:24 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:24 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:24 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 77e1448d-001e-0034-40f3-24dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232624Z-15b8d89586fwzdd8urmg0p1ebs00000008c000000000fq5b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:24 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	63438	199.83.44.71	443	5772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:24 UTC	1629	OUT	POST /eventRegistration/eventRegistrationServlet HTTP/1.1 Host: event.on24.com Connection: keep-alive Content-Length: 268 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://event.on24.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://event.on24.com/wcc/r/4729291/0DA9ADCB7D49E9C260A43DC00A038CD9?mode=login&email=melinda.outlaw@johnmuirhealth.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NjJjMzRjZDktZGY5ZC00ODdlLWFlODYtZjJlZDM3NTMyNDBh; sa-4729291=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons4_prd_wl_LNX=!9xfBULRARkxsweyntfwALduEGSG61Whvo7NlYLQNGY4TfanSBdV7e0BA3CtSsSVFxiKOYMLRJFN5A6c=; ON24_Pool=cons4_prd_wl_LNX; BIGipServereventprd_apache=!Gsk98WigIsHg470eSVii2HqB/dyrqxtTxbc5w72zHK/c01+aS35Bhwr+GI4RjMQuZ1syNI7l0h8anDpt0GF7BgnyNZoQ3ysDlfFjIYb3MqXcIjtwa8klN8CyS+a4g1XqoPkoq/MoF0jEAywHdo1ScIIEv0i10zo=; TS0af49cbe027=082972b052ab2000f9d2fabc2212058562e7393b48bdfb24ba520a5fd860363fc2530ba252e71fde08500502f6113000c5f7444659071b29388b5aab0f4a2ec1eac2587bfe6d5cf5cb8905c228fdc84dec0e22f7976dd1a8d5689320b22c3c9e
2024-10-23 23:26:24 UTC	268	OUT	Data Raw: 65 6d 61 69 6c 3d 6d 65 6c 69 6e 64 61 2e 6f 75 74 6c 61 77 25 34 30 6a 6f 68 6e 6d 75 69 72 68 65 61 6c 74 68 2e 63 6f 6d 26 6d 6f 64 65 3d 6c 6f 67 69 6e 26 65 6d 61 69 6c 3d 6d 65 6c 69 6e 64 61 2e 6f 75 74 6c 61 77 25 34 30 6a 6f 68 6e 6d 75 69 72 68 65 61 6c 74 68 2e 63 6f 6d 26 69 73 4c 6f 62 62 79 3d 66 61 6c 73 65 26 68 74 74 70 70 72 6f 74 6f 63 6f 6c 3d 68 74 74 70 73 25 33 41 26 68 6f 73 74 3d 65 76 65 6e 74 2e 6f 6e 32 34 2e 63 6f 6d 26 65 76 65 6e 74 69 64 3d 34 37 32 39 32 39 31 26 73 65 73 73 69 6f 6e 69 64 3d 31 26 6b 65 79 3d 30 44 41 39 41 44 43 42 37 44 34 39 45 39 43 32 36 30 41 34 33 44 43 30 30 41 30 33 38 43 44 39 26 72 65 67 54 61 67 3d 26 73 6f 75 72 63 65 70 61 67 65 3d 72 65 67 69 73 74 65 72 26 6c 6f 67 69 6e 61 63 74 69 6f 6e Data Ascii: email=melinda.outlaw%40johnmuirhealth.com&mode=login&email=melinda.outlaw%40johnmuirhealth.com&isLobby=false&httpprotocol=https%3A&host=event.on24.com&eventid=4729291&sessionid=1&key=0DA9ADCB7D49E9C260A43DC00A038CD9&regTag=&sourcepage=register&loginaction
2024-10-23 23:26:24 UTC	837	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:24 GMT Transfer-Encoding: chunked Content-Type: text/html Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: event4729291=wp8XCNiC5sXlMbo27aolFaHHDsT4xdJ+WG5nOBO5Z6g=; HttpOnly; secure; domain=.on24.com; expires=Tue, 21-Jan-2025 23:26:24 GMT; path=/; SameSite=None Access-Control-Allow-Methods: * Access-Control-Allow-Origin: https://event.on24.com Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Set-Cookie: TS0af49cbe027=082972b052ab2000c233c17614bf4315ab0c8a39bd837585e0133e5e80c934024d29faf7206fab6f0884dbd2e511300031c7b147a60bd6a186f2f018ed5f3684d09b04b44439b6cf90a102b0e8732dd72c794f232342f73663151a6153bbfc9e; Path=/; SameSite=None; Secure
2024-10-23 23:26:24 UTC	1710	IN	Data Raw: 30 36 61 36 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 6f 6e 6c 6f 61 64 3d 27 72 65 64 69 72 65 63 74 49 74 28 29 3b 27 3e 3c 63 65 6e 74 65 72 3e 3c 21 2d 2d 68 36 3e 54 68 61 6e 6b 20 79 6f 75 2e 20 50 6c 65 61 73 65 20 77 61 69 74 20 61 20 66 65 77 20 73 65 63 6f 6e 64 73 20 77 68 69 6c 65 20 79 6f 75 20 61 72 65 20 72 65 64 69 72 65 63 74 65 64 20 28 6f 72 20 3c 61 20 68 72 65 66 3d 27 2f 75 74 69 6c 41 70 70 2f 4d 65 64 69 61 4d 65 74 72 69 63 53 65 72 76 6c 65 74 3f 6d 6f 64 65 3d 6c 61 75 6e 63 68 26 6d 65 64 69 61 6d 65 74 72 69 63 69 64 3d 36 36 35 35 38 38 36 26 65 76 65 6e 74 69 64 3d 34 37 32 39 32 39 31 26 65 76 65 6e 74 75 73 65 72 69 64 3d 37 31 30 37 36 33 31 31 33 26 75 73 65 72 63 64 3d 37 31 30 37 Data Ascii: 06a6<html><head></head><body onload='redirectIt();'><center>...h6>Thank you. Please wait a few seconds while you are redirected (or <a href='/utilApp/MediaMetricServlet?mode=launch&mediametricid=6655886&eventid=4729291&eventuserid=710763113&usercd=7107
2024-10-23 23:26:24 UTC	8	IN	Data Raw: 30 30 30 30 0d 0a 0d 0a Data Ascii: 0000

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	63436	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:24 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:24 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:24 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: baa41b4f-401e-00ac-2c28-210a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232624Z-16849878b785jsrm4477mv3ezn00000006v000000000c2ms x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:24 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	63439	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:24 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:25 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:25 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 5e9a7b50-e01e-0099-73f4-24da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232625Z-15b8d89586ff5l62quxsfe8ugg0000000d700000000032kb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:25 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	63437	199.83.44.71	443	5772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:25 UTC	2134	OUT	GET /utilApp/MediaMetricServlet?mode=launch&mediametricid=6655886&eventid=4729291&eventuserid=710763113&usercd=710763113&mediametricsubid=1&mediaurl=https%3A%2F%2Fevent.on24.com%2FeventRegistration%2Fconsole%2Fapollox%2FmainEvent%3F%26eventid%3D4729291%26sessionid%3D1%26username%3D%26partnerref%3D%26format%3Dfhvideo1%26mobile%3D%26flashsupportedmobiledevice%3D%26helpcenter%3D%26key%3D0DA9ADCB7D49E9C260A43DC00A038CD9%26newConsole%3Dtrue%26nxChe%3Dtrue%26newTabCon%3Dtrue%26consoleEarEventConsole%3Dfalse%26consoleEarCloudApi%3Dfalse%26text_language_id%3Den%26playerwidth%3D748%26playerheight%3D526%26eventuserid%3D710763113%26contenttype%3DA&target=mediaurl&key=0DA9ADCB7D49E9C260A43DC00A038CD9 HTTP/1.1 Host: event.on24.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://event.on24.com/eventRegistration/eventRegistrationServlet Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NjJjMzRjZDktZGY5ZC00ODdlLWFlODYtZjJlZDM3NTMyNDBh; sa-4729291=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons4_prd_wl_LNX=!9xfBULRARkxsweyntfwALduEGSG61Whvo7NlYLQNGY4TfanSBdV7e0BA3CtSsSVFxiKOYMLRJFN5A6c=; ON24_Pool=cons4_prd_wl_LNX; BIGipServereventprd_apache=!Gsk98WigIsHg470eSVii2HqB/dyrqxtTxbc5w72zHK/c01+aS35Bhwr+GI4RjMQuZ1syNI7l0h8anDpt0GF7BgnyNZoQ3ysDlfFjIYb3MqXcIjtwa8klN8CyS+a4g1XqoPkoq/MoF0jEAywHdo1ScIIEv0i10zo=; event4729291=wp8XCNiC5sXlMbo27aolFaHHDsT4xdJ+WG5nOBO5Z6g=; TS0af49cbe027=082972b052ab2000c233c17614bf4315ab0c8a39bd837585e0133e5e80c934024d29faf7206fab6f0884dbd2e511300031c7b147a60bd6a186f2f018ed5f3684d09b04b44439b6cf90a102b0e8732dd72c794f232342f73663151a6153bbfc9e
2024-10-23 23:26:25 UTC	1271	IN	HTTP/1.1 302 Moved Temporarily Date: Wed, 23 Oct 2024 23:26:25 GMT Location: https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4729291&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=0DA9ADCB7D49E9C260A43DC00A038CD9&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=710763113&contenttype=A&mediametricsessionid=612789951&mediametricid=6655886&usercd=710763113&mode=launch Content-Length: 1351 Content-Type: application/json; charset=UTF-8 Set-Cookie: mediametricid6655886=612789951; domain=.on24.com; path=/; SameSite=None; Secure Set-Cookie: sessionpulse6655886=612789951; domain=.on24.com; expires=Wed, 23-Oct-2024 23:36:25 GMT; path=/; secure; HttpOnly; SameSite=None Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Set-Cookie: TS0af49cbe027=082972b052ab20009b9422487c54da30834c98d74d4518e04177c2a62fe270a0d6cc11c5993e31c108d68cc537113000b63da5f2e005d5782e6d53ee0f0bd672822bf596a3efd4b198df59fe7c705e3239947cd6cafce2e9320ca3aad26be30f; Path=/; SameSite=None; Secure
2024-10-23 23:26:25 UTC	1351	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 23 46 46 46 46 46 46 22 3e 0d 0a 3c 70 3e 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 6d 6f 76 65 64 20 0d 0a 74 65 6d 70 6f 72 61 72 69 6c 79 2e 3c 2f 70 3e 0d 0a 3c 70 3e 49 74 27 73 20 6e 6f 77 20 61 74 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 76 65 6e 74 2e 6f 6e 32 34 2e 63 6f 6d 2f 65 76 65 6e 74 52 65 67 69 73 74 72 61 74 69 6f 6e 2f 63 6f 6e 73 6f 6c 65 2f 61 70 6f 6c 6c 6f 78 2f 6d 61 69 6e 45 76 65 6e 74 3f 26 61 6d 70 3b 65 76 65 6e 74 69 64 3d 34 37 32 39 32 39 31 Data Ascii: <html><head><title>302 Moved Temporarily</title></head><body bgcolor="#FFFFFF"><p>This document you requested has moved temporarily.</p><p>It's now at <a href="https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4729291

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	63440	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:25 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:25 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:25 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 4e9f4159-f01e-005d-3228-2113ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232625Z-16849878b78jfqwd1dsrhqg3aw00000006v000000000yx6m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:25 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	63441	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:25 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:25 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:25 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: bd1a86cb-b01e-0002-49f2-241b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232625Z-r197bdfb6b4h2vctng0a0nubg800000009y000000000n4gk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:26:25 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	63442	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:25 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:25 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:25 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 8522a688-a01e-0084-2768-219ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232625Z-16849878b78c5zx4gw8tcga1b400000006q000000000s12k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:25 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	63443	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:25 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:25 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:25 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 6158f20b-d01e-0028-2cf2-247896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232625Z-r197bdfb6b4cz6xrsdncwtgzd40000000ns00000000008v1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:25 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	63444	199.83.44.71	443	5772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:25 UTC	1967	OUT	GET /eventRegistration/console/apollox/mainEvent?&eventid=4729291&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=0DA9ADCB7D49E9C260A43DC00A038CD9&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=710763113&contenttype=A&mediametricsessionid=612789951&mediametricid=6655886&usercd=710763113&mode=launch HTTP/1.1 Host: event.on24.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://event.on24.com/eventRegistration/eventRegistrationServlet Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NjJjMzRjZDktZGY5ZC00ODdlLWFlODYtZjJlZDM3NTMyNDBh; sa-4729291=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons4_prd_wl_LNX=!9xfBULRARkxsweyntfwALduEGSG61Whvo7NlYLQNGY4TfanSBdV7e0BA3CtSsSVFxiKOYMLRJFN5A6c=; ON24_Pool=cons4_prd_wl_LNX; BIGipServereventprd_apache=!Gsk98WigIsHg470eSVii2HqB/dyrqxtTxbc5w72zHK/c01+aS35Bhwr+GI4RjMQuZ1syNI7l0h8anDpt0GF7BgnyNZoQ3ysDlfFjIYb3MqXcIjtwa8klN8CyS+a4g1XqoPkoq/MoF0jEAywHdo1ScIIEv0i10zo=; event4729291=wp8XCNiC5sXlMbo27aolFaHHDsT4xdJ+WG5nOBO5Z6g=; mediametricid6655886=612789951; sessionpulse6655886=612789951; TS0af49cbe027=082972b052ab20009b9422487c54da30834c98d74d4518e04177c2a62fe270a0d6cc11c5993e31c108d68cc537113000b63da5f2e005d5782e6d53ee0f0bd672822bf596a3efd4b198df59fe7c705e3239947cd6cafce2e9320ca3aad26be30f
2024-10-23 23:26:25 UTC	518	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:25 GMT Content-Length: 2416 Content-Type: text/html; charset=UTF-8 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Set-Cookie: TS0af49cbe027=082972b052ab20006176828aa7117a0f658e226031026427d89b7d0d3e92f3e28a7e85300783655f0801ae0e3f113000c6759ba74cda10be2e6d53ee0f0bd672822bf596a3efd4b198df59fe7c705e3239947cd6cafce2e9320ca3aad26be30f; Path=/; SameSite=None; Secure
2024-10-23 23:26:25 UTC	2416	IN	Data Raw: 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 20 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 74 2d 73 75 70 70 6f 72 74 65 64 2d 69 65 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 74 2d 73 75 70 70 6f 72 74 65 64 2d 69 65 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 4d 45 54 41 Data Ascii: <!DOCTYPE HTML>...[if lt IE 9 ]> <html class="not-supported-ie"> <![endif]-->...[if IE 9 ]> <html class="not-supported-ie"> <![endif]-->...[if (gt IE 9)\|!(IE)]>...> <html lang="en"> ...<![endif]--><head><META

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	63445	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:25 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:26 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:25 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: ada57496-d01e-005a-4ff2-247fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232625Z-r197bdfb6b4tq6ldv3s2dcykm800000000tg0000000036hu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:26 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	63446	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:26 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:26 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:26 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 474bc074-b01e-0002-67b0-201b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232626Z-16849878b788tnsxzb2smucwdc000000070g000000000snb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:26 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	63447	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:26 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:26 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:26 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 8b373834-501e-008c-26e4-21cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232626Z-16849878b785g992cz2s9gk35c00000006ug00000000qn2w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:26 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	63448	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:26 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:26 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:26 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 697bb720-201e-0071-0781-25ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232626Z-15b8d89586fnsf5zm1ryrxu0bc00000002b000000000gkyz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:26 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	63449	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:26 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:26 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:26 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 3e1d042c-d01e-00a1-73f3-2435b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232626Z-r197bdfb6b4kq4j5t834fh90qn00000009vg00000000qr9r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:26:26 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	63451	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:26 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:27 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 21fe56fb-901e-0016-40f2-24efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232627Z-r197bdfb6b4kq4j5t834fh90qn0000000a10000000006gtq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:27 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	63453	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:27 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:27 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: ce674b06-f01e-0052-7d0b-229224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232627Z-16849878b784cpcc2dr9ch74ng000000072g0000000010vh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:27 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	63454	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:27 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:27 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: a3bd7531-e01e-0071-1007-2508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232627Z-r197bdfb6b4rkc6mhwyt3e61pc00000000t000000000mpzf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:27 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	63452	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:27 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:27 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:27 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: a1fd626a-d01e-0017-5dfc-24b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232627Z-15b8d89586f42m673h1quuee4s000000027g00000000f623 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:26:27 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	63455	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:27 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:27 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 06d7a471-401e-0029-1427-219b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232627Z-16849878b78dghrpt8v731n7r400000006qg00000000r9a6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:27 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	63457	199.83.44.71	443	5772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:27 UTC	1781	OUT	GET /view/react-console/build/ HTTP/1.1 Host: event.on24.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4729291&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=0DA9ADCB7D49E9C260A43DC00A038CD9&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=710763113&contenttype=A&mediametricsessionid=612789951&mediametricid=6655886&usercd=710763113&mode=launch Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=NjJjMzRjZDktZGY5ZC00ODdlLWFlODYtZjJlZDM3NTMyNDBh; sa-4729291=I/qCVOffkcuQ4WpPc13KW6Q71OdbAXpKWIINoEmW4QM=; BIGipServercons4_prd_wl_LNX=!9xfBULRARkxsweyntfwALduEGSG61Whvo7NlYLQNGY4TfanSBdV7e0BA3CtSsSVFxiKOYMLRJFN5A6c=; ON24_Pool=cons4_prd_wl_LNX; BIGipServereventprd_apache=!Gsk98WigIsHg470eSVii2HqB/dyrqxtTxbc5w72zHK/c01+aS35Bhwr+GI4RjMQuZ1syNI7l0h8anDpt0GF7BgnyNZoQ3ysDlfFjIYb3MqXcIjtwa8klN8CyS+a4g1XqoPkoq/MoF0jEAywHdo1ScIIEv0i10zo=; event4729291=wp8XCNiC5sXlMbo27aolFaHHDsT4xdJ+WG5nOBO5Z6g=; mediametricid6655886=612789951; sessionpulse6655886=612789951; TS0af49cbe027=082972b052ab20006176828aa7117a0f658e226031026427d89b7d0d3e92f3e28a7e85300783655f0801ae0e3f113000c6759ba74cda10be2e6d53ee0f0bd672822bf596a3efd4b198df59fe7c705e3239947cd6cafce2e9320ca3aad26be30f
2024-10-23 23:26:28 UTC	602	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:27 GMT Server: Apache Last-Modified: Mon, 23 Sep 2024 07:24:23 GMT Accept-Ranges: bytes Content-Length: 6784 Content-Type: text/html; charset=UTF-8 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Set-Cookie: TS0af49cbe027=082972b052ab2000b747cfb745c15c926575f8d7f509ce7700803af91d5e6243c36ad013f6a79d0f08f150933b11300054964500e39a206e0d6187e835a3c8ee3521b2eb8a754c3dbfc55eab506963bb65a65470c20cd6b6f93c695b9b01e22f; Path=/; SameSite=None; Secure
2024-10-23 23:26:28 UTC	4022	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8" /> <meta name="viewport" content="width=device-width, initial-scale=1" /> <meta name="theme-color" content="#000000" /> <meta http-equiv="Pragma" content="no-cache" /> <me
2024-10-23 23:26:28 UTC	1408	IN	Data Raw: 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 6c 6f 61 64 53 63 72 69 70 74 53 79 6e 63 28 6c 6f 63 61 6c 48 6f 73 74 20 2b 20 27 2f 76 69 65 77 2f 63 6f 6e 73 6f 6c 65 2f 73 68 61 72 65 64 2f 6a 73 2f 6c 69 62 73 2f 62 69 74 6d 6f 76 69 6e 70 6c 61 79 65 72 2d 38 2e 31 38 31 2e 30 2e 6a 73 27 29 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2f 2f 20 4c 6f 61 64 20 73 68 61 72 65 64 20 63 6f 6e 73 74 61 6e 74 0a 20 20 20 20 20 20 2f 2f 20 6c 6f 61 64 53 63 72 69 70 74 53 79 6e 63 28 42 41 53 45 5f 55 52 4c 5f 52 45 41 43 54 20 2b 20 27 69 6e 64 65 78 2e 6a 73 3f 62 3d 27 20 2b 20 77 69 6e 64 6f 77 2e 63 61 63 68 65 42 75 73 74 65 72 56 61 6c 75 65 29 3b 0a 20 20 20 20 20 20 6c 6f 61 64 53 63 72 69 70 74 53 79 6e 63 28 42 41 53 45 5f 55 52 4c 5f 52 Data Ascii: else { loadScriptSync(localHost + '/view/console/shared/js/libs/bitmovinplayer-8.181.0.js'); } // Load shared constant // loadScriptSync(BASE_URL_REACT + 'index.js?b=' + window.cacheBusterValue); loadScriptSync(BASE_URL_R
2024-10-23 23:26:28 UTC	1354	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 65 6e 74 72 79 4a 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 64 65 66 65 72 27 2c 20 27 64 65 66 65 72 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 66 69 6c 65 2e 69 6e 64 65 78 4f 66 28 27 72 75 6e 74 69 6d 65 2d 6d 61 69 6e 27 29 20 3d 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 65 20 3d 20 66 69 6c 65 2e 72 65 70 6c 61 63 65 28 27 2e 63 68 75 6e 6b 2e 6a 73 27 2c 20 27 2e 63 68 75 6e 6b 2e 67 7a 2e 6a 73 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6e 74 72 79 4a 73 2e 73 72 63 20 3d 20 63 75 73 74 6f 6d Data Ascii: entryJs.setAttribute('defer', 'defer'); if (file.indexOf('runtime-main') === -1) { file = file.replace('.chunk.js', '.chunk.gz.js'); } entryJs.src = custom

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	63456	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:27 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:28 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:27 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 759e46bd-301e-003f-2df2-24266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232627Z-15b8d89586fvk4kmwqg9fgbkn800000002b000000000sa7q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:28 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	63459	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:26:28 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:26:28 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:26:28 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 88a9635a-401e-005b-7585-219c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T232628Z-16849878b78plcdqu15wsb886400000006wg000000006h0p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:26:28 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Target ID:	0
Start time:	19:25:05
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	19:25:10
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1820,i,10354759190983247407,3748985830559989704,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	19:25:12
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiG9Rbj-2F-2BL5xBvCeRxrIAG77j9DkiM7Yr8M64Kg2izaa0OIZ5-2FATI-2Bc2anEPwc9wrQCD63MC6ONtwJ4SdtRTMnlVT73iHX1khCeCMxvfrJWFZE6xLgrG0WfeomHPSWGopkuujmYCDXjAoqEnyB4oApDJGaTO_sV0hy7-2BGXO3LZoFb45Ee9q2xovzSXG8XVZrbzeABE5y29PDMLq2ChSQAIHKNLazLUqewS5YZ9SPzKKABZQxE4M4JfqBBJaVIRJOU4Sh6BeF-2FTZq1GJ735ScAVdxn7RfonvJVAbLvtiFqwkqX-2F62IKr1OAohPOxBMvGUk2jA0e3czp4b-2F8ymy1eBYgp-2FaHuYw41VPqFDKnyXLCTkU3HvqNk5a9SYRWgFyoq-2BfZI2n13wiOK83-2FcmSneBQB32uHjeb5z-2F2gDfTARsRD9FRa9QhHbBeTz1oBHKHLZ-2B2UMpfjo-2FuDYqeQVClCbrjrwWivlNh2O8ah4bXzu6Hj69PJhvtHQ-3D-3D"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://event.on24.com/wcc/r/4729291/0DA9ADCB7D49E9C260A43DC00A038CD9?mode=login&email=melinda.outlaw@johnmuirhealth.com	HTTP Parser: No favicon
Source: https://event.on24.com/wcc/r/4729291/0DA9ADCB7D49E9C260A43DC00A038CD9?mode=login&email=melinda.outlaw@johnmuirhealth.com	HTTP Parser: No favicon
Source: https://event.on24.com/eventRegistration/eventRegistrationServlet	HTTP Parser: No favicon
Source: https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4729291&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=0DA9ADCB7D49E9C260A43DC00A038CD9&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=710763113&contenttype=A&mediametricsessionid=612789951&mediametricid=6655886&usercd=710763113&mode=launch	HTTP Parser: No favicon
Source: https://event.on24.com/eventRegistration/console/apollox/mainEvent?&eventid=4729291&sessionid=1&username=&partnerref=&format=fhvideo1&mobile=&flashsupportedmobiledevice=&helpcenter=&key=0DA9ADCB7D49E9C260A43DC00A038CD9&newConsole=true&nxChe=true&newTabCon=true&consoleEarEventConsole=false&consoleEarCloudApi=false&text_language_id=en&playerwidth=748&playerheight=526&eventuserid=710763113&contenttype=A&mediametricsessionid=612789951&mediametricid=6655886&usercd=710763113&mode=launch	HTTP Parser: No favicon

Source: https://event.on24.com/wcc/r/4729291/0DA9ADCB7D49E9C260A43DC00A038CD9?mode=login&email=melinda.outlaw@johnmuirhealth.com	HTTP Parser: No <meta name="author".. found
Source: https://event.on24.com/wcc/r/4729291/0DA9ADCB7D49E9C260A43DC00A038CD9?mode=login&email=melinda.outlaw@johnmuirhealth.com	HTTP Parser: No <meta name="author".. found

Source: https://event.on24.com/wcc/r/4729291/0DA9ADCB7D49E9C260A43DC00A038CD9?mode=login&email=melinda.outlaw@johnmuirhealth.com	HTTP Parser: No <meta name="copyright".. found
Source: https://event.on24.com/wcc/r/4729291/0DA9ADCB7D49E9C260A43DC00A038CD9?mode=login&email=melinda.outlaw@johnmuirhealth.com	HTTP Parser: No <meta name="copyright".. found

Source: global traffic	DNS traffic detected: DNS query: email.sg.on24event.com
Source: global traffic	DNS traffic detected: DNS query: event.on24.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157